Based on Article 13(1-2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ L 2016, No. 119) – hereinafter referred to as GDPR – we inform you that:
- The administrator of your personal data is P.P.U. Comex Spółka z o.o. based in Wrocław, address: ul. Graniczna 21; 54-516 Wrocław, registered in the register of entrepreneurs of the National Court Register kept by the District Court for Wrocław-Fabryczna, 6th Commercial Division of the National Court Register, KRS number 0000023036, with REGON number: 008088365, NIP (VAT-ID) number: 8980016119, hereinafter referred to as the Administrator.
- The Administrator has not appointed a Data Protection Officer. For matters concerning personal data protection and to exercise your rights:
- we encourage you to contact Ms. Aleksandra Lichwała;
- we provide the contact details of the person you can reach out to regarding the protection of your personal data via email at sekretariat@comex.net.pl or in writing to the address of the registered office indicated in point 1.
- Your personal data will be processed for the purpose of:
- necessary for the performance of a contract to which you are a party, based on Article 6(1)(b) of the GDPR;
- necessary for entering into a contract based on your interest in the offer, pursuant to Article 6(1)(b) of the GDPR;
- conducting customer satisfaction surveys as part of the Administrator's legitimate interest in assessing service quality and customer satisfaction with our products and services, based on Article 6(1)(f) of the GDPR;
- potentially pursuing or defending against claims, as part of our legitimate interest, based on Article 6(1)(f) of the GDPR;
- offering you products and services as part of our legitimate interest in direct marketing, including products and services provided by entities cooperating with us (partners) and tailoring them to your needs, i.e., profiling, based on Article 6(1)(f) of the GDPR.
- Right to object.
- You have the right to object to the processing of your personal data, upon which we will cease processing your data for the purposes specified in point 3, except in situations where we demonstrate that we have legally justified grounds for your data that override your interests, rights, and freedoms, particularly within our legitimate interest, and when the data is necessary to establish, pursue, or defend claims.
- Data retention period.
- In the case of your data processed for the purpose necessary for the performance of a contract to which you are a party, we inform you that it will be processed for the period during which claims related to the contract may arise from the provisions of the Civil Code and/or tax law, as well as for 5 years counted from the end of the calendar year in which the tax obligation arose.
- In cases where the basis for processing your personal data is consent, we inform you that personal data will be processed as long as the consent is not withdrawn. After the withdrawal of consent, personal data will be processed for a period corresponding to the statute of limitations for claims that the data controller may assert and that may be asserted against the data controller.
- Sharing of personal data your personal data may be shared with the following recipients: entities within our capital group, entities providing us with accounting (payroll and financial), legal, and auditing services, as well as our partners, as part of their individual audits.
- Transfer of personal data to a third country.
- The Administrator has the right to transfer your personal data necessary for the performance of a service contract to a third country or international organization (Google, Facebook, etc.). Facebook and Google have joined the EU-U.S. Privacy Shield agreement, and according to the European Commission's decision of July 12, 2016, IP/16/216, the transfer of personal data to entities based in the United States that have joined the aforementioned agreement ensures an adequate level of personal data protection, in accordance with Article 45 of the GDPR.
- You have the right to obtain a copy of the personal data transferred to a third country.
- As data subjects, you have the right to:
- the right to access your data and receive a copy of it;
- the right to data portability;
- the right to object to data processing;
- the right to rectify (correct) your data;
- the right to delete data, restrict data processing;
- the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
- Providing your personal data is voluntary, but it is necessary for:
- providing services based on concluded contracts and / or orders / proformas;
- preparing an offer and concluding a contract for the provision of other services by the Administrator.
