Information clause for customers of the company Werner Kenkel Bochnia Spółka z o.o.

Information clause for customers of the company Werner Kenkel Bochnia Spółka z o.o.

Implementation of the information obligation on the protection of personal data

Pursuant to art. 13 par. 1 and par. 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), we inform that:

  1. The administrator of your personal data is the company WERNER KENKEL BOCHNIA Spółka z o.o. ul. A. Mitery 7, 32-700 Bochnia, tel. +48 14 648 36 00, e-mail sekretariat.bochnia@wernerkenkel.com.pl
  2. Contact with the Data Protection Officer is possible at the following e-mail address: iod@comp-net.pl.
  3. The purpose of the processing, the legal basis and the period of storage of personal data are presented:
    The purpose of processingLegal basis for processingThe period of data storage

    Guest book

    processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety

    Up to 3 months

    Execution of contracts

    • processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (article 6 paragraph 1 point. b GDPR)
    • processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – in connection with contracts

    Until the end of the contract and then in accordance with legal requirements

    Financial settlement

    processing is necessary for compliance with a legal obligation to which the controller is subject (article 6 paragraph 1 point. c GDPR)

    Until the end of the contract and then in accordance with legal requirements

    Vindication

    przetwarzanie jest niezbędne do wypełnienia obowiązku prawnego ciążącego na administratorze (art. 6 ust. 1 lit. c RODO)

    Marketing

    processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – markenting

    To withdraw consent

    Ensuring the safety of persons and property (video monitoring)

    processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety

    Up to 3 months

    Entry book

    processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety

    Until the end of the contract and then in accordance with legal requirements

    Social media

    The administrator processes personal data of people who liked our social profiles maintained on popular social networks. The data is processed to enable our profiles to be run and managed on an ongoing basis, including to communicate with the community and to organize events, on the basis of specific functionalities of individual social media and their regulations. The data of community members are also processed for statistical and analytical purposes and may be processed for the purpose of pursuing claims and defending against claims. The legal basis for the processing of your personal data is our legitimate interest (article 6 paragraph 1 point. f GDPR).

    Until you delete the data from the social networking site

    The purpose of processing

    Guest book

    Legal basis for processing

    processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety

    The period of data storage

    Up to 3 months

    The purpose of processing

    Execution of contracts

    Legal basis for processing
    • processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (article 6 paragraph 1 point. b GDPR)
    • processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – in connection with contracts
    The period of data storage

    Until the end of the contract and then in accordance with legal requirements

    The purpose of processing

    Financial settlement

    Legal basis for processing

    processing is necessary for compliance with a legal obligation to which the controller is subject (article 6 paragraph 1 point. c GDPR)

    The period of data storage

    Until the end of the contract and then in accordance with legal requirements

    The purpose of processing

    Vindication

    Legal basis for processing

    przetwarzanie jest niezbędne do wypełnienia obowiązku prawnego ciążącego na administratorze (art. 6 ust. 1 lit. c RODO)

    The period of data storage
    The purpose of processing

    Marketing

    Legal basis for processing

    processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – markenting

    The period of data storage

    To withdraw consent

    The purpose of processing

    Ensuring the safety of persons and property (video monitoring)

    Legal basis for processing

    processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety

    The period of data storage

    Up to 3 months

    The purpose of processing

    Entry book

    Legal basis for processing

    processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (article 6 paragraph 1 point. f GDPR) – caring for safety

    The period of data storage

    Until the end of the contract and then in accordance with legal requirements

    The purpose of processing

    Social media

    Legal basis for processing

    The administrator processes personal data of people who liked our social profiles maintained on popular social networks. The data is processed to enable our profiles to be run and managed on an ongoing basis, including to communicate with the community and to organize events, on the basis of specific functionalities of individual social media and their regulations. The data of community members are also processed for statistical and analytical purposes and may be processed for the purpose of pursuing claims and defending against claims. The legal basis for the processing of your personal data is our legitimate interest (article 6 paragraph 1 point. f GDPR).

    The period of data storage

    Until you delete the data from the social networking site

  4. As regards the processing of personal data, you have the following rights:
    • Right of access by the data subject – using this right you have the opportunity to obtain information, which data, how and for what purpose are processed,
    • Right to rectification – using this right you can report to us the need to correct incorrect data or supplement data resulting from an error in the collection or processing of data,
    • Right to erasure (‘right to be forgotten’) – using this right you can submit a request to delete the data. If the application is justified, we will immediately delete the data. This right does not apply, however, if personal data are processed for purposes related to the administrator’s legal obligations or to perform a task carried out in the public interest or within the public authority entrusted to the administrator.
    • Right to restriction of processing – using this right you can submit a request to limit the processing of data, in case of questioning the correctness of the data being processed. If the application is valid, we can only store the data. Unblocking of processing may take place after the reasons justifying the limitation of processing have ceased to exist.
    • Right to data portability – it applies only in cases where data is processed on the basis of consent and in an automated manner.
    • Right to object – by using this right you can object to the processing of your data at any time, if they are processed on the basis of art. 6 par. 1 letter e or f. (Legally legitimate interest or public interest). After accepting the application in this matter, we are obliged to stop processing the data for this purpose. In this situation, after reviewing your application, we will no longer be able to process your opponent’s personal data on this basis, unless we demonstrate that there are valid legally valid grounds for processing of data that are legitimately regarded as superior to your interests, rights and freedoms. or grounds for establishing, investigating or defending claims.
    • The right to withdraw consent to their processing – at any time without affecting the legality of the processing, if the processing was made on the basis of the consent expressed prior to its withdrawal.
  5. You have the right to lodge a complaint to the supervisory body when you feel that the processing of your personal data regarding your violation of the provisions of the GDPR.
  6. Providing your personal data is voluntary, but necessary for the purposes presented in the table, except for purposes arising from the law, where provision of data is mandatory.
  7. Your data will not be subject to automated decision making, including in the form of profiling.
  8. In some situations, we have the right to forward your data further (if necessary) to be able to perform our services. We may transfer your data, in particular to the following recipients:
    a) to the processing entities to whom we entrust data processing activities,
    b) entities authorized under the law,
    c) other data recipients, e.g. banks, entities delivering shipments.
  9. Your data will not be transferred to a third country or international organization, excluding situations arising from legal provisions.