Processing
of personal data
We protect and process your personal data:
a)
in accordance with Regulation (EU) 2016/679 of the European
Parliament and of the Council of 27 April 2016 on the protection of
natural persons with regard to the processing of personal data and
on the free movement of such data and repealing Directive 95/46/EC
(General Data Protection Regulation) hereinafter referred to as
"RODO",
b) on the principles described in this document
hereinafter referred to as the "Privacy Policy", which is
effective as of 24.05.2018.
Administrator
We
are responsible for what purpose and how we use your personal data.
The entity responsible (hereinafter referred to as "Administrator")
for processing your personal data is: Acropol Jastrzębski
Orzechowska with its headquarters on Chopina 23a, 62-800 Kalisz tel.
62 595 55 00.
Contact details for matters relating to personal data
You can contact us about the processing of your personal data at:
ACROPOL Jastrzębski Orzechowska Sp. j. with its headquarters on ul. Chopina 23a, 62-800 Kalisz tel. 62 595 55 00, iod@acropol.pl
Source
of personal data
We have received your personal data:
a)
directly from you - through voluntarily completed electronic forms
available on the websites, e.g. during registration in our systems
or though contact forms;
b) directly from you - verbally or via
means of communication, e.g. telephone, email, chat;
c) in
connection with the fulfillment of a contract (signed by you, your
employer, supplier, customer), in particular for the purpose of
carrying out an order;
d) in relation to pre-contractual
activities;
e) from publicly available registers - in some
situations we use data made available in public registers, e.g.
CEIDG, KRS, Portal Podatkowy.
Purpose
and legal basis of processing
We may process your personal data
for the following purposes and in accordance with the following
legal basis:
a) establishing and maintaining a commercial or
business relationship - this is our legitimate interest in relation
to our commercial activities;
b) fulfilling a contract, in
particular the execution of an order submitted by electronic means
of communication - fulfillment of the contract;
c) handling
complaints - fulfillment of the contract;
d) preparing, storing
and maintaining legally required documentation - our legal
obligation;
e) keeping a register of correspondence - our
legitimate interest in documenting the conditions of fulfillment of
the contract, enabling us to make or defend against claims;
f)
dealing with debts (including using automated decision making) - our
legitimate interest in enforcing debts and preventing arrears from
building up;
g) sending commercial communications - your consent
to processing
Categories of personal data
Depending on the circumstances and the scope of our cooperation, we may process your data to a varying degree. As a rule, you decide what data you make available to us and how you use our services.
Most often we process your address data (e.g. first name, surname or name of the entity, street, town and postal code) and/or Company Data (e.g. name of the organisational unit or entrepreneur, first name and surname of the natural person conducting professional activity, street, town, postal code, NIP, sometimes also REGON, e-mail address). If you do not provide this data, unfortunately we will not be able to process your order.
We will not process your personal data if you are a consumer as defined by the Civil Code and you order and collect your order at our premises paying in cash - in this case you will receive a receipt. If you want an invoice from us with your PESEL number - you will have to allow us to process it.
It may so happen that we receive your data from another entity in connection with the fulfillment of the contract made with it. In most such cases you will be indicated as: the addressee of the shipment or the person with whom we are to make arrangements in connection with the fulfillment of the contract. If you provide us with your contact details (e.g. name, surname, telephone number, e-mail address or other Internet identifier) - we will be able to keep you informed about the progress of your order or contract performance and it will significantly improve the quality of our commercial/business relationship.
In connection with your payment, we may process billing information (e.g. bank account number, identifier assigned by the payment processor). If you do not want us to process this type of data - you must use cash on delivery or visit our premises and pay in cash.
If the business relationship between us is advanced – we might process your Business Data (e.g. name and surname, company name and contact details, position) and Other Data (data voluntarily made available or provided to the Administrator, e.g. content entered in electronic correspondence).
We process the personal data described above taking into account the principles of: accountability, transparency, correctness, reliability, integrity and confidentiality.
Categories of recipients of personal data
In general, we do not share personal data with third parties/ foreign entities. However, in connection with the execution of orders/contracts, we may share or entrust the processing of your personal data with persons or entities where justified by the performance of a contract, a legal obligation, our legitimate interest or using your express consent. We may share your personal data with other administrators:
a) postal operators (entities carrying out postal and/or courier activities) - e.g. for the purpose of delivering parcels and correspondence;
b) financial institutions (banks, payment intermediaries) - e.g. in connection with the execution of payments, refunds, etc;
c) entities connected with debt services (bailiffs, debt collectors, commercial information offices) - e.g. in connection with the necessity of debt enforcement;
In addition, we may entrust the processing of your data to processors:
e) agencies (advertising and marketing agencies, marketing intermediaries) and only with your consent - e.g. advertising and promotional campaigns, organisation of events and training;
f) IT service providers (entities operating our IT systems or providing us with technical support services, entities providing ICT tools, including statistics, telecommunication operators, cloud service providers) - e.g. Google Analytics, the use of IT resources and tools and services, including cloud computing;
g) subcontractors (our advisors, consultants, auditors, legal assistance, tax, accounting and other subcontractors) - e.g. for the purpose of subcontracting parts of the services;
Period over which your personal data will be processed
We may store your personal data from the time we take steps to enter into a contract until the execution of the contract, and also after the fulfillment of the contract, in order to:
a) perform the legal obligations, especially ones required by the Accounting Act and tax law - typically 6 years;
b) fulfill the Administrator's legitimate interests, including enabling the defence against claims or the assertion of claims - typically 10 years;
c) maintain a business relationship and an account in our transaction system, handling technical support - until the date of consideration of the right to: the erasure of data, the restriction of processing, objection to processing;
d) direct marketing - until the date of withdrawal of your consent to processing;
Your rights
Under RODO you have the right to the protection of your personal data, in particular you have the right to:
a) demand the access to your personal data from the Administrator;
b) correct your personal data;
c) erase your personal data;
d) restrict the processing of your personal data;
e) object to the processing of your personal data;
f) transfer your personal data;
g) withdraw consent to the processing of your personal data at any time;
h) lodge a complaint with the supervisory authority - the General Inspector of Personal Data;
If you wish to withdraw your consent to receiving the newsletter - send information regarding the withdrawal of consent to the processing of data related to the provision of newsletter services. In other cases, you can exercise your rights by contacting us as described in point 3.
Automated decision-making
The cookies we process are used for technical statistical purposes. In this respect, however, they will not be processed for the purpose of automated decision-making.
Changes in Privacy Policy
We reserve the right to change the Privacy Policy without giving reasons at any time. The changes in question will not restrict the rights acquired before the changes came into force. We will inform you about the content of the changes on our website www.acropol.pl.