Privacy policy

Privacy policy and processing of personal data


The privacy policy and the processing of personal data informs about who we are, what personal data we collect, how and for what purposes we use it and what your rights are. This document is used to provide information referred to in art. 13 para. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. and repeal of Directive 95/46 / EC, hereinafter referred to as “RODO”, which was in force from 25 May 2018.

Who is the administrator of your personal data?

The data administrator is Elmak Sp. z oo with its registered office in Warsaw at ul. Morgowa 81; 35-323 Rzeszów, REGON: 691535384, NIP: 8133193918, entered in the commercial register under KRS number 0000113334, hereinafter referred to as the “Administrator”.

Contact details of the data controller:

– traditional shipments, address: Elmak Sp. z o.o., ul. Morgowa 81; 35-323 Rzeszów

e-mail, address: elmak@elmak.pl

Specialist for Personal Data Protection

The person responsible for the protection of personal data is the Personal Data Protection Specialist (SODO), who can be contacted in case of any questions or requests in all matters relating to personal data. SODO contact details:

– traditional parcel, address: Specialist for personal data protection, Elmak Sp. z o.o., ul. Morgowa 81; 35-323 Rzeszów

e-mail address: sodo@elmak.pl

– by phone, number: +48 (17) 854 98 14

For what purpose and on what basis do we use your personal data?

We use personal data obtained during the use of the website, as well as during the conclusion of the contract and during its validity for the following purposes:

1. achieve goals based on your consent, e.g.

providing information about products and services,
conducting product promotion.

2. concluding and performing merging websites, e.g.

purchase – sale,
examining complaints,
making valuations of products,
We support your inquiries and inquiries addressed to us.

3. fulfilling the Administrator’s legal duty, e.g.

transfer of data at the request of administrative bodies,

4. implementation of legitimate interests of the Administrator,

handling requests and requests directed to the Administrator in connection with the implementation of the order,
debt collection: conducting court, arbitration and mediation proceedings,
storage of data for archival purposes (compliance with obligations arising from legal provisions),
verification of the credibility of payments.

Is providing personal data necessary?

Providing personal data is fully voluntary. However, if the Administrator does not receive personal data necessary for the conclusion and performance of the contract, in connection with any transaction, the Administrator will not be able to enter into a contract with you and, as a consequence, start cooperation.

Who can the Administrator transfer your data to?

The administrator may share your personal data:

1. employees and associates of the company who must have access to the data in order to be able to meet the company’s obligations;

2. entities processing data on behalf of the administrator, e.g.

companies that support our ICT systems,
entities providing legal, tax and accounting assistance as well as advisory, consulting or auditing services.

3. other data controllers that process data on their own behalf:

entities operating by post or courier,
entities purchasing receivables,
banks, payment institutions,
entities cooperating with the Administrator in the scope of accounting, tax and legal services – to the extent that they become data administrators,

4. State authorities, eg courts, the prosecutor’s office, tax authorities.

Is your data going beyond the European Economic Area (EEA)?

We do not currently plan to send data outside of the EEA.

How long can we store your data?

If you use the data on the basis of consent, we use them until you withdraw and resign from the achieved goals.

In transactions related to the performance of the contract, we use the data for the transaction period and the time needed to pursue claims related to the performance of the contract.

In connection with the introduction of the law, personal data will be stored for periods specified in tax regulations.

What is profiling and automation of decisions?

Based on your consent, we can use data for profiling, but the decision-making process will not take place in an automated form and will have no legal effect or will not have a significant impact on your situation.

The profiling of personal data includes the processing of data (also in an automated way) through their use for the assessment of certain information, in particular for the purpose of analyzing or predicting personal preferences and interests.

What are your entitlements?

1. You have the following rights related to the processing of your personal data:

the right to access personal data, including the right to information about your personal data and to obtain a copy of your personal data,
the right to rectify personal data if it is incorrect and the right to supplement incomplete data,
the right to delete personal data,
the right to limit the processing of personal data,
the right to transfer personal data,
the right to file a complaint with the data protection authority, ie the President of the Office for Personal Data Protection (address: Stawki 2, 00-193 Warsaw) in case of illegal processing of your personal data,
the right to withdraw at any time any consent without giving reasons and without affecting the processing which was made on the basis of consent before its withdrawal,
the right to object to:
we process your data for marketing purposes, including the so-called profiling, however, after making such an objection, the Administrator will no longer be allowed to process your data for marketing purposes;
we process your personal data for the purposes of the so-called legitimate interests we have pursued – for reasons related to your particular situation.

