GDPR Notice

Due to the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we would like to inform you about the manner of and reason for the processing of your personal data, as well as your rights under the relevant data protection regulations.

I. Who is responsible for processing your personal data?

1. The controller of your personal data is Polychem Systems Sp. z o.o. with its registered office in: 60-003 Poznań, ul. Wołczyńska 43, entered into the National Court Register kept by the District Court for Poznań Nowe Miasto and Wilda in Poznań, 8th Economic Department of the National Court Register under KRS No. 0000035167, NIP [Tax Identification No.] 7790000830, REGON [National Business Registry Number] 001075365 (“Controller”).
2. For direct contact details, visit polychem-systems.com.pl, “Contact” tab.
3. The Controller has appointed a Data Protection Officer who oversees the correctness of personal data processing and can be contacted via e-mail for all matters relating to personal data processing and the exercise of rights in relation to such processing at iod@polychem-systems.com.pl or by traditional mail to the Controller’s mailing address.

II. On what legal basis do we process your personal data?

1. We process your personal data pursuant to the provisions of the GDPR and Polish data protection regulations.
2. Personal data processing will be carried out for the following purposes:
   1. compliance with contractual obligations (Art.6 (1)(b) GDPR) — the data is processed for the purposes of providing products and services offered by the Controller, as well as for the purposes of sales service and financial settlements, and for the purposes of concluding and performing contracts for the supply of goods and services to Polychem Systems Sp. z o.o.
   2. fulfilling legal obligations incumbent on the Controller, (Art.6. (1)(c) GDPR) — to fulfil the obligations under the Act on Accounting.
   3. based on your consent (Art. 6(1)(a) GDPR) — if you have given your consent to the processing of your personal data for specific purposes (e.g. for such purposes as running special offers and contests, contacting the Controller via online contact forms or marketing the Controller’s services and products), the Controller may process this data based on such consent. The consent may be withdrawn at any time. The withdrawal of consent does not affect the lawfulness of the processing of personal data carried out before its withdrawal.
   4. for the purposes of the legitimate interests pursued by the Controller or a third party (Art. 6(1)(f) GDPR) — where necessary, the processing is carried out in order to protect the legitimate interests of the Controller or third parties. Examples of such processing include:
      1. ensuring IT security,
      2. customer satisfaction surveys,
      3. statistics and analysis of cooperation and quality of services rendered,
      4. establishing and maintaining business relationships,
      5. asserting and defending claims and complaints,
      6. direct marketing of proprietary products and services.

III. How long will your personal data be processed?

Personal data will be processed for as long as it is necessary to fulfil the purposes indicated in item II, i.e.:

1. for the performance of the concluded contract for the provision of services and/or products until its completion, and thereafter for the period required by law or for the settlement of any claims,
2. for direct marketing carried out based on the consent until such time as consent for such processing is withdrawn,
3. until the fulfilment of the legitimate interests of the Controller on which such processing is based while respecting your rights and freedoms, or until you object to such processing unless there are legitimate grounds for further processing.

IV. What are your rights in relation to our processing of your personal data?

1. You are entitled to:
   1. request access to your personal data,
   2. rectify your personal data,
   3. restrict the processing of your personal data or delete it,
   4. withdraw at any time your consent to the processing of your personal data where processing is based on your consent,
   5. object at any time to the processing of your personal data on grounds relating to your particular situation, where the processing by the Controller is carried out for the purposes of legitimate interests (Art. 21(1) GDPR),
   6. object at any time to the processing of personal data for direct marketing purposes (Art. 21(2) GDPR),
   7. request the transfer of personal data processed for the conclusion and performance of a contract or processed based on consent,
   8. lodge a complaint to the supervisory authority (President of the Personal Data Protection Office) if you believe that the processing of your personal data violates GDPR provisions.
2. To make requests and exercise your rights, please e-mail iod@polychem-systems.com.pl.

V. Who can we share your personal data with?

Your personal data may be received by:

1. entities supporting the Controller in the delivery and logistics process,
2. debt collectors,
3. partners we work with by combining products or services,
4. law firms,
5. entities supporting the Controller in IT system maintenance,

VI. Notice on transferring personal data to third countries (outside the European Union)

Please be advised that your data will not be transferred outside the European Economic Area (EEA).

VII. Are you obliged to provide personal data?

Polychem Systems Sp. z o.o. requires the provision of personal data to conclude and perform the contract. Failure to provide personal data required by Polychem Systems Sp. z o.o. will result in the impossibility of concluding and performing the contract. In cases where processing is based on your consent, the provision of data is entirely voluntary.

VIII. Where do we obtain your personal data from (source of data)?

Personal data may be obtained:

• from you as a result of concluded contracts,
• from you as a result of our sales activities and business contacts,
• from the Central Register and Information on Economic Activity,
• from publicly available sources (e.g. the Internet).

IX. Information on automated decision-making and profiling

Please be informed that your data is not subject to automated decision-making, including profiling.