Privacy Policy and Cookies Policy

Chapter I – Privacy policy

Pursuant to Article 13(1) and (2) of General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (general data protection regulation), we inform that:

1. The controller of personal data pursuant to Article 4(7) of the GDPR is KOFAMA Koźle S.A., ul. Chłodna 51, 00-867 Warsaw, NIP: 7490005177, REGON: 531029024, KRS: 0000406958.

2. Providing personal data by you is voluntary, however, failure to provide data qualified as necessary for the performance of the contract to which the data subject is a party prevents the conclusion and performance of the contract, and thus the performance of the desired service.

3. The Controller acquires and processes the following personal data:

• -name and surname
• -correspondence address
• -phone number
• -e-mail address
• -company name – (if applicable)
• -NIP number – (if applicable)
• -business address – (if applicable)

4. Personal data has been acquired from the contact form, during conversations, telephone contacts, e-mail correspondence, during meetings and will be processed for the purpose of:

• -provision of services, including the performance of the concluded contract and the sale of products,
• -ongoing contact resulting from the concluded contract or from the actions taken to conclude it,
• -enabling the provision of electronic services, including handling requests,
• -ongoing contact resulting from the concluded contract or from the actions taken to conclude it,
• -direct e-marketing and promotion of own products and services,
• -responding to sent questions, conducting correspondence,
• -fulfilling legal obligations on the Data Controller in connection with the necessity to store accounting evidence,
• -defense against claims and pursuing claims of the legally justified interest of the Data Controller, until the expiry of the limitation period for claims in accordance with the Civil Code.

Legal basis: Art. 6(1) of the GDPR

5. The Controller processes data in accordance with the law, collects it for specified, lawful purposes and does not further process it in a manner incompatible with those purposes. Data is collected only to the extent adequate, necessary and essential in relation to the purposes for which it is processed. The Controller does not process special categories of personal data. Providing data is voluntary, but necessary for the purpose of providing services.

6. Your personal data will not be transferred to third countries or international organizations.

7. The recipients of your personal data are:

• -persons authorized by the Controller and entities providing services to the controller,
• -entities whose data processing is necessary for the performance of the concluded contract, or its conclusion,
• -entities to whom the Controller has entrusted the processing of personal data (processors) on the basis of concluded agreements,
• -entities entitled to receive them under mandatory provisions of law.

8. The Controller makes every effort to protect the personal data of customers and users against unauthorized access by third parties and in this regard applies organizational and technical security measures corresponding to the risk of processing personal data. The Controller does not provide personal data to any unauthorized recipients.

9. The Controller stores personal data for the period necessary to achieve the purposes of processing and the contract and no longer than the time specified in the applicable legal provisions and no longer than is necessary for the purposes of the legitimate interests pursued by the Controller. In connection with the marketing of products and services offered by the Controller, these data are stored until the consent is withdrawn.

10. In connection with the processing of your personal data, you have the right to:

• -access the content of processed data (Art. 15 of the GDPR),
• -rectification of processed data (Art. 16 of the GDPR),
• -erasure of processed data (Art. 17 of the GDPR),
• -restriction of data processing (Art. 18 of the GDPR),
• -data portability (Art. 20 of the GDPR),
• -object to data processing (Art. 21 of the GDPR),
• -lodge a complaint in connection with the processing of personal data by the Controller to the PUODO (Art. 77 of the GDPR).

11. The data provided to us is stored and processed by us in accordance with appropriate security measures that meet the requirements of Polish law. All our employees are obliged to comply with our Policies and procedures related to confidentiality, security and privacy.

12. If you have any questions regarding this Privacy Policy or your personal data, you can contact us by writing to: aneta.pecak@kofama.pl.