GDPR

In connection with the application of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and based on Articles 13 and 14 of the Regulation, we provide the required information and inform you that from 25 May 2018 you have specific rights related to the processing of your personal data by Posserwis.com.

1. The controller of your personal data is POSSERWIS sp. z o.o., conducting business at: Al. Powstania Warszawskiego 15, 31-539 Kraków, Poland, Tax ID (NIP): 6792805460, e-mail address: posserwis@posserwis.com

2. Your personal data will be processed for at least one of the following purposes:

a. To perform a contract to which you or your represented company is a party, or to take steps at your request prior to entering into a contract (Article 6(1)(b)).

b. To comply with legal obligations imposed on the Controller, including accounting, tax, and related regulations (Article 6(1)(c)).

c. For purposes resulting from legitimate interests pursued by the Controller or a third party, including acquiring business contacts, marketing, asserting or defending claims (Article 6(1)(f)).

d. For sales and marketing purposes based on your consent (Article 6(1)(a)).

3. Your data was obtained through one of the following methods:

a. Directly via traditional or electronic correspondence or by filling in a form on our website.

b. From publicly available sources and registers such as CEIDG, KRS, REGON, NIP, PKD, company websites, online announcements, or official hotlines.

c. Through purchase of commercial databases from entities that confirmed lawful consent for data transfer.

4. Based on the Controller's business profile, we collect basic personal data such as: name, surname, phone numbers, email addresses, and IP addresses.

5. Your personal data may be shared with entities providing services to the Controller such as accounting, courier, postal, telecommunications, hosting providers, legal, analytical, or marketing services, software vendors, payment processors, and entities legally authorized to access personal data.

6. The Controller does not intend to transfer your personal data to third countries or international organizations.

7. Your data will be stored for the longest of the following periods:

a. As required by law (e.g., tax and accounting regulations).

b. Up to 3 years from the last contact.

c. For the duration of warranties or similar services.

d. For the term of the concluded contract.

e. As needed to establish or defend against claims.

f. Data retention may be extended by limitation periods of claims.

8. You have the right to access your data, request correction, deletion, restriction of processing, object to processing, and data portability.

9. You have the right to lodge a complaint with the supervisory authority if you believe your data is being processed in violation of Regulation 2016/679.

10. Providing personal data is necessary to receive a response, receive information, or conclude and perform a contract. Failure to provide the required data may prevent these activities.

11. Your data will not be subject to profiling. Automated processing occurs only via internal systems such as our website, email, invoicing, and debt collection systems.

12. The information obligation will be fulfilled within one month of obtaining personal data or during the first communication.

13. The method of fulfilling the information obligation depends on how the data was obtained:

a. From website forms – fulfilled via redirect to this notice.

b. From business cards – via email containing this notice.

c. From traditional correspondence – by sending a reply with a link to this notice.

d. From electronic correspondence – by sending a reply with this notice link.

e. From public sources – after an initial conversation or meeting, via email with this notice.

f. From commercial databases – by sending an email with a link to this notice.

14. If deletion of your data is required, it will be removed from all media or anonymized. We will attempt to fulfill your request unless technically or organizationally impossible, in which case you will be informed with the reasons.