GDPR Notice

In reference to Regulation (EU) 2016/679 of the European Parliament and of the Council of the 27th of April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”), we kindly inform about the manner and purpose for which your personal data is processed, as well as about your rights under the data protection regulations.

I. Who is responsible for processing your personal data?
1. Your data administrator is Polychem Systems Sp. z o.o. with its registered office in 60-003 Poznań, ul. Wołczyńska 43, registered in the National Court Register kept by the District Court for Poznań Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register under no. KRS 0000035167, NIP 7790000830, REGON 001075365 (“Administrator”).
2. Direct contact details are available on the website: polychem-systems.com.pl, Contact tab.
3. The Administrator has appointed a Data Protection Supervisor overseeing the correctness of the processing of personal data, who can be contacted on all matters relating to the processing of personal data and the exercise of rights in relation to the processing via e-mail address: iod@polychem-systems.com.pl or by sending correspondence to the Administrator’s postal address.

II. What is the legal basis for processing your personal data?
1. We process your personal data in accordance with the provisions of the GDPR and Polish data protection legislation.
2. Personal data will be processed:
a. In order to meet contractual obligations (art. 6.1.b GDPR) data is processed for the purposes of providing products and services rendered by the Administrator, sales and financial settlements, as well as executing and performing the contract for the supply of goods and services to Polychem Systems Sp. z o.o.
b. In order to comply with legal obligations incumbent on the Administrator (Art.6.1.c GDPR) – to meet obligations under the Accounting Act and tax law.
c. On the basis of your consent (Article 6.1.a GDPR) – if you have given your consent to the processing of your personal data for specific purposes (e.g. for the purpose of running promotions and competitions, for contacting the Administrator via web forms, for marketing the Administrator’s own services and products), the Administrator is entitled to process such data on the basis of such consent. Consent may be withdrawn at any moment. The withdrawal of consent does not affect the lawfulness of data processing until the consent is withdrawn.
d. For the purposes resulting from legitimate interests pursued by the Administrator or a third party (Article 6.1.f GDPR) – where necessary, the processing is carried out in order to protect the Administrator’s own or a third party’s legitimate interests. Such processing could be for example:
I. Ensuring IT security,
II. Customer satisfaction survey,
III. Statistics and analysis of cooperation and quality of services provided,
IV. Establishing and maintaining business relationships,
V. Assertion and defense of claims and complaints,
VI. Direct marketing of our own products and services,
VII. Processing in order to comply with anti-money laundering and anti-terrorist financing legislation.

III. How long will your personal data be processed?
Personal data will be processed for the period necessary to fulfil the purposes indicated in point II, i.e.,:
a. for the performance of contract for provision of services and/or products until its completion, and thereafter for the period required by law, or for the settlement of any claims,
b. with regards to direct marketing carried out on the basis of consent, until such time as consent for such processing is withdrawn,
c. until the Administrator’s legitimate interests forming the basis for such processing are fulfilled, respecting your rights and freedoms, or until you object to such processing, unless there are legitimate grounds for further processing.

IV. Your rights in relation to our processing of your personal data
1. You have the right to:
a. Request access to their personal data,
b. Rectify your personal data,
c. Be forgotten (deletion of data) in the situations provided for in the GDPR,
d. Restrict processing if, for example, the accuracy of the data is contested,
e. Withdraw at any time your consent to processing of your personal data where processing is based on your consent,
f. Object at any time to processing of your personal data on grounds relating to your particular situation, where the processing by the Administrator is carried out for the purposes of legitimate interests (Art.21.1 GDPR),
g. Object at any time to processing of personal data for direct marketing purposes (Art. 21.2 GDPR),
h. Request the transfer of personal data processed for the execution and performance of a contract or processed on the basis of consent,
i. File a complaint with a supervisory authority (the President of the Office for the Protection of Personal Data) if it is considered that the processing of personal data violates the provisions of the GDPR.
j. Information about the source of the data if the data were not obtained directly from you.
2. In order to report and exercise your rights, direct a relevant request to the following email address: iod@polychem-systems.com.pl.

V. To whom may we transfer your personal data?
The recipients of your personal data are:
a. Entities supporting the Administrator in the delivery and logistics process,
b. Debt collectors,
c. Our business partners in combining products or services,
d. Our law firm,
e. Entities supporting the Administrator in the maintenance of the IT systems,
f. Entities processing data on behalf of the Administrator (so-called processors), e.g. IT service providers, postal operators,
g. Cloud service providers.

VI. Information on transfers of your personal data to a third country (outside the European Union)
Please be informed that your data will not be transferred outside the European Economic Area (EEA). If there is a need to transfer data to a third country in the future, your data will be transferred in accordance with the requirements of the GDPR, based on standard contractual clauses.

VII. Do you have an obligation to provide personal data?
Providing personal data is required by Polychem Systems Sp. z o.o. in order to execute and perform the contract. Failing to provide personal data required by Polychem Systems Sp. z o.o. makes it impossible to execute and perform the contract. Where processing takes place on the basis of your consent, providing data is voluntary.

VIII. Where do we obtain your personal data from (source of data)?
Personal data can be obtained from:
• You as a result of the contracts made,
• You as a result of our sales activities and business contacts,
• Central Business Register,
• Publicly available sources (e.g. the Internet).

IX. Information on automated decision-making and profiling
Please be informed that your data is not subject to automated decision-making and profiling.