Information on the processing of personal data (GDPR)
In accordance with the provisions of the General Data Protection Regulation - hereinafter referred to as GDPR - we want to provide you with the following information:
1.
Data administrator.
The administrator of your personal data provided in the order placed is Krzysztof Stępień, running a business under the name of the company ADS POLSKA Krzysztof Stępień, ul. Graniczna 62, 93-428 Łódź, NIP: 7282557816, hereinafter referred to as the "Administrator". The data controller decides how your data will be used and secured, and exercises your rights under the GDPR. You can contact the Administrator in the following way:
- by sending a message to the following e-mail address: info@adspolska.pl,
- in person with the Administrator at his seat or
- by sending a letter to the following address: ADS POLSKA Krzysztof Stępień, ul. Graniczna 62, 93-428 Łódź.
2.
Purposes and legal basis for the processing of your data.
Your personal data provided in the order placed and provided during its implementation are used by the Administrator for the following purposes:
a. conclusion and performance of the contract that connects us, the exercise of your rights under the warranty and contacting you in related matters (legal basis - Article 6 (1) (b) of the GDPR: data processing is necessary to perform the contract and take action on you request before its conclusion);
b. issuing and storing a VAT invoice and other accounting documents (legal basis - Article 6 (1) (c) of the GDPR: processing is necessary to fulfill the obligation imposed on the Administrator by tax law);
c. inform you about changes to the product catalog and new products so that we can invite you to enter into further contracts in the future; (legal basis - Article 6 (1) (f) of the GDPR: processing is necessary for the purposes of the legitimate interests pursued by the Administrator - promotion of own products and direct marketing);
d. establishing, defending, investigating and recovering possible claims that may arise in connection with the conclusion and performance of the contract (legal basis - Article 6 (1) (f) of the GDPR: processing is necessary for the purposes of the legitimate interests pursued by the Administrator);
e. contacting persons designated by you in matters related to the concluded contract (legal basis - Article 6 (1) (f) of the GDPR: processing is necessary for purposes resulting from the legitimate interests pursued by the Administrator - facilitating the performance of the concluded contract and meeting the expectations of customers) .
3.
What data should be provided to the Administrator?
Providing personal data is not required by law, but failure to do so will make it impossible to conclude and correctly perform the contract. The order provides the data necessary for the proper performance of the contract and contact with you as well as for issuing a VAT invoice. You provide the administrator with your name and surname, company, address and tax identification number (VAT invoice data), place of delivery and contact e-mail address or telephone number.
4.
How long will the Administrator store your data?
a. your order and the data contained therein will be stored no longer than it is necessary to perform the contract and for the period of limitation of claims that may arise from its conclusion or performance (unless the provisions of EU or national law require further storage of these personal data);
b. the VAT invoice and the data indicated therein will be stored as long as required by the tax law, i.e. for 6 years counted from the end of the year in which the VAT invoice was issued;
c. The administrator will inform you about new products for another year from the date of placing the order;
d. in the scope of establishing, defending and pursuing claims, the Administrator will use your data until the expiry of the limitation period or the expiry of claims that may arise from the concluded contract or under the warranty.
5.
Recipients of your data.
The administrator will transfer your data to the following categories of recipients:
- carriers delivering ordered goods to you,
- subcontractors supporting the Administrator in the execution of the order,
- entrepreneurs operating the IT system processing orders and enabling the issuance of VAT invoices,
- entities providing payment services (e.g. banks), advisory, legal or accounting services
6.
Your rights.
You have the right to demand from the Administrator:
- provide information whether the Administrator uses your data, access your data and receive a copy of it,
-correction or supplementation of data if you believe that they are incorrect or incomplete,
- transferring data to another administrator or issuing them to you,
- deletion of data processed by the Administrator,
- limitations of data processing, which means that the Administrator cannot further use the data without your consent, but should only store it.
Right to object
You can object at any time to the processing of your data for direct marketing purposes. The right of objection also applies in special situations for you, when the Administrator processes data, relying on its legitimate interest. If an objection is effectively raised, the Administrator will not be able to process data for these purposes. If you want to exercise the above-mentioned rights, all you need to do is submit a request to the Administrator via traditional mail, to the e-mail address provided or in person at the Administrators office with a brief description of what right you intend to exercise. The possibility of exercising certain rights depends on the basis on which the Administrator uses your data.
7.
Complaint to the supervisory authority.
If you believe that the Administrator is processing your data unlawfully, you have the right to lodge a complaint with the supervisory body, i.e. the President of the Personal Data Protection Office, or to another competent authority due to your permanent residence, place of work or place of commission violation.
8.
Data transfer to third countries.
The administrator does not intend to transfer your data to countries outside the European Union.
9.
Profiling and automated decisions.
Based on your personal data, the Administrator will not make automated decisions regarding you, including decisions resulting from profiling.
10.
Data security.
The administrator takes the necessary measures to ensure that your data is properly secured and cannot be used by third parties.
1. 1 article 13 section 1 and paragraph 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection) .
