GDPR

Information obligation pursuant to Article 13 of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Journal of Laws EU. L. of 2016 No. 119, p. 1):

1. Who is the Administrator of your personal data?
The Administrator, i.e. the entity deciding how your personal data will be used, is Sobtec Sp. z o. o. with its registered office in Bystrzyca Kłodzka (hereinafter referred to as the "Company").

2. How to contact us for more information about the processing of your personal data?

Please contact us at the following e-mail address: biuro@sobtec.pl.

3. What is the purpose and legal basis for the processing of your personal data by the Company?

a. We process your personal data because it is necessary to perform the contract concluded with you, including:

- enabling of sending of information related to the Company's activities, with the contract between us and you, by electronic means and full use of the Company's offer;

- contacting you, including for purposes related to the provision of services and the sale of goods, as part of the Company's business;

- performance of contracts concluded with you as part of the Company's operations;

- handling complaints by the Company, when you submit such a complaint;

In addition, the law requires us to process your data for tax and accounting purposes.

b. We also process your personal data for the purposes indicated below, based on the legitimate interest of the Company, which is:

- conducting marketing activities towards you, including direct marketing of the Company's own services and goods or services or goods of third parties;

- contacting you, including purposes related to permitted marketing activities, through available communication channels, in cases concerning this with your consent - by e-mail and telephone;

- debt collection; conducting court, arbitration and mediation proceedings;

- storing data for archiving purposes and ensuring accountability (showing that the Company has fulfilled its obligations under the law).
c. In case of your consent, we process your personal data in order to save data in cookies, collect data from websites.

d. You can withdraw your consent to the processing of personal data at any time in the same way as it was expressed. The Company will process your 

personal data until you withdraw your consent.

4. Is it necessary for you to provide your personal data?

a. Providing your personal data is necessary for the conclusion and performance of the contract concluded with you, and thus to be able to provide the service and sell the goods. If you do not provide personal data, it will not be possible to conclude

contract, and as a consequence you will not be able to use the services provided by the Company.

b. If this is required by law, we may require you to provide other data necessary, e.g. for accounting or tax reasons. Apart from these cases, providing your data is voluntary.

5. What are your rights towards the Company regarding the processed data

?
a. You have all the rights resulting from the GDPR, i.e. the right to access personal data, the right to request rectification and deletion of data (the right to be forgotten), the right to limit their processing, the right to transfer them, not to be subject to automated decision-making, including profiling, as well as the right to object to the processing of personal data.

b. You have the right to lodge a complaint in connection with the processing of your personal data by the Company to the supervisory body (address: Office of Personal Data Protection, ul. Stawki 2, 00-193 Warsaw).

6. In what situations can you object to the processing of your data?

You have the right to object to the processing of your personal data when:

a. the processing of your personal data is based on a legitimate interest, and the objection is justified by the particular situation in which you have found yourself.

b. Your personal data is processed for the purposes of direct marketing,

7. Who do we share your personal data with?

We share your personal data with entities providing IT services as well as accounting and auditing services to the Company. In situations requiring it and based on the relevant regulations, we may transfer your personal data to public authorities.

8. How long do we store your personal data?

a) We store your personal data for the duration of the contract concluded with you, as well as after its completion for the purposes of:

- pursuing claims in connection with the performance of the contract,

- performance of obligations arising from legal provisions, including in particular tax and accounting,

- archiving,

- for a maximum period of 10 years from the date of completion of the contract.

b) We store your personal data for marketing purposes for the duration of the contract or until you object to such processing, whichever occurs first.
c) For the purpose of accountability, i.e. to prove compliance with the provisions on the processing of personal data, we will store your data for the period in which the Company is obliged to retain data or documents containing them to document the fulfilment of legal requirements and enable public authorities to control their fulfilment.

9. Do we transfer your data to countries outside the European Economic Area?

Your personal data will be transferred outside the European Economic Area to Google LLC based on appropriate legal safeguards, which are standard contractual clauses for the protection of personal data, approved by the European Commission.

10. Do we process your personal data automatically (including through profiling) in a way that affects your rights?

Your personal data will not be processed in an automated manner (including in the form of profiling).