Principles of personal data processing

PRINCIPLES OF PERSONAL DATA PROCESSING

Dear Sir or Madam,

Due to the fact that from 25 May 2018 Regulation (EU) 2016/679 of the European Parliament and the European Council of 27 April 2016 on the protection of individuals with regard to processing of personal data and on free movement of such data, and repealing directive 95/46/EC ( General Data Protection Regulation) is applicable,  we provide you with information regarding personal data.

Please be advised that KAZA DESIGN Sp z.o.o. is the controller of your personal data. Above mentioned company is based in Łodygowice, adres: ul. Żywiecka 212, 34-325 Łodygowice, entered into the National Court Register by the District Court of Bielsko-Biała, 8th Commercial Division of the National Court Register under KRS number: 0000381485, REGON: 241808110, Tax ID: 5532486891; share capital: PLN 30000 - paid in full

1) Purpose and basis of processing

a. In the case of willingness to conclude or concluding a contract, your personal data will be processed:

• In the case of contact in order to conclude a contract, your data are processed to take action on your request before entering into a contract, e.g. conducting negotiations or presenting the offer (based on Article 6 (1) letter b of the GDPR);
• In the case of conclusion of a contract, the data necessary for its conclusion and execution are being processed for the purpose of its conclusion and execution (incl. contact in connection with its exectution, payment confirmation) and on its basis (based on Article 6 (1) letter b of the GDPR);
• in order to fulfill legal obligations of the Controller , including tax obligations, issuing VAT invoices, examining complaints, fulfilling the information obligation (based on Article 6 (1) letter c of the GDPR);

In addition, your personal data will be processed:

• for archival purposes (evidence) to secure information in the event of a legal need to prove facts, based on the legitimate interest of the Controller (based on Article 6 (1) letter f of the GDPR), which is the archiving of documentation,
• in order to determine, pursue or defend against possible claims on the basis of the legitimate interest of the Controller (based on Article 6 (1) letter f of the GDPR), is determination, pursuing and defense against claims,
• for marketing of their own products and services on the basis of the legitimate interest of the Controller (based on Article 6 (1) letter f of the GDPR), which is marketing of the company's own products and services.

b. Commercial information

If you consent to this, your personal data will be processed for the purpose of sending commercial information based on your consent (based on Article 6 (1) letter a) of the GDPR),

c. Telephone contact

If you contact us via telephone, in matters that are not related to the execution of the contract, personal data provided by you are being processed in order to serve a request or an inquiry. The legitimate interest of the Controller is the basis for processing in such case (Article 6 (1) letter f of the GDPR), which is based on handling requests and inquiries in connection with the business operations. Your personal data are also being processed for the purpose of possible establishment, pursuing or defense against claims, based on the legitimate interest of the Controller (based on Article 6 (1) letter f of the GDPR), which is determining, pursuing and defending against claims.

d. Conducting traditional correspondence and via e-mail

In the case of directing an e-mail or a traditional correspondence to the Controller, which is not related to the execution of the contract, the personal data contained in it are being processed in order to serve the request or inquiry submitted in the correspondence. The legitimate interest of the Controller is the basis for processing in such case (Article 6 (1) letter f of the GDPR), which is based on correspondence and serving requests and inquiries in connection with the business operations. Your personal data are also being processed for the purpose of possible establishment, pursuing or defense against claims, based on the legitimate interest of the Controller (based on Article 6 (1) letter f of the GDPR), which is determining, pursuing and defending against claims.

e. Contact of contractor's or customer's employees

If you contact us by phone or e-mail in relation to the contract concluded with your employer or activities undertaken at their request, prior to the conclusion of the contract - any data obtained in this way are being processed for the purpose of performing the concluded contract and taking steps  at their request prior to the conclusion of the contract (based on Article 6 (1) letter  b of the GDPR) as well as for the purpose of pursuing and defense against claims, which is the legitimate interest of the Controller based on protection of its rights (based on Article 6 (1) letter f of the GDPR).

If you contact us in a matter other than the concluded contract, your data are being processed in order to answer the asked questions or provide solutions, and to defend against claims. The legitimate interest of the Controller based on answering the given question or solving a case in connection with the conducted business operations as well as pursuing and defense against claims are the grounds for data processing (based on Article 6 (1) letter f of the GDPR).

2) Information about the required/voluntary data provision

To the extent required by the purpose of conclusion and execution of the contract, providing your data is a precondition of the conclusion and performance of the contract. Their provision is voluntary, but also necessary for the conclusion and performance of the contract.

The provision of your data takes place on the basis of your request for us to take action before the conclusion of the contract, is voluntary, but also necessary for us to comply with the actions you request.

We may also request your data if it is necessary to comply with our legal obligations. In such case, providing data is a statutory requirement and is mandatory.

If you contact us in order to ask a question or to indicate a problem to solve, the provision of your contact data is voluntary, but also necessary to receive an answer to the question or solution of the  presented case.

Providing data necessary to send commercial information is voluntary, but necessary to receive commercial information. Failure to do so makes it impossible to send commercial information

3) Recipients of data

We may share your personal data with the entities we use to process them, for example: law firms, IT companies, providing access to e-mail, postal operators. The Controller will also share your data when it is necessary due to the obligation imposed on them.­

4) Transferring data to Third Countries

We do not pass your data outside of the EU/European Economic Area.

5) Data processing time

Your data:

1. The data acquired on the basis of your request to take action by the Controller before the conclusion of the contract are being processed for the time necessary to take action on your request,
2. the data acquired for the purpose of conclusion and performance of the contract are being processed until it is fulfilled,
3. processed for the purpose of meeting a legal obligation - until it is fulfilled,
4. processed in connection with a legitimate interest of the Controller - until it is fulfilled or in the case of you reporting an objection effectively.
5. Data processed on the basis of your consent - until it is withdrawn.

The above processing periods may be extended no more than by the time necessary to establish, pursue or defend against claims. After this period, personal data will be anonymized or deleted.

6) Your rights:

1. the right to access your data and receive a copy of them
2. the right to rectify (correct) your data
3. the right to delete data.
4. data processing restrictions
5. the right to object to the processing of data:
6. the right to transfer data:
7. the right to lodge a complaint with the supervisory body. If you feel that we are processing your data unlawfully, you may submit a complaint to the President of the Office of Personal Data Protection.
8. the right to withdraw consent to the processing of personal data

At any time, you have the right to withdraw your consent to the processing of personal data that are being processed on the basis of your consent. Withdrawal of your consent will not affect the lawfulness of the processing that has been completed on the basis of your consent prior to its withdrawal.

If you want to exercise the above rights, please contact us by e-mail or traditional mail using the following data:

KAZA DESIGN Sp. z o.o. based in Łodygowicach, adres: ul. Żywiecka 212, 34-325 Łodygowice

e-mail: sprzedaz@nobonobo.pl

(Monday to Friday from 8 am to 4 pm).

7) Making decisions in an automated way

Please be advised that we will not make decisions concerning you in an automated manner, you will not be subjected to profiling.