GDPR
Dear Sirs,
In Eco Value Sp. z o.o., being aware of the importance of the processed personal data, we attach the utmost importance to ensuring its appropriate security level. Personal data belongs to key information resources of the company and as such we ensure adequate protection.
The processing of your personal data is carried out in accordance with the principles relating to processing:
– lawfulness, fairness and transparency,
– purpose limitation,
– data minimization,
– regularity,
– storage limitation,
– integrity and confidentiality.
In fulfilment of the obligations of the data controller set out in Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, we present the information due to the persons whose data we process in our company.
You can address any questions regarding the protection of your personal data to:
in writing: Eco Value Sp. z o.o., St. Barbara 9 Street, 41-100 Siemianowice Śląskie or electronically: kontakt@bioslomka.pl
INFORMATION FOR CUSTOMERS
Description of the categories of persons to whom the information refers: persons purchasing products from Eco Value Sp. z o.o.
ECO VALUE SP. Z O.O. informs – in accordance with Article 13(1) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the
protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as “GDPR” – that:
– the controller of your personal data is Eco Value Sp. z o.o. with its registered seat in Siemianowice Śląskie (41-100) at 9 St. Barbary Street,
– your personal data shall be processed in connection with entering into and performance of an agreement, whereby the legal basis for the processing is Article 6(1)(b) of GDPR – the processing is necessary for performance of the agreement to which the data subject is a party, and the purpose of the processing is entering into and performance of an agreement the subject of which is purchase/sale of products and/or services, including delivery of goods and handling of potential claims and delivery of correspondence to you,
– the processing of your data is also based on the legal basis, which is Article 6(1)(c) GDPR – the processing is necessary for compliance with a legal obligation imposed on the controller to keep records for a period determined by law, and the purpose of the processing is to keep the records for a period determined by law,
– furthermore, the processing of your data is carried out on the legal basis of Article 6(1)(f) GDPR – the processing is necessary for the purposes of the legitimate interests pursued by the controller, which are the defence and vindication of claims,
– your data will be disclosed to the following categories of recipients: authorized and trained data processors, processors on the basis of entrustment agreements concluded in writing, including those providing outsourcing services for accounting, IT and hosting, postal operators for the purpose of delivering correspondence,
– the data will be stored also after the execution of the contract, and their deletion will take place no later than 1 year after the event that occurs later – the end of the period of mandatory storage of accounting and tax documentation specified in the regulations or the end of the period of limitation for pursuing and defending claims specified in the regulations; with regard to data processed pursuant to Article 6(1)(f) of the GDPR – deletion will take place immediately after the possible objection has been taken into account,
– you have the right to request from the controller access to personal data concerning you, to request their rectification, erasure or restriction of their processing, the right to lodge a complaint to the President of the Office for Personal Data Protection,
– providing personal data is voluntary but necessary to conclude a contract, and the consequence of failing to provide data will be inability to conclude a contract.
In addition, pursuant to Article 21(1) GDPR, you have the right to object at any time – for reasons related to your particular situation – to the processing of your data based on 6(1)(f) GDPR.
INFORMATION FOR SUPPLIERS
Description of categories of persons concerned: natural persons who sold products or services to Eco Value Sp. z o.o.
Eco Value Sp. z o.o. informs – according to Article 13 (1) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as “GDPR” – that:
– the controller of your personal data is Eco Value Sp. z o.o. with its registered seat in Siemianowice Śląskie (41-100) at 9 St. Barbary Street,
– your personal data: first and last name (name), address of residence or registered office, Tax Identification Number (NIP), and other data you provide at your own discretion will be processed in connection with the conclusion and performance of an agreement, whereby the legal basis for the processing is Article 6(1)(b) of GDPR – the processing is necessary for the performance of an agreement to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into an agreement, and the purpose of the processing is to conclude and perform an agreement the object of which is the purchase and sale of products and/or services, as well as to provide you with correspondence,
– the processing of your data is also based on the legal basis, which is Article 6(1)(c) of GDPR – the processing is necessary for compliance with a legal obligation imposed on the controller to keep records for a period determined by law
– in the regulations, and the purpose of the processing is to keep the records for the time specified in the regulations,
– in addition, the processing of your data is carried out on the legal basis of Article 6(1)(f) of the GDPR – the processing is necessary for the purposes of the legitimate interests pursued by the controller, which are the defence and vindication of claims, as well as the possibility of contacting the provider in the future,
– your data will be disclosed to the following categories of recipients: authorized and trained data processors, processors on the basis of entrustment agreements concluded in writing, including those providing outsourcing services for accounting, IT, hosting, postal operators for the purpose of delivering correspondence,
– the data will be stored also after the execution of the contract, and their deletion will take place no later than 1 year after the event that occurs later – the end of the period of mandatory storage of accounting and tax documentation specified in the regulations or the end of the period of limitation for pursuing and defending claims specified in the regulations; with regard to data processed pursuant to Article 6(1)(f) of the GDPR – deletion will take place immediately after the possible objection has been taken into account,
– You have the right to request from the controller access to personal data concerning you, to request their rectification, erasure or restriction of their processing, the right to lodge a complaint to the President of the Office for Personal Data Protection,
– providing personal data is voluntary but necessary to conclude a contract, and the consequence of failing to provide data will be inability to conclude a contract.