2. With the requests described in point 1, you can apply to SODO in accordance with the contact information provided.

3. You can exercise your rights listed in point 1 at any time by requesting them.

4. The administrator is obliged to provide you with information about the actions taken in connection with the requests referred to in point 1, without undue delay, but not later than one month after receiving the request. If necessary, the deadline referred to above can be extended by another two months due to the complexity of the request or the number of requests. Within one month of receiving your request, however, we must inform you about the extension of the deadline together with the reasons for it.

5. If the Administrator does not act in relation to your requests referred to in point 1, he shall immediately – no later than one month from the receipt of the request – inform you of the reasons for inaction and the possibility of lodging complaints with the President of the Office of Personal Data Protection from legal protection measures before the Court.

6. We provide the information referred to in points 4 – 6, at our choice:

by registered mail to the postal address provided by you or
electronically, to the e-mail address provided by you,
orally if you request information verbally and your identity will be confirmed in other ways

7. All communications and actions taken by the Administrator in connection with the requests referred to in point 1 are free of charge. If, however, your demands are clearly unjustified or excessive, e.g. due to the constant nature, we will be able to:

to charge a fee, taking into account the administrative costs of providing information, communication or taking the action sought, or
refuse to take action in connection with the demand.

8. Each recipient who has been disclosed your personal data, the Administrator will inform about the request to rectify or supplement or delete or limit the processing of data, which the Administrator has made as a result of the request. The administrator will not have to provide such information only if it proves impossible.

9. At your request, the Administrator informs about the recipients to whom he provided information about the rectification or removal or limitation of the processing of personal data, as well as about recipients that he was unable to notify.

 

Information clauses


The administrator collects specific personal data concerning: clients, contractors, complaints, Internet users, employees (including potential, current and former employees), as well as monitoring.

Below there are information clauses for individual categories.

 

Information clause for clients, contractors and complaints:

According to art. 13 para. 1 and 2 of the General Regulation on the Protection of Personal Data of 27 April 2016 of the European Parliament and of the Council (EU) 2016/679 (hereinafter referred to as RODO), we inform that the Administrator processing your personal data is Elmak Sp. z o.o., with registered office at ul. Morgowa 81; 35-323 Rzeszów. You can contact the Data Protection Specialist (SODO) using traditional mail at: SODO, Elmak Sp. z o.o., ul. Morgowa 81; 35-323 Rzeszów, email, at the email address sodo@elmak.pl, and by phone, at +48 (17) 854 98 14. Your personal data will be processed in order to perform the contract on the basis of art. 6 par. 1 lit. b) the aforementioned regulation, in the scope resulting from tax and financial regulations. The recipient of your personal data are entities authorized to obtain personal data on the basis of legal regulations and processing entities providing services to Elmak Sp. z o.o. Your personal data will be stored based on a legitimate interest pursued by the Administrator. You have the right to request access to the content of your data, the right to rectify it, delete it, and limit processing. You have the right to lodge a complaint to the supervisory body if you feel that the processing violates the provisions of the GDPR. Providing your personal data is voluntary, however, refusal to provide data may result in the refusal to conclude or terminate the contract. The processing of personal data provided by you will not be subject to automated decision-making, including profiling as referred to in art. 22 ust. 1 and 4 of the General Regulation on the Protection of Personal Data of 27 April 2016.

 

Information clause for Internet users:

According to art. 13 para. 1 and 2 of the General Regulation on the Protection of Personal Data of 27 April 2016 of the European Parliament and of the Council (EU) 2016/679 (hereinafter referred to as RODO), we inform that the Administrator processing your personal data is Elmak Sp. z o.o., with registered office at ul. Morgowa 81; 35-323 Rzeszów. You can contact the Data Protection Specialist (SODO) using traditional mail at: SODO, Elmak Sp. z o.o., ul. Morgowa 81; 35-323 Rzeszów, email, at the email address sodo@elmak.pl, and by phone, at +48 (17) 854 98 14. Your personal data will be processed in order to measure the traffic of Internet users on the company’s websites and to better matching company websites to Internet users’ preferences. The recipient of your personal data are entities authorized to obtain personal data on the basis of legal regulations and processing entities providing services to Elmak Sp. z o.o. Your personal data will be stored based on a legitimate interest pursued by the Administrator. Your personal data will be stored until the cookie expires or will be deleted by you. You have the right to request access to the content of your data, the right to rectify it, delete it, and limit processing. You have the right to lodge a complaint to the supervisory body if you feel that the processing violates the provisions of the GDPR. Providing your personal data is voluntary, however, refusal to provide data may result in problems in displaying and functioning of the company’s websites. The processing of personal data provided by you will be subject to automated decision-making, including profiling as referred to in art. 22 ust. 1 and 4 of the General Regulation on the Protection of Personal Data of 27 April 2016.

