Information on the processing of personal data
In accordance with the provisions of the general regulation on the protection of personal data – further called GDPR - we want to provide you with the following information:
- 1. Data administrator
- The personal data administrator is PLETTAC DISTRIBUTION sp.z o.o. with headquarters in Ostrzeszów, ul. Kościuszki 31, 63-500 Ostrzeszów, further called to as the "Administrator". The administrator decides how your data will be used and secured and exercises your rights under the GDPR
- You can contact the Administrator in the following way:
- - by sending a message to the e-mail address: ado@plettac.com.pl,
- - in person at his headquarters or
- - by sending a letter to the following address: PLETTAC DISTRIBUTION Sp. z o.o., ul. Kościuszki 31, 63-500 Ostrzeszów.
- 2. Purposes and legal basis for the processing of personal data..
- The administrator processes your personal data for the following purposes:
- a) conclusion and performance of the contract and contacting you in matters related to the contract (legal basis - Article 6 (1) (b) of the GDPR);
- b) accepting and considering possible complaints and exercising your rights under the warranty (legal basis - Article 6 (1) (b) of the GDPR);
- c) fulfillment of tax and accounting obligations, including issuing and storing VAT invoices and keeping the required accounting documentation (legal basis - Article 6 (1) (b) of the GDPR);
- d) informing you about our offer (legal basis - Article 6 (1) (f) of the GDPR: the Controllers legitimate interest is promotion and direct marketing); commercial information addressed to natural persons by e-mail or by phone will be provided after obtaining consent (legal basis - Article 6 (1) (a) of the GDPR); personal data will be used for marketing purposes until an objection is raised or consent is withdrawn;
- e) establishing, defending and pursuing any claims that may arise in connection with the conclusion and performance of the contract (legal basis - Article 6 (1) (f) of the GDPR: the Controllers legitimate interest is the need to protect and exercise its rights);
- f) performance of obligations related to the enforcement of claims (legal basis - Article 6 (1) (c) of the GDPR: obligation imposed on the Administrator by the Code of Civil Procedure and the Act on enforcement proceedings in administration);
- g) providing you with proper after-sales service, including providing information that is needed to obtain the required safety certificates and proper use of scaffolding (legal basis - Article 6 (1) (f) of the GDPR: the Controllers legitimate interest is to provide satisfactory customer service and provide help him while using the purchased products);
- h) sending a newsletter, if you have provided your e-mail address on the website (legal basis - Article 6 (1) (a) of the GDPR);
- i) answers to your questions sent using the contact form available on the website (legal basis - Article 6 (1) (a) of the GDPR).
- Explanation of the legal grounds on which the Administrator processes personal data:
- - art. 6 sec. 1 lit. a) GDPR: The administrator processes data because you have consented to it by a declaration or other action;
- - art. 6 sec. 1 lit. b) GDPR: The administrator processes data because it is necessary for the conclusion and proper performance of the contract or to perform activities at your request before its conclusion (e.g. preparation of an offer);
- - art. 6 sec. 1 lit. c) GDPR: data processing is necessary for the Administrator to be able to perform the obligations imposed on him by law;
- - The administrator processes the data because it is necessary to achieve its legitimate and legal interest
- 3. Is the provision of data obligatory?
- Providing personal data is necessary for the conclusion and performance of contracts, issuing accounting documents and considering complaints. Without providing the necessary data, it is not possible to conclude or perform a contract, as well as submit a complaint. In the remaining scope, the provision of data is not required.
- 4. Planned period of storage of your data.
- 4.1. Your personal data provided in connection with the conclusion and performance of the contract will be stored until the claims that may arise from the concluded contract are time-barred, but not less than 5 years from the end of the year in which the tax payment deadline expired (due to tax and accounting regulations).
- 4.2. In the case of the purchase of scaffolding, your order and the data contained there in will be stored for the period indicated in the above point and for the next 10 years, unless you object in advance.
- 4.3.The data processed on the basis of your consent will be stored until its withdrawal, and in the case of the contact form, no longer than 3 months from the end of correspondence conducted in connection with the inquiry sent.
- 5. Recipients of your data..
- The administrator will transfer your data to the following categories of recipients:
- a) carriers and couriers,
- b) subcontractors;
- c) entities providing hosting services, legal and accounting services (processing data on the basis of an agreement with the Administrator);
- d) banks;
- e) tax offices and public authorities in accordance with applicable law.
