INFORMATION CLAUSE ON

PROTECTION OF THE CUSTOMER'S PERSONAL DATA

The purpose of this information clause is to explain the principles on which your personal data, hereinafter referred to as Personal data, and discuss your basic rights in relation to our processing of your Personal Data.

Due to the entry into force on 25 May 2018 on the territory of the Member States of the European Union, including Poland, of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the
with the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (EU Series "L" 2016, No. 119, item 1 of 04 May 2016), hereinafter referred to as the GDRP, we reiterate our commitment to comply with current data protection legislation by taking care of your privacy and preserving your Personal Data
confidentiality and protect them from unauthorised access by third parties.

PERSONAL DATA CONTROLLER

The administrator of your Personal Data, which is collected, inter alia, using the paper contact form, the contact form on the website, the contact form in the complaints software, during the exchange of electronic correspondence via email sent by e-mail, during a personal conversation or during a conversation via telephone, is the company under the company name: Kseroplast Sp. K. Sp. z o.o. with its seat in Zakrzewo (address: Zakrzewo 62-070, ul. Cisowa 1, Poland), entered in the Register of Entrepreneurs of the National Court Register under KRS no: 0000625588 (registration court: District Court Poznań - Nowe Miasto and Wilda in Poznań, VIII Economic Division of the National Court Register), holding NIP number: 7773265454 and REGON number: 364804570.

INFORMATION AND CONTACT REGARDING PERSONAL DATA

You can obtain any clarification on matters related to the protection of Personal Data by contacting us as follows:

1. By e-mail sent to: oferta@kseroplast.pl;
2. Via the contact form available at: kseroplast.co.uk
3. By snail mail sent to:

Kseroplast Sp. K. Sp. z o.o.

Zakrzewo 62-070, ul. Cisowa 1, Poland.

We undertake to take appropriate measures to protect your Personal Data from unauthorised access by third parties or unauthorised disclosure to third parties.

PURPOSES AND LEGAL BASIS OF PROCESSING PERSONAL DATA

We inform you that your Personal Data is processed for:

1. The preparation, conclusion and performance of the contract(s), including the provision of fulfilment services for advertising orders, the resolution of problems, the clarification of issues and the fulfilment of your requests that you address to us - as the processing of Personal Data is necessary for the preparation, conclusion
   and performance of the contract(s) (Article 6(1)(b) RODO);
2. Provision of electronic services and sending of commercial information - on the basis of your consent (Article 6(1)(a) of the RODO in conjunction with Article 10(2) of the Act on Provision of Electronic Services);
3. Direct marketing of products or services, including establishing contact, providing offers, storing data in cookies and collecting data from websites
   and mobile applications - on the basis of your consent (Article 6(1)(a) RODO in conjunction with Article 172 of the Telecommunications Act);
4. To fulfil our legal obligations under mandatory provisions of European Union law or Polish law (e.g. towards the President of the Office of Competition and Consumer Protection, tax offices) - as the processing of Personal Data is necessary to fulfil the legal requirements to which we are subject (Article 6(1)(c) RODO);
5. To provide payment services, to ensure the security of the services we provide electronically, to handle your requests made e.g. via the contact form when they are not directly related to the performance of the contract, to collect receivables, to conduct judicial, security, administrative and mediation proceedings, to store data for archival purposes. through the contact form in a situation when they are not directly related to the performance of the contract, debt collection, conducting judicial, security, enforcement, administrative and mediation proceedings, storing data for archival purposes and ensuring accountability (fulfilment of obligations arising from mandatory provisions of European Union or Polish law) - because processing of Personal Data is necessary for the realisation of our legitimate interest which is the provision of services, realisation of your requests, the possibility to establish, assert or defend against claims, archiving of data (art. 6(1)(f) RODO);
6. To ensure the security of persons and property located on the Company's premises through the use of video surveillance - as the processing of Personal Data for these purposes constitutes our legitimate interest (Article 6(1)(f) RODO).

RECIPIENTS OF PERSONAL DATA

We indicate that the recipients of your Personal Data may be:

1. Entities entitled to obtain Personal Data on the basis of mandatory provisions of European Union or Polish law, e.g. courts or public administration bodies, state authorities,
2. Transport service providers,
3. Entities providing security services for persons or property,
4. IT service providers and IT software providers,
5. Accounting offices providing financial and accounting services,
6. Statutory auditors or audit firms that audit financial statements,
7. Law firms providing legal advice,
8. Agents representing the Company in the execution of customer service and contracts concluded,
9. Postal operators and courier service providers;

whereby such entities process Personal Data on the basis of a contract, including an agreement to entrust the processing of Personal Data with the Company, or on the basis of law.

