The administrator of your personal data is Kuźnia Polska S.A., Żory Branch with its registered office in Żory, at ul. Strażacka 43, 44-240 Żory (“Administrator”). Contact with the Administrator is possible by sending post to the address of the Administrator’s office indicated above or by e-mail to dane.osobowe@kuzniapolska.com.
In connection with its business activities, the Administrator collects and processes personal data, making every effort to ensure that the processed personal data are properly secured. Data is obtained directly from data subjects (e.g. as part of direct contact) and from third parties/entities (e.g. from an entity cooperating with the Administrator, from publicly available records and registers). The processing of personal data is carried out on the basis of applicable legal provisions, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).
The Administrator processes personal data for purposes related to its business activities, in particular:
a) taking actions before concluding a contract (e.g. response to a submitted request for quotation), concluding and performing contracts (based on Article 6(1)(b) of the GDPR),
b) fulfillment of legal obligations incumbent on the Administrator (basis in Article 6(1)(c) of the GDPR),
c) pursuant to Art. 6(1)(f) of the GDPR – for marketing purposes, maintaining business contacts, securing and investigating and defending against claims and ensuring security.
Data processing pursuant to Art. 6(1)(f) of the GDPR ensures the implementation of the Administrator’s legitimate interests, such as ensuring security, marketing of own products, or protection against claims and recovery of receivables. In other cases, the Administrator processes personal data based on the consents granted.
To the extent that data is processed for the purpose of concluding and performing a contract, providing data is a condition for concluding said contract. Providing data is voluntary, but is necessary to conclude and perform the contract. If personal data is not provided, the contract cannot be concluded. Providing some data is also a statutory obligation, e.g. necessary to issue an invoice.
Your personal data will be processed for the period necessary for the implementation of the contract and post-sale customer service. In the case of optional data, we process your data until your consent is withdrawn or the purpose of processing the data becomes obsolete. We are obliged to process data processed for accounting and tax purposes for 5 years from the end of the calendar year in which the tax obligation arose. In order to pursue claims, we will process your data for the period of limitation of claims resulting from the provisions of the Civil Code.
Due to the fact that we will process your personal data, you have rights based on which you can submit a request to us regarding:
a) rectification of your data;
b) deletion of unjustifiably processed data;
c) limiting the processing of your data (suspending activities regarding your data or not deleting data – in accordance with the submitted application);
d) an objection to the processing of personal data based on Art. 6(1)(e) or (f) of GDPR;
e) accessing your data, i.e. information about the data processed by us or issuing a copy of this data;
f) transferring data to another data controller to the extent specified in Art. 20 of the GDPR.
The right to transfer data or obtain a copy of data will be exercised to the extent technically possible. Exercising these rights cannot adversely affect the rights and freedoms of other persons (including intellectual property rights or trade secrets).
Applications can be sent by post to the address of our headquarters or by e-mail to: dane.osobowe@kuzniapolska.com.
To ensure that you are authorized to submit the request, we may ask you to provide additional information to confirm your identity. The scope of each of these rights and the situations in which they can be exercised result from legal provisions. Which rights you will be able to exercise will depend, for example, on the legal basis for our use of your data and the purpose of their processing.
Additionally, you also have the right to lodge a complaint with the Polish supervisory authority or the supervisory authority of another European Union Member State, competent for the place of habitual residence or work of the data subject (that is you) or for the place of the alleged violation of the GDPR.
We will not make decisions in an automated manner based on your personal data, including profiling.
The recipients of your data are the following categories of entities:
a) entities from our capital group – to a reasonable extent;
b) entities processing data on our behalf, participating in the performance of data controller activities (e.g. our employees);
c) other entities to which the transfer of data is necessary to perform a specific activity in the course of the contract, e.g. (I) business partners, (II) entities dealing with customer opinion research, (III) entities acting on our behalf, (IV) payment and credit institutions for the purpose of making payments, (V) suppliers of IT systems and IT services, (VI) entities providing transport services on our behalf, (VII) postal operators and couriers, (VIII) providers of legal and advisory services (in particular law firms).