 

Information clause for potential employees (candidates for work):

According to art. 13 para. 1 and 2 of the General Regulation on the Protection of Personal Data of 27 April 2016 of the European Parliament and of the Council (EU) 2016/679 we inform you that the Administrator processing your personal data is Elmak Sp. z o.o., with registered office at ul. Morgowa 81; 35-323 Rzeszów. You can contact the Data Protection Specialist (SODO) using traditional mail at: SODO, Elmak Sp. z o.o., ul. Morgowa 81; 35-323 Rzeszów, email, at the email address sodo@elmak.pl, and by phone, at +48 (17) 854 98 14. Your personal data will be processed in order to recruit on the basis of art. 6 par. 1 lit. a) of the aforementioned ordinance and the Labor Code from June 26, 1974. Your personal data will be kept during the recruitment period. You have the right to request access to the content of your data, the right to rectify it, delete it, limit processing and the right to withdraw consent to processing. You have the right to lodge a complaint to the supervisory body, if you believe that the processing violates the provisions of the general regulation on the protection of personal data of April 27, 2016. Providing your personal data is mandatory on the basis of law, and for the remaining extent voluntary. Refusal to provide mandatory data will result in your recruitment process not being covered. The processing of personal data provided by you will be subject to automated decision-making, including profiling as referred to in art. 22 ust. 1 and 4 of the General Regulation on the Protection of Personal Data of 27 April 2016, the consequence of which will be contact only with selected candidates for work.

 

Information clause for current and former employees:

According to art. 13 para. 1 and 2 of the General Regulation on the Protection of Personal Data of 27 April 2016 of the European Parliament and of the Council (EU) 2016/679 we inform you that the Administrator processing your personal data is Elmak Sp. z o.o., with registered office at ul. Morgowa 81; 35-323 Rzeszów. You can contact the Data Protection Specialist (SODO) using traditional mail at: SODO, Elmak Sp. z o.o., ul. Morgowa 81; 35-323 Rzeszów, electronic mail, at the email address sodo@elmak.pl, and by phone, at +48 (17) 854 98 14. Your personal data will be processed for the purposes related to employment pursuant to art. 6 par. 1 lit. c) the aforementioned Regulation and the Labor Code of June 26, 1974. The recipient of your personal data are entities authorized to obtain personal data on the basis of legal regulations and processing entities providing services to the Administrator, as well as entities for which the services are provided by the Administrator, only in related to the implementation of these services. Your personal data will be kept for 50 years. You have the right to request access to the content of your data, the right to rectify it, delete it, and limit processing. You have the right to lodge a complaint to the supervisory body if you feel that the processing violates the provisions of the general regulation on the protection of personal data of April 27, 2016. Providing your personal data is mandatory based on the law. Refusal to provide data may result in the employer being unable to fulfill his legal obligations towards the employee. The processing will not be subject to automated decision-making, including profiling referred to in art. 22 ust. 1 and 4 of the General Regulation on the Protection of Personal Data of 27 April 2016.

 

Information clause for monitoring:

According to art. 13 para. 1 and 2 of the General Regulation on the Protection of Personal Data of 27 April 2016 of the European Parliament and of the Council (EU) 2016/679 (hereinafter referred to as RODO), we inform that the Administrator processing your personal data is Elmak Sp. z o.o., with registered office at ul. Morgowa 81; 35-323 Rzeszów. You can contact the Data Protection Specialist (SODO) using traditional mail at: SODO, Elmak Sp. z o.o., ul. Morgowa 81; 35-323 Rzeszów, email, at the email address sodo@elmak.pl, and by phone, at +48 (17) 854 98 14. Your personal data will be processed to protect property and ensure security on the premises monitored on the basis of art. 6 par. 1 lit. f) this is the legitimate interest of the Administrator. The monitoring records will be kept for a period not longer than 90 days. A person registered by the monitoring system has the right to access personal data and processing restrictions. The person registered by the monitoring system has the right to lodge a complaint to the supervisory body if he / she considers that the processing violates the provisions of the GDPR. The processing of recordings will not be subject to automated decision making, including profiling referred to in art. 22 ust. 1 and 4 of the General Regulation on the Protection of Personal Data of 27 April 2016.