Pursuant to art. 13 sec. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection) Journal of Laws UE.L 2016 No. 119, p. 1, as amended. – hereinafter GDPR, we inform:
1. The administrator of personal data is ERKO sp.z o.o. sp. k., ul. Fr. Jana Hanowskiego 7, 11-042 Jonkowo, KRS 000692932, REGON 004462128, NIP 7390204693, tel. 89 512 92 73, email: erko@erko.pl
2. The function of the data protection officer is performed by Tomasz Trzciałkowski, email: kontakt@idpo.pl, tel. +48511793443, www.idpo.pl/kontakt.
3. Personal data will be processed only to enable the proper functioning of the website available at: https://erko.pl.
4. The consent (Article 6 (1) (a) of the GDPR) to the processing of personal data contained in cookies is voluntary (contractual requirement). Lack of consent to the processing of data using cookies may prevent the proper functioning of the pages listed in point 3. Details on the use of cookies are described in the Cookie Policy.
5. The legal basis for the processing of personal data is also Art. 6 sec. 1 lit. f) GDPR, i.e. the legitimate interest of the data controller in the form of direct marketing, where applicable.
6. The data subject also has the right to object at any time, as referred to in Art. 21 sec. 1 GDPR against data processing for direct marketing purposes, including profiling, to the extent that the processing is related to direct marketing and / or profiling.
7. Personal data may be made available to entities cooperating with the administrator only in connection with the purpose for which they were collected. Recipients of personal data may include entities providing the data controller with legal, IT, marketing, advertising, analytical, statistical and consulting services.
8. Personal data processed on the basis of the consent of the data subject will be processed by the administrator until its revocation, and in the event that the data processing is based on the legitimate interest of the administrator, until an effective objection to the processing is raised, pursuant to art. 21 sec. 2 GDPR.
9. The consent expressed by the data subject may be withdrawn at any time without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
10. The data subject has the right to request the administrator to access his personal data, rectify it, delete or limit processing, as well as the right to transfer data. Applications for the use of the above-mentioned rights should be addressed directly to the data controller or the data protection officer.
11. The data subject has the right to lodge a complaint with the supervisory authority. In Poland, the supervisory body is the President of the Personal Data Protection Office (https://uodo.gov.pl/pl/p/kontakt).
12. Personal data will not be subject to automated decision making, but will be profiled for analytical and statistical purposes, which does not have legal effects on the data subject, nor does it significantly affect them.
13. The data subject has the right not to be profiled.
