This document contains information on the principles of personal data processing by Przedsiębiorstwo Produkcyjno-Handlowo-Usługowe TUDAR Spółka z ograniczoną odpowiedzialnością, with its registered office in Chełm (22-100), at 5 Rampa Brzeska Street, NIP: 5632422962, KRS: 000447146, REGON: 061512971 (hereinafter referred to as P.P.H.U. Tudar Sp. z o.o.), as well as your rights in connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”).
1.1 The data controller is Przedsiębiorstwo Produkcyjno-Handlowo-Usługowe TUDAR Spółka z ograniczoną odpowiedzialnością, with its registered office in Chełm (22-100), at 5 Rampa Brzeska Street, NIP: 5632422962, KRS: 000447146, REGON: 061512971, phone: +48 511 983 561, email: biuro@tudar.pl
2.1. P.P.H.U. Tudar Sp. z o.o. processes your personal data in connection with the conclusion of a contract between you and P.P.H.U. Tudar Sp. z o.o., or in order to take steps at your request prior to entering into a contract (Article 6(1)(b) of the GDPR).
2.2. In addition, P.P.H.U. Tudar Sp. z o.o. processes your personal data due to the necessity of complying with a legal obligation to which the data controller is subject (Article 6(1)(c) of the GDPR), or when it is necessary for the purposes of the legitimate interests pursued by P.P.H.U. Tudar Sp. z o.o. (Article 6(1)(f) of the GDPR), in particular:
2.2.1. for the purpose of fulfilling legal obligations under tax law and accounting regulations;
2.2.2. for purposes related to dispute proceedings, proceedings before public authorities, and other legal proceedings, including the establishment, exercise, or defense of legal claims;
2.2.3. for the purpose of selling claims held by P.P.H.U. Tudar Sp. z o.o. against you and pursuing those claims;
2.2.4. for purposes related to business development and the marketing of services.
2.3. In other cases, your personal data will be processed only on the basis of prior consent, to the extent and for the purpose specified in the content of that consent (Article 6(1)(a) of the GDPR).
3.1. In connection with the processing of your personal data for the purposes specified in point 2, your personal data may be shared with the following recipients or categories of recipients:
3.1.1. entities cooperating with P.P.H.U. Tudar Sp. z o.o. in the performance of contracts concluded with you, including entities processing data pursuant to Article 28 or Article 29 of the GDPR,
3.1.2. public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes arising from legal regulations.
4.1. Your personal data will be processed for the period necessary to achieve the purposes specified in point 2, i.e., for the duration of the conclusion and/or performance of the contract between you and P.P.H.U. Tudar Sp. z o.o., until the contract has been concluded or fully performed, and thereafter for the period and to the extent required by applicable law. To the extent that personal data is processed for the purpose of sending you marketing content, as referred to in point 2.2.4., it will be processed until consent is withdrawn or an objection to such processing is submitted.
5.1. P.P.H.U. Tudar Sp. z o.o. informs you that you have the following rights:
5.1.1. the right to obtain information from P.P.H.U. Tudar Sp. z o.o. as to whether your personal data is being processed;
5.1.2. the right to receive a copy of your personal data processed by P.P.H.U. Tudar Sp. z o.o.;
5.1.3. the right to request that P.P.H.U. Tudar Sp. z o.o. rectify or complete your personal data;
5.1.4. the right to request the deletion of your personal data by P.P.H.U. Tudar Sp. z o.o. (the so-called “right to be forgotten”)
– in cases where: (i) the data is no longer necessary for the purposes for which it was collected or otherwise processed; (ii) the data subject has withdrawn consent or has objected to the processing; (iii) the data is being processed unlawfully; (iv) the data must be deleted to comply with a legal obligation;
5.1.5. the right to request the restriction of processing of your personal data by P.P.H.U. Tudar Sp. z o.o. – in cases where: (i) the data subject contests the accuracy of the personal data; (ii) the processing is unlawful and the data subject opposes the erasure of the data and requests restriction instead; (iii) the controller no longer needs the data for its purposes, but the data is required by the data subject for the establishment, exercise, or defense of legal claims; (iv) the data subject has objected to the processing – pending the verification of whether the legitimate grounds of the controller override those of the data subject;
5.1.6. the right to data portability to another data controller where: (i) the processing is based on a contract with the data subject or on the data subject’s consent, and (ii) the processing is carried out by automated means;
5.1.7. the right to object to the processing of personal data;
5.1.8. the right to withdraw consent to the processing of personal data. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
5.1.9. the right to lodge a complaint with the President of the Personal Data Protection Office if the provisions of the GDPR are violated in the processing of personal data.
5.2. The rights listed in points 5.1.1–5.1.8 may be exercised by submitting a request to P.P.H.U. Tudar Sp. z o.o. via email to: biuro@tudar.pl or in writing to the following address: 5 Rampa Brzeska Street, 22-100 Chełm.
6.1. Providing personal data is a condition for concluding and performing a contract with you. If you do not provide your personal data, P.P.H.U. Tudar Sp. z o.o. will be entitled to refuse to conclude the contract.
7.1. P.P.H.U. Tudar Sp. z o.o. does not process personal data for the purpose of making decisions based solely on automated processing, including profiling.