Data protection notice for business partners (O_ES_PL)

1. Data Controller

TECHNOFORM EDGE BOND SOLUTIONS POLAND Sp. z o.o. with its registered office in Skawina at ul. Za Górą 23A, 32-050 Skawina, entered into the Registry of Entrepreneurs by the District Court for Kraków-Śródmieście in Kraków, the 11th Commercial Division of the National Court Register KRS under National Court Register KRS number: 0000828941, State Statistical Number REGON: 385789087, Tax Identification Number NIP: 6762579007.

For any questions regarding data protection, feel free to contact the Data Controller in writing, with the note „Personal Data,” at the address of our registered office or via e-mail at: kontakt [at] technoform [dot] com

2. Data Collection Method

Data provided by Counterparties: If an agreement is directly concluded between you and Technoform Edge Bond Solutions Sp. z o.o., providing your personal data is voluntary, but necessary for the purposes of the conclusion of an agreement and the maintenance of your cooperation with the Data Controller. If you are not concluding an agreement directly with the Data Controller, providing your personal data may constitute your professional duty. Not providing your data will result in the inability to perform the above actions by the Data Controller.

Data collected from other sources: We may collect your personal data from publicly available sources, such as registers of entrepreneurs (e.g., the Business Activity Central Register and Information Record CEiDG and National Court Register KRS), to verify information provided by the Counterparties. The scope of data processed in such a case will be limited to publicly available data in relevant registers. We may also collect your personal data from entities in which you are employed or which you represent. In this case, the scope of data processed will include information necessary to implement the agreement between Technoform Edge Bond Solutions Sp. z o.o. and such an entity, e.g., information concerning the termination of your employment by a given entity, as well as changes in your contact data and job title.

3. The Purpose of Processing

The personal data you provide us with during the initiation or course of our cooperation, prior to and after the conclusion of an agreement, as well as after its termination, is processed by the Data Controller in compliance with the rules set forth in GDPR. We process the date you provide us with primarily for the purposes of implementing the concluded agreement. The data may be processed in connection with actions we perform in the scope of pursuing our legitimate interests. For this purpose, we may process your data to, i.a., exercise our rights in relation to the pursuit of claims and legal and organisational support. Sometimes your data may be processed in relation to the performance of duties imposed on us by specific regulations and for accounting, bookkeeping, and tax settlement purposes. At the same time, we emphasize that, in the case of performing other operations concerning your data and using it in any other way, the processing is always conducted on the basis of your consent to data processing.

4. The Basis of Processing

Your personal data will be processed:

in connection with the business of the Data Controller and in order to enable the Data Controller to establish and maintain economic relations (perform transactions) with you and contact you or your employer (if the processing of your data is related to employment in a company cooperating with the Data Controller).
We process your personal data for this purpose because it is necessary to achieve the purpose of the processing – the implementation of an agreement or taking steps preceding the conclusion of an agreement, i.e., pursuant to Art. 6(1)(b) of GDPR;
in connection with the performance of legal duties imposed on the Data Controller (e.g., the duty to issue an invoice or any other document required in accordance with the law or as part of fulfilling its other legal duties requiring it to share data requested by competent authorities and courts), i.e. pursuant to Art. 6(1)(c) of GDPR;
for marketing purposes of the Data Controller – in particular, to promote the offer, products, and services of the Data Controller. As part of its marketing, the Data Controller processes all your data for marketing purposes based on its so-called legitimate interest, indicated in Art. 6(1)(f) of GDPR. The legitimate interest in question is the desire to stay in touch with its customers and show them its range and special offers.
in all other cases – based on your consent, defining the purposes of data processing in each case, regardless of when it was expressed, i.e., pursuant to Art. 6(1)(a) of GDPR.

If the basis for the processing of your personal data is your consent, you have the right to revoke your consent at any time, which will not affect the legitimacy of personal data processing carried out up to the revocation of your consent.

5. Data Retention Period

Your personal data will be processed and retained for a period at least equivalent to the limitation period in regard to mutual claims. If court, enforcement, or mediation proceedings are initiated, the data retention period shall be extended for the entire duration of the proceedings until they are finally concluded, the court’s decision approving the settlement reached before a mediator becomes final, or the enforcement proceedings are concluded upon the full collection of debt; however, it may not be retained for longer than three (3) years from the date of issue of a final decision to dismiss the proceedings because the entire debt has been collected. If your data is processed in connection with the ongoing communication, the Data Controller will retain your data for up to five (5) years from the most recent interaction. This period allows the Data Controller to find information, inquiries, and issues submitted by you if such a need arises, for instance, to ensure the appropriate quality of service. All data processed for accounting and tax purposes is processed for up to five (5) years from the end of the calendar year in which the tax obligation arose.

