Privacy policy

 

Personal data protection

On 25 May 2018, the Regulation of the European Parliament and of the (EU) Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR) came into force. The regulations replaced the provisions of the existing Polish Act on the protection of personal data. The new regulations are intended to increase the protection of your personal data by, among others, introducing additional rights for you and obligations for the entities that process the data. The GDPR introduces some flexibility in the application of safeguards to ensure data protection – this means, for example, that the protection of personal data may vary considerably between the entities that process them. We make every effort to ensure that the security measures we apply provide the highest possible level of protection and minimise the risk of their violation.

Data Administrator

The administrator of your personal data is Bydgoskie Zakłady Przemysłu Gumowego “STOMIL” Spółka Akcyjna, ul. Torunska 155. 85-950 Bydgoszcz, Tax Identification number: 554-031-04-39.
Contact with the Personal Data Inspector

In matters concerning the processing of your data, you can contact the Data Protection Inspector by e-mail: iod@stomil.bydgoszcz.pl.

Data processing

We present all the purposes for which your personal data may be processed, the corresponding legal grounds for processing these data and the periods for which individual data will be processed.

Purpose: Acquisition and retention of customers, including offering products, within the framework of which data are processed until the Company exists, where the processing is based on the legitimate interest in acquiring customers (Article 6(1)(f) of the GDPR).

Purpose: Purchase of goods and services, within the framework of which data are processed for the period necessary for the settlement of claims, i.e. also after the contract period, until the statute of limitations of these claims on the basis of generally applicable law, and the processing is based on the contract (Article 6(1)(b) GDPR).

Purpose: Conducting a tendering procedure within the framework of which data are processed for the period necessary for the conclusion of the contract or until the expression of opposition, where the processing is based on a legitimate interest in the selection of the most advantageous tender (Article 6(1)(f) of the GDPR).

Purpose: Execution of sales, including customer service, complaint handling, debt collection activities and shipment of goods, within the framework of which data are processed for the period necessary for the settlement of claims, i.e. also after the contract period, until the statute of limitations of these claims on the basis of generally applicable law, and the processing is based on the contract  (Article 6(1)(b) GDPR).

Purpose: Ensuring the security of persons and property through video surveillance, within the framework of which data are processed up to 3 months after recording, on the basis of a legitimate interest in the protection of persons, property and information (Article 6(1)(f) GDPR).

Purpose: Keeping a register of incoming and outgoing correspondence, within the framework of which data are processed during the period of the Company’s operation, on the basis of a legally justified interest in recording correspondence (Article 6(1)(f) GDPR).

Purpose: Receipt and delivery of goods within the framework of which data are processed during the Company’s operation, on the basis of a legitimate interest which is the verification of a person – the driver (Article 6(1)(f) GDPR).

Purpose: Sending news via a newsletter within the framework of which data are processed until consent is withdrawn, on the basis of the consent given (Article 6(1)(a) GDPR).

Rights in respect of the data processed

You have the right to access and correct the data provided. You also have the right to demand deletion (“the right to be forgotten”) or to limit the processing, as well as the right to transfer your data. You may also object to the processing of your data. You can exercise these rights by contacting the Administrator or the Data Protection Inspector. You also have the right to lodge a complaint to the President of the Office for Personal Data Protection.

Provision of data

To the extent that the processing of your data takes place for the purposes mentioned above, the provision of your data is voluntary, but it is necessary for the achievement of the purpose in question. Providing the information necessary to issue an invoice is a statutory obligation and results from the Act on Goods and Services Tax.

Withdrawal of consent to data processing

You can grant all or some of your consents or not express any. You may, at any time, withdraw any consent you have given in connection with the processing of your personal data without any negative consequences. You can withdraw your consent at any time, the only condition is that it is communicated to us – particularly with regard to the newsletter, withdrawal of consent shall be understood as withdrawal from the subscription. Withdrawal of consent does not affect the lawfulness of the processing of your data before it is carried out, i.e. until the withdrawal of consent, the processing of your data is lawful.

Transfer of data to other entities

We may disclose your data to recipients such as companies cooperating with us and performing tasks on our order and on our behalf, i.e. on the basis of entrustment agreements ensuring the security of your data. Such entities may include software supervisors, website hosting and e-mail providers, freight or courier companies and law firms. We will not transfer your personal data to a third country (outside the European Economic Area).

Final provisions

Your personal data is not subject to automated processing (eg profiling) which causes legal effects for you or similarly significantly affects you.