Information concerning the processing and protection of personal data
for representatives and contractors’ employees

Fulfilling notification requirements resulting from article 13 sections 1 & 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union from 2016, No. 119, page 1, as amended) (hereinafter referred to as: GDPR) we notify as follows:

1. Name and contact details of the data controller:

The Data Controller of your personal data is:
Aluplast Sp. z o.o. (KRS number [number in the National Court Register]: 0000123391)
ul. Profilowa 1, 63-006 Nagradowice,
phone 61 654 34 00, e-mail: rodo@aluplast.com.pl

2. Types of personal data
2.1. regarding representatives of legal persons: name/names and surname, Polish citizen PESEL identification number, function, position, e-mail address, telephone number,
2.2. regarding other persons: name/names and surname, e-mail address, telephone number, position.

3. Purpose and basis of your data processing:
We use your personal data for the following purposes:
3.1. establishing business relations (for example to submit an offer or a request for a quotation) and in connection with the conclusion and performance of the agreement with your employer/principal or an entity you represent, and
3.2. ascertainment, assertion of defence of claims, including disposal of claims, and
3.3. verification of contractors in terms of their solvency, and
3.4. counteracting crime, and
3.5. promotion of our products,
that is on the basis of our legitimate interest (legal basis: article 6 section 1 letter f of GDPR).
Furthermore, we can process your personal data in order to fulfill our legal duties (legal basis: article 6 section 1 letter c of GDPR).

4. How did we come into possesion of your data? Consequences of refusal to provide data:
We have received your data from your employer or the entity you represent, or because you have made it accessible to us.
Providing personal data by you is voluntary, but it is necessary to contact your employer/the entity you represent.

5. Data retention period
We shall process your data:
5.1. throughout the period of cooperation connecting us with your employer/the entity you represent
5.2. in cases of processing your data in order to ascertain, assert or defend claims - for the period, after which limitation of such claims elapses,
5.3. in cases when we process your data in order to fulfill our legal duties - for the period stipulated in relevant legal regulations.

6. Recipients of the data
We transfer your data to:
6.1. entities processing data on our behalf:
• entities providing maintenance of our IT systems and computer hardware;
6.2. other data controllers, processing data in their own name:
• advertising agencies acting at our request, or other entities undertaking marketing activities at our request, or
• insurance companies,
• entities providing postal services, courier companies, carriers and forwarding agents;
• auditing companies,
• entities providing us with legal assistance,
• debt collection agencies or debt buyers
Moreover, we may disclose your selected data to relevant government institutions, for example to law enforcement authorities, courts, court enforcement officers, tax offices, the Office of Statistics, Poland, or to third parties who shall require this based on an applicable legal basis.

7. The area of data processing
We process your data within the boundaries of the European Economic Area, and we do not intend to transfer the data beyond that Area, nor to an international organization.

8. Automated decision-making and profiling
We shall not make decisions regarding you in an automated manner, including decisions being the result of profiling.

9. Your rights:
You have the right to:
9.1. access your personal data and receive its copies,
9.2. request rectification (correction) of your personal data,
9.3. request erasure of personal data (should they be processed groundlessly), limitation or cessation of its processing, and request for transfer of personal data.

Notwithstanding the aforementioned entitlements, if your personal data are processed on the basis of the legitimate interest of our company or a third party, you have the right to object to the processing of the data concerning you, insofar as this is justified by your special circumstances.
You also have the right to lodge a complaint with a supervisory authority, the President of the Personal Data Protection Office in Warsaw, if you ascertain that we have processed your personal data in violation of the law.