Processing of personal data
INFORMATION ON THE PROCESSING OF PERSONAL DATA BY ART WORKS SP. ZOO
1. PERSONAL DATA ADMINISTRATOR
The controller in relation to the personal data of natural persons with whom Art Works sp. z o. o. has concluded a contract for the sale of products or whose personal data are processed by Art Works sp. z o. o. for marketing purposes (hereinafter referred to as "Personal data") is Art Works sp. . z o. o. with its registered office in Łomianki, at ul. Kampinoska 2, 05 - 092 Łomianki, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw. Warsaw in Warsaw, 14th Commercial Division of the National Court Register under the number: 0000047711 (hereinafter referred to as the "Administrator").
2. PURPOSES OF PERSONAL DATA PROCESSING
The purpose of processing Personal Data is:
a) performance of the product sales contract, as well as the Administrator's pursuit of any claims related to their non-performance, as well as defense against such claims submitted by the Administrator's contractor;
b) marketing of the Administrator's own products and services, as well as profiling of personal data, aimed at adapting offers and commercial information prepared by the Administrator to the individual expectations, needs and interests of data subjects.
3. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Personal data will be processed based on the following legal bases:
a) in the scope of marketing of the Administrator's own products and services, as well as profiling of personal data, aimed at adapting offers and commercial information prepared by the Administrator to the individual expectations, needs and interests of data subjects - Art. 6 section 1 letter a of EU Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"), i.e. on based on the consent of the data subject, as well as pursuant to Art. 6 section 1 letter fw conv. with recital 47 of the GDPR preamble, i.e. in order to implement the legitimate interest of the Administrator, which is direct marketing of the Administrator's own products and services;
b) in the scope of performance of the product sales contract, including ensuring contact or in other matters related to the contract - Art. 6 section 1 letter b and f of the GDPR, i.e. as part of the performance of the product sales contract and within the legitimate interest of the Administrator, which is the need to provide information on all matters related to the concluded contract, as well as the possibility for the Administrator to pursue claims related to the contract and defend against such claims submitted by the Administrator's contractor;
c) in the scope of keeping accounting books and other accounting documentation and settlements of product sales contracts - Art. 6 section 1 letter c GDPR, i.e. as part of fulfilling the legal obligations imposed on the Administrator under the provisions of accounting and tax law.
4. DATA RECIPIENTS
The following data recipients may have access to Personal Data:
a) authorized employees and collaborators of the Administrator;
b) service providers entrusted with the processing of Personal Data under a contract for the purposes of providing services to the Administrator, in particular entities providing IT services and their authorized employees, to the extent necessary for the proper performance of these services;
c) entities authorized to receive Personal Data under generally applicable law;
d) service providers supplying the Administrator with technical and organizational solutions enabling the implementation of the commercial cooperation agreement and management of the Administrator's organization, in particular courier and postal companies;
e) providers of legal and advisory services and supporting the Administrator in pursuing claims, in particular law and tax offices and debt collection companies.
5. PERSONAL DATA STORAGE PERIOD
The Administrator will store Users' personal data for the period necessary to achieve the purpose of personal data processing; in the case of processing personal data for the purpose of concluding and performing a sales contract for products offered via the Website, this period will be equal to the limitation period for claims that may arise in connection with such a contract, and in the case of processing personal data for marketing purposes, the Administrator may process this data until the consent is withdrawn. for their processing by the data subject.
6. RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA
The data subject has the right to:
a) request from the Administrator access to personal data concerning him, including obtaining from the Administrator a copy of his personal data subject to processing. Such a copy will be sent by e-mail, unless the data subject expressly requests it to be sent in a different way;
b) demand from the Administrator to immediately rectify personal data concerning him, to the extent that they are incorrect, and to supplement incomplete personal data, in particular by submitting an additional statement, if such supplementation is not inconsistent with the purpose of personal data processing;
c) demand from the Administrator the immediate deletion of personal data concerning her, in the cases and under the principles specified in the provisions of generally applicable law, in particular in Art. 17 GDPR;
d) request the Administrator to limit the processing of her personal data, in the cases and on the principles specified in the provisions of generally applicable law, in particular in Art. 18 GDPR;
e) transfer your personal data, in cases and under the principles specified in generally applicable law, in particular in Art. 20 GDPR;
f) submit a complaint to the President of the Personal Data Protection Office or other competent authorities supervising compliance with the provisions on personal data protection;
g) withdrawing at any time consent to the processing of personal data for the purposes referred to in point 3 lit. b) above, however, the withdrawal of this consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal. Withdrawal of consent to the processing of personal data is possible by sending an e-mail to the following address: rodo@robertkupisz.com;
The right to object to the processing of personal data
In cases where the processing of personal data by the Administrator is based on a basis other than: the consent of the data subject, the need to perform a contract or the need to fulfill a legal obligation imposed on the Administrator, the data subject may object at any time - with reasons related to her particular situation - regarding the processing of her personal data. The Administrator is not allowed to process personal data subject to objection, unless he demonstrates the need to process such personal data in order to establish, pursue or defend claims or other important, legally justified grounds for processing these personal data, overriding the interests, rights and freedoms of the data subject. concern.
Notwithstanding the above, if the purpose of personal data processing is direct marketing of the Administrator's own products or services, the data subject has the right, at any time, to object to the processing of his or her personal data for the purposes of such marketing.
7. RULES FOR COLLECTING PERSONAL DATA
Providing Personal Data by the data subject is a condition for concluding and performing a product sales contract. Failure to provide data marked as required in the order form prevents the Administrator from concluding and implementing this contract.
