GDPR

Olkuskie Wyroby Emaliowane Sp. z o.o.

Olkusz, 16 August 2019

Data Privacy Notices of Olkuskie Wyroby Emaliowane sp. z o.o. as a Personal Data Controller

If you are:

I. Our Client—a natural person or a natural person that operates a business—and you make purchases from Olkuskie Wyroby Emaliowane Sp. z o.o. of Olkusz:

Data privacy notice for the Clients of Olkuskie Wyroby Emaliowane Sp. z o.o. of Olkusz with respect to the processing of their personal data.

Under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the “GDPR,” please be advised that:

1. The data controller of the personal data of Clients is Olkuskie Wyroby Emaliowane sp. z o.o. of Olkusz, ul. 20-stu Straconych 46, 32-300 Olkusz, KRS (National Court Register) number: 0000793267, phone number: 518 308 649, e-mail address: biuro@olkuskiewyrobyemaliowane.pl (the “Controller”).

2. The Clients’ personal data is processed for the purpose of:

1) executing and performing a contract or contracts whose subject matter is the sale of the goods or services ordered by the Client or the determination of the currency for settlements (a currency contract);

2) performing the Controller’s legal obligations related to the need to issue, deliver, and maintain tax documentation and produce and maintain accounting (financial) documentation;

3) establishing, exercising, and defending potential claims, including in terms of the complaints received.

3. Personal data is processed, respectively, on the basis of:

1) Article 6.1.b of the GDPR (i.e. the performance of a contract or contracts);

2) Article 6.1.c of the GDPR in conjunction with tax and accounting regulations, including but not limited to Articles 106b.1, 106f, 106g.1, 109.3, 112, and 112a of the Polish Law of 11 March 2004 on the Value Added Tax, Article 86 § 1 in conjunction with Article 70 of the Polish Tax Ordinance of 29 August 1997, and Article 74 of the Polish Law of 29 September 2004 on Accounting (i.e. compliance with the Controller’s legal obligations);

3) Article 6.1.f of the GDPR (i.e. a legitimate interest of the Controller—establishment, exercise, or defense of claims).

4. The provision of personal data for the purpose of the performance of a contract or contracts is the condition for the execution and performance of that contract or those contracts. If the data is not provided, the execution and performance of the contract or contracts will be impossible. Provision of the data necessary for the performance of legal obligations follows from the applicable legal regulations. If the data is not provided, these legal obligations cannot be performed.

5. Data will be processed, for relevant purposes:

1) for the duration of the performance of the contract or contracts;

2) after the completion of the contract or contracts, until the prescription periods for claims have lapsed and for as long as it is legally required to maintain tax and accounting (financial) documentation.

6. In the cases specified in the GDPR, the Client has the right, with respect to his or her data, to access, rectify, erase, restrict the processing of, transfer, and object to the processing of data. The Client may exercise the above rights in a manner he or she finds convenient (e.g. by regular mail to the address of the Controller’s registered office or by e-mail to the Controller’s e-mail address); however, in such a manner that the Controller is able to identify the person exercising his or her rights. The Controller informs that the request for erasure or restriction of processing or the objection to the processing of data will not be complied with:

1) until the prescription periods, as specified in the relevant legal regulations, have lapsed and for the time tax and accounting (financial) documentation has to be maintained;

2) if any of the Parties takes actions intended to establish, exercise, or defend claims;

3) if the Controller carries out his rights/duties;

4) in other legitimate cases. At the same time, the Controller informs that the Client’s request in terms of exercising the above rights may not be complied with if this is legally justified. In response to the Client’s request, the Controller will provide any and all information with respect to whether compliance with the request is possible or not, at the same time providing a legal basis for his decision. However, the Controller guarantees that he will process the Client’s personal data exclusively to the extent necessary for his purposes.

7. The Client’s personal data may be shared with the following categories of recipients:

1) suppliers providing the Controller with technical and organizational solutions (including but not limited to providers of ICT services, operators of payment systems, courier companies, and postal companies);

2) entities linked to the Controller through capital or cooperating with the Controller, in order to perform the above contract or contracts;

3) providers of transport services, in order to perform the above contract or contracts;

4) providers of legal and advisory services (including but not limited to law firms and tax advisors).

8. Data will not be transferred to third countries or international organizations.

9. The Controller does not make decisions with respect to the Client’s personal data in an automated manner (e.g. by using artificial intelligence algorithms), including by means of profiling, as defined in the GDPR.

10. The Client may file a complaint with the President of the Polish Personal Data Protection Office if he or she believes that the processing of his or her personal data is done in violation of the GDPR.

