RODO information

Annex no. 20c to the Security Policy

Information regarding the processing of contractor’s personal data

While carrying out the obligation under art. 13 section 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general Data Protection Regulation) (Journal of Laws EU No. 2016/2016 119.1) (hereinafter referred to as: “GDPR”) we inform that:

  1. Economic cooperation with our contractors involves the need for us to process a number of personal data, among which is information identifying, among others:
    1. natural persons conducting sole proprietorship;
    2. partners, statutory representatives, proxies, agents, employees of our contractors;
    3. other persons whose data we process for the purpose of issuing or processing invoices.

  1. The administrator of the personal data being provided shall be “Lubelski Fornir” spółka z ograniczoną odpowiedzialnością, based in Łaszczów (the company address: ul. Lwowska 31; 22-650 Łaszczów), entered by the District Court Lublin-Wschód in Lublin with its headquarters in Świdnik, VI Economic Department of the National Court Register to the Register of Entrepreneurs of the National Court Register under number 0000186159, VAT no.: 9211331566, REGON State Statistical No: 950278524 (hereinafter referred to as: “Company” or “We”).

  1. In matters regarding the protection of personal data, you can contact us by email: rodo@lubelskifornir.pl or traditional mail by writing to the following address: “Lubelski Fornir “sp. z o.o., ul. Lwowska 31: 22-650 Łaszczów.

  1. Personal data shall be processed in order to:
    1. conclusion and performance of a contract to which the data subject is a party, which is the legal basis in art. 6 clause 1 lit. b) GDPR;
    2. fulfilling legal obligations of the Company, resulting from, among others tax and accounting regulations, such as the need to:
      1. issuing accounting documents;
      2. making tax and accounting settlements:
      3. keeping and archiving tax and accounting documentation, which finds its legal basis in art. 6 clause 1 lit. c) GDPR;
    3. implementation of our legitimate interests, such as:
      1. contact with contractors, including keeping internal records of contractors for contact purposes;
      2. possible determination and pursuit of claims or defense against them, including conducting court proceedings and debt collection;
      3. archiving data and documents containing personal data for evidentiary purposes;
      4. marketing of own products or services and providing commercial information; which finds its legal basis in art. 6 clause 1 lit. f) GDPR.
        1. Access to personal data provided shall be provided primarily to our authorized employees. In addition, the entities we cooperate with shall have access to in a strictly defined scope, in achieving the purposes of data processing referred to in point 4. These shall be the entities we commission specific services, e.g.:
          1. banks operating the Company’s bank accounts;
          2. law firms providing legal services to the Company;
          3. IT system providers;
          4. data hosting service providers;
          5. courier or postal service providers;
          6. forwarding and transport companies;
          7. companies providing consulting or auditing services.
        2. Personal data shall not be transferred to any third country (i.e. a country outside the European Economic Area) or an international organization.
        3. Personal data shall be processed only for the period necessary to achieve the purposes for which they were collected. Personal data shall therefore be stored for the duration of the contract and later:
          1. for the limitation periods of potential claims, as specified by law;
          2. for the periods of archiving documents and data required by generally applicable law;
          3. for periods during which it may be necessary to document compliance with legal obligations regarding the protection of personal data during possible inspections by public authorities.
        4. The data subject has the right to:
          1. request access to his/her personal data;
          2. requests to rectify personal data when the data is incorrect, as well as requests to supplement the data when the data is incomplete;
          3. request the deletion of personal data, if there is a circumstance justifying this request provided for by law (i.e. in Article 17 of the GDPR);
          4. request to limit the processing of personal data, in cases provided for by law (i.e. Article 18 of the GDPR);
          5. object to the processing of personal data due to the special situation of the data subject in cases where we process data in order to pursue our legitimate interests;
          6. data transfer.
        5. If the processing of personal data would be based on consent, the person who gave such consent has the right to withdraw it at any time. However, this shall not affect the lawfulness of processing based on consent before its withdrawal.
        6. The data subject also has the right to lodge a complaint with the supervisory body – the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warszawa).
        7. When entering into business relationships, providing us with personal data is not a statutory requirement, but most often it is necessary to establish cooperation and conclude a contract. If you do not provide some personal data, you may not be able to sign the contract. However, sometimes the law shall require us to provide certain personal data, e.g. for accounting or tax reasons.
        8. The personal data provided shall not be processed by us in a way that would result in automated decision making, including profiling. This means that we do not use information systems that would gather information about specific persons and then automatically, independently, make decisions that could have legal effects on such persons or in a similar way significantly affect those persons.