Information clause

Information clause

Dear Sirs

In relation to implementation of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27th April 2016 (hereinafter: GDPR) as for 25th May 2018, and with the view to care for safety of your personal data processing, we hereby wish to inform you on some essential matters. Please read the below information and do not hesitate to contact us if you have any questions.

1. Who is the controller of your personal data?

The controller of personal data you provided is:

AMAFRUT EXPORT – IMPORT Sp z o.o.

with the registered office in Częstochowa at ul. Wieluńska 14, 42-217 Częstochowa, entered into
the Entrepreneurs Register of the National Court Register kept by the District Court in Częstochowa with registration number KRS [National Court Register]: 0000119491, a holder of tax identification number NIP: 573-21-13-870, and business statistical number Regon: 150318361

You may contact the controller of personal data as follows:
a. in writing, via traditional mail to the address of the Company’s registered office,

Please make all questions regarding personal data processing and related to exercising rights connected with personal data in writing and send it to the address of the controller’s registered office.

2. Which data are we talking about?

Your personal data is processed to establish or maintain business relationships between you and our Company, carry out commercial analysis, exchange information on market trends, pursue possible claims, and to execute agreements and understandings binding you and the Company.
Therefore, we hereby inform you that we will process your identification data, address, and contact data.

3. What is the purpose for data processing?

Any processing of your data must be based on proper legal grounds, in accordance with applicable regulations.

a. In the case of contracts and agreements that bind you and the Company, personal data will be processed to fulfill their provisions;
- legal basis for data processing is: art. 6(1)(b) GDPR, which means that processing is required to fulfil the contract, or art. 6(1)(f) of GDPR, which means legitimate interests of the controller;

b. Personal data may be processed to pursue possible claims within the frameworks of business activity carried out by the Company;
- legal basis for data processing in this case is: art. 6(1)(b) GDPR, which means that processing is required to fulfil the contract, or art. 6(1)(f) of GDPR, which means legitimate interests of the controller;

c. Personal data may be processed to fulfil legal and tax obligations within the frameworks of business activity carried out by the Company;
- legal basis for data processing in this case is: art. 6(1)(b) GDPR, which means that processing is required to fulfil the contract, or art. 6(1)(f) of GDPR, which means legitimate interests of the controller, or art. 6(1)(c) of GDPR, which means the fulfilment of legal obligation of the controller.

d. Personal data may be processed for statistical purposes and to carry out analysis, which does not result in obtaining contact data, and where the result is not the basis for making decisions regarding specific natural person;
- legal basis for data processing in this case is: art. 6(1)(f) GDPR, which means legitimate interests of the controller.

e. Your personal data may also be processed due to other legitimate interests connected with business activity carried out by the Company - in this case to establish or maintain business relationships between you and our Company, to carry out commercial analysis, or exchange information on market trends,
- legal basis for data processing in this case is: art. 6(1)(f) GDPR, which means legitimate interests of the controller.

4. Is / Will personal data be processed in any other manner?
       
As a business entity, which carries out commercial and service provisions business activity, we keep your data confidential. Due to the need to provide us with an appropriate organization, e.g. in
the field of IT infrastructure or current affairs concerning our business, as entrepreneurs - your personal data can be passed, i.e. revealed or made available, to the following category of recipients:

a. to our employees, partners, and contractors, who cooperate with use to fulfil purposes defined in clause 3;

b. to other business entities which cooperate with the Company in the course of service execution;

c. to service providers which supply our Company in technical, IT, and organizational solutions which allow for service provisions by the Company, and to manage our company (it refers in particular to ICT services, courier companies, and post offices)

d. to providers of legal and consultancy services, including providers assisting the Company in pursuing possible claims (e.g. legal offices and debt collection companies);

- legal basis for data processing in this case is: art. 6(1)(f) GDPR, which means legitimate interests of the controller.

We hereby kindly inform that the entities, which at the order of

AMAFRUT EXPORT – IMPORT Sp z o.o.

process personal data, act under contract for entrusting personal data (in compliance with art. 28 GDPR), or on the basis of confidentiality statements.

The controller of personal data informs that he does not process your personal data based on automatic decisions, including that it does not carry out profiling.

5. Where do we have your personal data from?

We received your personal data from you to establish or in the course of cooperation, from websites, and from commercial database available on the market.

6. How long personal data is processed?

We kindly inform that personal data will be processed for the period of time required to fulfil purposes defined in clause 3:

a) within frameworks of execution of provisions covered by the contract or agreement - we keep your personal data for the term of the contract, not longer however than for 10 years of the contract or agreement termination,

b) to pursue claims in relation to execution of contract, or our legitimate interests, not longer however than for 5 years of the period of limitation of claims,

c) to fulfil obligations resulting from provisions of law, including tax and accountancy obligations, not longer however than for 10 years,

d) for statistical and file keeping purposes, not longer however than for 10 years,

e) for other than aforementioned legitimate purposes connected with business activity carried out by the Company, not longer however than for 10 years,

After the expiration of the aforementioned periods of time, your personal data will be removed and anonymised.

7. What are your rights?

In relation to processing of your personal data by AMAFRUT EXPORT – IMPORT Sp z o.o., you are entitled to:

- demand access to your data and to demand data rectification,

- demand removal of specific personal data,

- demand to limit processing,

- demand transfer, and

- object against data processing, and to make complaint to supervising authority dealing with personal data protection in the case it is believed that processing violates regulations of the European Union and Polish concerning personal data protection.

You may exercise the aforementioned rights by contacting personal data controller: in writing, via traditional mail to the address of the Company’s registered office