Information clause for customers of the company Werner Kenkel Bochnia Spółka z o.o.

Implementation of the information obligation on the protection of personal data

Pursuant to art. 13 par. 1 and par. 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), we inform that:

1. The administrator of your personal data is the company WERNER KENKEL BOCHNIA Spółka z o.o. ul. A. Mitery 7, 32-700 Bochnia, tel. +48 14 648 36 00, e-mail sekretariat.bochnia@wernerkenkel.com.pl
2. Contact with the Data Protection Officer is possible at the following e-mail address: iod@comp-net.pl.
3. The purpose of the processing, the legal basis and the period of storage of personal data are presented:

   The purpose of processing	Legal basis for processing	The period of data storage
   Guest book	processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety	Up to 3 months
   Execution of contracts	processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (article 6 paragraph 1 point. b GDPR) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – in connection with contracts	Until the end of the contract and then in accordance with legal requirements
   Financial settlement	processing is necessary for compliance with a legal obligation to which the controller is subject (article 6 paragraph 1 point. c GDPR)	Until the end of the contract and then in accordance with legal requirements
   Vindication	przetwarzanie jest niezbędne do wypełnienia obowiązku prawnego ciążącego na administratorze (art. 6 ust. 1 lit. c RODO)
   Marketing	processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – markenting	To withdraw consent
   Ensuring the safety of persons and property (video monitoring)	processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety	Up to 3 months
   Entry book	processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety	Until the end of the contract and then in accordance with legal requirements
   Social media	The administrator processes personal data of people who liked our social profiles maintained on popular social networks. The data is processed to enable our profiles to be run and managed on an ongoing basis, including to communicate with the community and to organize events, on the basis of specific functionalities of individual social media and their regulations. The data of community members are also processed for statistical and analytical purposes and may be processed for the purpose of pursuing claims and defending against claims. The legal basis for the processing of your personal data is our legitimate interest (article 6 paragraph 1 point. f GDPR).	Until you delete the data from the social networking site

   The purpose of processing	Guest book	Legal basis for processing	processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety	The period of data storage	Up to 3 months
   The purpose of processing	Execution of contracts	Legal basis for processing	processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (article 6 paragraph 1 point. b GDPR) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – in connection with contracts	The period of data storage	Until the end of the contract and then in accordance with legal requirements
   The purpose of processing	Financial settlement	Legal basis for processing	processing is necessary for compliance with a legal obligation to which the controller is subject (article 6 paragraph 1 point. c GDPR)	The period of data storage	Until the end of the contract and then in accordance with legal requirements
   The purpose of processing	Vindication	Legal basis for processing	przetwarzanie jest niezbędne do wypełnienia obowiązku prawnego ciążącego na administratorze (art. 6 ust. 1 lit. c RODO)	The period of data storage
   The purpose of processing	Marketing	Legal basis for processing	processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – markenting	The period of data storage	To withdraw consent
   The purpose of processing	Ensuring the safety of persons and property (video monitoring)	Legal basis for processing	processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety	The period of data storage	Up to 3 months
   The purpose of processing	Entry book	Legal basis for processing	processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety	The period of data storage	Until the end of the contract and then in accordance with legal requirements
   The purpose of processing	Social media	Legal basis for processing	The administrator processes personal data of people who liked our social profiles maintained on popular social networks. The data is processed to enable our profiles to be run and managed on an ongoing basis, including to communicate with the community and to organize events, on the basis of specific functionalities of individual social media and their regulations. The data of community members are also processed for statistical and analytical purposes and may be processed for the purpose of pursuing claims and defending against claims. The legal basis for the processing of your personal data is our legitimate interest (article 6 paragraph 1 point. f GDPR).	The period of data storage	Until you delete the data from the social networking site

4. As regards the processing of personal data, you have the following rights:
   • Right of access by the data subject – using this right you have the opportunity to obtain information, which data, how and for what purpose are processed,
   • Right to rectification – using this right you can report to us the need to correct incorrect data or supplement data resulting from an error in the collection or processing of data,
   • Right to erasure (‘right to be forgotten’) – using this right you can submit a request to delete the data. If the application is justified, we will immediately delete the data. This right does not apply, however, if personal data are processed for purposes related to the administrator’s legal obligations or to perform a task carried out in the public interest or within the public authority entrusted to the administrator.
   • Right to restriction of processing – using this right you can submit a request to limit the processing of data, in case of questioning the correctness of the data being processed. If the application is valid, we can only store the data. Unblocking of processing may take place after the reasons justifying the limitation of processing have ceased to exist.
   • Right to data portability – it applies only in cases where data is processed on the basis of consent and in an automated manner.
   • Right to object – by using this right you can object to the processing of your data at any time, if they are processed on the basis of art. 6 par. 1 letter e or f. (Legally legitimate interest or public interest). After accepting the application in this matter, we are obliged to stop processing the data for this purpose. In this situation, after reviewing your application, we will no longer be able to process your opponent’s personal data on this basis, unless we demonstrate that there are valid legally valid grounds for processing of data that are legitimately regarded as superior to your interests, rights and freedoms. or grounds for establishing, investigating or defending claims.
   • The right to withdraw consent to their processing – at any time without affecting the legality of the processing, if the processing was made on the basis of the consent expressed prior to its withdrawal.
5. You have the right to lodge a complaint to the supervisory body when you feel that the processing of your personal data regarding your violation of the provisions of the GDPR.
6. Providing your personal data is voluntary, but necessary for the purposes presented in the table, except for purposes arising from the law, where provision of data is mandatory.
7. Your data will not be subject to automated decision making, including in the form of profiling.
8. In some situations, we have the right to forward your data further (if necessary) to be able to perform our services. We may transfer your data, in particular to the following recipients:
   a) to the processing entities to whom we entrust data processing activities,
   b) entities authorized under the law,
   c) other data recipients, e.g. banks, entities delivering shipments.
9. Your data will not be transferred to a third country or international organization, excluding situations arising from legal provisions.