II. Our Business Partner—a natural person or a natural person that operates a business—and you make sales to Olkuskie Wyroby Emaliowane Sp. z o.o. of Olkusz:

Data privacy notice for the Clients of Olkuskie Wyroby Emaliowane Sp. z o.o. of Olkusz with respect to the processing of their personal data.

Under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the “GDPR,” please be advised that:

1. The data controller of the personal data of Business Partners[TC1]  is Olkuskie Wyroby Emaliowane sp. z o.o. of Olkusz, ul. 20-stu Straconych 46, 32-300 Olkusz, KRS (National Court Register) number: 0000793267, phone number: 518 308 649, e-mail address: biuro@olkuskiewyrobyemaliowane.pl (the “Controller”). 

2. The Business Partners’ personal data is processed for the purpose of:

1) executing and performing a contract or contracts whose subject matter is the sale of the goods or services ordered by the Business Partner[TC2] ;

2) performing the Controller’s legal obligations related to maintain tax documentation and produce and maintain accounting (financial) documentation;

3) establishing, exercising, and defending potential claims.

3. Personal data is processed, respectively, on the basis of:

1) Article 6.1.b of the GDPR (i.e. the performance of a contract or contracts);

2) Article 6.1.c of the GDPR in conjunction with tax and accounting regulations, including but not limited to Articles 106g.1, 106f, 109.3, 109.3, 112, and 112a of the Polish Law of 11 March 2004 on the Value Added Tax, Article 86 § 1 in conjunction with Article 70 of the Polish Tax Ordinance of 29 August 1997, and Article 74 of the Polish Law of 29 September 2004 on Accounting (i.e. compliance with the Controller’s legal obligations);

3) Article 6.1.f of the GDPR (i.e. a legitimate interest of the Controller—establishment, exercise, or defence of claims).

4. The provision of personal data for the purpose of the performance of a contract or contracts is the condition for the execution and performance of that contract or those contracts. If the data is not provided, the execution and performance of the contract or contracts will be impossible. Provision of the data necessary for the performance of legal obligations follows from the applicable legal regulations. If the data is not provided, these legal obligations cannot be performed.

5. Data will be processed, for relevant purposes:

1) for the duration of the performance of the contract or contracts;

2) after the completion of the contract or contracts, until the prescription periods for claims have lapsed and for as long as it is legally required to maintain tax and accounting (financial) documentation.

6. In the cases specified in the GDPR, the Business Partner has the right, with respect to his or her data, to: access, rectify, erase, restrict the processing of, transfer, and object to the processing of data. The Business Partner may exercise the above rights in a manner he or she finds convenient (e.g. by regular mail to the address of the Controller’s registered office or by e-mail to the Controller’s e-mail address); however, in such a manner that the Controller is able to identify the person exercising his or her rights.
The Controller informs that the request for erasure or restriction of processing or the objection to the processing of data will not be complied with:

1) until the prescription periods, as specified in the relevant legal regulations, have lapsed and for the time tax and accounting (financial) documentation has to be maintained;

2) if any of the Parties takes actions intended to establish, exercise, or defend claims;

3) if the Controller carries out his rights/duties;

4) in other legitimate cases. At the same time, the Controller informs that the Business Partner’s request in terms of exercising the above rights may not be complied with if this is legally justified. In response to the Business Partner’s request, the Controller will provide any and all information with respect to whether compliance with the request is possible or not, at the same time providing a legal basis for his decision. However, the Controller guarantees that he will process the Business Partner’s personal data exclusively to the extent necessary for his purposes.

7. The Business Partner’s personal data may be shared with the following categories of recipients:

1) suppliers providing the Controller with technical and organizational solutions (including but not limited to providers of ICT services, operators of payment systems, courier companies, and postal companies);

2) entities linked to the Controller through capital or cooperating with the Controller, in order to perform the above contract or contracts;

3) providers of transport services, in order to perform the above contract or contracts;

4) providers of legal and advisory services (including but not limited to law firms and tax advisors).

8. Data will not be transferred to third countries or international organizations.

9. The Controller does not make decisions with respect to the Business Partner’s personal data in an automated manner (e.g. by using artificial intelligence algorithms), including by means of profiling, as defined in the GDPR.

10. The Business Partner may file a complaint with the President of the Polish Personal Data Protection Office if he or she believes that the processing of his or her personal data is done in violation of the GDPR.

III.    Our Prospective Client or Business Partner—a natural person or a natural person that operates a business—and you are agreeing or negotiating the terms of a contract with us (offering us or receiving from us an offer of a transaction):

Data privacy notice for the Clients of Olkuskie Wyroby Emaliowane Sp. z o.o. of Olkusz with respect to the processing of their personal data.