Consent to the processing of personal data for marketing purposes as well as to the profiling of personal data in order to adapt offers and commercial information prepared by the Administrator to the individual expectations, needs and interests of data subjects is fully voluntary.
8. CONTACT WITH THE ADMINISTRATOR
In all matters related to the processing of personal data and the exercise of rights of the data subjects, you can contact the Administrator by sending correspondence to the following address: Art Works Sp. z o. o. ul. Cybernetyki 19A, 02-677 Warszawa with the note "Personal Data Protection" or to the e-mail address: rodo@robertkupisz.com
INFORMATION ON THE PROCESSING OF PERSONAL DATA BY ART WORKS SP. ZOO FOR BUSINESS ENTITIES
1. PERSONAL DATA ADMINISTRATOR
The administrator in relation to personal data of natural persons with whom Art Works sp. z o. o. has concluded commercial cooperation agreements or natural persons constituting the staff of legal persons or other organizational units with which Art Works sp. z o. o. has concluded such agreements (hereinafter referred to as "Personal data") is Art Works sp. z o. o. based in Łomianki, ul. Kampinoska 2, 05-092 Łomianki, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw. Warsaw in Warsaw, 14th Commercial Division of the National Court Register under the number: 0000047711 (hereinafter referred to as the "Administrator").
2. PURPOSE OF PROCESSING PERSONAL DATA
The purpose of Personal Data processing is the execution of commercial cooperation agreements, as well as the Administrator's pursuit of possible claims related to their non-performance, as well as defense against such claims submitted by the Administrator's contractor.
3. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Personal data will be processed based on the following legal bases:
a) in the scope of the implementation of the commercial cooperation agreement, including ensuring contact or in other matters related to the agreement - Art. 6 section 1 letter b and f of EU Regulation 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"), i.e. . as part of the performance of a commercial cooperation agreement and within the legitimate interest of the Administrator, which is the need to provide information on all matters related to the concluded agreement, as well as the possibility for the Administrator to pursue claims related to the agreement and defend against such claims submitted by the Administrator's contractor;
b) in the scope of keeping accounting books and other accounting documentation and settlements of the commercial cooperation agreement - Art. 6 section 1 letter c GDPR, i.e. as part of fulfilling the legal obligations imposed on the Administrator under the provisions of accounting and tax law.
4. DATA RECIPIENTS
The following data recipients may have access to Personal Data:
a) authorized employees and collaborators of the Administrator;
b) service providers entrusted with the processing of Personal Data under a contract for the purposes of providing services to the Administrator, in particular entities providing IT services and their authorized employees, to the extent necessary for the proper performance of these services;
c) entities authorized to receive Personal Data under generally applicable law;
d) service providers supplying the Administrator with technical and organizational solutions enabling the implementation of the commercial cooperation agreement and management of the Administrator's organization, in particular courier and postal companies;
e) providers of legal and advisory services and supporting the Administrator in pursuing claims, in particular law and tax offices and debt collection companies.
5. PERSONAL DATA STORAGE PERIOD
a) in the case of data processing on the basis referred to in point 3 lit. a) above - a period equal to the limitation period for possible claims for non-performance or improper performance of the commercial cooperation agreement'
b) in the case of data processing on the basis referred to in point 3 lit. b) above –
period required by the provisions of the balance sheet law.
6. RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA
The data subject has the right to:
a) request from the Administrator access to personal data concerning him, including obtaining from the Administrator a copy of his personal data subject to processing. Such a copy will be sent by e-mail, unless the data subject expressly requests it to be sent in a different way;
b) demand from the Administrator to immediately rectify personal data concerning him, to the extent that they are incorrect, and to supplement incomplete personal data, in particular by submitting an additional statement, if such supplementation is not inconsistent with the purpose of personal data processing;
c) demand from the Administrator the immediate deletion of personal data concerning her, in the cases and under the principles specified in the provisions of generally applicable law, in particular in Art. 17 GDPR;
d) request the Administrator to limit the processing of her personal data, in the cases and on the principles specified in the provisions of generally applicable law, in particular in Art. 18 GDPR;
e) transfer your personal data, in cases and under the principles specified in generally applicable law, in particular in Art. 20 GDPR;
f) submit a complaint to the President of the Personal Data Protection Office or other competent authorities supervising compliance with the provisions on personal data protection.
The right to object to the processing of personal data
In cases where the processing of personal data by the Administrator takes place on a basis other than the need to perform a commercial cooperation agreement or the need to fulfill a legal obligation imposed on the Administrator, the data subject may object at any time - for reasons related to his/her special situation - with regard to the processing of personal data concerning him/her. The Administrator is not allowed to process personal data subject to objection, unless he demonstrates the need to process such personal data in order to establish, pursue or defend claims or other important, legally justified grounds for processing these personal data, overriding the interests, rights and freedoms of the data subject. concern.
7. RULES FOR COLLECTING PERSONAL DATA
Providing Personal Data by the data subject is a condition for concluding and performing a commercial cooperation agreement. Failure to provide data marked as required in the commercial cooperation agreement prevents the Administrator from concluding and implementing this agreement.
8. CONTACT WITH THE ADMINISTRATOR
In all matters related to the processing of personal data and the exercise of rights of the data subjects, you can contact the Administrator by sending correspondence to the following address: Art Works Sp. z o. o. ul. Cybernetyki 19A, 02-677 Warszawa with the note "Personal Data Protection" or to the e-mail address: rodo@robertkupisz.com
