PERSONAL DATA PROTECTION

 

This information concerns the processing of personal data by WIPMEB Sp. z o.o., ul. Pużaka 26, 38-400 Krosno,  NIP 684-255-08-56, REGON 180384564  ("Company") and is related to the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (Official Journal of the EU L 119 of 04.05.2016, page 1) - hereinafter referred to as the "GDPR".

 

This information is addressed to natural persons who are:

  • • suppliers, service providers, subcontractors, contractors, including potential Company’s suppliers, service providers, subcontractors, contractors;
  • • partners, employees, statutory representatives, attorneys or representatives of such suppliers, service providers, subcontractors, contractors;
  • • other persons whose data is processed for the purpose of performing contracts between suppliers, service providers, subcontractors, contractors and the Company, including for the purpose of issuing or processing invoices.

In this information clause, the Company, being the controller of personal data ("CPD"), informs in particular about the purpose and manner in which it collects, uses and stores your personal data, the legal basis based on which it processes your personal data, as well as your rights. rights.

 

All inquiries or requests related to the processing of personal data by the CPD should be sent using the following contact details:

Urszula Bogusz
Tel: 0048 502 619 314
E–mail:  koordynator.odo@wipmeble.com.pl

 

Types of personal data, source of data

In connection with cooperation (the possibility of establishing cooperation) between you and our Company, which may consist, in particular, in provision of services by you or an organization represented by you or supply of goods to our Company or cooperation through intermediaries, we may process personal data provided by you, such as:

a) first name and surname, company, business address and correspondence addresses,
b) numbers in relevant registers (e.g. NIP or REGON number),
c) PESEL number,
d) contact details, such as e-mail address or telephone or fax number,
e) your position within your organization,
f) specific identification numbers which are not general numbers (e.g. service ID card number);
g) bank account number.

In the case of concluding a contract directly between you and our Company, providing the data specified above is voluntary, but necessary to conclude the contract and manage cooperation between you and our Company. If you do not enter into a contract directly with our Company, you may be obliged to provide personal data. Moreover, we may collect your personal data from publicly available sources, such as business registers  CEIDG or National Court Register KRS, in order to verify the information provided by you. The scope of processed data will in this case be limited to data publicly available in relevant registers. We can also collect your personal data from entities with which you are employed or entities represented by you. The scope of processed data will include in this case information necessary for the performance of contracts between the Company and such entity, e.g. information on termination of your employment with a given entity, change of contact details or change of your position.

 

Purposes, legal bases and periods of data processing

Your personal data is processed by CPD for the purposes set out below.
For each purpose, we provided the legal basis for processing and the period of data processing.

I.

PURPOSE: conclusion and performance of a contract
LEGAL BASIS: art. 6 par. 1 point b) GDPR
PROCESSING PERIOD: duration of obligations and the period of limitation of claims resulting from applicable regulations.

In the case of concluding a contract between you and the Company, data provided by you will be processed in order to perform such contract or orders and settle them.

II.

PURPOSE: performance of a contract between the Company and another entity - if you are indicated by this entity as a contact person
LEGAL BASIS: art. 6 par. 1 point f) GDPR – a legitimate interest of the controller, which is the performance of a contract between the Company and another entity, protection of rights
PROCESSING PERIOD: the period of performing obligations and the period of limitation of claims resulting from applicable regulations or up to the day of upholding objections submitted pursuant to art. 21 GDPR

In the case of indicating you as a contact person by the employer or other entity, your data may be processed in order to perform and settle a contract (or an order) concluded between you and your employer or such entity. Data processing will in this case include ongoing contacts related to the implementation of such contract, preparation and archiving of the contract documentation, as well as pursuing of claims or defence against claims of the other party.                                                                            

III.

OBJECTIVE: fulfilment of the legal obligation to prepare and store documentation
LEGAL BASIS: Article 6 paragraph 1 point c) GDPR
PROCESSING PERIOD: the period of storing invoices, accounting books and documents confirming the conclusion and performance of a contract resulting from the national controller's regulations.

In the case of the performance of a contract or other service for you, we will process personal data included in invoices, accounting books or other documentation confirming the conclusion and performance of the contract in order to draw up and store documents in accordance with applicable law. This applies to situations when you are a party to a contract or order, as well as situations where a party to a contract or order is your employer or an entity with whom you are cooperating or when any service has been performed for you (e.g. execution of an order).

IV.

OBJECTIVE: confirmation of the performance of obligations and pursuing claims or defence against claims
LEGAL BASIS: art. 6 par. 1 point f) GDPR - a legitimate interest of the controller, which is the protection of rights, confirmation of the performance of duties and obtaining due remuneration
PROCESSING PERIOD: duration of obligations and the period of limitation of claims resulting from the provisions

The data made available under a contract or order or otherwise made available to the Company may be processed for the purpose of archiving information or documents confirming the performance of the Company's obligations and for the purpose of seeking possible claims or defending against claims against the Company. This applies to situations where you are a party to a contract or an order, as well as a situation where your employer or an entity with whom you cooperate is a contractual party and a situation where, on any basis, the Company was obliged to perform a service for you or execute your rights.

 

Consequences of failure to provide data

In the case of data collected by the Company's representatives in the scope of purchases - providing data is fully voluntary and the consequence of not providing them may be the inability to contact you in the future.In the case of the data of persons who are a party to a contract concluded with the Company - providing data necessary for the performance of the contract and the performance of legal obligations is a condition for the conclusion and performance of the contract.

 

Recipients of personal data

Your personal data will be shared with our trusted business partners, i.e. entities with whom we cooperate, for the purposes specified above. the CPD provides the collected personal data to companies that provide the CPD with ICT and legal services, as well as entities supplying goods, providing accounting services, IT service providers, banks, other payment operators, debt collecting and auditing companies.

 

Automated decision making

Your personal data will not be processed for the purposes of automated decision making and will not be subject to profiling.

 

Rights

In relation to the processing of your personal data, you have the following rights:

  • • to access the data;
  • • to rectify the data;
  • • to remove the data;
  • • to limit data processing;
  • • to transfer the data;
  • • to object (when a legitimate interest of the CPD is the basis for processing);
  • • to withdraw consent (when consent is the basis for processing).

The exercise of these rights depends on the conditions set out in the GDPR. If you request has been rejected, you will receive a response with the reasons for refusal.
Please note that:

  • • the right to remove data and the right to demand limitation of their processing apply only in the cases specified in the GDPR;
  • • the right to transfer data applies only if consent or performance of a contract constitute the legal basis for processing; [frokes1]
  • • the CPD may refuse to remove your data despite submitting a request to do so, provided that one of the exceptions listed in the GDPR occurs, e.g. when processing is necessary to fulfil a legal obligation or to establish, pursue or defend claims;
  • • in some cases, the CPD may refuse to take into account your objection to data processing on the basis of a legitimate interest of the controller, when there are legally valid grounds for data processing that are superior to your interests, rights and freedoms, or there are grounds for establishing, pursuing or defending claims.

From 25 May 2018, you have the right to lodge complaints with a competent supervisory authority, which in Poland is the President of the Office for Personal Data Protection.

 

Data protection measures

As the CPD, we have implemented appropriate technical and organizational measures to protect personal data against unauthorized, accidental or unlawful destruction, loss, alteration, misuse, disclosure or access, and against all other illegal forms of processing. These security measures have been implemented taking into account the state of the art, implementation costs, processing risks and the nature of personal data.

 

Legal note

This clause was updated on 25 May 2018, and may be subject to further changes. If required by law, we will inform you of any significant changes through our website or other communication channels customarily used with you.