DURATION OF STORAGE OF PERSONAL DATA

We specify that your Personal Data will be stored for the following time periods:

1. Personal Data processed for the preparation, conclusion and performance of the contract(s) - until the completion of performance, termination or expiry of the contract in question, with the proviso that sometimes Personal Data may also be processed after the completion, termination or expiry of the contract in question, but only if this is permitted or required under mandatory legal provisions, e.g. prescription of potential claims under the contract or prescription of tax liabilities, for processing for statistical, billing purposes;
2. Personal Data processed for the purpose of providing electronic services and sending commercial information - until consent is withdrawn;
3. Personal Data processed for the purpose of direct marketing of products or services, including establishing contact, presenting an offer, storing data in cookies and collecting data from websites and mobile applications - until you withdraw your consent or until you object;
4. Personal Data processed for the purpose of complying with our legal obligations under mandatory provisions of European Union or Polish law - until such time as the legal retention obligations expire;
5. Personal Data processed for the purpose of providing payment services, ensuring the security of the services we provide electronically, handling your requests submitted e.g. via the contact form when they are not directly related to the performance of a contract, debt collection, conducting judicial, enforcement, administrative and mediation proceedings, storing data for archival purposes and ensuring accountability - until the statute of limitations for all claims arising from the contract(s) or claims related to the processing of Personal Data or until you raise an objection;
6. Personal Data processed to ensure the security of persons and property on the Company's premises through the use of video surveillance - for a period of 30 days from the date of collection or until the statute of limitations for claims relating to the use of video surveillance or claims relating to the processing of Personal Data has expired, or until an objection is lodged.

POWERS RELATING TO PERSONAL DATA

We would like to inform you that you have the following rights:

1. The right to access the content of your Personal Data, including obtaining a copy of your data;
2. The right to amend Personal Data (rectification, completion, updating);
3. The right to withdraw consent as to the processing of Personal Data at any time, in cases where Personal Data is processed on the basis of previously given consent;

You can withdraw your consent to the processing of this personal data that we process on the basis of your consent at any time. Withdrawal of consent will not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

The right to restrict the processing of Personal Data at any time, due to a particular situation, unless the processing of Personal Data is required by law;

You have the right for us to restrict the processing of your personal data to storage only or to carry out activities agreed with you if, in your opinion, we hold inaccurate data about you or are processing it unduly; or you do not want it deleted because you need it to establish, assert or defend a claim; or for the duration of an objection you have raised against the processing.

Right to object to the processing of Personal Data

"Marketing" objection. You have the right to object to the processing of your data for direct marketing purposes. If you exercise this right - we will stop processing your data for this purpose.
Objection on grounds of special situation. You also have the right to object to the processing of your data on the basis of a legitimate interest for purposes other than direct marketing, and when the processing is necessary for us to perform a task carried out in the public interest or for the exercise of public authority entrusted to us. You should then indicate to us your particular situation which, in your opinion, justifies us stopping the processing covered by the objection. We will then stop processing your data for these purposes unless we can demonstrate that the grounds for our processing of your data override your rights or your data are necessary for us to establish, assert or defend claims.

Right to request erasure of Personal Data.

If, in your opinion, there are no grounds for us to process your data, you can request that it be deleted.

Right to portability of Personal Data.

You have the right to receive from us, in a structured, commonly used machine-readable format (e.g. ".csv" format), personal data concerning you which you have provided on the basis of a contract or your consent when the processing is carried out by automated means. You may also instruct us to send this data directly to another entity.

In order to exercise the above-mentioned rights, we ask you to contact us by one of the means indicated in point 3 above.

You also have the right to lodge a complaint with the supervisory authority in charge of personal data protection, which is the President of the Office for Personal Data Protection (address: Stawki 2, 00-193 Warsaw, Poland).

REQUIREMENT TO PROVIDE PERSONAL DATA

The provision of Personal Data is voluntary, but necessary for the preparation, conclusion and performance of the contract(s) between us. Your refusal to provide Personal Data may result in a refusal to respond to an enquiry and a refusal to prepare, conclude and perform a contract.

AUTOMATED DECISIONS BASED ON PERSONAL DATA

Personal Data collected using the contact form on the website, the contact form in the claims software, during the exchange of electronic correspondence via e-mails sent by email, during an in-person conversation or via telephone are not subject to automated decisions and are not profiled.