INFORMATION ON PROCESSING OF PERSONAL DATA

Taking into account the provisions of Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as „GDPR”, we hereby inform you that we process your personal data.

This information is the fulfillment of the information obligation imposed by Art. 13 and art. 14 of GDPR. The said provisions impose on the controller of personal data an informational obligation towards the data subject, while Art. 13 of GDPR establishes an obligation to provide information in the event of collecting data from the data subject, while art. 14 of GDPR establishes an information obligation in the event of obtaining data from other sources than from the data subject.

Taking into account the abovementioned we inform you that:

1. The controller of your personal data is Donauchem Polska Sp. z o.o., seated Topolowa 15, 62-090 Rokietnica, entered into the register of business entities under KRS number 0000092475, kept by District Court Poznan – Nowe Miasto and Wilda, IX Wydział Gospodarczy Krajowego Rejestru Sądowego. The contact data to the controller are as follows:

                    - e-mail address : kontakt@donauchem.pl ,
                    - phone 61 64 65 400.

2. Your personal data is processed by us on the basis of art. 6 sec. 1 lit. b) and lit. c) of the GDPR, in connection with the performance of the contract, as well as pursuant to art. 6 par. 1 lit. f) GDPR, ie the processing of data is necessary for purposes arising from legitimate interests pursued by the administrator. The legitimate interest referred to in the preceding sentence is the controller's performance of business operations, in particular offering products and services, as well as pursuing claims for business operations. In addition, due to the fact that the controller is part of the Donau Chemie Group, the legitimate interest is internal administrative goals, in particular management control. The processing of data about our clients, after termination of the contractual relationship, also serves other purposes related to the business activity carried out, such as marketing, analytical and statistical purposes. Your data will also be processed to verify customer satisfaction.
    
3. We process the following personal data: name, surname, address, telephone number, e-mail address, bank account number, NIP, PESEL number, personal data of your representatives, including employees, will be processed in the following scope: name, surname, telephone number, e - mail address, all only for the purposes mentioned above.
    
4. Your data will be processed by the controller for the time necessary to achieve the objectives referred to in point 3 above; for a period of 6 years (Article 86 § 1 of the Tax Ordinance) - legal duty of the controller, Art.6, paragraph 1, lit. c (GDPR); for the period of time for limitation of claims and criminal offenses under Art.6, paragraph 1, lit. f (GDPR) - legally justified controller's interest.
    
5. Your data may be passed on to recipient categories in the following areas:
   1. payment service,
   2. accounting and performance of obligations imposed by accounting regulations,
   3. transfer within companies belonging to the Capital Group of the Donau Chemie Group,
   4. servicing of computer software,
   5. postal services, courier services or logistics services in connection with the execution of the contract,
   6. marketing campaigns.
    
6. Your data will not be transferred to recipients outside the European Economic Area or to international organizations.
    
7. Your data will not be used to make decisions that rely solely on automated processing, including profiling, as referred to in art. 22 of the GDPR.
    
8. Your personal data has been obtained by the controller from the following source: in connection with the implementation of the contract.
    
9. The controller declares and ensures that the organizational and technical measures used by it to ensure the security of the processing of personal data meet the requirements set out in the GDPR, in particular the provisions of art. 32 GDPR.
    
10. We inform you that you have the right to:
    1. request the controller to access your personal data and correct them (in accordance with articles 15 and 16 of the GDPR),
    2. deleting or limiting the processing of personal data (in accordance with articles 17 and 18 of the GDPR,
    3. raise objections regarding the processing of personal data (in accordance with Article 21 of the GDPR),
    4. transfer personal data (in accordance with article 20 of the GDPR),
    5. file a complaint to the supervisory body, which is the President of the Office for Personal Data Protection.
        
11. Providing personal data is voluntary, however, refusal to provide data may result in refusal to conclude a contract.