Information clause on the processing of personal data

1.   Information about the Personal Data Administrator:

The administrator of your personal data is MULTICHEM spółka z ograniczoną odpowiedzialnością with its registered office in Luboń, postal code 62-030 Luboń, ul. Przemysłowa 2, entered in the register of entrepreneurs of the National Court Register kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań, VIII Economic Department of the National Court Register under KRS number 0000104551, NIP 7791548062, REGON: 630765083 [hereinafter: "We" or "Company".

2.    Contact:

You may contact us by correspondence to the following address: ul. Przemysłowa 2, 62-030 Luboń or by e-mail to: admin@multichem.pl.

3.    Purposes of personal data processing and legal basis for processing:

As part of our email correspondence, we generally process your personal data for the following purposes, as applicable:

1) to respond to your message on the basis of our legitimate interest (Article 6(1)(f) of the General Data Protection Regulation of April 27, 2016. - hereinafter referred to as "GDPR"),
2) to provide an offer in connection with your inquiry on the basis of our legitimate interest (Article 6(1)(f) of the GDPR),
3) to continue and properly perform the contractual relationship between the Company and you on the basis of necessity for the performance of the contract to which you are a party (Article 6(1)(b) GDPR),  
4) to continue and properly perform the contractual relationships linking the Company with entities with which you have an employment relationship or with which you cooperate or with entities that you represent or appear in the bodies of these entities - on the basis of our legitimate interest (Article 6(1)(f) GDPR),  
5) to establish or maintain a business relationship between the Company and you or entities you represent or appear in the bodies of these entities - based on our legitimate interest (Article 6(1)(f) GDPR),6) where the processing of your data is required by law, we will then process your data on the basis of necessity to fulfill our legal obligation (Article 6(1)(c) GDPR),
7) storage of data to ensure accountability (including demonstration of our compliance with legal obligations) on the basis of our legitimate interest (Article 6(1)(f) GDPR),
8) to establish, protect and pursue claims - on the basis of our legitimate interest (Article 6(1)(f) GDPR),
9) storing data for statistical purposes - on the basis of our legitimate interest (Article 6(1)(f) GDPR).

4.   Information about the recipients of your personal data:

Where appropriate, we may transfer data to:
- to persons authorized by us, our employees and associates who need to have access to the data to perform their duties, 
- to processors to whom we outsource certain tasks, e.g. companies that operate our ICT systems or provide us with ICT tools, companies that provide us with server space, companies that provide consulting services to us.
- To public entities, if it will result from an obligation imposed by law.

5.    Where did we obtain your data from?

We obtained the personal data we process directly from you or the entity you represent, cooperate with or have an employment relationship with. In some situations, we may have obtained this data from publicly available sources, in particular from publicly available registers, such as CEIDG or KRS.

6.    Categories of relevant data:

As a rule, in the course of e-mail correspondence we have such categories of personal data as contact data, i.e. e-mail address, telephone number, in some situations it will also be identifying data (such as name, position). The categories of personal data processed will additionally depend on the matter on which the e-mail correspondence between you and the Company will take place.

7.   The storage period of your personal data:

We will retain your personal data for the period necessary to correspond with you about the subject matter, and thereafter for the period required by the obligations imposed on us by law, subject to matters relating to claims that may be raised against us and that we may have against you related to the purposes stated above.

8.    Your rights:

In connection with our processing of your personal data, you have the following rights, within the limits of the law, where applicable:

(a) to access and rectify the content of your data, to restrict processing, and the right to data portability,
(b) request the erasure of your personal data except where the processing is necessary for the fulfillment of a legal obligation incumbent on us and for the establishment, investigation or defense of claims by us,
(c) to object to the processing of personal data for purposes arising from our legitimate interests,
(d) lodge a complaint to the supervisory authority for the protection of personal data - in Poland this is the President of the Office for Personal Data Protection - when the processing of personal data violates the provisions of applicable law.

9.    Information about the voluntariness of personal data

Provision of personal data is voluntary, but necessary for email correspondence between you and the Company.

10.    Information regarding the transfer of your personal data to third countries:

As part of our use of Microsoft 365 services, including the email service, there may be transfers of data to the USA. The legal basis for the transfer of personal data to the US in such a case is Microsoft Corporation's participation in the "EU-US Data Protection Framework." Please note that Microsoft Corporation may also transfer data to entities outside the European Economic Area in connection with the use of its services. In the case of Microsoft Corporation's use of entities from countries that are subject to a European Commission decision finding an adequate level of protection in accordance with European data protection legislation, the basis for the transfer of data to a third country is such a decision. For entities in countries that are not subject to an adequacy decision by the European Commission, Microsoft Corporation's transfers to a third country are based on the applicable standard contractual clauses in compliance with the European Commission's decision.

We may also transfer your personal data to Global Trading Inc, a company based in Barbados, which is a shareholder of our Company and which may be involved in major decisions regarding the conduct of our business. The basis for the transfer of data to Global Trading Inc is the applicable standard contractual clauses in accordance with the European Commission's decision.

In the course of our use of Veeam's backup tool, transfers of personal data to the USA may also occur. The transfer of data to the Veeam Software Group is based on the applicable standard contractual clauses in accordance with the European Commission decision.

You have the right to obtain a copy of the aforementioned standard contractual clauses from us.

11.     Information on profiling:

We will not make automated decisions, including decisions resulting from profiling, based on the collected personal data.