Dear Sir/Madam,
In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ L 119, 4.5.2016, p.1-88, commonly referred to as GDPR), as well as Polish regulations adopted to facilitate the application of the GDPR and other applicable legal provisions, we hereby inform you that:
The administrator of personal data is BRXPL Spółka z ograniczoną odpowiedzialnością, with its registered office in Legnica, ul. Rumiankowa 46, 59-220 Legnica, email address: biuro@brxpl.pl, hereinafter referred to as BRXPL Sp. z o.o. or the Administrator.
2.
he processing of personal data will be carried out:
a)
based on consent [Article 6(1)(a) of the GDPR] for the purpose of ensuring communication, handling inquiries, as well as marketing and promotion of products and services;
b)
based on a contract [Article 6(1)(b) of the GDPR] for the purpose of taking actions prior to the conclusion of a contract at the request of the data subject or for the performance of a contract to which the data subject is a party;
c)
based on legal provisions [Article 6(1)(c) of the GDPR] for the purpose of fulfilling a legal obligation imposed on the Administrator;
d)
based on the legitimate interest of the Administrator [Article 6(1)(f) of the GDPR] for the purpose of securing or pursuing potential claims.
3.
Personal data will be processed:
a)
until the consent is withdrawn;
b)
for the duration of the contract;
c)
for the time necessary to fulfill the Administrator's legal obligation (e.g., arising from tax or accounting regulations);
d)
for the purpose of securing or pursuing potential claims of the Administrator.
4.
Rights of the data subject:
a)
the right to access their personal data;
b)
the right to rectify data if the data processed by the Administrator is incorrect or incomplete;
c)
the right to request the Administrator to delete the data;
d)
the right to request the Administrator to restrict the processing of data;
e)
the right to object to the processing of data based on the legitimate interest of the Administrator;
f)
the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office, if the processing of their personal data by the Administrator violates the provisions of the EU GDPR regulation.
5.
Personal data may be disclosed by the Administrator only to entities authorized to obtain information under applicable legal provisions or data processing agreements. Categories of data recipients: Partners providing technical services (development and maintenance of IT systems and websites), legal service partners, postal operators, companies specializing in document destruction.
6.
Personal data will not be subject to automated processing, including profiling.
