POL ENG DEU RUS

Having respect for everyone's fundamental right to privacy, the Controller pays great attention to ensuring the confidentiality and protection of the processed personal data and makes every effort to ensure that the processing of such data is carried out in accordance with the provisions of the law, as well as in compliance with the fundamental rights and freedoms of the data subjects.

 

Information obligation clause 

 

Who is the Data Controller?

Depending on the relationship you have established, your personal data will be processed by the Company(s) operating as part of the Tubądzin Group:

 

Tubądzin Management Group spółka z o.o., 95-035 Ozorków, Cedrowice Parcela 11, KRS: 0000286217, NIP: 732-20-83-952, REGON: 100383200

 

How to contact the Data Protection Officer?

The Data Protection Officer verifies the correctness of personal data processed in the organisation. As part of his/her activities, he/she is also the contact point for any notifications related to potential irregularities in the processing of personal data. You can contact the Data Protection Officer if, in your opinion, there has been a violation of the protection of your personal data.

You can contact the DPO at the following e-mail address: iod@tubadzin.pl;

 

What is the purpose and legal basis for processing personal data?

  • Upon registering on the Website, the user provides the personal data indicated in the form related to the conducted business activity, as well as contact details.
  • The Controller processes personal data of persons who are party to the contract in order to sign and perform the contract and to provide services electronically the legal basis is Article 6(1)(b) of the GDPR.
  • Maintaining your registered account on the website and providing services related to it, e.g. access to order history, access to your personal data, making purchases using the data existing in the account - the legal basis is Article 6(1)(b) of the GDPR.
  • Implementation of your order - acceptance and processing of the order, preparation of the shipment, feedback communication informing about the status of the order, shipment of goods, contact regarding the order in progress, if necessary for the purpose of its processing and finalization - the legal basis is Article 6(1)(b) of the GDPR.
  • Personal data may be processed for potential investigation purposes or to repel claims arising from the contract - the legal basis is Article 6(1)(f) of the GDPR.
  • Personal data may also be processed in order to comply with a legal obligation incumbent on the Controller (the legal basis is Article 6(1)(c) of the GDPR in connection with certain provisions of domestic law), in particular to carry out financial and accounting settlements or to handle complaints.
  • Personal data of the other Party's employees may have been obtained by the Controller from the contract or made available by a person who is a Party to the contract. In connection with the performance of the contract, the Controller may process in particular the following personal data: name, surname, business e-mail address, business telephone number, place of employment, position.
  • The Controller shall make every effort to ensure that personal data are processed adequately and as long as necessary for the purposes of which they had been collected. Considering this fact, the Controller shall store personal data for a period no longer than necessary to achieve the purposes for which the data were collected or, if necessary, to comply with applicable law, in particular having regard to the period of performance of the contract and the claims' period of prescription.

Where can your personal data be transferred?

Your personal data will be disclosed to other entities solely for the purpose of proper performance of the contract concluded with you, performance of the Controller's legal obligations, protection of your rights in accordance with the applicable regulations and performance of the Controller's legitimate interest within the meaning of the personal data protection regulations.

 

We would also like to inform you that such entities will be obliged by virtue of contracts concluded with the Controller to apply appropriate security, technical and organisational measures to duly protect your personal data.

 

Personal data will also be transferred to entities which are entitled to obtain them on the basis of applicable laws. The transfer of data outside the European Economic Area takes place only if the conditions specified in Chapter V of the GDPR are met, i.e.

  • cooperation with processors of personal data in states for which a relevant decision of the European Commission has been issued;
  • application of standard contractual clauses issued by the European Commission;
  • application of binding corporate rules approved by the competent supervisory authority;
  • other safeguards that meet an adequate level of protection based on appropriate legal safeguards.

What rights do you have in relation to the processing of data on the Website?

Under the GDPR, every data subject has the right:

a)       to access and obtain information about his/her personal data (Article 15 GDPR);

b)      to rectify personal data (Article 16 of the GDPR);

c)       to delete personal data - the "right to be forgotten" (Article 17 of the GDPR);

d)      to restrict processing (Article 18 of the GDPR);

e)      to transfer personal data (Article 20 of the GDPR);

f)        to object (Article 21 of the GDPR);

g)       to withdraw consent (where consent is the legal basis for data processing, Article 7(3) of the GDPR) - withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of the consent given before its withdrawal;

The submitted request will be answered within 30 days from the date of receipt of the request to the Administrator's address indicated in this information clause. In case of doubts or questions, the Company will contact the applicant using the form specified in the application.

Information on the right to lodge a complaint

You are entitled to lodge a complaint with the supervisory authority - the President of the Office for Personal Data Protection, if you consider that the processing of personal data violates the provisions of the GDPR. All detailed information can be found on the website of the Data Protection Office at: https://uodo.gov.pl/pl/83/155

Information on profiling

Your personal data is not subject to automated decision-making, including profiling.

  • Providing personal data is voluntary, but necessary to receive marketing information from the Controller. Failure to provide the data means that you will not receive marketing information from the Controller.