INFORMATION OBLIGATION – GDPR (ART. 13)
Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”), we inform you that:
1. Data Controller
The controller of your personal data is:
Firma Handlowo-Usługowa ANNAPOL Mariusz Kamiński
ul. Jagiellońska 15
41-902 Bytom, Poland
VAT ID: 626-129-49-37
Tel.: +48 32 388 12 28
E-mail: handlowy@annapol.pl
The Data Controller has not appointed a Data Protection Officer (no obligation under Article 37 GDPR).
2. Purposes and Legal Basis for Data Processing
Your personal data are processed for the following purposes:
-
Conclusion and performance of B2B sales agreements
(Art. 6(1)(b) GDPR)
Applies to sales conducted via the following online wholesale stores:
-
Managing a user account in the B2B system
(Art. 6(1)(b) GDPR)
-
Compliance with legal obligations of the Controller
(e.g., accounting and tax obligations under EU and national law)
(Art. 6(1)(c) GDPR)
-
Establishing, exercising, or defending legal claims
(Art. 6(1)(f) GDPR – legitimate interest of the Controller)
-
Direct marketing of the Controller’s own products and services
(Art. 6(1)(f) GDPR – legitimate interest of the Controller)
You have the right to object to the processing of your data for direct marketing purposes.
-
Sending commercial information electronically
(only based on consent)
(Art. 6(1)(a) GDPR in connection with the ePrivacy Directive and applicable national regulations)
3. Data Recipients
Your data may be disclosed to the following categories of recipients:
-
entities providing accounting services,
-
IT system and hosting providers,
-
courier and transport companies,
-
payment operators and banks,
-
debt collection companies (in case of arrears),
-
public authorities authorized under EU or national law.
Data processors act based on contracts in accordance with Article 28 GDPR.
4. Transfer of Data Outside the European Economic Area (EEA)
Personal data are, as a rule, not transferred outside the EEA.
If a transfer occurs (e.g., in connection with the use of IT tools), it will only take place:
-
to countries covered by an adequacy decision (Art. 45 GDPR), or
-
based on standard contractual clauses approved by the European Commission (Art. 46 GDPR).
5. Data Retention Period
Data will be retained:
-
for the duration of the contract,
-
after its termination – for the period required by tax law (at least 5 years),
-
until the limitation period for claims expires (maximum 6 years, unless specific regulations provide otherwise),
-
in the case of processing based on consent – until the consent is withdrawn.
6. Rights of the Data Subject
You have the right to:
-
access your data (Art. 15 GDPR),
-
rectify your data (Art. 16 GDPR),
-
erase your data (Art. 17 GDPR),
-
restrict processing (Art. 18 GDPR),
-
data portability (Art. 20 GDPR),
-
object to processing (Art. 21 GDPR),
-
withdraw consent at any time (if processing is based on consent),
-
lodge a complaint with the competent supervisory authority in the EU member state.
In Poland, the supervisory authority is the President of the Personal Data Protection Office.
7. Obligation to Provide Data
Providing your data is voluntary but necessary to conclude and perform the contract.
Failure to provide data will result in the inability to process the order.
8. Automated Decision-Making
Personal data are not processed in an automated manner and are not subject to profiling within the meaning of Art. 22 GDPR.
|
