Our website address is: https://www.ostrowski.eu
GDPR – GENERAL INFORMATION
From May 25, 2018 regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data is applied and repealing Directive 95/46 / EC (general regulation on the protection of personal data), Journal Of EU. L No. 119, p. 1, in short: GDPR. The GDPR requires that the entity deciding how and for what purpose personal data are processed, i.e. the data administrator has provided you with the information necessary to ensure the accuracy and transparency of personal data processing.
DATA CONTROLLER
The administrator of your personal data (hereinafter: “Data Administrator”) is “OSTROWSKI” Sp. z o.o. 30A Smołki Street, 44-213 Książenice, Tax identification number PL: 642-28-34-682
REGON: 273585836, phone: 32 33 55 100, e-mail: biuro@fbhostrowski.pl
CONTACT DETAILS OF THE DATA ADMINISTRATOR
The data controller has not appointed a data protection officer. In all matters related to the processing of personal data by the Data Administrator, information can be obtained by contacting the Data Administrator in the following form:
– via e-mail, by sending information to the following address: iod@fbhostrowski.pl
– personally or by post, at the address of the Data Administrator: Dworcowa 1a, 44-144 Nieborowice
PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Your personal data obtained as a result of business activities are used for the following purposes:
conclusion and performance of a contract for the provision of services and the provision of these services in accordance with the concluded contract, the basis for processing: art. 6 sec. 1 lit. “B” GDPR,
performing the legal obligations of the Data Administrator (e.g. issuing and storing invoices and other accounting documents, sharing data with the so-called authorized entities, the court and the public prosecutor), the basis for processing: art. 6 sec. 1 lit. “C” GDPR,
pursuing possible claims for non-performance or improper performance of the concluded contract for the provision of services, the basis for processing: art. 6 sec. 1 lit. “F” GDPR,
marketing of services provided by the data administrator, the basis for processing: art. 6 sec. 1 lit. “F” GDPR.
PERIOD OF DATA STORAGE
Your personal data will be stored:
The data is processed based on the consent given, personal data will be processed until the consent is withdrawn by the data subject.
DATA RECIPIENTS
Access to the data will be granted to persons working and cooperating with the Data Administrator in the provision of services to you, including those providing technical support services and entities providing legal and financial services to the Data Administrator. In cases strictly defined by law, your data will have to be transferred to the so-called authorized authority, the Police and the Public Prosecutor’s Office.
TRANSMISSION OF PERSONAL DATA OUTSIDE THE EEA
The data controller does not intend to transfer your data outside the European Economic Area (i.e. the area covering the countries of the European Union, Norway, Liechtenstein and Iceland).
THE RIGHTS OF THE PERSON WHO THE DATA CONCERNS
Please be advised that you have the following rights regarding personal data:
access to personal data, i.e. obtaining information whether the Data Administrator processes your data, and if so, to what extent,
rectification of personal data if, in your opinion, they are incorrect or incomplete,
restriction of data processing, i.e. ordering the storage of data so far collected by the Data Administrator and suspension of further data operations, except for their storage,
deletion of data processing that is processed unreasonably by the Data Administrator,
transfer of personal data, i.e. sending data to another data controller or sending them to you.
DATA PROCESSING BASED ON YOUR CONSENT
If the data processing is based on your consent, you have the right to withdraw this consent at any time, with the proviso that the withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal.
THE RIGHT TO OBJECTION REGARDING TO YOUR DATA PROCESSING
You also have the right to object at any time:
to the processing of your data for direct marketing purposes. After making such an objection, the data controller will no longer be allowed to process personal data for such purposes,
for reasons related to your particular situation – in relation to data processing, which takes place on the basis of the performance of a task carried out in the public interest or for purposes resulting from the legitimate interests of the Data Administrator.
After making such an objection, the data controller will no longer be allowed to process personal data for such purposes, unless the data controller proves that there are valid, legally justified basics for further data processing that will override your interests, rights and freedoms, or when there are basics for establishing, investigating or defending claims.
BASIS FOR PROVIDING PERSONAL DATA
To conclude a transaction, you must provide basic data required to issue a VAT invoice. Without this data, we will not be able to perform the concluded contract or order. Additionally, we may ask for optional data,
which failure to provide will significantly hinder or prevent contact with you (e.g. telephone number or e-mail), but will not affect the ability to conclude a contract or perform an order.
RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
You have the right to lodge a complaint with the supervisory authority, which the President of the Office for Personal Data Protection is to be appointed if, in your opinion, the processing of personal data by the Data Administrator is in violation of the law.
INFORMATION ON AUTOMATED DECISION-MAKING
Your data will not be processed in an automated manner, including profiling, which means that any decisions that have legal effects on you or in a similar way significantly affect you will not be based solely on the automatic processing of personal data and will not be associated with such an automatically made decision .