In addition, pursuant to Article 21(1) GDPR, you have the right to object at any time – for reasons related to your particular situation – to the processing of your data based on 6(1)(f) GDPR.
INFORMATION FOR PERSONS WHO ARE REPRESENTATIVES OR EMPLOYEES OF SUPPLIERS OR WHO PURCHASE PRODUCTS OR SERVICES
Description of categories of persons affected by the information: persons who are representatives or employees of suppliers of products or services to Eco Value Sp. z o.o. or who buy products from Eco Value Sp. z o.o.
Eco Value Sp. z o.o. informs – according to Article 13 (1) and Article 14 (1) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as “GDPR” – that:
– the controller of your personal data is Eco Value Sp. z o.o. with its registered seat in Siemianowice Śląskie (41-100) at 9 St. Barbary Street,
– the legal basis for processing your personal data is Article 6(1)(f) GDPR – the processing is necessary for purposes resulting from legally justified interests pursued by the administrator – these interests are: a) conclusion and performance of a contract for the purchase and sale of products and services with a contractor disclosing the data of the employee (representative), b) defense and pursuit of claims by the administrator,
– the processing of your data is also carried out on the legal basis, which is Article 6(1)(c) GDPR – the processing is necessary for the fulfillment of a legal obligation incumbent on the controller to keep records of business operations for a period specified in the regulations, and the purpose of the processing is to keep records of business operations for a period specified in the regulations,
– the purposes of the processing are:
a. entering into and performing a contract for the purchase and sale of products and services with the person’s employer or an entity represented by the person,
b. defense and recovery of claims by the controller,
c. performance of the obligation to keep records of the business operation for the period of time specified in the legislation,
– the source of your personal data is the data subject or the data subject’s employer, or an entity represented by the data subject,
– the categories of personal data concerned are: name and surname, place of work, position,
– your data will be disclosed to the following categories of recipients: authorized and trained data processors, processors on the basis of contracts concluded in writing, including providers of outsourcing services for IT support, postal operators for the purpose of delivering correspondence,
– the data shall be erased no later than 1 year after the event which occurs later – the end of the period for the obligatory storage of accounting and tax documents as specified by the regulations or the end of the period of limitation for the assertion and defence of claims as specified by the regulations
– in the regulations, with regard to data processed on the basis of Article 6(1)(f) GDPR – deletion will take place immediately after any objection has been taken into account,
– you have the right to request from the controller access to personal data concerning you, to request their rectification, erasure or restriction of their processing, the right to lodge a complaint to the President of the Office for Personal Data Protection,
– providing personal data is voluntary, but necessary to present an offer at the request of the person to whom the data pertains, before concluding an agreement, and the consequence of failing to provide the data will be inability to present an offer.
In addition, pursuant to Article 21(1) GDPR, you have the right to object at any time – for reasons related to your particular situation – to the processing of your data based on 6 (1) (f) GDPR.
INFORMATION FOR APPLICANTS IN THE EMPLOYEE RECRUITMENT PROCESS
Description of the categories of persons to whom the information refers: persons applying in the employee recruitment process
Eco Value Sp. z o.o. informs – in accordance with Article 13 (1) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as “GDPR” – that:
– the controller of your personal data is Eco Value Sp. z o.o. with its registered seat in Siemianowice Śląskie (41-100) at 9 St. Barbary Street,
– the legal basis for the processing of your personal data is Article 6(1)(a) GDPR – the data subject has given consent to have his/her personal data processed for one or more specified purposes,
– the purpose of processing is to conduct current and future recruitment of employees by the controller, as well as to send correspondence,
– Your data will be disclosed to the following categories of recipients: authorized and trained data processors, processors on the basis of entrustment agreements concluded in writing, postal operators,
– your data will be stored no longer than until you withdraw your consent,
– you have the right to withdraw your consent at any time,
– withdrawal of consent does not affect the legality of processing, which was done on the basis of consent before its withdrawal,
– you have the right to demand from the administrator access to personal data concerning you, their rectification, erasure, restriction of their processing, the right to lodge a complaint to the President of the Office for Personal Data Protection,
– providing personal data is voluntary and necessary in order to participate in the recruitment process, and the consequence of failing to provide such data will be the inability to participate in the recruitment process.
