INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA

 

We inform you that as of May 25, 2018, the General Data Protection Regulation (GDPR) is in effect. In order to align our actions with the requirements of the GDPR and to provide information about how we process personal data, in accordance with Article 13, paragraphs 1 and 2 of the General Data Protection Regulation of April 27, 2016 (“GDPR”), we inform you that the Data Controller is ARAVAL SP. Z O.O. with its registered office at Mikołaja Kopernika 81, 58-350 Mieroszów, email: biuro@araval.pl.

Purposes of Data Processing and Legal Basis for Processing:

We process your data for the following purposes:

• Establishing or maintaining business relations between you and the Company.

• Direct marketing of the Company’s products and services (if you have given your consent).

• Sending commercial information as defined by the Electronic Services Act (if you have given your consent).

• Demonstrating compliance with our legal obligations.

Legal Bases for Processing:

The legal basis for processing your personal data is Article 6, paragraph 1 (a), (b), (c), or (f) of the General Data Protection Regulation 2016/679 of April 27, 2016, regarding the processing of personal data (“GDPR”). The legitimate interest pursued by the Company is to establish or maintain business relations and direct marketing of the Company’s products and services. In case you have given consent to processing, you can withdraw it at any time by writing to the Company’s registered office or by email.

Information About Recipients of Your Personal Data:

If necessary, we will share your personal data in order to perform our services. We will provide data to the following categories of recipients:

• Persons authorized by us, our employees, and collaborators who need access to the data in order to perform their duties.

• Data processors to whom we delegate tasks, such as companies that handle our IT systems or provide us with IT tools, companies providing services such as courier, banking, legal, or insurance services.

• Public authorities, if required by law.

Where We Obtained Your Data:

The personal data we process was obtained directly from you or the entity you represent.

Data Retention Period:

Your personal data will be processed until you withdraw your consent (if the basis for processing is consent), file an objection (if the basis for processing is our legitimate interest), or until the contract is executed (if the basis for processing is the contract). After that, the data will be retained for the period of limitation of claims to which the data controller is entitled, as well as for the period specified by tax law.

Your Rights:

• The right to request access to your data, its rectification, deletion, restriction of processing, as well as the transfer of your personal data.

• The right to file a complaint with the supervisory authority – the President of the Personal Data Protection Office, if you believe that the processing of your personal data violates the GDPR provisions.

• If you have given consent for data processing, you have the right to withdraw it at any time.

• The right to object to processing based on our legitimate interest.

Voluntariness of Providing Personal Data:

Providing your personal data is voluntary; however, failure to do so will prevent us from providing services to you, including fulfilling the contract, processing payments, and shipping.

Automated Processing:

Your personal data will not be subject to automated processing, including profiling.