Documentation of personal data protection in force in the Company ALMEX Limited Liability Company
INFORMATION OBLIGATIONS REGARDING THE PROCESSING OF PERSONAL DATA
(for customers/co-operators)
Acting under the provision of Art. 13 para. and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (hereinafter referred to as RODO), we hereby inform you that:
PERSONAL DATA CONTROLLER
The administrator of the personal data of our Customers and Cooperators is:
ALMEX Limited Liability Company
based in Szczecin, at ul. Ks. Stanisława Kujota I, 70-605 Szczecin, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Szczecin, Xi Economic Department of the National Court Register under KRS number: 0000161783, having NIP: 851-031-03-01, having REGON: 810031901
hereafter also referred to as „Administrator”.
The controller collects personal data for designated legitimate purposes, processes them lawfully and does not subject them to further processing incompatible with those purposes. Data shall be collected only to the extent adequate, necessary and indispensable in relation to the purposes for which they are processed and the applicable regulations.
PERSONAL DATA PROCESSED
We process personal data in connection with:
1. production activities, sale of goods and provision of services
- Basis and purposes of data processing:
1) concluding and executing a contract or taking pre-contractual actions;
2) the performance of existing legal obligations, including in particular:
a) preparation of accounting and financial records in accordance with binding regulations;
b) filing and processing of complaints;
c) Accounting for public and legal receivables;
d) storage of data for future proceedings of authorized bodies;3) legitimate legal interest:
a) Documenting the execution of transactions and issuing relevant documents, including, in particular, financial documents;
b) Establishment, defense and enforcement of claims;
c) direct marketing;
d) Creation of statements, analysis and statistics, including turnover and sales, for internal purposes;
e) Verification of the counterparty’s payment reliability;
f) debt collection;
g) archiving;2. Running and operating our business
- We process personal data as part of the daily operation of the company.
- Data subjects: those who contact the company, as well as their employees and those who work with them on various legal bases, associates, and those who are on our premises and in our buildings in connection with the use of video surveillance security.
- Basis and purposes of data processing:
1) concluding and executing a contract or taking pre-contractual actions;
2) the performance of existing legal obligations, including in particular:a) storage of data for future investigations by authorized authorities;
b) filing and processing of complaints;
c) Preparation of all documentation in accordance with applicable regulations and legal obligations imposed on us;
d) Accounting for public and legal receivables;
e) investor relations.3) legitimate legal interest:
a) documenting activities;
b) Establishment, defense and enforcement of claims;
c) direct marketing;
d) Creation of statements, analysis and statistics for internal purposes;
e) Verification of the counterparty’s payment reliability;
f) debt collection;
g) archiving;
h) Crime prevention and detection;
i) Securing our property, company secrets, as well as ensuring the safety of our employees and those on our premises.ORIGIN OF PERSONAL DATA
Processed personal data is provided to us directly by data subjects or from other data controllers with whom we cooperate or from publicly available sources.NO OBLIGATION TO PROVIDE DATA
As a rule, the provision of personal data is voluntary, however, it may be a requirement for entering into a contract or performing another activity. The obligation to provide personal data may also result from applicable regulations.RECIPIENTS OF PERSONAL DATA
We may transfer processed personal data, including by authorized persons:
1) To Entities data on our behalf:a)to entities intermediating in the transactions we conclude;
b)our subcontractors;
c)entities providing consulting, advisory, auditing, IT, legal, tax, accounting assistance to us, research agencies acting on our behalf, entities providing property security services to us;2) Other data controllers processing data on their own behalf, whose participation is necessary for the relevant process, including but not limited to:
a) transportation companies;
b) shippers;
c) customs agencies;
d) insurers;
e) State or local government bodies and offices;
f) courts;
g) bailiffs;
h) postal operators and couriers;
i) Banks and payment operators;
j) entities that cooperate with us in handling accounting, tax, legal matters – to the extent that they become data controllers.DATA RETENTION PERIOD
We process data for the time necessary to achieve the purposes of processing or as required by applicable regulations. Once the given purpose of processing has been fulfilled, we archive personal data in accordance with applicable laws, including, in particular, taking into account the statute of limitations for civil law claims and the statute of limitations for public law claims.AUTOMATED DECISION-MAKING AND TRANSFER OF PERSONAL DATA OUTSIDE THE EEA AREA
Your personal data is not subject to automated decision-making, including profiling. The Administrator has the right to transfer personal data necessary for the performance of the contract, the provision of services, the conduct of business and the operation of the enterprise to a third country or an international organization (Google, Facebook and others), these being entities that have joined the Privacy Shield agreement. You are entitled to obtain a copy of personal data transferred to a third country.RIGHTS OF DATA SUBJECTS
Data subjects have the right to:1) rectification (correction) of data, to the extent and under the terms of Art. 16 GDPR;
2) deletion of data, to the extent and under the terms of Art. 17 GDPR;
3) limitation of processing (withholding of data operations or non-deletion of data), to the extent and under the terms of Art. 18 GDPR;
4) access to data (by requesting information about the data we process and a copy of the data}, to the extent and under the terms of Art. IS GDPR;
5) transfer of data to the extent and under the terms of Art. 20 GDPR;
6) object to our processing of your personal data (including profiling) to the extent and under the terms of Art. 21 GDPR.The above rights may be exercised by contacting us at e-mail address: rodo@almex-recycling.pl or in writing to the Administrator’s registered address indicated in I) above.
The scope of each of these rights and the situations when they can be exercised are determined by law.
Each time the entitlement will depend, for example, on the legal basis for the Administrator’s data processing and the purpose of the processing.COMPAINT TO THE SUPERVISORY AUTHORITY
The data subject has the right to lodge a complaint regarding the processing of his or her personal data with the supervisory authority, which is the President of the Office for Personal Data Protection.For any questions regarding personal data, please contact us by e-mail: rodo@almex-recycling.pl or in writing to the Administrator’s registered address indicated in 1) above.
Szczecin, September 24, 2018.
- Data subjects: contractors, potential contractors, cooperators, potential cooperators, as well as their employees and persons cooperating with them on various legal bases.