Under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the “GDPR,” please be advised that:

1. The data controller of the personal data of Business Partners is Olkuskie Wyroby Emaliowane sp. z o.o. of Olkusz, ul. 20-stu Straconych 46, 32-300 Olkusz, KRS (National Court Register) number: 0000793267, phone number: 518 308 649, e-mail address: biuro@olkuskiewyrobyemaliowane.pl (the “Controller”).

2. The personal data of a Prospective Client or Business Partner is processed in order to present or examine an offer or offers and hold negotiations, on the basis of Articles 6.1.a and 6.1.b of the GDPR.

3. The provision of data is necessary to present or examine the offer and hold negotiations.

4. Data will be processed for the duration of the offer and if consent is or consents are expressed to presenting new, consecutive offers in the future by phone or by e-mail, then until the consent is or the consents are withdrawn. The consent or consents may be withdrawn at any time, which does not affect the lawfulness of processing data for the purpose of presenting offers prior to the withdrawal of consent or consents. After the withdrawal of consent, the Controller will cease phone or e-mail contacts for the purpose of presenting offers.

5. In the cases specified in the GDPR, the Prospective Client or Business Partner has the right, with respect to his or her data, to: access, rectify, erase, restrict the processing of, transfer, and object to the processing of data.

6. Exercising the rights specified in sections 4 and 5 is possible by means of the contact data specified in section 1 or by contacting the Representative of the Controller with which the Prospective Client or Business Partner is transacting.

7. The personal data of a Prospective Client or Business Partner may be shared with the following categories of recipients: suppliers providing the Controller with technical and organizational solutions (including but not limited to providers of ICT services, courier companies, and postal companies); providers of legal and advisory services (including but not limited to law firms and tax advisors).

8. Data will not be transferred to third countries or international organizations.

9. The Controller does not make decisions with respect to the personal data of a Prospective Client or Business Partner in an automated manner (e.g. by using artificial intelligence algorithms), including by means of profiling, as defined in the GDPR.
10. The Prospective Client or Business Partner may file a complaint with the President of the Polish Personal Data Protection Office if he or she believes that the processing of his or her personal data is done in violation of the GDPR.

IV.    A Representative of our Client—a natural person (an attorney-in-fact, employee, contractor, etc.) that acts on behalf of another entity that makes a purchase from Olkuskie Wyroby Emaliowane Sp. z o.o. 

Data privacy notice for the Clients of Olkuskie Wyroby Emaliowane Sp. z o.o. of Olkusz with respect to the processing of their personal data

Under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the “GDPR,” please be advised that:

1. The data controller of the personal data of Business Partners is Olkuskie Wyroby Emaliowane sp. z o.o. of Olkusz, ul. 20-stu Straconych 46, 32-300 Olkusz, KRS (National Court Register) number: 0000793267, phone number: 518 308 649, e-mail address: biuro@olkuskiewyrobyemaliowane.pl (the “Controller”).

2. The personal data of Clients’ Representatives is processed for the purpose of:

1) representation and contacts related to executing and performing a contract whose subject matter is the sale of the goods or services ordered by the Client or the determination of the currency for settlements (a currency contract);

2) performing the Controller’s legal obligations related to the need to maintain tax documentation and produce and maintain accounting (financial) documentation—if the data of the Client’s Representative is contained in that documentation;

3) establishing, exercising, and defending potential claims, including in terms of the complaints received.

3. Personal data is processed on the basis of Article 6.1.f of the GDPR (i.e. a legitimate interest of the Controller, which consists in the purposes of processing listed in 2, above).

4. The personal data of the Client’s Representative is provided to the Controller by the Client on whose behalf the Representative acts and/or by the Representative himself or herself. The Controller processes exclusively the Representative’s necessary data (first and last name, official position, phone number, and e-mail address) that is necessary to carry out the process of executing and performing the contract or contracts.

5. Personal data will be processed:

1) for the duration of the performance of the contract or contracts;

2) after the completion of the contract or contracts, until the prescription periods for claims have lapsed and for as long as it is legally required to maintain tax and accounting (financial) documentation—if the data of the Client’s Representative is contained in such documentation.

