Annexe no 1 to the Regulations
Information clause on the processing of personal data (GDPR)
According to art. 13 section 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we inform that:
1.1. The Administrator of your personal data obtained in connection with the usage of the Website and processing of the Order is DATASAL with its registered seat in Poznań, Tax Identification Number: PL7792492932 , National Business Registry Number: 380774307, address: Daleka 14, 60-124 Poznań (Poland).
1.2. We have appointed a data protection officer. It is a person who you can contact in all matters related to the use of personal data that you provide us with and all the rights that you have. You can contact the inspector by email: email@example.com
1.3. Personal data obtained in connection with the usage of the Website and processing of the Order will be processed on the basis of art. 6 section 1 letter b) of GDPR. The scope of data processing includes in particular identification data, address and contact details of the Customer.
2.1. Personal data obtained in connection with the usage of the Website and processing of the Order will be processed in order to:
a) properly process the Order and the Services;
b) properly perform the Seller’s obligation deriving from the regulations of generally applicable law;
c) establish, exercise or defend of legal claims or to protect interests of the Seller in form of concluding relevant insurance contracts;
d) detect and prevent the fraud;
2.2. In other cases, personal data obtained in connection with the usage of the Website and processing of the Order will be processed on the basis of the granted consent in the scope and purpose specified in the consent.
3.1. Personal data obtained in connection with the usage of the Website and processing of the Order may be made available to the entities providing the Seller with the following services: accounting, legal, auditing, insurance, courier, postal and maintenance as well as IT systems services handling information about the Website. Abovementioned data shall be made available to public authorities, including courts, at their request or if such obligation results from the provisions of generally applicable law.
3.2. The Seller will not transfer personal data obtained in connection with the usage of the Website and processing of the Order outside the European Economic Area (including the European Union, Norway, Lichtenstein and Iceland).
4.1. Personal data obtained in connection with the usage of the Website and processing of the Order will be processed for the period necessary to process the Order. After the implementation of the Services,, personal data will be stored by the Administrator for a period necessary to demonstrate by the Seller the rights acquired in connection with the contract concluded between the Seller and the Customer and for the period of expiration of any claims that may rise from the abovementioned contract, including claims regarding public liabilities that may rest on the Seller, in connection with the performance of the Order.
5.1. The Customer and all data subjects, has the right to request the access to the provided personal data, in particular to information whether the Seller processes personal data and the scope of data held by the Seller, the purposes of its processing, the storage period and rights related to the obtained personal data.
5.2. Moreover, the Customer and all data subjects, has the right to obtain a copy of the data, with the provision that, the first copy of personal data is free-of-charge and for any further copies, the Administrator may charge a reasonable fee resulting from the administrative costs.
5.3. The Customer and all data subjects shall have the right to obtain without undue delay the rectification of inaccurate or incomplete personal data.
5.4. The Customer and all data subjects shall have the right to obtain the erasure of personal, provided that the data is not necessary to establish, exercise or defend of legal claims and simultaneously one of the following conditions is met:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the effective objection against the personal data processing was lodged;
c) the personal data have to be erased for compliance with a legal obligation;
d) the personal data have been unlawfully processed;
e) the consent for the personal data processing was withdrawn and there is no other legal ground for the processing.
5.5. The Customer and all data subjects have the right to obtain restriction of the personal data processing when one of the following applies:
a) the accuracy of the personal data is contested – for a period enabling the Administrator to verify the accuracy of the personal data;
b) the effective objection against the personal data processing was lodged – pending the verification whether the legitimate grounds of the Seller override those of the data subject;
c) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
5.6. The Customer and all data subjects shall have the right to receive the personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another Administrator without hindrance from the Administrator to which the personal data have been provided, if:
a) the processing is based on consent or on a contract, and;
b) the processing is carried out by automated means.
6.1. The Customer and all data subjects shall have the right to object, on ground relating to his or her particular situation, at any time to processing of personal data, in case processing is necessary for purposes arising from legally justified interests pursued by the Seller or by a third party.
6.2. The Customer and all data subjects, shall have the right to lodge a complaint with a single supervisory authority, if the processing of the personal data violates the law in this regard.
7.1. In any case where the processing of the personal data is based on the granted consent, the person who gave the consent has the right to withdraw it. Withdrawal of the consent does not affect the lawfulness of the processing of the personal data, which was undertaken on the basis of consent before its withdrawal.
7.2. Providing the Administrator with the personal data is voluntary, however, some of the information constituting personal data is necessary for the processing of the Order or necessary for the proper performance of the obligations deriving from the regulations of generally applicable law. Failure to provide the Administrator with the personal data will cause that the Order will not be processed.
7.3. The Customer does not process the personal data in a way that leads to automated decision making.