INFORMATION CLAUSE
Information on the processing of personal data
We would like to inform you that, in connection with the entry into force on 25 May 2018 of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – Official Journal of the EU L 119 –hereinafter: GDPR), KROMET Sp. z o.o. ensures the standards of protection and proper handling of personal data specified in these provisions.
In accordance with Article 13(1) and (2) of the GDPR, we hereby inform persons whose data is held by the Company that:
1) KROMET Sp. z o.o. –registered office: 66-600 Krosno Odrzańskie, ul. Pocztowa 30 is the Controller of your personal data, which it has obtained as a result of performing contracts concluded with you and their servicing, maintaining correspondence and substantive handling of orders, applications, requests and complaints sent to us, as well as the use of video surveillance.
2) Legal basis for the admissibility of processing by KROMET Sp. z o.o. concerning your data:
- in order to take action prior to entering into a contract at the request of the data subject (legal basis: Article 6(1)(b) of the GDPR);
- for purposes arising from the provisions of concluded contracts (legal basis: Article 6(1)(b) of the GDPR);
- in order to document the service or contract performed, or to consider and settle a complaint on the basis of obligations arising from the Accounting Act and tax law provisions, and in order to fulfil other obligations arising from legal provisions (legal basis: Article 6(1)(c) of the GDPR);
- for analytical purposes and customer satisfaction surveys in terms of the proper performance of services for our Company’s customers and the optimisation of customer service processes, which constitutes a legitimate interest of the Data Controller (legal basis: Article 6(1)(f) of the GDPR);
- for the purpose of updating and correcting customers’ personal data, as well as contacting customers regarding the processing of their requests, within the framework of the legitimate interest of the Data Controller (legal basis: Article 6(1)(f) of the GDPR);
- for evidentiary purposes in pursuit of the legitimate interest of the Data Controller consisting in securing information in case of a legal need to prove facts (legal basis: Article 6(1)(f) of the GDPR);
- for the purpose of possible establishment, pursuit or defence of claims, which is the legitimate interest of the Data Controller (legal basis: Article 6(1)(f) of the GDPR);
- to ensure the safety of persons and property on the administrative premises of KROMET Sp. z o.o. through the use of video surveillance and control of pedestrian and vehicle traffic;
- for the purpose of marketing our own services and promoting the Company’s activities and new initiatives among customers associated with KROMET Sp. z o.o. through contracts (legal basis: Article 6(1)(a) of the GDPR, Article 6(1)(f) of the GDPR and relevant provisions on electronic communications);
3) Your personal data is not subject to automated decision-making by KROMET Sp. z o.o., including profiling.
4) Persons whose data is processed by our Company have the following rights:
- access to their data and receive a copy thereof,
- rectify (correct) their data,
- erase their data (in accordance with the conditions set out in Article 17 of the GDPR),
- to restrict data processing (in accordance with the conditions specified in Article 18 of the GDPR),
- to transfer data (in accordance with the conditions specified in Article 20 of the GDPR),
- object to data processing (in accordance with the conditions specified in Article 21 of the GDPR),
- lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office.
5) KROMET Sp. z o.o. will store your personal data:
- for the period necessary to perform the contract/provide the service and pursue claims or defend against claims, i.e. for a period of 10 years, or until the claims become time-barred;
- in the case of data processing for the purpose of pursuing the legitimate interests of the Data Controller, for the period until the data subject lodges an objection, subject to the need to process the data until the end of the period necessary to establish, pursue or defend against claims;
- in the case of data processing based on the consent of the data subject, if that person withdraws their consent (in the absence of another legal basis for processing) or objects (we will cease processing the data for the purposes specified in the consent declaration).
In addition, we will retain proof of consent for 10 years for the purpose of demonstrating facts in the event of any claims regarding the incorrect processing of personal data by us.
6) Your personal data may be made available to public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes resulting from generally applicable law, as well as to subcontractors associated with KROMET Sp. z o.o. by personal data processing agreements, e.g. law firms, companies providing IT services to the Company, debt collection companies, personal and property security agencies.
7) The Company, as the Data Controller, declares that it does not transfer and does not intend to transfer personal data to a third country or international organisation.
8) In matters related to personal data protection, you can contact KROMET Sp. z o.o.:
- by telephone: +48 68 3835273 ext. 350
- by e-mail: rodo@kromet.com.pl
- in person at our Company’s headquarters, after prior arrangement of a meeting date by telephone.
The Management Board of KROMET Sp. z o.o.