In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of
April 27, 2016 on the protection of individuals with regard to the processing of personal data
and on the free movement of such data and repealing Directive 95/46 / EC (General Regulation
on data protection "GDPR"), whereas the confidentiality of data and the protection of our clients' privacy is a priority for us, we want you to learn how we process and protect your personal data and what rights you have in connection with processing your personal data.
The following rules apply from May 25, 2018.
1. The administrator of your data is Kuźnia Kwiatów Agnieszka Serafin, NIP: 5170403509, Styków 506, 36-060 Głogów Młp. (Hereinafter: Kuźnia or Administrator)
2. If you have questions about the method and scope of processing your personal data regarding the operation of the Forge, as well as your rights, you can contact us via the email address: kuzniakwiatow @ o2. pl, by phone: 667424685 or by traditional post writing to the address given in point 1
3. The personal data administrator - Kuźnia - processes your personal data on the basis of applicable law, concluded contracts or based on consent given.
4. Your personal data is processed for the purpose / purposes:
4.1 conclusion and performance of the contract - (legal basis: art.6 par.1 b GDPR - performance of the contract) for the duration of the contract and settlements after its termination,
4.2 fulfillment of legal obligations imposed on us (legal basis: art.6 par.1c GDPR - legal obligation) e.g. issuing and storing accounting documents, considering complaints for the time in which the regulations require storing documents, e.g. tax regulations,
4.3 redress (legal basis: art.6 par.1c RODO - legitimate interest of the Administrator) - for the period in which the claims arising from the contract expire,
4.4 for the purpose of creating analyzes and statistics for the Administrator's internal needs (legal basis: Article 6 paragraph 1 f of the GDPR - legitimate interest of the Administrator) for a period of 5 years,
4.5 direct marketing (legal basis: art.6 par.1 f GDPR - legitimate interest of the Administrator) for a period of 5 years, or in the case of consent to direct marketing until its withdrawal,
4.6 answers to customer inquiries (legal basis: art.6 par.1 b GDPR - performance of the contract) for a period of 5 years
5. In other cases, your personal data shall be processed only on the basis of previously granted consent to the extent, purpose and time limit specified in the content of the consent (legal basis: art.6 par.1 and RODO - consent of the person);
6. In connection with the processing of data for the purposes referred to in point 4, the recipients of your personal data may be:
6.1 public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for purposes that result from the provisions of generally applicable law;
6.2 other entities which, on the basis of relevant contracts signed with the Forge, process personal data for which the Administrator is the Forge, e.g. banks (for payment purposes), accounting company (for the settlement of receipts, invoices)
7. Your personal data will be stored for the period necessary to achieve the purposes set out in points 4 and 5, taking into account the periods resulting from generally applicable laws. For the purposes of accounting and for tax reasons, we process data for a period of 5 years from the end of the calendar year in which the tax obligation arose. The basis is art. 70 points 1 of the Tax Ordinance Act of August 29, 1997.
8. In connection with the processing of your personal data, you have the following rights:
8.1 the right to access personal data, including the right to obtain a copy of this data;
8.2 the right to request the rectification (correction) of personal data - if the data is incorrect or incomplete;
8.3 the right to request the deletion of personal data (so-called the right to be forgotten) if:
8.3.1 the data are no longer necessary for the purposes for which they were collected or otherwise processed,
8.3.2 the data subject has objected to the processing of personal data,
8.3.3 the data subject has withdrawn consent to the processing of personal data, which is the basis for data processing and has no other legal basis for data processing,
8.3.4 personal data is processed unlawfully,
8.3.5 personal data must be deleted in order to comply with the obligation arising from legal provisions;
8.4 the right to request a restriction of the processing of personal data - if:
8.4.1 the data subject questions the correctness of personal data,
8.4.2 the processing of data is unlawful, and the data subject opposes the deletion of data, demanding instead their restrictions,
8.4.3 The administrator no longer needs data for his purposes, but the data subject needs them to establish, defend or assert claims,
8.4.4 the data subject has objected to the processing of data, until it is determined whether legally justified grounds on the part of the Administrator prevail over the grounds of objection;
8.5 right to data portability - if the following conditions are met jointly:
8.5.1 data processing takes place on the basis of a contract concluded with the data subject or on the basis of the consent expressed by that person,
8.5.2 processing takes place in an automated manner;
8.6 right to object to data processing - if the following conditions are met jointly:
8.6.1 there are reasons related to your particular situation, in the case of data processing on the basis of a task carried out in the public interest or as part of exercising public authority by the Administrator,
8.6.2 processing is necessary for purposes arising from legitimate interests pursued by a third party, except for situations where the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, in particular, prevail over these interests, in particular, when the data subject is a child.
9. If the processing of personal data is based on the consent of the person for the processing of personal data (Article 6 paragraph 1 point a of the GDPR), you have the right to withdraw this consent at any time. This withdrawal does not affect the compliance of the processing that was carried out on the basis of consent before its withdrawal, with applicable law.
10. If you become aware of unlawful processing of personal data by the Forge, you have the right to lodge a complaint with the supervisory authority competent in matters of personal data protection of the President of the Office for Personal Data Protection as follows:
10.1 by post to the correspondence address ul. Stawki 2, 00-193 Warsaw
10.2 via the electronic inbox available at: https://www.uodo.gov.pl/pl/p/kontakt.
11. In a situation where the processing of personal data is based on the consent of the data subject, providing your personal data to the Forge is voluntary.
12. Providing your personal data is mandatory when the premise for processing personal data is a legal provision or an agreement concluded between the parties. The lack of data will result in the inability or limited possibility of: providing services for you, answering your query.
13. The processing of your data will not be subject to automated decision making, including profiling referred to in art. 22 paragraph 1 and 4 GDPR.
14. The administrator informs that he does not use cookies on his profile on Facebook and does not profile users who visit his profile on the above. portal or query via it. However, the Administrator is not responsible for actions taken by the Facebook social network.