The Data Controller will remove your personal data within one (1) year from the end of the data processing period.

6. Personal Data Recipients

Recipients of your personal data will include employees and partners of the Data Controller authorised to process personal data in this scope, as well as the trading partners of the Data Controller, i.e., its suppliers and customers, and entities comprising the Technoform capital group, with whom your data must be shared to perform the purpose of its processing in an appropriate manner.

However, under no circumstances will the Data Controller offer or sell your personal data to entities not involved in the transactions concluded between the Data Controller and you or your employer (if your data is processed in connection with your employment in a company cooperating with the Data Controller). Other recipients of your personal data may include entities providing accounting, HR, payroll, legal, IT, and hosting services to the Data Controller.

7. Your rights

The person concerned has the following rights in regard to our processing of personal data:

right to access their personal data – you can submit a request for information to us at any time concerning the scope and rules of processing of your personal data;
right to data rectification – at any time, you can request us to rectify or update your data if it is incorrect or outdated. For the avoidance of doubt, TECHNOFORM EDGE BOND SOLUTIONS POLAND Sp. z o.o. may approach you with a request to provide information enabling the identification of your personal data and confirm the change or update of your data;
right to restriction of processing – if the scope of your personal data we process for a given procedure is too broad, you may request us to restrict the scope of processing. Provided that your request does not contradict the legal requirements we have to comply with, or if it is unnecessary for the implementation of the agreement, we will restrict the processing of your personal data to the required minimum or cease to process your data;
right of erasure (right to be forgotten) – if we process your personal data without a legal basis or process it, even though it is no longer necessary for the purposes of its collection – you have the right to request the erasure of your personal data from our databases and systems. We will honour your request if there exists no other legitimate interest for the processing of your personal data or obligation to continue processing your personal data. In each case, we will attempt to honour your request to the fullest extent possible, and if this is not possible, we will try to modify your data so that it can no longer be attributed to you (as part of so-called pseudonymization):
right to data portability – in the cases where we process your personal data on the basis of consent or in relation to the performance of an Agreement, and the processing is done by automated means (e.g. in an IT system), we will export your data processed by us, on your request, to a separate file in a common format to allow you to transfer it to a different data controller.

The rights indicated above may be exercised by notifying the Data Controller in writing at the address of our registered office with the note „Personal Data” or via e-mail at: kontakt [at] technoform [dot] com

8. The Right to Object

Aside from the above, we would like to inform you that you have the right to object to the processing of your personal data. If the scope of your personal data processed by us on the basis of public interest or legal interest of Technoform Edge Bond Solutions Sp. z o.o. or any other third party is too broad (inadequately so), you have the right to request the restriction of the processing of your personal data. You have the same right if, at any time, you decide that you do not want us to process your personal data for the purposes of direct marketing. After you raise your objection, we will no longer process your data in this scope and for this purpose unless it is necessary due to the existence of any other important legitimate bases for our processing of your personal data, overriding your interests, rights, and freedoms; or to establish, pursue, or defend our claims.

9. The Right to Lodge a Complaint

If we have violated the rules of processing your personal data, you are entitled to lodge a complaint directly with a supervisory authority – the President of the Personal Data Protection Office.

When exercising this right, it is necessary to provide a full description of the situation and indicate which action violates, in your opinion, your rights or freedoms. The complaint should be lodged directly with the supervisory authority.

10. The Rules of Processing

Taking into consideration that the Data Controller – Technoform Edge Bond Solutions Sp. z o.o. – prioritizes the proper performance of all its duties under GDPR and the regulations included in Polish legislation and the implementation of rules described in external documents concerning the protection of personal data, we request that your read the content of the Privacy Policy available at www.technoform.com, which includes relevant information on the methods, purposes, and bases of our processing of personal data and indicates your rights in relation to personal data processing. The Privacy Policy is also available at the registered office of the Data Controller (ul. Za Górą 23A, 32-050 Skawina).