GDPR - what is it?

GDPR is the abbreviation of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and the repeal of Directive 95/46 / EC. It is an act of law that regulates the principles of data processing and the rights of persons whose data is processed.

Personal data controller

The administrator of personal data is Polska Grupa CNC, Tadeusza Kościuszki 39, 37-415 Zaleszany

We process your data ...

1. On the basis of legal regulations, e.g. for the purpose of issuing an invoice (the Value Added Tax Act).

2. When we make accounting and accounting settlements (based on, inter alia, the Accounting Act).

3. When we need to consider a complaint (Civil Code, Consumer Rights Act).

4. When we execute an order, a contract (Article 6 (1) (b) of the GDPR).

5. When you give your consent, eg. in the case of sending marketing information. The consent may be withdrawn by you at any time, and the data will still be processed in accordance with the law before the consent is withdrawn.

Do you have to provide data?

Do you have to provide data? Data collected on the basis of a legal provision, e.g. to issue an invoice or consider a complaint, must be provided. These are, for example, name and surname, address. There are data that must be provided in the case of the contract (depending on its type), e.g. name, surname, address, PESEL number. In the event of consent, the provision of personal data is voluntary.

How long do we keep the data?

The data is stored as long as required by law or there is a purpose for its processing, e.g. until the consent to their processing is withdrawn. Data is not transferred to countries outside the European Economic Area (i.e. outside the European Union, Iceland, Liechtenstein, Norway).