Implementing the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC – General Regulation on the Protection data (Journal of Laws EU No. 2016, No. 119, p. 1), hereinafter: “RODO” Zakład Produkcyjno-Usługowy “Toolmakers” Limited Liability Company (“Administrator”) informs about the rules of processing your personal data and your rights in relation to the above.

The following rules apply from May 25, 2018.

If you have questions about the method and scope of processing your personal data by the Administrator, as well as your rights, please contact the Administrator at: 37-700 Przemyśl, ul. Obozowa 23, or use the e-mail inbox at: iod @ reduktory.com.pl

I. ADMINISTRATOR’S INDICATION
The administrator of your personal data is Zakład Produkcyjno-Usługowy “Tools” Limited Liability Company, 37-700 Przemyśl, ul. Obozowa 23, REGON: 650021929.

II. OBJECTIVES AND LEGAL BASIS FOR PROCESSING YOUR / DATA

PERSONAL

Your personal data in the form of an e-mail address and other data that may be included in e-mail correspondence with the Administrator are processed in connection with the correspondence and the saving of this correspondence on the Administrator’s e-mail server. E-mail is kept by the Administrator in connection with his business activity, the subject of which is service and commercial activities.
In addition, the Administrator processes your personal data for the purposes of:
1 / conclusion and performance of a contract for a work or provision of services (art.6 par.1 lit.b RODO);
2 / establishing contact with the Administrator, on the basis expressed by you

consent (art.6 par.1 lit.a RODO);

3 / for statistical purposes, consisting in preparation by the Administrator

internal analyzes and summaries (art.6 par.1 lit.f RODO);
4 / in order to ensure information and network security (art.6 par.1 lit.f RODO);

5 / in the event that it applies, related to the conduct of proceedings

contentious, as well as proceedings before public authorities and others

proceedings, including for the purpose of investigating and defending against claims (Article 6 paragraph 1

point f GDPR).

III. OBLIGATION TO PROVIDE PERSONAL DATA TO THE ADMINISTRATOR

Providing your personal data is a necessary condition for the conclusion and implementation of the contract for the provision of services or work and to contact the Administrator.

Failure to provide the indicated data will prevent the implementation of the above actions.
The Administrator, based on a legitimate interest, processes data specifying the manner in which the user uses the websites administered by the Administrator.

IV. INFORMATION ON THE RECIPIENTS OF YOUR PERSON / DATA

In connection with the processing of your personal data, they may be shared with the following recipients or categories of recipients:
1 / companies supporting the Administrator in conducting business activities, including

Administrator’s subcontractors, entities operating ICT systems,

entities providing tax, consulting, advisory and auditing services,

accounting;
2 / entities managing the Administrator’s website.

V. PERIODS OF PROCESSING PERSONAL DATA

Your personal data will be processed for the period necessary for the implementation of those indicated in point II purposes and legitimate interests indicated.

In the case of processing personal data on the basis of your consent, the data will be processed until such consent is withdrawn.

VI. THE RIGHTS OF THE PERSON WHO THE DATA CONCERNS

The administrator ensures that all persons whose data is processed by it have appropriate rights under the GDPR.

Therefore, you have the following rights:
1 / the right to access the data necessary to perform the contract, including the right to

obtain a copy of this data;

2 / the right to request the rectification (correction) of this data – if the data

are incorrect or incomplete;
3 / the right to request the deletion of data (so-called “right to be forgotten”)

if:
(a) the data are no longer necessary for the purposes for which they were collected or otherwise

processed;
b) the data subject has withdrawn the consent on which the processing is based and not

has a different legal basis for processing;
c) data is processed unlawfully;
d) data must be deleted in order to fulfill the obligation arising from

from legal regulations;

4 / the right to request a restriction of data processing – if:
a) the data subject contests the accuracy of the data;
b) data processing is unlawful and the data subject,

opposes the deletion of data, demanding instead their restrictions,
c) the administrator no longer needs data for his purposes, but the data subject

concern, needs them to establish, defend or pursue claims;

d) the data subject has objected to the processing of data – to

time to determine whether the legitimate grounds on the part of the administrator are

superior to the grounds of objection;
5 / the right to transfer personal data – if:
a) the processing takes place on the basis of a contract concluded with the data subject

relate to or based on the consent of such a person;

b) processing takes place by automated means;

6 / the right to object to the processing of personal data, including profiling, when:
a) there are reasons related to your particular situation;
b) data processing is based on the necessity for the purposes arising

from the legitimate interest of the Administrator, referred to in point Il above.

VII. THE RIGHT TO WITHDRAW THE CONSENT FOR THE PROCESSING OF PERSONAL DATA

To the extent that you gave consent to the processing of personal data, you have the right to withdraw it. Withdrawal of consent does not affect the lawfulness of data processing that was carried out on the basis of consent before its withdrawal.

VIII. THE RIGHT TO COMPLAIN WITH A SUPERVISORY AUTHORITY

In the event that the Administrator’s processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the competent supervisory authority.

IX. PROFILING AND AUTOMATED DECISION MAKING

The administrator does not make automated decisions in relation to personal data, including profiling referred to in art. 22 paragraph 1 and 4 GDPR.

X. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES OR

INTERNATIONAL ORGANIZATIONS

The administrator does not transfer personal data to third countries or international organizations.