- 6. Your powers.
- You are entitled to:
- a) the right to access your data and receive a copy of it (Article 15 of the GDPR) - you have the right to obtain from the Administrator confirmation whether he processes your data, receive detailed information on their processing and related rights, as well as access these data; you also have the right to receive a copy of your data processed by the Administrator (the first copy is free of charge);
- b) the right to rectify data (Article 16 of the GDPR) - you can request the Administrator to correct your data if it is false, or to supplement it if it is incomplete;
- c) the right to delete data (Article 17 of the GDPR) - if you believe that there are no grounds for the Controller to process your data, you may request their deletion (in accordance with Article 17 of the GDPR, this right is granted, among others, when the data they are no longer needed for the purposes for which they were collected, you have effectively objected or withdrawn your consent and there is no other basis for data processing);
- d)the right to limit data processing (Article 18 of the GDPR) - in the event of restriction of data processing, the Administrator may store your data and perform activities for which you consent or, for example, those that are necessary to establish, assert or defend claims.
- You have the right to limit data processing in cases where:
- - you believe that your data is incorrect;
- - the processing of the data is unlawful, but you do not want it to be deleted
- - the administrator no longer needs your data, but you need them to assert, establish or defend claims or
- - you have objected to data processing.
- e) the right to transfer data (Article 20 of the GDPR) - data processed on the basis of consent or in connection with a concluded contract (i.e. pursuant to Article 6 (1) (a) or (b) of the GDPR), you have the right to receive in a standard format possible read on the computer and you can send them to another data administrator or indicate the entity to which the Administrator is to directly transfer this data, if technically possible.
- f) the right to withdraw consent - in situations where the Administrator processes your data on the basis of consent (i.e. Article 6 (1) (a) of the GDPR), you can withdraw it at any time; the withdrawal of consent, however, does not affect the lawfulness of data processing which was carried out on the basis of consent before its withdrawal.
- g) the right to object (Article 21 of the GDPR)
- Objection due to a special situation - you can object at any time to the processing of your personal data in cases where the Administrator processes your data on the basis of its legitimate interest (i.e. Article 6 (1) (f) of the GDPR). In the notice of opposition, you should describe the specific situation which, in your opinion, justifies it. The consequence of your objection will be the cessation of data processing by the Administrator to the extent to which the objection related, unless the grounds on which the Administrator processes the data override your rights or interests indicated in the objection or the data are necessary to establish, investigate or defend claims.
- Objection to marketing activities - if the data is used for marketing purposes, the objection does not require justification, and if it is submitted, the Administrator will stop processing your data for these purposes.
- 7. How can you exercise your rights?
- If you want to exercise the rights mentioned, all you need to do is contact the Administrator in person at his headquarters or send a request by traditional mail or to the e-mail address provided. The administrator may ask for additional information necessary to identify you and fulfill your request. The possibility of exercising certain rights depends on the basis on which the Administrator processes the data.
- 8. The right to lodge a complaint with a supervisory authority.
- If you believe that the Administrator is processing your data unlawfully, you have the right to lodge a complaint with the supervisory body, i.e. the President of the Office for Personal Data Protection. However, we encourage you to contact the Administrator in advance in order to quickly clarify and settle the matter.
- Contact details of the Polish supervisory authority:
- Office for Personal Data Protection; ul. Stawki 2, 00-913 Warsaw
- www.uodo.gov.pl; tel.: 22 531 03 00
- 9. Profiling and automated decisions.
- Based on your personal data, the Administrator will not make automated decisions with you, including decisions resulting from profiling.
- PLETTAC DISTRIBUTION sp.z o.o. with headquarters in Ostrzeszów, ul. T. Kościuszki 31, 63-500 Ostrzeszów, whose files are kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań, IX Commercial Division of the National Court Register, KRS number: 0000207814, NIP number: 8211649055, share capital: PLN 2,300,000.
- Cited legal provisions:
- 1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection).
- 2. In particular, Art. 106b, 106e 190 sec. 3 of the Act of March 11, 2004 on tax on goods and services, art. 193a of the Act of August 29, 1993 Tax Ordinance and Art. 10, 20 and 21 of the Accounting Act of September 29, 1994.
- 3. First of all, Art. 910 of the Act of November 17, 1964 - Code of Civil Procedure and Art. 89 of the Act of June 17, 1966 on enforcement proceedings in administration.