INFORMATION CLAUSE
in connection with the requirements of, among others, Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) of April 27, 2016, hereinafter: GDPR
Who is the controller of your data?
The Data Controller is Arkadiusz Szot, carrying out business under the name “GUMEX Producent Części Motoryzacyjnych Arkadiusz Szot”, at ul. Mickiewicza 11, 05-820 Piastów, NIP:5341016476. REGON:013199158, hereinafter referred to as “GUMEX”; website : www:gumex.com.pl
Who can I contact about issues related to the processing of my personal data?
For all matters related to the processing of your personal data by GUMEX, you can contact at the following email address: biuro@gumex.com.pl
Those who do not use e-mail may submit a written inquiry in person at GUMEX headquarters (ul. Mickiewicza 11, 05-820 Piastow) or by traditional mail to GUMEX address.
What is the scope of my personal data processed by GUMEX?
In the first instance, we need your data if you apply for cooperation in any of GUMEX’s activities, including its ongoing projects and ongoing ventures. For this purpose, we need a minimum of your data: first name, last name, year of birth, home address, e-mail and telephone number.
What is the purpose of processing my personal data?
We process your personal data in order to carry out tasks and activities commissioned by other entities as well as to the extent stipulated by the law, among other things, in order to carry out joint activities, ongoing projects, contracts, their settlement and to keep you informed about our activities. By this we mean in particular:
| Purpose of processing | Legal basis |
| Fulfillment of your right as our contractor or future contractor, etc. in particular, we receive and archive your statements, documents, applications, information, etc. | Article 6(1)(c) of the GDPR |
| Maintaining contact with you at the phone number, email address, mailing address, etc. you provided. The processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract. | Article 6(1)(b) and (f) GDPR |
| As a data controller, we have the right to enforce obligations or assert claims arising from GUMEX’s operations, contracts entered into and thus process your data for these purposes. The processing is necessary for the purposes of the legitimate interests pursued by GUMEX, including the establishment, investigation or defense of claims. | Article 6(1)(c) and (f) GDPR |
| As a business entity, among other things, we are legally obliged to keep tax records, including books of account, and we have tax obligations which entail the need to process your personal data as well as other archival, filing, registration obligations. | Article 6(1)(c) of the GDPR |
In cases not listed above, there may also be cases in which GUMEX asks you to consent to the processing of personal data for a specific purpose. In such a case, you will be informed about the purpose of the processing and the scope of your consent (Article 6(1)(a) GDPR).
The detailed scope, purpose and basis for the processing of personal data are set out in the regulations in force at GUMEX, among others, in the Personal Data Protection Security Policy, which document is available at GUMEX headquarters and you can familiarize yourself with it there.
To whom is my personal information shared?
We take care of the security of your data. Due to the need for us to be properly organized, e.g. in terms of IT infrastructure, accounting or day-to-day matters concerning the operations of our company, as well as the exercise of your rights as a beneficiary, your personal data may be transferred in particular to the following categories of recipients:
- to service providers supplying GUMEX with technical and organizational solutions that enable the company’s day-to-day operations (e.g. Accounting Office, IT Support, etc.).
- providers of legal and consulting services and supporting GUMEX in the collection of due claims (in particular, a law firm);
In such cases, we require third parties to maintain the confidentiality and security of the information and use it only to provide us with the service or product in question.
- and entities entitled to obtain them (e.g.: Control Authorities, Banks, Polish Post, courier companies, Lawyers, etc.).
- to persons authorized by you
Is my data transferred outside the European Union?
No. GUMEX does not transfer or intend to transfer personal data to a third country (outside the European Economic Area) or international organizations. Such data may be transferred by the co-Data Controller on the basis of the law on the participation of the Republic of Poland in the exchange of information with other countries
How long is my data stored?
Your data will be stored only for the period necessary to fulfill the purpose for which it was collected, unless applicable law requires GUMEX to store it for longer. However, retention periods may vary depending on the purpose of processing.
We process all data processed for accounting purposes and for tax reasons for 5 years calculated from the end of the calendar year in which the tax obligation arose. After the above-mentioned periods, your data is deleted or anonymized.
We process all data processed on the execution of contracts until the expiration of deadlines and all settlements and expiration of the statute of limitations for claims, not less than 5 years from the date of complete settlement of the contract. After the expiration of the aforementioned periods, your data is deleted or anonymized.
Is it my responsibility to provide data?
Use of GUMEX services is fully voluntary, however, failure to provide your data may result in refusal of cooperation. Also, for accounting or tax reasons we have a legal obligation to process your data, failure to provide it may result, for example, in the inability to issue an invoice or a named bill in your favor.
How to revoke consent?
Where only consent is necessary for the processing of personal data (Article 6(1)(a) of the GDPR), you have the right not to consent, or if you have previously given your consent, to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing up to the moment of withdrawal.
In order to withdraw consent, it is sufficient to send such a request using a letter bearing a handwritten signature via regular mail to GUMEX.
What rights do I have?
As the controller of your data, we provide you with the right to access your data, and you can also rectify, transfer, request its deletion or limit its processing. You can also exercise the right to object to GUMEX against the processing of your data and the right to data portability to another data controller. If you wish to exercise any of these rights – please contact us via email: biuro@gumex.com.pl
Provision of data may be conditioned on, among other things:
- GUMEX’s statutory obligation;
- necessity to conclude or perform the contract, which you will be required to provide.
In case there is a contractual requirement and you do not provide your data, we will not be able to perform such a contract.
In the event that providing data is a condition for entering into a contract, and you do not provide your data, we will not be able to enter into such a contract.
What can you do with your personal information?
Within the limits of the GDPR, you have the right to request from the Data Controller, among other things, to:
- access to the content of their personal data,
- rectify (correct) your personal data,
- limit of processing if a person questions the accuracy of his personal data ,
- delete your personal data if it was not processed to comply with a legal obligation requiring processing under Union law or the law of a Member State to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller.
- object, on grounds related to one’s particular situation, to the processing of personal data.
Where can you file a complaint about the processing of GUMEX personal data?
You have the right to lodge a complaint with the data protection supervisory authority in the Member State of your habitual residence, place of work or place where the alleged violation was committed.
Will my data be subject to automated decision-making?
Your personal data will not be processed by automated means and will not be profiled, unless such action is permitted by law, which provides for appropriate measures to protect your rights, freedoms and legitimate interests.
Updates to information obligations
The Information Clause is effective as of May 25, 2018.
Due to the needs that may arise from the development of the services we offer, we are entitled to modify it.
The new version will be published on our website: www.gumex.com.pl and by other means adopted by GUMEX.
The Data Controller makes every effort to ensure an adequate degree of protection of your personal data.
