GDPR

Below you will find all the necessary information regarding the processing of your personal data in connection with the sale and distribution of our goods and services.

Who is the administrator of my data?

The administrator of your personal data is Czysta Polska Waldemar Kupś with its registered office at ul. Wierzbowa 29 in Tarnowo Podgórne 62-080, NIP: 7631750607

Who can I contact in matters related to the processing of my personal data?

We have not appointed a Data Protection Officer, but in all matters related to the processing of your personal data, you can contact us at the following e-mail address: wkups@czystapolska.pl.

What is the scope of your personal data processed by us?

In order to establish and effectively continue cooperation in the sale of our goods and services, we need to process your contact details, identification data and data for financial settlements, in particular: name and surname, company, correspondence data, telephone number or e-mail address, NIP data required to issue accounting documents and make payments, in particular the bank account number).

From whom did we receive your data?

We have received your personal data processed by us directly from you, or from the entity on whose behalf you act or from publicly available sources.

Purpose of processing and legal basis

(full names of legal acts can be found at the end of the form)

Determining your identity before establishing cooperation, including determining the place of delivery of our products and the place of provision of the services we offer, which will allow for the effective implementation of the obligations imposed on us as part of our cooperation.

Article 6 par. 1 lit. c and f GDPR

We contact you at the telephone number or e-mail address provided by you to, for example, confirm the order and delivery address, as well as to confirm the failure; the fact of its removal.

Article 6 par. 1 lit. b and f GDPR

If you agree to this - in order to ensure effective, mutually satisfactory cooperation, we may send you short surveys asking for feedback, so that you can inform us what else we can do better; we assure you that we will send these surveys with such frequency and in such a way that they are not burdensome for you and do not violate your right to privacy; at the same time, you can inform us at any time that you do not want to receive such content from us - then we will block their sending, in accordance with your request.

Article 6 par. 1 lit. a and f GDPR

If you agree - we will process your data for marketing purposes, including by way of direct marketing. On the basis of a separate consent, we also process data to send
commercial information (including newsletters).

Article 6 par. 1 lit. and the GDPR

As a data administrator who is an entrepreneur, we have the right to pursue claims and defend against claims in respect of our business activity and thus the processing of your data for this purpose.

Article 6 par. 1 lit. b and f GDPR

As an entrepreneur, we also keep accounting books and have tax obligations - we issue, for example, bills for services rendered by us, which may involve the need to process your personal data.

Article 6 par. 1 lit. c; GDPR in connection with art. 74 sec. 2 of the
Act of September 29, 1994 on accounting.

Is my data processed in any other way?

One of the ways we process personal data is the so-called profiling. It consists in the fact that we can, based on information about you, create profiles of our customers; preferences and thus, based on them, adapt our services and the content you receive from us. We assure you that during profiling we do not process your data in a fully automatic manner, without human intervention. The exception to this rule is a situation in which the decision made automatically is to serve the performance of the cooperation agreement binding us (e.g. ensuring the appropriate availability of services to you).; However, you always have the right not to be subject to such a decision and to demand human intervention, which we of course provide. Just contact us at the e-mail address provided above.

Who is my personal data transferred to?

We care about the confidentiality of your data. Due to the need to provide us with appropriate organization, e.g. in the field of IT infrastructure or current matters regarding our activities as an entrepreneur, as well as the implementation of your rights, your personal data as our client may be transferred to entities cooperating with us, in particular to companies from the IT industry – providing us with IT solutions and hosting, legal advisors, tax and accounting offices or subcontractors.

Is my data transferred outside the European Union?

Due to the fact that we use the services of other suppliers, e.g. suppliers in the field of ICT solutions, personal data may be transferred outside the European Union, e.g. the USA. We assure you that in such a case, the transfer of data will take place only on the basis of the provisions, i.e. after the conclusion of an appropriate processing agreement - to entities certified under the Privacy Shield or based on an appropriate agreement between us and this entity, containing standard data protection clauses adopted by the European Commission.

For how long are my personal data processed?

If you are our client or contractor, your data will be processed by us, respectively, until the service is provided or until the duration of the cooperation. With the reservation that if the data were processed by us in order to pursue claims (e.g. in debt collection proceedings), we process the data for this purpose for the period of limitation of claims, resulting from the provisions of the Civil Code. We process all data processed for accounting purposes and for tax reasons for 5 years counted from the end of the calendar year in which the tax obligation arose. In marketing activities, satisfaction surveys (the quality of our services) or sending commercial information - data is processed until consent is withdrawn or objections are raised. After the above-mentioned periods, your data is deleted or anonymized.

Is it my duty to provide data?

The use of our services is fully voluntary, however, we use the personal data provided to contact you in order to perform the order and service. In this case, failure to provide data may result in a delay or even refusal to complete the order and service. Also, for accounting or tax reasons, we have a legal obligation to process your data, failure to provide them may result in, for example, the inability to issue an invoice or a personal bill for you. If you provide us with your telephone number or e-mail address, it is done on a voluntary basis - failure to provide them will not result in refusal to perform the order or service.  Consent to marketing activities, satisfaction survey services) or receiving commercial information (newsletter) is always voluntary.

What rights do I have?

As the administrator of your data, we provide you with the right to access your data, you can also correct them, request their removal or limit their processing, or withdraw your consent to their processing. You can also exercise the right to object to the processing of your data, the right to transfer data to another data controller and the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (if the processing takes place on the basis of Article 6(1)(a) or Article 9(2) 2 lit. a) GDPR. If you want to exercise any of these rights, please contact us via the e-mail address provided above. We also inform you that you have the right to lodge a complaint with the body supervising compliance with the provisions on the protection of personal data.

Definitions and abbreviations

GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;