GDPR Information clause

According to Art. 13 sec. 1 and 2 and Art. 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR, we inform you as follows:

The Data Controller (Data Administrator) of your personal data is:

FORMSON sp.z o.o. (Ltd.), with its registered office at: ul. Metalowa 3, 62-095 Murowana Goślina, Poland, KRS (Nationa Court Register): 0000941066, NIP (tax identyfication number): PL 7773382852, REGON (National Business Registry Number): 520743081.

The data controller can be contacted in the following ways:

– by post: FORMSON sp. z o.o., Metalowa 3, 62-095 Murowana Goślina, Poland

– by e-mail: export@formson.pl

– by phone: +48 798 744 419

Your personal data may be processed for the following purposes:

a) for the purposes of providing services and/or performing contracts

The legal basis for data processing is the execution and performance of a contract.

Legal basis: Art. 6 (1) (b) of GDPR

The legal basis for data processing is the legitimate interest of the Data Controller consisting in, in particular, performing a contract.

Legal basis: Art. 6 (1) (f) of GDPR,

b) in order to fulfil the legal duties of the Data Controller, and in particular keeping the books and tax documentation

The legal basis for data processing is the Data Controller’s legal duty, and in particular the duty arising from the tax law, the act on accounting as well as other regulations.

Legal basis:  Art. 6 (1) (c) of GDPR,

c) for the purpose of collecting data in business contacts, marketing, promotion and sales services

The legal basis for data processing is the expressed consent that can be withdrawn at any time. Withdrawal of the consent has no effect on the compliance with the right to process the data that was effected basing on the consent prior to its withdrawal.

 article 6 (1) (a) of GDPR

&

The legal basis for data processing is the legitimate interest of the Data Controller consisting in, in particular, the management of business contacts.

article 6 (1) (f) of GDPR

d) For the purposes of communication and handling a matter by e-mail or traditional correspondence

The legal basis for data processing is the legitimate interest of the Data Controller consisting in maintaining traditional and electronic correspondence.

Legal basis: Art. 6 (1) (f) of GDPR

e) for the purposes of contacting someone by phone

The legal basis for data processing is the legitimate interest of the Data Controller consisting in the need to handle to issue reported which is related to its business.

Legal basis: Art. 6 (1) (f) of GDPR

f) for the purposes of communication with the individuals responsible for performing the contract from the business partner’s side

The legal basis for data processing is the legitimate interest of the Data Controller consisting in communicating with business partners.

article 6 section (1) (f) of GDPR

 g) in order to assert rights or establish, investigate or defend against claims in connection with conducting dispute proceedings, proceedings before public authorities and other proceedings

The legal basis for data processing is the legitimate interest of the Data Controller.

Legal basis: Art. 6 (1) (f) of GDPR

h) for the purposes of ensuring the security of persons and property through visual monitoring and access control

The legal basis for data processing is the legitimate interest of the Data Controller consisting in ensuring the security of persons and the Data Controller’s property as well as protection of its rights.

Legal basis: Art. 6 (1) ( f) of GDPR

 i) for the purposes of recruitment

The legal basis for data processing is the Data Controller’s legal duty arising from the provisions of the labour code as well as other regulations.

article 6 (1) (c) of GDPR

&

The legal basis for data processing is the consent required to carry out the recruitment procedure with respect to the data not required by the provisions of the law and also for the purposes of future recruitment procedures.

article 6 (1) (a) of GDPR

j) for the purposes of maintaining pages on social networks: Facebook, Twitter, YouToube under the terms and conditions specified by them

The legal basis for data processing is the consent expressed through a clear affirmative action consisting of the user initiating any activity on a given profile

 article 6 (1) (a) GDPR

&

The legal basis for data processing is the legitimate interest of the Data Controller consisting in managing websites, providing information on the activities and services offered, promoting various events organized by FORMSON sp. z o.o. and for the purpose of communication via available functionalities, i.e. comments, chat, messages.

article 6 (1) (f) GDPR

Your personal data may be transferred to external entities providing specific services to the Data Controller, including: legal-, accounting- and advisory- service providers, law firms, ICT service providers, postal operators, courier companies, social network administrators and people using them, as well as bodies authorized to receive personal data under the provisions of law, such as: Tax Offices, Courts, Police, Prosecutor’s Office, Bailiffs, Leading and Supervisory Authorities.

Your personal data will be kept for the period necessary to perform the task for which it was collected, in accordance with the legal requirements.

If your personal data will be processed for the purpose of keeping accounting books and tax documentation, they will be stored for a period of 5 years counted from the end of the calendar year in which the tax obligation arose.

In the case of processing your personal data for the purpose of pursuing claims your personal data will be stored until the expiration of the statute of limitations for claims provided by law.

If you agree to the processing of personal data, the data will be stored until your consent is withdrawn.

In the case of data processing on social networks, information within the framework of posted comments will be available on the website until deleted by the author; statistical data on visitors to a given social media profile will be processed for the duration of availability of such data on the given website.

Personal data collected by: Facebook, subject to retention under the terms of service Facebook https://www.facebook.com/policies_center; Twitter Inc. under the terms of service Twitter https://twitter.com/en/privacy; YouTube, whose provider is Google LLC are subject to retention under the terms of the website’s privacy policy, more information at: https://policies.google.com/technologies/retention?hl=pl

You have all the appropriate rights  resulting form the GDPR: the right to access personal data, the right to request correction (revision)of presonal data, the right to request deletion of personal data  (after the archiving period), the right to request a restriction to the processing of personal data, the right to trasfer personal data, the right to withdraw consent to the processing of personal data (whith no affection to the lawfulness of the processing of data which was made on the basis of consent before its withdrawal).

If you believe that the processing of the personal data provided violates the provisions of the GDPR, you have the right to file a complaint with the authority the the President of the Personal Data Protection Office.

The provision of your personal data is necessary in cases when the reason for personal data processing arises from a provision of the law or a contract concluded by and between the parties.

Provision of personal data for other purposes, e.g. marketing, is voluntary.

In connection with the processing of personal data you will not be subject to decisions made automatically (without human input).

Your personal data will not be used for profiling.

The Data Administrator and the Processor are obliged to take special care to protect the interests of data subjects and meet all the requirements of the Personal Data Protection Act and the Regulation on the Protection of Personal Data of April 27, 2016 natural persons regarding rational security of information systems.