Due to the obligation to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”), Krzysztof Szczawiński Manufacturing-Trade-Service Enterprise based in Łódź, at ul. Krańcowa 77/1, 94-305 Łódź, with VAT ID: 727-128-53-37 and REGON: 472005990, (hereinafter referred to as “Krzysztof Szczawiński PPHU”) informs you about your rights related to the processing of personal data by Krzysztof Szczawiński PPHU.

WHEN KRZYSZTOF SZCZAWIŃSKI PPHU PROCESSES PERSONAL DATA

Krzysztof Szczawiński PPHU processes personal data when at least one of the following conditions is met:

the data subject has given consent to the processing of their personal data for one or more specific purposes; processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; processing is necessary for compliance with a legal obligation to which the controller is subject; processing is necessary to protect the vital interests of the data subject or of another natural person; processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

DATA CONTROLLER

The data controller is Krzysztof Szczawiński PPHU based in Łódź, at ul. Krańcowa 77/1, 94-305 Łódź, with VAT ID: 727-128-53-37 and REGON: 472005990, phone: 602623536, email: biuro@szczawinski.pl.

DATA PROTECTION OFFICER

Krzysztof Szczawiński PPHU has not appointed a data protection officer. The proper protection of personal data is supervised by Krzysztof Szczawiński PPHU.

PURPOSE OF PROCESSING DATA IN KRZYSZTOF SZCZAWIŃSKI PPHU

Krzysztof Szczawiński PPHU processes personal data for the following purposes:

to take actions at the request of the other party aimed at concluding a contract with Krzysztof Szczawiński PPHU (legal basis: Article 6(1)(b) of the GDPR); to perform a contract concluded with Krzysztof Szczawiński PPHU (legal basis: Article 6(1)(b) of the GDPR); to fulfill legal obligations incumbent on Krzysztof Szczawiński PPHU in connection with conducting business and implementing concluded contracts (legal basis: Article 6(1)(c) of the GDPR); for internal administrative purposes of Krzysztof Szczawiński PPHU, including statistics and internal reporting of Krzysztof Szczawiński PPHU (legal basis: Article 6(1)(b) of the GDPR).

SHARING DATA WITH OTHER RECIPIENTS

In connection with the processing of data indicated in the section “PURPOSE OF PROCESSING DATA IN KRZYSZTOF SZCZAWIŃSKI PPHU,” personal data may be shared with other recipients of personal data. Recipients of data may include in particular:

accounting of Krzysztof Szczawiński PPHU; state administration institutions and other entities authorized to receive personal data on the basis of relevant legal provisions or authorizations.

PROCESSING TIME OF PERSONAL DATA BY KRZYSZTOF SZCZAWIŃSKI PPHU

Personal data will be processed for the period necessary to achieve the purposes of processing indicated in the section “PURPOSE OF PROCESSING DATA IN KRZYSZTOF SZCZAWIŃSKI PPHU,” i.e.,

to the extent of fulfilling the contract concluded with Krzysztof Szczawiński PPHU, for the period until its completion, after which for the period and scope required by legal regulations or to secure any claims; to the extent of fulfilling legal obligations incumbent on Krzysztof Szczawiński PPHU in connection with conducting business and implementing concluded contracts, for the period until these obligations are fulfilled by Krzysztof Szczawiński PPHU; to the extent of marketing and promoting products and services offered by Krzysztof Szczawiński PPHU, for the period until consent to such processing is withdrawn; to the extent of internal administrative purposes, for the period until the legitimate interests of Krzysztof Szczawiński PPHU, which constitute the basis of this processing, are fulfilled or until objection to such processing is raised.

RIGHTS

In connection with the processing of personal data by Krzysztof Szczawiński PPHU, the following rights apply: the right of access to their data, based on Article 15 of the GDPR; the right to rectify their data, based on Article 16 of the GDPR; the right to erase data based on Article 17 of the GDPR; the right to restrict processing, based on Article 18 of the GDPR; the right to object to the processing of data, based on Article 21 of the GDPR; the right to data portability, based on Article 20 of the GDPR. In cases where data processing is based on Article 6(1)(a) of the GDPR, consent to the processing of personal data may be withdrawn at any time. In cases where it is considered that the processing of personal data by Krzysztof Szczawiński PPHU violates the provisions of the GDPR, there is a right to lodge a complaint with the supervisory authority, i.e., the President of the Office for Personal Data Protection.

REFUSAL TO PROVIDE PERSONAL DATA

To the extent that data processing is necessary for the conclusion and performance of a contract with Krzysztof Szczawiński PPHU, providing data is a condition for concluding this contract. Providing data is voluntary, but the consequence of not providing this data will be the inability to conclude and perform a contract with Krzysztof Szczawiński PPHU.