INFORMATION FROM THE ADMINISTRATOR
The administrator of your personal data is GFS Poland SP. z O. O. with its Registered office in Bielsko-Biała at UL. Komorowicka 110, tel: +48 33 333 90 92, e-mail: biuro@gfsp.pl.
2. The administrator can be contacted: GFS Poland SP. z O. O. , 43-300 Bielsko-Biała, ul. Komorowicka 110
by phone: +48 33 333 90 92
e-mail address: biuro@gfsp.pl
Personal data of our contractors and their representatives and other persons who contact us in other matters will be processed for the following purposes:
implementation of the contract of sale, on the basis of art. 6 para.1 lit. B of the regulation and art.. 535 of the Civil Code,
to provide information or to respond to your request pursuant to Article 6 (1) lit. b of the regulation or Article 6 (1) (a) F of the regulation as a legitimate interest of the administrator, which is to provide appropriate customer service,
acceptance, consideration and implementation of complaints, on the basis of art. 6 para.1 lit. b of the regulation or Article 6 (1) (a) F of the regulation as a legitimate interest of the administrator, which is to provide appropriate customer service and enable customers to exercise their rights,
acceptance, consideration and implementation of the return of goods-art. 6 para.1 lit. b of the regulation or Article 6 (1) (a) F of the regulation as a legitimate interest of the administrator, which is to provide appropriate customer service and enable customers to exercise their rights,
enforcement of claims against or by customers-Article 6 (1) (B) b of the regulation or Article 6 (1) (a) F of the regulation as a legitimate interest of the administrator, which is to pursue claims against customers and defend against customer claims,
implementation of newsletters ordered by you-art. 6 para. 1 lit. b of the regulation or Article 6 (1) (a) F of the regulation as a legitimate interest of the controller, which is the marketing of own services
conducting competitions, publishing the results of competitions, distribution of prizes-art. 6 para.1 lit. B regulation,
sending, receiving and recording of correspondence-Article 6 (1) (a) b of the regulation or Article 6 (1) (a) F of the regulation as a legitimate interest of the administrator, which is to provide appropriate customer service.
Personal data is collected as follows:
on the basis of the explicit consent expressed by the user and in cases where the law authorizes the administrator to process personal data,
by electronic means,
in a phone conversation,
through websites www.gfsp.pl, www.incola.com.pl and www.gfsprofessional.pl through:
contact forms,
complaint forms,
collection of cookies (see Cookie Policy).
Personal data is not shared with other administrators.
Personal data may be disclosed to processors at the request of and on behalf of the controller in order to ensure the proper organization, operation and performance of contracts:
IT service providers,
courier or postal companies,
payment intermediary companies,
marketing services company
providers of legal and advisory services, in particular law firms and debt collection agencies,
providers of HR and accounting services
Facebook Instagram since the data controller uses the services of hosting companies such as Microsoft, Google and Facebook, Instagram or Likedin platforms, personal data may be transferred outside the European Union, therefore, the data controller verifies that the above-mentioned companies provide documents on their websites confirming the safeguards recommended by the GDPR.
Personal data are processed for the period necessary for the performance of the contract, and for the purpose of pursuing claims for the period resulting from the provisions of civil law. We process the data necessary for accounting and for tax reasons for a period of 5 years from the end of the calendar year in which the tax obligation arose. After that, the data is deleted or anonymized.
Entering into a contract with the personal data administrator and data processing, including keeping records, must comply with the law, therefore providing your personal data may be a condition for entering into a contract. The Administrator is obliged to process the data due to the statutory obligation due to the accounting. Failure to provide data may result in a refusal to perform the contract due to the inability to perform it, to issue a book document to mi.n. sales invoices.
The provision of your personal data may be a contractual obligation or a condition for entering into a contract. Also for accounting or tax reasons, the Administrator has a legal obligation to process your data, which means that in this case the provision of data is a statutory requirement.
The data controller does not use automated profiling of personal data and automated decision-making.
Personal data are processed only for the purpose for which they were collected.
Each data subject shall have the right granted by the European legislator to object at any time to processing of personal data concerning him or her.:
access — obtaining confirmation from the administrator whether their personal data are processed. If the data subject processes personal data, he or she shall have the right granted by the European legislator to obtain access to the personal data and to obtain the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the data have been or will be disclosed, the period for which the data are stored or the criteria used to determine them, the right to request rectification, erasure or restriction of processing of personal data concerning him or her, and the right to object to such processing (art. 15 GDPR);
to rectify-requests for rectification of incorrect personal data or completion of incomplete data (art. 16 GDPR);
to delete the data-to request the deletion of their personal data if the controller no longer has a legal basis for their processing or the data are no longer necessary for the purposes of processing (art. 17 GDPR);
to restrict the processing-request the restriction of the processing of personal data (art. 18 GDPR), when:
the accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.,
the processing is unlawful and the data subject opposes the erasure of the personal data and the restriction of their use.,
the controller no longer needs the personal data concerning you, but they are required by the data subject for the establishment, exercise or defence of legal claims,
the data subject has objected to processing pending the determination of whether the legitimate grounds of the controller override those of the data subject.;
for data transfer-to receive, in a structured, commonly used and machine-readable format, the personal data concerning the data subject which the data subject has provided to the controller, and to request that the data be sent to another controller, if the data are processed on the basis of the data subject’s consent or a contract concluded with the data subject and if the data are processed by automated means (art. 20 GDPR);
to withdraw the consent at any time and without giving a reason, but the processing of personal data carried out before the withdrawal of consent will still remain lawful. Withdrawal of consent will result in the controller ceasing to process personal data for the purpose for which the consent was expressed.
In order to exercise the above rights, the data subject should contact the controller using the contact details provided and inform him / her of which rights and to what extent he / she wishes to exercise them.
14. The data subject has the right to lodge a complaint with a supervisory authority, which in Poland is the president of the Office for Personal Data Protection with its Registered office in Warsaw, ul. Stawki 2, who can be contacted as follows:
by post: Stawki 2, 00-193 Warszawa;
through the electronic filing box available on the website: https://www.uodo.gov.pl/pl/p/kontakt;
by phone: (22) 531 03 00.