Dear Sir or Madam,

To fulfil our obligation to provide information in relation to the new regulations on the protection of natural persons with regard to the processing of personal data, we would like to inform you about the ways in which we process your data. Please find the most important issues explained below. Do not hesitate to contact us if you have any questions. 
 

Information on personal data processing:

Your data is processed on the basis of at least one item of Article 6(1) of the GDPR, i.e.:

  1. the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
  2. processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;
  3. processing is necessary for compliance with a legal obligation to which the controller is subject;
  4. processing is necessary in order to protect the vital interests of the data subject or of another natural person;
  5. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  6. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

 

How did we obtain your data?

We received your data:

  1. directly from you,
  2. from an entity that concluded a contract for the provision of services for your benefit with Pimet Sp. J. Maciej i Bartosz Popielawscy,
  3. from a partner / a third party cooperating with Pimet Sp. J. Maciej i Bartosz Popielawscy that made your data available to us on the basis of your consent.

 

Who is the controller of your data?

Pimet Sp. J. Maciej i Bartosz Popielawscy with its registered office in Piastów, ul. Krótka 5, 05-820 Piastów, number of entry to the National Court Register [KRS]: 0000054046, Tax ID [NIP]: 5340007446 , Business Registry Number [REGON]: 011076546, tel. 22 723 42 05, email: pimet@pimet.com.pl.
 

What type of data do we process?

Pimet Sp. J. Maciej i Bartosz Popielawscy processes the following categories of data:

  1. contact data,
  2. identification data for the purposes of concluding a contract, providing a service and issuing an invoice,
  3. identification data required for online communication,
  4. data that are required to compile an appropriate marketing offer and select services of Pimet Sp. J. Maciej i Bartosz Popielawscy for you (if you consented to such actions beforehand).

 

What will we use your data for?

Your data will be processed for one or more of the following purposes:

  1. to undertake actions you have requested prior to the conclusion of a contract,
  2. to conclude a contract with Pimet Sp. J. Maciej i Bartosz Popielawscy and perform it,
  3. to perform a contract concluded with Pimet Sp. J. Maciej i Bartosz Popielawscy for your benefit as a third party (Article 393 of the Polish Civil Code), if another entity is a party to the contract,
  4. to comply with a legal obligation of Pimet Sp. J. Maciej i Bartosz Popielawscy, e.g. to issue an invoice or a bill,
  5. for the purposes of marketing the products and services of Pimet Sp. J. Maciej i Bartosz Popielawscy (if you consented to such actions beforehand).

 

Are you obliged to provide your data?

Within the scope in which your data is processed in order to perform a contract concluded with Pimet Sp. J. Maciej i Bartosz Popielawscy, the provision of your data is a condition which must be met to conclude the contract. Although the provision of data is voluntary, it is necessary to conclude and perform the contract. If you don’t provide us with your personal data, the contract will not be concluded. The provision of data necessary to issue an invoice is a statutory obligation resulting from the VAT Act.

In other respects, the provision of data is voluntary, it is not a statutory or a contractual requirement, and it does not constitute a condition for concluding a contract.
 

On what grounds will we process your personal data?

The grounds on which we process personal data depends on the type of performed activities:

  1. conclusion of a contract with Pimet Sp. J. Maciej i Bartosz Popielawscy and performance of such a contract,
  2. compliance with a legal obligation of Pimet Sp. J. Maciej i Bartosz Popielawscy (e.g. issuing an invoice or a bill),
  3. legitimate interest of Pimet Sp. J. Maciej i Bartosz Popielawscy (direct marketing of own products or services, or performance of a contract concluded with Pimet Sp. J. Maciej i Bartosz Popielawscy for your benefit as a third party, if another entity is a party to the contract),
  4. your consent.

 

Who can we transfer your data to and when can we transfer them? Who will we definitely not transfer your data to?

If you grant your consent, we will make your personal data available to business entities cooperating with Pimet Sp. J. Maciej i Bartosz Popielawscy for marketing purposes.

Your data may also be transferred to our affiliated entity, i.e. Pimet Sp. z o.o., for the purposes of fulfilling the above-mentioned objectives.

Your data may be disclosed to such recipients as entities that cooperate with us and perform tasks to our order and for out benefit. In those cases, we conclude contracts with such entities to ensure that your data is secure. If you wish to know who we are currently cooperating with, please request the relevant information.
 

What can you do with the personal data you provided?

You have the right to request that Pimet Sp. J. Maciej i Bartosz Popielawscy grants you access to your personal data, you have the right to correct such data, delete them, limit the scope in which they are processed, and to object to their processing. At your request, your data can be transferred to another data controller. You can object to the processing of your data for marketing of Pimet Sp. J. Maciej i Bartosz Popielawscy‘s products and services.
 

How can you withdraw your consent?

You can consent to all or some types of processing, or not consent to any of them. You can withdraw all and any consents granted to Pimet Sp. J. Maciej i Bartosz Popielawscy with regard to the processing of personal data at any time, without any negative consequences. All you need to do is send us an email, call us or send a letter via post using the contact details indicated above. You can express the wish to withdraw your consent in any manner. The only requirement is that the message must reach us. The withdrawal of your consent does not impact the lawfulness of the processing of your data before the withdrawal, i.e. until your consent is withdrawn, the processing of your data by Pimet Sp. J. Maciej i Bartosz Popielawscy is legal.
 

For how long will we store your data?

Your personal data will be stored as long, as it is required for the performance of the contract that binds you and Pimet Sp. J. Maciej i Bartosz Popielawscy or a contract concluded by another entity for your benefit; after that time, the data will be processed for a period of time equivalent to the limitation period of claims that may be lodged by Pimet Sp. J. Maciej i Bartosz Popielawscy or against Pimet Sp. J. Maciej i Bartosz Popielawscy. If your personal data is processed for the purposes of ensuring compliance with a legal obligation to which the controller is subject, the personal data will be stored for a period of time required to fulfil such an obligation. Data stored on the basis of a consent will be processed until the consent is withdrawn.

If your personal data is processed due to a legitimate interest pursued by the controller, when the processing is based on the performance of a contract concluded with Pimet Sp. J. Maciej i Bartosz Popielawscy for your benefit, the data will be stored until the legitimate interest on which the processing is based is fulfilled. If your personal data is processed due to a legitimate interest pursued by the controller, when the processing is based on direct marketing of our products and services, your personal data will be processed until you object to the processing.
 

Where can you lodge a complaint against the processing of your personal data by Pimet Sp. J. Maciej i Bartosz Popielawscy?

At present, you can file a complaint to the Inspector General for Personal Data Protection. However, soon the supervisory authority that will be competent for such matters will be the President of the Office for Personal Data Protection.
 

How will we not process the personal data?

Your personal data is not subject to automated processing (e.g. profiling), which would cause legal effects concerning you or significantly impact you in a similar way.
 
Pimet Sp. J. Maciej i Bartosz Popielawscy, as the Controller of your personal data, uses its best efforts to ensure all physical, technical and organisational measures to secure the personal data against accidental or intentional destruction, accidental loss, modification, unauthorised disclosure, use or access, in accordance with all applicable legal regulations.

For this purpose, Pimet Sp. J. Maciej i Bartosz Popielawscy is cooperating with GDPR and ISO 27001:2015 experts, and fully adjusted the above-mentioned standards in the scope of personal data processing.