GDPR
OMEGA Multi-Industry Company, General Partnership, Ł. Sosnowski, B. Stempień.
In connection with the commencement of the application of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and based on Articles 13 and 14 of the above Regulation, we provide the information required by the Regulation and inform you that as of 25 May 2018 you will be entitled to the rights listed below related to the processing of personal data by OMEGA Multi-Industry Company, General Partnership, Ł. Sosnowski, B. Stempień.
1. The controller of your personal data is OMEGA Multi-Industry Company, General Partnership, Ł. Sosnowski, B. Stempień, ul. Przemysłowa 9, 42-445 Szczekociny, Tax Identification Number (NIP): 649 216 97 70, e-mail address: scsomega@scsomega.pl
2. Personal data will be processed for at least one of the following purposes:
a. for the performance of a contract to which the data subject or the company represented by the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) GDPR
b. for the purposes of fulfilling the legal obligations incumbent on the Controller under generally applicable provisions of law, including accounting and tax regulations and related provisions, pursuant to Article 6(1)(c) GDPR
c. for purposes arising from the legitimate interests pursued by the Controller or by a third party, consisting in acquiring new contacts to potential commercial clients in order to offer the Controller’s own products and services, carrying out marketing and advertising activities, and, where applicable, establishing, pursuing or defending claims, etc.
d. for sales and marketing purposes pursued by the Controller based on your consent to the processing of data, pursuant to Article 6(1)(a) GDPR
3. Your personal data has been obtained in one of the following ways:
a. through direct provision of personal data, by sending traditional or electronic correspondence, or by completing the relevant form on the Controller’s website
b. from publicly available sources and registers such as: CEIDG, KRS, REGON, NIP, PKD, company websites, online advertisements, the official company information line operating under telephone numbers published on the Internet
c. by purchasing a commercial database of contact details from entities that have provided written confirmation and are able to demonstrate that they have your consent to process and transfer data to third parties
4. In view of the nature of the Controller’s business activity focused on servicing natural persons, the categories of data collected and processed will include basic personal data such as: first name, last name, telephone numbers, e-mail addresses, IP addresses.
5. Your personal data will be transferred to entities providing services to the Controller necessary to perform and execute the concluded/planned contract with you, such as: accounting services, courier services, postal services, telecommunications service providers, hosting service providers, manufacturers and suppliers of the products offered by the Controller to the extent necessary to obtain such products (e.g. software licensing, product registration, activation of service packages and similar), legal, analytical and marketing services, debt collection, contract settlement, banking services related to payments, and to authorities entitled to receive your personal data under mandatory provisions of law.
6. The Controller does not intend to transfer personal data to a third country or an international organization.
7. Your personal data will be processed only for the longest of the following periods:
a. for the period required by law, including accounting and tax regulations,
b. for a period of up to 3 years from the last contact,
c. for the period of use of the solution covered by warranties and similar services,
d. for the duration of the concluded contract,
e. for the period necessary to pursue any claims or to defend against such claims by the Controller,
f. the retention period may each time be extended by the limitation period for claims.
8. You have the right to access the content of your personal data and the right to request rectification, erasure, restriction of processing, to object to processing, as well as the right to data portability.
9. You have the right to lodge a complaint with a supervisory authority responsible for personal data protection if you consider that the processing of your personal data violates Regulation (EU) 2016/679.
10. Providing personal data is required by the Controller in order to provide a response and deliver information or in order to prepare, conclude and perform a contract. The consequence of not providing personal data required by the Controller is the inability to provide a response and deliver information or the inability to prepare, conclude and perform a contract.
11. Your personal data will not be subject to profiling, and automated processing will be performed only by the IT systems supporting the Controller’s website, e-mail system, and the automated invoicing and debt collection system.
12. The information obligation with respect to the personal data received will be fulfilled by the Controller after obtaining personal data, no later than within one month, or at the time of the first communication with the person concerned.
13. The information obligation will be fulfilled depending on the source of obtaining the data and the available communication medium:
a. in the case of receiving data from a form on the website, the obligation will be fulfilled after completing and sending the form, by redirecting to a link to this document
b. in the case of receiving data in the form of a business card, the obligation will be fulfilled by sending electronic correspondence containing a link to this document
c. after receiving traditional correspondence, the obligation will be fulfilled by sending a reply to such correspondence either in traditional form or electronically, containing a link to this document
d. after receiving electronic correspondence, the obligation will be fulfilled by sending an electronic reply to such correspondence containing a link to this document
e. after receiving data from publicly available sources and registers, the obligation will be fulfilled after an initial meeting or conversation by sending electronic correspondence containing a link to this document
f. after receiving data by purchasing a commercial database of contact details, the obligation will be fulfilled by sending electronic correspondence containing a link to this document
14. If it is necessary to erase your data, all collected personal data will be deleted from media and registers or anonymized if deletion would disrupt the data structure. In each case we will make efforts to fulfill your requests. However, it may turn out that this is technically or organizationally impossible or involves an excessive use of forces and resources – in such a case, we will inform you about the inability to fulfill the request and the reasons for it.