WHAT THE RODO IS?

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC.

 

DEFINITIONS

Personal data administrator – is an entity that independently or jointly with others sets the purposes and methods of personal data processing – i.e. decides how personal data is processed and is responsible for their processing in accordance with the provisions.

User – any natural person providing personal data to HQ Plastics, including visiting the Website.

Website – website run by the Administrator.

 

WHAT THE PERSONAL DATA ARE?

Personal data means any information relating to an identified or identifiable person (“data subject”). Therefore, these will be data such as, for example, name, surname, address, date of birth, telephone number or e-mail address (the list is not closed).

 

PERSONAL DATA ADMINISTRATOR

The administrator of the User’s personal data in connection with their processing for the purposes indicated below is HQ Plastics S.C. Aleksandra Błasiak, Jacek Bączek with headquarters at ul. Górecka 63d, 43-430 Skoczów, NIP: 5482664639, REGON: 243412177

LEGAL BASIS AND PURPOSE OF THE PROCESSING OF PERSONAL DATA

Personal data may be processed by us for the following purposes:

  1. signing and performance of the contract (Article 6 (1) (b) of the GDPR) – including verification of payment credibility and settlement of the contract – based on data provided by the User or data from other sources (Krajowy Rejestr Sądowy, Centralna Ewidencja i Informacja o Działalności Gospodarczej, Biura Informacji Gospodarczej ->> in each case the basis for obtaining information are the provisions regulating the functioning of individual information bases);
  2. he necessity to perform legal obligations incumbent on HQ Plastics (Article 6 (1) (c) of the GDPR) consisting in particular of:
    a. settlement of invoices and other accounting documents);
    b. checking the customer’s data contained in the so-called “White list of VAT taxpayers” conducted in accordance with Art. 96b of the Act of 11 March 2004 on tax on goods and services, to the extent indicated therein), i.e. verification whether the customer is an active VAT payer, checking the reasons for which the customer was refused registration, removed from the register or re-registered as a VAT taxpayer and learning the legal basis of these decisions, as well as confirmation of the customer’s bank account number;
    c. performing obligations related to the implementation of the rights indicated in the GDPR (including to the extent necessary to identify and verify the identity of the requesting person and to provide a response).
  3. implementation of the legitimate interests of HQ Plastics (Article 6 (1) (f) of the GDPR), in the form of:
    a. direct marketing of our products or services carried out during the performance of the contract, with the proviso that in the case of e-mail marketing, additional consent will be received for the source of the marketing message;
    b. establishing, investigating or defending against claims that may arise in connection with the concluded contracts (performance and settlement of the contract, consideration of complaints) or related to the performance of obligations under the provisions of the GDPR (to be able to demonstrate compliance with the provisions);
    c. answering questions and offers asked by e-mail – submitted via the contact form on the Website or to the employee’s e-mail address (conducting e-mail correspondence)
    d. enabling contact between employees of the parties to the contract who are not parties to the concluded contracts, both at the offer stage and as part of the performance of concluded contracts;
    e. verification of the identity of employees of contractors cooperating with HQ Plastics, e.g. drivers collecting our products or collecting products ordered from our contractor;
    f. organization of training courses and events for employees or associates of clients / contractors or potential customers / contractors.
  4. receiving our commercial (marketing) information – based on the consent granted for this purpose (Article 6 (1) (a) of the GDPR).

 

Providing data is voluntary, but necessary to implement the above-mentioned purposes, i.e., for example, concluding a contract or answering a question asked by the User. Expressing consent is always fully voluntary – in particular when the purpose is to obtain consent to send commercial information under the contact form, its granting is not a condition for sending and receiving an answer to the question asked. Providing data resulting from legal provisions is obligatory. Failure to provide them may have legal consequences, e.g. tax consequences. HQ Plastics may also process data for other purposes – subject to compliance with all the requirements provided for by law in this respect (in particular when we have the necessary legal basis and we fulfill our information obligations).

 

SCOPE OF COLLECTED PERSONAL DATA

The administrator collects and processes the following personal data:

  1. basic personal data (name and surname) for the purpose of providing services,
  2. contact details (telephone number and e-mail address) processed in the case of applications sent from the contact form available on the Website,
  3. other data resulting from the contract or order in connection with which the personal data of the contact person is made available.

