INFORMATION NOTICE ON PERSONAL DATA PROCESSING (for the trading partners who are natural persons, persons representing the trading partners, attorneys of the trading partners, and the employees and collaborators of the trading partners designated as contact persons and responsible for the performance of the contract)
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the “Regulation”, we hereby inform you that:
1. The controller of your personal data is: Consorfrut Polska spółka z ograniczoną odpowiedzialnością with its registered office in Krakow, ul. Christo Botewa 4, 30-798 Krakow, entered in the register of entrepreneurs maintained by the District Court for Krakow–Śródmieście in Krakow, 11th Commercial Division of the National Court Register, under KRS No.: 0000205046, REGON (Statistical Identification Number): 356817366, NIP (Tax Identification Number): 6792797252, a share capital of PLN 400000 (paid-in capital of PLN 400000), (hereinafter referred to as the “Controller”).
2. In all matters relating to the processing of your personal data by Consorfrut Polska Sp. z o. o., please contact us at the e-mail address: odo@consorfrut.pl or by telephone at: +48 12 342 01 00.
3. If you have not provided us with your personal data yourself, your personal data have been obtained by the Controller from a trading partner with whom you have an employment contract, civil law contract or another form of cooperation agreement, or the Controller has obtained them from publicly available sources (KRS [National Court Register], CEiDG [Central Business Records and Information System]).
4. Your personal data – in particular your first and last name, name of your business, registered office or correspondence address, e-mail address, telephone number, NIP (Tax Identification Number), REGON (Statistical Identification Number), job position held, role at the trading partner’s organisation, place of work, car registration number, image – will be processed for the following purposes and on the following legal bases:
a) according to the wording of your voluntary consent (e.g. receipt of a newsletter, submission of an enquiry in the contact form, consent to the use of an image) – i.e. pursuant to Article 6(1)(a) of the Regulation,
b) the legitimate interest of the data Controller – i.e. on the basis of Article 6(1)(f) of the Regulation (see paragraph 5 below),
c) performance of the contract concluded with you – in the case a contract is concluded with you or actions are taken at your request prior to the conclusion of the contract – i.e. pursuant to Article 6(1)(b) of the Regulation,
d) fulfilment of the Controller's legal obligations arising, in particular, from the accounting and tax acts, the anti-money laundering and terrorist financing act, and health and safety regulations – i.e. pursuant to Article 6(1)(c) of the Regulation.
5. The legitimate interest of the Controller, which is the ground for the right to process your personal data, consists in processing data for the purposes of communication in the course of entering into or performing the contract concluded with you or the entity you represent (as a contact person, attorney, person representing the entity or other person acting on behalf of that entity); securing and pursuing claims arising under the concluded contract; establishing and maintaining business relationships, conducting internal business analyses relating to the terms and conditions of the ongoing business relationship or the potential for its development; ensuring the protection of the Controller's property, safety and personal rights, including carrying out video surveillance activities and other legally permitted forms of monitoring activities, as well as control of access to premises or vehicles belonging to the Controller;
6. In the event that the Controller intends to process your personal data for purposes other than those specified above, the Controller will be required to demonstrate an appropriate legal basis for such processing.
7. Your personal data may be made available to entities and authorities authorised to process such data on the basis of the applicable laws, e.g. public offices and authorities. Your personal data may be made available by the Controller to its employees and trusted collaborators (IT service providers, legal, tax and accounting advisors, translators, notaries, security companies, independent external representatives, service providers, suppliers, partners, distributors of postal and operational services, document management services, etc.); however, such entities process data on the basis of a contract with the Controller and exclusively in accordance with the Controller’s instructions, or they are separate controllers of your data.
8. The Controller does not intend to transfer your data to third countries.
9. Personal data will be stored:
a) for the duration of the relationships resulting from email correspondence, requests for quotation,
b) in the case a contract has been concluded – for the period necessary for the performance of the contract and the period of limitation of claims relating to that contract, unless the law requires processing for a longer period,
c) in the case consent has been given – until its withdrawal,
d) for the period provided for by separate legal regulations, e.g. health and safety regulations,
e) up to 5 years from the end of the calendar year in which the tax obligation arose for tax and accounting purposes,
f) up to 30 days in the case of video surveillance data, unless the generally applicable laws enable a longer storage of this type of data.
10. Under the terms set out in the Regulation, you have the right to access your personal data, to request their rectification, erasure or restriction, as well as the right to object to the processing and to request their transfer to another personal data controller if the processing is carried out by automated means. In the case of data processed on the basis of your consent, your consent may be withdrawn at any time, which does not affect the lawfulness of the processing up until the time of the withdrawal of your consent.
11. You have the right to lodge a complaint to the supervisory authority (the President of the Personal Data Protection Office in Warsaw, ul. Stawki 2), if the processing of your personal data violates the provisions of the Regulation.
12. The provision of some of the data is mandatory due to the Controller's obligation to process the data arising under generally applicable laws (e.g. for accounting or tax reasons). As regards the remaining scope of the data, providing your personal data on your own is voluntary; in the case of the conclusion of a contract, the provision of data is a prerequisite for entering into the contract, and the refusal to do it will make it impossible to conclude and perform that contract.
13. The Controller does not plan to make decisions that will be based solely on the automated processing, including profiling, of your personal data and produce legal effects concerning you or affect you in a similar manner.
I confirm that I have read the above information:
…………………………………..…………………………………………………………………….
(first and last name, signature)
