I.WHO IS YOUR DATA CONTROLLER?
Under Art. 13, section 1 and 2 of the General Data Protection Regulation of the 27th of April 2016 (Regulation of the European Parliament and Council (EU) No. 2016/679) (hereinafter referred to as: the “Regulation”) we hereby inform that:
1) Your Data Controller is ELMO Spółka Akcyjna with the address and seat at: Żelków Kolonia, Akacjowa 1, 08-110 Siedlce.
2) For personal details protection issues you can contact the Data Protection Inspector at the following email: iod@kpl.net.pl.

II. WHAT IS THE PUPROSE OF DATA PROCESSING?
3) Your personal details will be processing for the following purposes
a) complete the contract with ELMO Spółka Akcyjna where you act a party – under Art. 6 section 1 item b) of the Regulation;
b) complete legal responsibilities of the controller (in particular the responsibilities that result from the tax and accounting laws) – under Art. 6 section 1 item c) of the Regulation;

III. WHO CAN ACCESS YOUR DATA?
4) Your data can be provided to the entities acting for the Controller such as legal, public authority bodies and entities that complete public tasks or act on the public authority body orders to the extent and for the purposes that result from the common law regulations and the agreements concluded.

IV. HOW LONG WILL WE PROCESS YOUR DATA?
5) Your personal details will be stored for the period of time that results from the legal regulations, in particular for the period of time specified in the tax and accounting laws. Your personal details will be stored at maximum until the claims become statute-barred from the contract term end date in particular to be able to resolve disputes or pursue claims.

V. WHAT ARE YOUR RIGHTS CONNECTED WITH DATA PROCESSING?
6) You have:
a) a right to access your personal details;
b) a right to correct your personal details;
c) a right to delete your personal details as specified by law;
The Controller is required to delete your personal details as long as one of the following premises is met:
– your personal details are no longer needed for the purposes they have been collected for,
– you have revoked your consent which personal details processing is based on,
– your personal details were processed unlawfully;
You cannot exercise your right to delete your personal details when the legal regulations require the controller to keep processing your personal details for the purposes necessary to determine, pursue or defend claims by the Controller;
d) a right to limit your personal details processing: a right to ask the Controller to limit your personal details processing in the following cases:
– when you question the correctness of the personal details processed by the Controller – for the period of time required to check the correctness of this data by the Controller;
– when your personal details are processed unlawfully and you have objected to your data being deleted and instead asked to limit its processing;
– when the Controller no longer needs your personal details for the processing purposes but you need them to determine, pursue or defend claims. When you exercise your right to limit your personal details processing the Controller can process your personal details but not store them only with your consent or to determine, pursue or defend claims or to protect the rights of other individual or legal person or in connection with major public interest of the European Union or a member state;
e) a right to transfer data:
you have the right to receive your personal details provided to the Controller in a structured, commonly used machine-readable format and order this personal details be sent to other data Controller if technically feasible.
The data Controller is required to share data provided by you that meet the following conditions altogether:
– processing is automated, i.e. with no paper sets;
– data is processed based on the consent or in connection with the agreement concluded.
The exercised data transfer right cannot have any negative impact on the rights and freedoms of other people;
f) a right to object the processing of your data: you have the right to object at any moment – due to your particular situation – to data processing based on the legally sound data controller interest including profiling. The data controller cannot continue processing of your personal details after the objection unless there are major legally sound personal details processing grounds that are superior to your interests, rights and freedoms or to determine, purse or defend claims. You also have a right to object to your personal details processing at any moment for the personal details processed for the marketing purposes.
The right to object to data processing is not applicable when:
– personal details are processed based on the consent;
– personal details processing is required to complete the agreement where you act as a party or take actions at your request before the agreement is concluded with the data controller;
– processing is required to complete the legal obligation of the data controller.
You have the right to notify of exercising your rights in the following manner:
a) in writing, at the Controller’s address,
b) via email.

Where can you complain against how your personal details are processed?
You have a right to complain to the supervisory body in particular in the member state of your regular residence, work or where the alleged violation took place when you determine that the processing of your personal details violates the rules of the General Data Protection Regulation of the 27th of April 2016.

When ELMO Spółka Akcyjna is entitled to collect personal details?

Personal details must be shared to be able to conclude an agreement. Personal details can be shared voluntarily but you will not be able to conclude an agreement when they are not shared. Data can be processed in an automated manner including profiling.