6. In the cases specified in the GDPR, the Client’s Representative has the right, with respect to his or her data, to: access, rectify, erase, restrict the processing of, transfer, and object to the processing of data. The Client’s Representative may exercise the above rights in a manner he or she finds convenient (e.g. by regular mail to the address of the Controller’s registered office or by e-mail to the Controller’s e-mail address); however, in such a manner that the Controller is able to identify the person exercising his or her rights. The Controller informs that the request for erasure or restriction of processing or the objection to the processing of data will not be complied with:

1) until the prescription periods, as specified in the relevant legal regulations, have lapsed and for the time tax and accounting (financial) documentation has to be maintained—if the data of the Client’s Representative is contained in such documentation;

2) if the Controller or the Client takes actions intended to establish, exercise, or defend claims;

3) if the Controller carries out his rights/duties;

4) in other legitimate cases. At the same time, the Controller informs that the request of the Client’s Representative in terms of exercising the above rights may not be complied with if this is legally justified. In response to the request of the Client’s Representative, the Controller will provide any and all information with respect to whether compliance with the request is possible or not, at the same time providing a legal basis for his decision. However, the Controller guarantees that he will process the personal data of the Client’s Representative exclusively to the extent necessary for his purposes.

7. The personal data of the Client’s Representative may be shared with the following categories of recipients:

1) suppliers providing the Controller with technical and organizational solutions (including but not limited to providers of ICT services, operators of payment systems, courier companies, and postal companies);

2) entities linked to the Controller through capital or cooperating with the Controller, in order to perform the above contract or contracts;

3) providers of transport services, in order to perform the above contract or contracts;

4) providers of legal and advisory services (including but not limited to law firms and tax advisors).

8. Data will not be transferred to third countries or international organizations.

9. The Controller does not make decisions with respect to the personal data of the Client’s Representative in an automated manner (e.g. by using artificial intelligence algorithms), including by means of profiling, as defined in the GDPR.

10. The Client’s Representative may file a complaint with the President of the Polish Personal Data Protection Office if he or she believes that the processing of his or her personal data is done in violation of the GDPR.

V. A Representative of our Client—a natural person (an attorney-in-fact, employee, contractor, etc.) that acts on behalf of another entity that makes a sale to Olkuskie Wyroby Emaliowane Sp. z o.o.

1. In the cases specified in the GDPR, the Client’s Representative has the right, with respect to his or her data, to: access, rectify, erase, restrict the processing of, transfer, and object to the processing of data. The Client’s Representative may exercise the above rights in a manner he or she finds convenient (e.g. by regular mail to the address of the Controller’s registered office or by e-mail to the Controller’s e-mail address); however, in such a manner that the Controller is able to identify the person exercising his or her rights. The Controller informs that the request for erasure or restriction of processing or the objection to the processing of data will not be complied with:

1) until the prescription periods, as specified in the relevant legal regulations, have lapsed and for the time tax and accounting (financial) documentation has to be maintained—if the data of the Client’s Representative is contained in such documentation;

2) if the Controller or the Client takes actions intended to establish, exercise, or defend claims;

3) if the Controller carries out his rights/duties;

4) in other legitimate cases. At the same time, the Controller informs that the request of the Client’s Representative in terms of exercising the above rights may not be complied with if this is legally justified. In response to the request of the Client’s Representative, the Controller will provide any and all information with respect to whether compliance with the request is possible or not, at the same time providing a legal basis for his decision. However, the Controller guarantees that he will process the personal data of the Client’s Representative exclusively to the extent necessary for his purposes.

2. The personal data of the Client’s Representative may be shared with the following categories of recipients:

1) suppliers providing the Controller with technical and organizational solutions (including but not limited to providers of ICT services, operators of payment systems, courier companies, and postal companies);

2) entities linked to the Controller through capital or cooperating with the Controller, in order to perform the above contract or contracts;

3) providers of transport services, in order to perform the above contract or contracts;

4) providers of legal and advisory services (including but not limited to law firms and tax advisors).

3. Data will not be transferred to third countries or international organizations.

4. The Controller does not make decisions with respect to the personal data of the Client’s Representative in an automated manner (e.g. by using artificial intelligence algorithms), including by means of profiling, as defined in the GDPR.

5. The Client’s Representative may file a complaint with the President of the Polish Personal Data Protection Office if he or she believes that the processing of his or her personal data is done in violation of the GDPR.

VI. A Representative of our Prospective Client or Business Partner—a natural person (an attorney-in-fact, employee, contractor, etc.) that acts on behalf of another entity that is agreeing or negotiating the terms of a contract with us (offering us or receiving from us an offer of a transaction).

The Client’s Representative may file a complaint with the President of the Polish Personal Data Protection Office if he or she believes that the processing of his or her personal data is done in violation of the GDPR.

Krzysztof Madej

President of the Management Board

Olkuskie Wyroby Emaliowane Sp. z o.o.