Information clause
In accordance with Article 13(1)−(2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of people with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal EU L 119, p. 1), hereinafter GDPR, we inform that:
When using our services (e.g. purchases of our products, participation in training, shows or other services, hereinafter referred to as the “Services”) provided by the companies of the Adamus S.A. Group and other affiliated and subsidiary entities, subject to personal or capital links, directly or indirectly through other entities (hereinafter referred to as the “Subsidiaries”), you provide your information to us.
In case of the specific Services you may provide your information to our trusted partners, i.e. third parties existing within the environment of our Services, with whom we cooperate directly or indirectly, in particular for the purpose of providing you the best service as well as in connection with marketing activities (hereinafter referred to as the “Trusted Partners”).
This information is to explain what types of data we collect, for what purpose and what do we use them for. This is important information, so please read this document carefully. In pursuance of the new regulations we do our best to make sure that our actions comply with the law and guarantee the safety of your data.
Data processed:
We process the data that you provide in connection with using the Services. This is mostly the data necessary to perform a Service such as name and surname, address, NIP, PESEL, e-mail address that you provide, e.g. while ordering the Service. We also process data entered as part of the Services that we made available to you. The scope of data processed in connection with the specific Services may differ - you are welcome to contact our Data Protection Officer (contact details below) for further information.
Data controller:
We inform that Adamus S.A. with its registered office in Warsaw, at ul. Złota 59, 00-120 Warszawa is the controller of your personal data. Furthermore, in accordance with the applicable law, your data in the specific Services may also be controlled by the Trusted Partners.
Data Protection Officer and contact details:
We have appointed a personal data protection officer for Adamus S.A. It is a person that can be contacted with regard to all matters concerning the personal data protection processing and to exercise the rights related to such processing. If you wish to contact the Data Protection Officer, the contact details are presented below:
Correspondence address: Data Protection Officer Adamus S.A., ul. Robotnicza 3a, 71-712 Szczecin; e-mail address: iod@adamus.com.pl.
We process your personal data for the following purposes:
Purpose of processing Personal data |
Legal basis of processing |
Period of data retention |
Service performance name, surname, company name, tax identification number (e.g. NIP or REGON), address, email address, telephone number, bank account number, registered office address |
Article 6(1)(b) GDPR, i.e. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; |
Until expiry of a given contract between you and Adamus S.A., subject to a reservation that in some cases such data may be processed also upon expiry of the contract, however only if this is permitted or required by the applicable law, for example, processing for statistical or settlement purposes, or in order to pursue claims, in particular until expiration of the period of limitation |
Compliance with a legal obligation to which the controller is subject arising in connection with the tax and accounting regulations name, surname, company name, tax identification number (e.g. NIP or REGON), address, email address, telephone number, bank account number, registered office address |
Article 6(1)(c) GDPR, i.e. processing is necessary for compliance with a legal obligation to which the controller is subject arising in connection with the tax and accounting regulations |
Until expiration of the period of limitation |
Establishment, pursuance and enforcement of claims as well as defence against claims in proceedings before courts and other state authorities name, surname, company name, tax identification number (e.g. NIP or REGON), address, email address, telephone number, bank account number, registered office, delivery address |
Article 6(1)(f) GDPR, i.e. processing is necessary for the purposes of the legitimate interests pursued by the controller, consisting in establishment, pursuance and enforcement of claims as well as defence against claims in proceedings before courts and other state authorities |
Until expiration of the period of limitation |
Sales analyses, statistics, profiling, marketing of products and services of Adamus S.A. for purposes other than performance of a Service |
Article 6(1)(f) GDPR, i.e. processing is necessary for the purposes of the legitimate interests pursued by the controller, consisting in sales analyses and statistics |
Until objection is submitted |
Sales analyses, statistics, profiling, marketing of products and services of the Subsidiaries |
In accordance with Article 4(4) GDPR |
Until consent in withdrawn |
Recipients of your personal data:
You personal data may be transferred to entities processing personal data upon instruction of the controller, i.e. IT service providers, marketing agencies etc., subject to a reservation that such entities process the data on the basis of an agreement executed with the controller and only in accordance with the controller’s instructions. Your data may be also transferred to entities authorised to obtain such data in accordance with the applicable law, i.e. law enforcement agencies if the relevant agency submits such request on the appropriate legal basis (e.g. in connection with criminal proceedings pending).
For the purposes of order performance, sales and contracts, the data recipients may be as follows: authorised Company employees, providers, including IT service providers, entities providing services to the Company, including service quality evaluations, collection of receivables, legal services, postal operators and couriers, electronic payment system operators and banks in the scope of payment performance, authorities authorised to receive your personal data in accordance with the law.
Is the provision of personal data necessary:
The provision of personal data is voluntary, however, if you do not provide the data marked as necessary to provide the Service, we may be unable to provide such Service. The provision of your personal data such as the name, surname, company name, tax identification number (e.g. NIP or REGON), address, email address, telephone number, bank account number, registered office address is voluntary, but necessary to execute and perform a contract.
Your rights with regard to the personal data processing:
You have the following rights in connection with the processing of your personal data:
- right of access to your personal data, including right to obtain a copy thereof (Article 15 GDPR);
- right to request rectification of your personal data (Article 16 GDPR);
- right to erasure (“right to be forgotten”) (Article 17 GDPR);
- right to request restriction of processing of your personal data (Article 18 GDPR);
- right to object to personal data processing (Article 21 GDPR);
- right to data portability (Article 20 GDPR);
- right to lodge a complaint to a supervisory authority, i.e. the President of the Personal Data Protection Office;
If your data are processed based on your consent, you also have the right to:
- withdraw such consent within the scope of consent-based data processing. The withdrawal does not affect the lawfulness of consent-based processing performed before the withdrawal.
If your data are processed based on your consent or as part of a service provided (data necessary to provide a service), you also have the right to:
- data portability, i.e. to receive from the controller your personal data in a structured, commonly used and machine-readable format. You may send such data to another data controller.
In order to exercise the above rights, please contact the data controller or the Data Protection Officer (contact details above).