Information concerning the processing and protection of personal data
for suppliers and customers (recipients) being natural persons

Fulfilling notification requirements resulting from article 13 sections 1 & 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union from 2016, No. 119, page 1, as amended) (hereinafter referred to as: GDPR) we notify as follows:

1. Name and contact details of the data controller:

The Data Controller of your personal data is:
Aluplast Sp. z o.o. (KRS number [number in the National Court Register]: 0000123391)
ul. Profilowa 1, 63-006 Nagradowice,
phone 61 654 34 00, e-mail: rodo@aluplast.com.pl

2. Types of personal data
2.1. name/names and surname, name of the company, place of business (address), correspondence address, e-mail address, telephone number, tax identification number NIP, REGON statistical number

3. Purpose and basis of your data processing:
We use your personal data for the following purposes:
3.1. establishing business relations (for example to submit an offer or a request for a quotation), and in connection with the conclusion and performance of the agreement to which we are parties, also including the consideration of possible complaints (legal basis: article 6 section 1 letter b of GDPR), and
3.2. performing our legal duties resulting from the Accounting Act and tax law regulations, for example the issuing and retention of invoices and accounting documents (legal basis: article 6 section 1 letter c of GDPR), and
3.3. ascertainment, assertion or defence of claims, which may include disposal of claims, and
3.4. verification of contractors in terms of their solvency, and
3.5. counteracting crime, and
3.6. establishing and maintaining relations with customers, and promotion of our products in the form of direct marketing,
that is on the basis of our legitimate interest (legal basis: article 6 section 1 letter f of GDPR).

4. How did we come into possesion of your data? Consequences of refusal to provide data:
We own your data, because you have made it accessible to us.
Providing personal data by you is voluntary, but it is necessary to conclude and perform the agreement.

5. Data retention period
We shall process your data:
5.1. for the period necessary to conclude and perform the agreement to which we are parties and the period, after which limitation of claims resulting from this agreement elapses;
5.2. for the period specified in provisions of law, for example the period in which we are required by regulations to retain invoices and accounting documents.

6. Recipients of the data
We transfer your data to:
6.1. entities processing data on our behalf:
• entities providing maintenance of our IT systems and computer hardware;
6.2. other data controllers, processing data in their own name:
• advertising agencies acting at our request, or other entities undertaking marketing or promotional activities at our request (regarding recipients),
• entities providing us with consultancy, auditing services and legal assistance,
• banks, other payment institutions and insurance companies,
• entities providing postal services, courier companies, carriers and forwarding agents,
• debt collection agencies or debt buyers (regarding recipients).
Moreover, we may disclose your selected data to relevant government institutions, for example to law enforcement authorities, courts, court enforcement officers, tax offices, the Office of Statistics, Poland, or to third parties who shall require this based on an applicable legal basis.

7. The area of data processing
We process your data within the boundaries of the European Economic Area, and we do not intend to transfer the data beyond that Area, nor to an international organization.

8. Automated decision-making and profiling
We shall not make decisions regarding you in an automated manner, including decisions being the result of profiling.

9. Your rights:
You have the right to:
9.1. access your personal data and receive its copies,
9.2. request rectification (correction) of your personal data,
9.3. request erasure of personal data (should it be processed groundlessly), limitation or cessation of its processing, and request for transfer of personal data.

Notwithstanding the aforementioned entitlements, if your personal data are processed on the basis of the legitimate interest of our company or a third party, you have the right to object to the processing of the data concerning you, insofar as this is justified by your special circumstances.
You also have the right to lodge a complaint with a supervisory authority, the President of the Personal Data Protection Office in Warsaw, if you ascertain that we have processed your personal data in violation of the law.