Personal data processing clause

General information clause concerning personal data processing in KRADEX Sp. z o.o.

In accordance with the General Data Protection Regulation of 27 April 2016 (GDPR), we inform you that:

KRADEX Sp. z o.o., ul. Minerska 4, 04-506, Warsaw, Poland, KRS [National Court Register Number] 0000753987, REGON [National Business Registry Number] 381603418, NIP [Tax Identification Number] 9522187930, Contact tel.: (+48 22) 613-08-88, (+48 22) 812-10-68, e-mail: kradex@kradex.com.pl is the Controller of your personal data.

The Controller has appointed Mr Grzegorz Grabowski as the Data Protection Officer, who can be contacted at the following e-mail address: iod@pccbiodo.pl

We process your personal data in accordance with the following principles:

  1. if you are interested in cooperation and contact has been initiated to discuss the details, we will process your personal data in order to take actions to implement the said cooperation, in accordance with art. 6 (1) (b) of GDPR. We will not retain your data longer than it is commonly accepted in case of such contacts (no longer than 3 years), unless you become our Customer, in which case we process the data in accordance with point 2);

  2. if you are our Customer, we will process your personal data in order to perform a contract to which you are a party in accordance with art. 6 (1) (b) of GDPR and, after the expiration of a contract under the provisions of tax law and after statute of limitation of claims, under art. 6 (1) (b) and (f) of GDPR, respectively, for the period specified in those provisions;

  3. If you are an employee of a company with which we cooperate, your personal data are processed in order to perform services or contracts that bind us to your employer who has made those data available to us based on your consent or contract. We will use the data only for the period in which a contract is performed and then, if necessary, until the guarantee and the warranty have been served and until the statute of limitation of claims;

  4. if you are an employee of our company, regardless of the form of employment, we process your personal data in order to conclude and perform a contract, i.e. in accordance with art.6 (1) (b) and (c) of GDPR, as the processing is performed under the provisions of law. In particular, in case of employment under an employment contract in accordance with art. 221, art. 222 , art. 223 of the Labour Code and in accordance with other provisions related to the obligations of the Controller as an employer, with data regarding an image (employee’s portfolio) being processed under art. 6 (1) (a) of GDPR, i.e. based on the consent. For employees hired under civil-law contracts or B2B contracts the relevant civil code provisions are applicable. Data will be processed for the period required by the Labour Code (in most cases no longer than 10 years after the termination of cooperation) or by the civil code (in most cases no longer than 3 years after the termination of cooperation).

  5. if you enter the premises of our company, we process data also in the form of an image recorded by the CCTV on the premises of our company, the purpose of which is to ensure occupational health and safety and to protect the employees and the legal basis for processing of such data is art. 6 (1) (f) of GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller. An image is stored for no longer than 3 months.

  6. when you initiate contact through on-line forms on our websites, via e-mail or through social networking services, we will contact you to answer your question, which is our legitimate interest in accordance with art. 6 (1) (f) of GDPR. In this case personal data will be stored for the period commonly accepted in case of such communication (no longer than 3 years). We may also receive a request from you along with contact details from other data Controllers who make it possible to send such forms to us, e.g. https://www.facebook.com;

  7. If we contact you as part of our marketing activities, in this process we pursue out legitimate interest in accordance with art, 6 (1) (f) of GDPR. In such a case your data will be retained until you file the objection;

  8. when you are using our website https://www.kradex.com.pl we process data in accordance with the Cookie Policy available at: https://www.kradex.com.pl/privacypolicy

Personal data may also be processed based on a voluntary consent (art. 6 (1) (a)) of GDPR). You have the right to withdraw your consent at any time without affecting the lawfulness of the processing which took place before consent withdrawal. Data are stored until the consent is withdrawn.

Recipients of your data shall be only institutions authorised under law and entities with which we cooperate.

Furthermore, the recipients of your personal data may be entities providing us with: accounting and bookkeeping services provider.

Your data are not subject to profiling by our company but, when you are using our website or when, with your consent, we post your image on social media sites, they may be subject to profiling by other controllers such as Facebook Ireland Ltd or Google. Personal data will not be transferred to a third country or to an international organisation if the relevant conditions defined in chapter 5 of GDPR are not met but may be transferred to third countries by separate controllers indicated above.

You have the right to request access, rectification, deletion or restriction of processing of your data as well as the right to object to processing, the right to request transfer of your data and the right to lodge a complaint with a supervisory authority (the Personal Data Protection Office).

We would like to inform you that the provision of your personal data is voluntary but necessary for performance of the purposes mentioned above. In you do not provide these data, we will not be able to perform some or all of the assumed purposes.

Your data are not subject to automated profiling.