Service      +48 874295630      serwis.kostrzewa.com.pl/en/      Mon - Fri: 7:00-20:00 | Sat - Sun - Holidays: 10:00-16:00

GDPR policy

In accordance with the requirements of the European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, commonly known as "GDPR"), we present the principles upon which the processing of personal data takes place at PPH Kostrzewa sp.k., ul. Przemysłowa 11 A, 11-500 Giżycko, tel. +48 87 429 56 00, e-mail: biuro@kostrzewa.com.pl, and the rights of the persons whose data is concerned.

  1. The administrator of the processed personal data is PPH Kostrzewa sp.k., ul. Przemysłowa 11A, 11-500 Giżycko, tel. +48 87 429 56 00, email: biuro@kostrzewa.com.pl.
  2. In matters related to the protection of personal data, you can contact us at the correspondence address: PPH Kostrzewa sp.k., ul. Przemysłowa 11A, 11-500 Giżycko, tel. +48 87 429 56 00, email: biuro@kostrzewa.com.pl.
  3. Personal data will be processed for the purpose of:
  • concluding and executing sales contracts for goods/services or other commercial cooperation agreements between your company and PPH Kostrzewa sp.k., ul. Przemysłowa 11A, 11-500 Giżycko, tel. +48 87 429 56 00, email: biuro@kostrzewa.com.pl, in accordance with Article 6(1)(b) of the GDPR,

a) The processing of personal data by the data controller to fulfill legal obligations imposed on him in connection with conducting business, including, among others, under the provisions of the Tax Ordinance of August 29, 1997, tax provisions, accounting regulations, regulations concerning obligations to archive accounting documentation – the basis for processing is Article 6(1)(c) of the GDPR,

b) arising from the legally justified interest of the administrator – the basis for processing is Article 6(1)(f) of the GDPR; the justified interest of the administrator may be, in particular, the efficient execution of business and administrative processes related to the activities of the Administrator,

c) direct marketing of the administrator's own products and services, including for analytical purposes – the basis for processing is Article 6(1)(a) of the GDPR, i.e., the consent of the data subject, and Article 6(1)(f) of the GDPR, i.e., processing is necessary for the purposes arising from the legally justified interest of the administrator; the justified interest of the administrator is the possibility of presenting information about his products or services to the client, making offers, increasing the sale of his goods and services.

d) protection of the vital interests of the data subject - the basis for processing is Article 6(1)(d) of the GDPR

e) realization of the legally justified interest of the company, consisting in possibly establishing or pursuing claims or defending against claims, the basis for processing is Article 6(1)(f) of the GDPR

f) one or more specified purposes for which consent has been given.

  1. Your personal data may be shared with other recipients or categories of recipients to the extent necessary to achieve the aforementioned processing purposes. Such recipients include, in particular:

a) tax authorities and other government bodies;

b) providers of IT systems and IT services;

c) other entities cooperating with the data controller, including those providing advisory, legal, accounting, consulting, collection, insurance, courier, postal, transport or forwarding services – for the purpose of fulfilling the contract;

d) law enforcement agencies, judicial officers, courts and other public authorities – to the extent required by applicable laws and upon their request based on legal provisions.

    5. Your personal data will be stored for the period necessary to achieve the above-mentioned purposes, specifically:

a) in terms of fulfilling contracts entered into with you – until the completion of their fulfillment, as well as for securing any claims arising from the contract until the expiration of the limitation period;

b) in the case of personal data for which applicable legal provisions require their possession, archiving, and processing for a specified period - until the expiration of the data retention obligation arising from legal regulations, particularly the obligation to store accounting documents;

c) in the case of processing data for marketing purposes – until an objection is raised or consent for processing data for this purpose is withdrawn.

 6. Every data subject has the right to (subject to restrictions arising from legal provisions):

  • Access the contents of their data (in accordance with Article 15 of the General Data Protection Regulation);
  • Rectification (correction) of personal data – in cases where the data is incorrect or incomplete (in accordance with Article 16 of the General Data Protection Regulation);
  • Erasure of data (in accordance with Article 17 of the General Data Protection Regulation);
  • Restriction of data processing (in accordance with Article 18 of the General Data Protection Regulation);
  • Portability of data (in accordance with Article 20 of the General Data Protection Regulation);
  • The right to object (in accordance with Article 21 of the General Data Protection Regulation);
  • Withdrawal of consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
  • Lodging a complaint with a supervisory authority (the President of the Personal Data Protection Office) if it is deemed that the processing of personal data violates the provisions of the General Data Protection Regulation.

  1. Providing your personal data is mandatory in situations where the basis for processing personal data is a legal provision, a contract concluded between the parties, or the execution of a legally justified interest of the data controller. The consequence of not providing personal data required by PPH Kostrzewa sp.k., ul. Przemysłowa 11A, 11-500 Giżycko, tel. +48 87 429 56 00, email: biuro@kostrzewa.com.pl is the inability to conclude and perform a contract or to provide a service. In cases where the processing of personal data is based on consent, providing personal data is voluntary.

  2. Your personal data will not be transferred to a third country/international organization, unless the personal data controller is obliged to do so under applicable legal provisions.

  3. The data controller does not use automated decision-making or profiling.

 
 

Information clause in connection with call recording

 

Pursuant to Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU. L. of 2016 No. 119, p. 1, as amended) - hereinafter GDPR, we inform you that:

  1. The administrator of the processed personal data is PPH Kostrzewa sp.k. Przemysłowa 11A Street, 11-500 Giżycko, tel. +48 87 429 56 00, e-mail: biuro@kostrzewa.com.pl
  2. In matters concerning the protection of personal data, you can contact at the address for correspondence: PPH Kostrzewa sp.k. Przemysłowa 11A Street, 11-500 Giżycko, tel. +48 87 429 56 00, e-mail: biuro@kostrzewa.com.pl
  3. The purpose of data processing is to ensure the possibility of defense and vindication of claims on the basis of the administrator's legitimate interest, in accordance with Article 6(1)(f) of the GDPR.
  4. Call recordings are stored for up to 2 years or until the statute of limitations for claims, whichever is longer.
  5. Your data may be shared with entities and persons authorized to do so by law, including entities authorized to obtain public information. They may also be made available to entities carrying out the activities necessary to realize the indicated purposes of processing, i.e. an external IT company, a law firm.
  6. You have the right to request access to your personal data, as well as to rectify (amend) it. You also have the right to demand erasure or restriction of processing, as well as to object to processing, but you have this right only if further processing is not necessary for the Administrator to comply with a legal obligation and there are no other overriding legal grounds for processing.
  7. You have the right to lodge a complaint against the processing carried out by the Administrator to the President of UODO (uodo.gov.pl).
  8. Consent to recording is voluntary, but necessary to handle the matter by phone. In case of lack of consent, please contact us in person, in writing or via e-mail.
  9. Your data will not be shared with a third country/international organization.
  10. Your data will not be subject to profiling or automated decision-making.