GDPR - Sertop

INFORMATION CLAUSE ON PERSONAL DATA PROCESSING FOR THE CONTRACTORS OF SERTOP SP. Z O.O.

Pursuant to Article 13 section 1 and 2 of the Regulation (EU) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter GDPR), SERTOP Sp. z o.o. with its registered office in Tychy, ul. Przemysłowa 58, 43-100 Tychy, provides the following information:

PERSONAL DATA CONTROLLER

SERTOP sp. z o.o., ul. Przemysłowa 58, 43-100 Tychy, KRS (National Court Register): 0000099079, NIP (Tax Identification Number): 646-032-38-25, REGON (National Official Business Register): 270543286

Controller’s contact details:

• email address: inspektor@sertop.com.pl (Data Protection Officer: Dorota Moskalewicz)

• postal address: SERTOP sp. z o.o., ul. Przemysłowa 58, 43-100 Tychy

PURPOSE OF PERSONAL DATA PROCESSING

Your personal data will be processed for proper performance of the agreements concluded with the Contractors, including handling correspondence, inquiries, work and purchase orders for products and services that enable SERTOP sp. z o.o. to conduct business, handling complaints and claims, maintaining and managing business and professional relations, pursuing and defending against claims.

PERSONAL DATA STORAGE PERIOD
Your data will be processed for the duration of the agreement between SERTOP sp. z o.o. and the Contractor, afterwards the data will be stored until the end of the limitation period of any claims of the parties under the agreement; or until the expiry of the data retention obligation, in particular retention of books of accounts.

LEGAL BASIS FOR PERSONAL DATA PROCESSING

The lawful basis for data processing are set out in Article 6(1)(b), (c) and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”) – the processing is necessary for the performance of the agreement, compliance with the legal obligation to which the controller is subject, or results from legitimate interests pursued by the controller (business activities).

DATA SOURCE AND DATA PROVISION REQUIREMENT

If you contact us on behalf of the Contractor, please be informed that your personal data have been provided to us by the above-mentioned entity in connection with the performance of the trade agreement that we have concluded. To the extent that your personal data have been provided by you, the data provision is voluntary but necessary for the proper performance of the agreement concluded between SERTOP sp. z o.o. and the Contractor.

CATEGORIES OF PERSONAL DATA PROCESSED

The data received are mainly: first and last name, email address, telephone number, position and possibly other data provided voluntarily for the performance of the agreement.

PERSONAL DATA TRANSFER

Your data may only be transferred to the entities that provide services to SERTOP sp. z o.o. (e.g. IT service providers, legal advisers, etc.), or to the entities authorised to obtain data under applicable law. The data will not be processed in an automated manner, including profiling.

DATA SUBJECT RIGHTS

In connection with the processing your data by SERTOP sp. z o.o., you have the following rights:

• the right to access your data, including to obtain a copy of the data,

• the right to request rectification of your data,

• the right to data erasure (in certain circumstances),

• the right to lodge a complaint with a supervisory authority for personal data protection,

• the right to restrict processing of your data ,

• the right to object to processing of your data on the basis of the controller’s legitimate interest.