GDPR Information Clause

In accordance with Article 13(1) and (2) of Regulation (EU) No. of the European Parliament and of the Council 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR"), we inform you as follows:

1. The controller of your personal data is PONZIO POLSKA Sp. z o.o. with its registered office in Cekanowo, 22 Płocka Street, 09-472 Słupno, Poland ("Controller");
2. The Controller processes your personal data:
   • as it is necessary for the performance of the contract concluded with you or for undertaking actions carried out at your request and aimed at the conclusion of the contract;
   • as it is necessary to achieve objectives of legitimate interest of the Controller in the conclusion and performance of the contract with you or your employer which is a client (recipient, supplier), associate, collaborator or other entity which cooperates or intends to establish direct or indirect cooperation with the Controller;
   • for purposes other than those specified above and necessary to pursue the legitimate interests of the Controller;
   • for the purpose of marketing the Controller's products and services to your employer/enterprise, or for the purpose of possible litigation, investigation and defence against claims;
   • in order to carry out the obligations incumbent upon the Controller as a party/participant of a legal relationship, in particular with your employer/enterprise;
   • in order to perform the duties required of the Controller by the law;
3. The personal data will not be transferred to a third country/international organisation;
4. Your personal data will be stored by the Controller:
   • for a period necessary to achieve the objectives set out in Article 2, i.e. the performance of the contract, the obligations related to its performance or the completion of activities aimed at concluding such a contract (in the absence of its conclusion);
   • and thereafter for a period of time until the prescription of any claims which may arise in connection with the performance of the contract concluded with you or the expiration of obligations imposed on the Controller by the law;
   • until they become obsolete for the purposes stipulated in Article 2;
5. Your personal data may be transferred to the following recipients or categories of recipients:
   • public administration authorities and entities performing public tasks or acting on behalf of such authorities, tax authorities, judicial authorities;
   • entities that provide support and operation of IT tools and systems and provide and support business operations services for the Controller;
   • collaborators cooperating with the Controller (including investors, contractors), other associates, insurers and their representatives, clients (recipients and suppliers) and their representatives;
   • other persons for the purposes stipulated in Article 2 in the scope necessary to maintain the continuity and undisturbed course of the Controller's business, safety of employees, protection of property, performance of contracts and obligations incumbent on the Controller;
6. You have the right to access the content of your personal data and the right to rectify, erase, limit the processing, transfer the data, withdraw your consent, and object, to the extent and in accordance with the provisions of the GDPR, and the right to lodge a complaint with a supervisory authority;
7. In order to exercise your rights, the proper address of the Controller shall be: Cekanowo, ul.Płocka 22, 09-472 Słupno, Poland;
8. Providing personal data by you is voluntary, but necessary:
   • to conclude the contract with your employer/enterprise or undertake actions on demand aimed at concluding the contract with the Controller, with direct or indirect participation of entities cooperating with the Controller as stipulated in Article 5;
   • for the Controller to perform other activities in order to achieve other objectives as stipulated in Article 2;
   and the consequence of not providing, limiting or erasing personal data is the absence or an obstacle against the conclusion of the contract or the performance by the Controller of activities requiring the disposition of this data;
9. Your personal data will not be processed by automated means, including in the form of profiling.