Information obligation

INFORMATION ON PERSONAL DATA PROCESSING
Personal Data Controller
The Controller of your personal data is Jastrzębskie Zakłady Remontowe Sp. z o.o. with its registered office in Jastrzębie-Zdrój (44-268) at ul. Węglowa 4, entered into the register of entrepreneurs kept by the District Court in Gliwice, 10th Commercial Division of the National Court Register under the KRS No. 0000088012 (hereinafter also referred to as the "Company").
Contact person for matters relating to personal data processing
Any issues related to personal data processing may be reported electronically to Data Protection Officer Adrian Jagosz at [email protected] or in writing by traditional mail at Jastrzębskie Zakłady Remontowe Sp. z o.o. ul. Węglowa 4, 44-268 Jastrzębie-Zdrój.
Purpose of the processing of personal data	Legal basis for the processing of personal data
If you are a Website User, your personal data will be processed based on the Company's legitimate interest, i.e. for the purposes indicated in item 1.3. of the Company Privacy Policy, or based on your consent to receive commercial information if you have granted such consent to the Company.	Art. 6 sec. 1 (f) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: "GDPR"), in cases where there exists legitimate interest of the Company. Art. 6 sec. 1 a) GDPR in cases where the Company has received your consent to send you commercial communications. Art. 172 of the Act of 16 July 2004 – Telecommunications Law to use devices for direct marketing purposes. Art. 10, Art. 18 and Art. 19 of the Act of 18 July 2002 on the provision of electronic services for the purpose of sending commercial information to a designated recipient who is a natural person by means of electronic communication, particularly by e-mail.
If you are a sole trader seeking to enter into a contract with the Company, your personal data will be processed for such purposes as: taking any necessary actions prior to entering into a contract with you, perform the contract, if one has been concluded, and to recover the amounts due, if any; and ensuring compliance with the tax law and accounting regulations.	Art. 6 sec. 1 (b) of the GDPR, Art. 6 sec. 1 (c) of the GDPR, Art. 6 sec. 1 (f) of the GDPR).
If you are a representative of the Company's counterparty designated to contact the Company, your personal data will be processed for the purposes arising from the legitimate interests pursued by the Company, as well as to maintain contact with the given counterparty and verify whether individuals contacting the Company are authorised to act on behalf of the given counterparties, and for the following purposes: to perform the contract between the Company and the entity you represent, as well as to ensure compliance with the tax law and accounting regulations.	Art. 6 sec. 1 (c) of the GDPR, Art. 6 sec. 1 (f) of the GDPR).
If you are a Stakeholder, your personal data will be processed as follows: for the purposes arising from the legally justified interests pursued by the Company, particularly concerning personnel traffic management on the Company's premises, controlling the pass system supervision, as well as ensuring the security of persons and property and maintaining the secrecy of information whose disclosure could expose the Company to damage.	Art. 6 sec. 1 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR").
Who will receive personal data?
Recipients of your personal data may be entities working with the Company in the scope of services provided to the Company (e.g. subcontractors) and supporting the Company's ongoing business processes.
How long will personal information be retained?
In the case of Website Users, personal data will be stored for the period necessary for the purposes indicated in item 1.3. of the Company Privacy Policy.
In the case of natural persons running a sole proprietorship and aiming to enter into a contract with the Company, personal data will be stored for the duration of such a contract (if it is concluded), and afterwards, for the period of limitation of any possible claims. Additionally, your personal data will be kept for the period required by tax and accounting laws.
In the case of individuals representing counterparties, personal data will be stored for the duration of the contract concluded by and between the entity they represent and the Company, and thereafter for the period of limitation of potential claims. Additionally, your personal data will be kept for the period required by tax and accounting laws.
In the case of Stakeholders, personal data will be stored as follows: for 5 years in cases where data is processed in connection with personnel traffic management, and where passes are related to matters referred to legal proceedings – until such proceedings are concluded, with regard to the processing of data obtained via video monitoring – for up to 3 months unless the recordings constitute evidence in legal proceedings or the Company became aware that they may constitute such evidence; in such cases, the deadline is extended until the proceedings are finally closed.
What rights do you have in relation to the processing of personal data?
Website users have the right to: access their personal data, rectify their personal data, erase their personal data, limit the processing of their personal data, data portability, which includes the right to receive the data and send it to another controller or request – if technically possible – that the data be sent directly to another controller (insofar as the data are processed by automated means and for the performance of a contract or on a consensual basis), lodge a complaint with the data protection supervisory authority, object to the processing of personal data (to the extent that the data is processed in the Company's legitimate interests), withdraw their consent at any time without affecting the lawfulness of the data processing which was carried out pursuant to the consent prior to the withdrawal of the same.
Sole proprietors seeking to enter into a contract with the Company have the right to: access their personal data, rectify their personal data, erase their personal data, limit the processing of their personal data, data portability, which includes the right to receive the data and send it to another controller or request – if technically possible – that the data be sent directly to another controller (insofar as the data are processed by automated means and for the performance of a contract or on a consensual basis), lodge a complaint with the data protection supervisory authority, object to the processing of personal data (to the extent that the data is processed in the Company's legitimate interests).
Counterparty representatives have the right to: access their personal data, rectify their personal data, erase their personal data, limit the processing of their personal data, object to the processing of personal data (to the extent that the data is processed in the Company's legitimate interests), lodge a complaint with the data protection supervisory authority.
Stakeholders have the right to: access their personal data, rectify their personal data, erase their personal data, limit the processing of their personal data, data portability, which includes the right to receive their data and send it to another controller or to request, if technically feasible, that the data be sent directly to another controller – with regard to the processing of data based on their consent, object to the processing of their personal data, lodge a complaint with the data protection supervisory authority.
Is the provision of personal data mandatory?
Website User data is provided voluntarily. However, their provision is necessary to use the Website.
In the case of sole proprietors, providing personal information is voluntary but necessary to enter into a contract with the Company.
In the case of counterparty representatives, the provision of personal data is voluntary but also necessary to maintain contact with the Company.
In the case of Stakeholders, providing personal data is voluntary but necessary for the purposes of entering the premises of the Company, importing or exporting goods, releasing goods and/or the inability to properly perform the contract concluded with the Company.