INFORMATION OF PERSONS CONTACTING BY ELECTRONIC MEANS
Description of categories of persons affected by the information: persons who contact Eco Value Sp. z o.o. by electronic means
Eco Value Sp. z o.o. informs – according to Article 13 (1) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the
protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as “GDPR” – that:
– the controller of your personal data is Eco Value Sp. z o.o. with its registered seat in Siemianowice Śląskie (41-100) at 9 St. Barbary Street,
– the legal basis for processing your personal data is Article 6(1)(a) of GDPR – the data subject has given consent to have his/her personal data processed for one or more specified purposes,
– your personal data will be processed for the purpose of ongoing contact through electronic correspondence in processes related to the subject of the Administrator’s activity. The processing will take place on the basis of your consent, i.e., on the basis of Article 6(1)(a) of the GDPR or on the basis of Article 6(1)(f) of the GDPR – as necessary for the purposes resulting from the legitimate interests pursued by the Administrator.
– the recipients of your personal data may be entities supporting the Administrator in his/her business activity, in particular entities providing the Administrator with financial advisory services, legal services, IT services, as well as entities related to the capital and personally with the Administrator.
– your personal data will be stored until the completion of current contact via e-mail, but no longer than until you withdraw your consent or object to such processing.
– in connection with the processing of personal data, you have the right to access, rectify, erase, transfer or restrict the processing of your personal data, as well as the right to object to the processing of your personal data in the case where the data is processed pursuant to Article 6(1)(f) GDPR (legitimate interest of the Administrator). You also have the right to withdraw – at any time – your consent, where the basis for data processing is Article 6(1)(a) GDPR (consent), where the withdrawal of consent will not affect the legality of the processing, which was performed on the basis of your consent before its withdrawal.
– you also have the right to lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection.
– providing personal data is voluntary, however, it is necessary for effective contact with the Administrator.
– your personal data will be processed in IT systems; however the Administrator will not make decisions in an automated manner, including in the form of profiling.
INFORMATION FOR PERSONS USING THE CONTACT FORM
Description of the categories of persons affected by the information: persons contacting Eco Value Sp. z o.o. via the contact form placed on the website www.bioslomka.pl
Eco Value Sp. z o.o. informs – pursuant to Article 13 (1) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as “GDPR” – that:
– the controller of your personal data is Eco Value Sp. z o.o. with its registered seat in Siemianowice Śląskie (41-100) at 9 St. Barbary Street,
– the legal basis for processing your personal data is Article 6(1)(a) of GDPR – the data subject has given consent to have his/her personal data processed for one or more specified purposes,
– your personal data will be stored for the period necessary to contact you in relation to the inquiry submitted on the contact form, but no longer than until the withdrawal of consent.
– your personal data will not be processed in an automated manner and will not be profiled.
– in connection with the processing of your personal data, you have the following rights:
– the right to access your data and to receive a copy of it,
– the right to rectify (amend) your data,
– the right to erasure of your data (if according to you there is no basis for processing your personal data you may request that your data be erased),
– the right to restrict the processing of your personal data (you may request that the processing of your personal data is restricted solely to the storage thereof or the performance of agreed actions if, in your opinion, we have incorrect data or are processing it unfoundedly, or you do not want us to delete it because it is necessary for you to assert or defend your claims, or for the period of time that you raise an objection to the processing of your data
– the right to object to the processing of data: the objection “marketing” (you have the right to object to the processing of data for direct marketing purposes, if you exercise this right, we will cease to process the data for this purpose) and the objection due to a particular situation (you have the right to object to the processing of personal data on the basis of a legitimate interest
– for purposes other than direct marketing, as well as when the processing is necessary for the performance of a task carried out in the public interest or for the exercise of official authority vested in us. You should indicate to us the specific situation which in your opinion justifies us ceasing the processing covered by the objection, in which case we will cease to process your personal data unless we demonstrate that the grounds for our processing override your rights or that your data are necessary for us to assert or defend claims),
– right to data portability (you have the right to receive from us
– in a structured, commonly used and machine-readable format the personal data concerning you which has been provided to us on the basis of your consent or on the basis of a concluded contract, you may have this data sent directly to another entity,
– the right to lodge a complaint to the supervisory authority (if you think that we are processing your personal data unlawfully, you may lodge a complaint with the President of the Office for Personal Data Protection or other competent supervisory authority),
– the right to withdraw consent to the processing of personal data (at any time you can withdraw your consent to the processing of personal data processed on the basis of your consent, withdrawal of consent will not affect the legality of the processing, which was performed on the basis of your consent before its wi
– your personal data will not be processed in an automated manner and will not be profiled.
– in order to exercise your rights, the request should be addressed directly to the Controller of Personal Data of the Administrator,
– you have the right to lodge a complaint to the supervisory authority if you consider that the processing of personal data concerning you violates the provisions of the General Data Protection Regulation of 27 April 2016,
– your provision of data is voluntary, however, refusal to provide data may result in refusal of contact, including responding to inquiries submitted in the contact form.