 

PERIOD OF STORAGE OF PERSONAL DATA

Personal data is processed for the following periods (these are the maximum data processing periods):

  1. data processed in order to conclude and perform the contract – for the duration of the contract, and then until the limitation of mutual claims (only for the purpose of establishing, investigating or defending against claims) based on the so-called legitimate interest or until the objection is effectively raised,
  2. data processed in order to fulfill tax obligations – for the period specified in the provisions of tax law, as a rule, 5 years from the end of the calendar year in which the invoice was issued,
  3. data processed in order to perform the obligations related to the implementation of the rights specified in the GDPR – for a period of time allowing to defense against claims (for the period of limitation of claims for infringement of personal rights),
  4. data processed for the purpose of direct marketing of own products or services – until the objection is raised (or the consent to marketing is withdrawn by e-mail or telephone, and after the objection / withdrawal of consent only to defend against claims (for the period of limitation of claims for infringement of goods) personal),
  5. data processed in order to establish, investigate or defend against claims – for the period of limitation of claims both for the Company and for the Company,
  6. responding answers to questions and offers asked by e-mail – until an effective objection is made or until mutual claims are time-barred with correspondence, e.g. performance of a contract
  7. to enable contact between employees of the parties to the contract – until effective objection is made or until mutual claims are time-barred with correspondence, e.g. performance of a contract
  8. verification of employees’ identity – until an objection is raised or until mutual claims related to correspondence are time-barred, e.g. performance of a contract
  9. receiving commercial information – until the consent is withdrawn, and then for possible defense against claims (e.g. by showing that the right to withdraw consent has been exercised) and only to the extent necessary for this purpose,
  10. data processed in order to implement training and events for employees or associates of clients / contractors or potential customers / contractors – for the duration of the contract, and then until the limitation of mutual claims (only in order to establish, investigate or defend against claims) based on the so-called legitimate interest or until the objection is effectively raised.

 

USER PERMISSIONS

Rights of the person with related personal data:

  1. right to access data,
  2. the right to modify the data if the processed data is incorrect or incomplete,
  3. right to delete data,
  4. right to limit processing,
  5. right to object to the processing of data on the basis of the Controller’s legitimate interest or to processing for the purpose of direct marketing,
  6. the right to lodge a complaint with the Polish supervisory authority or the supervisory authority of another European Union Member State competent for the place of habitual residence or work of the data subject or the place of the alleged violation of the GDPR,
  7. the right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

 

SCOPE OF AUTOMATICALLY COLLECTED DATA

During a visit to the Website, data on the User’s activity are automatically recorded, including IP address, browser type, operating system type. These data are used only for administrative and statistical purposes.

The transmission of personal data and communication with HQ Plastics servers is encrypted and takes place using the SSL (Secure Socket Layer) protocol.

 

COOKIES

The website administrator uses cookies technology. Cookies are information packages saved on the User’s device via the Website, usually containing information consistent with the intended use of a given file, by means of which the User uses the Website.

 

The administrator uses two types of cookies:

  • serial, which are permanently deleted at the end of the User’s browser session,
  • permanent, which remain after the end of the browser session on the User’s device, until they are deleted.

Based on cookies, both session and permanent, it is not possible to determine the identity of the User. The cookie mechanism does not allow the collection of any personal data.

The user may independently change the cookie settings at any time, specifying the conditions for their storage, through the web browser settings or by configuring the service, in accordance with the manufacturer’s instructions, but this may result in the unavailability of some or all of the Website’s functions.

The Service Provider uses Cookies to create (anonymous) statistics that allow to optimize the usability of the Website, through analytical tools such as Google Analytics, audience analysis and research, as well as to provide advertising services.

 

HOW TO CONTACT US

All matters related to the protection of personal data (including for the purpose of objecting or withdrawing consent and in connection with the observed violation of the provisions on the protection of personal data or the implementation of your other rights), you can contact the Personal Data Administrator by e-mail: Przemysłlaw.blasiak@hqplastics.pl, via the form available on the Website or by post to the following address: HQ Plastics SC, ul. Górecka 63d, 43-430 Skoczów. In response to your request, you may be asked to provide the data necessary to verify your identity or to provide additional information needed to properly complete the request.