GDPR

Information Obligation under GDPR

In connection with the application of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation), and based on Articles 13 and 14 of that Regulation, we provide the following information. From 25 May 2018, you will have the following rights related to the processing of your personal data by carbonpro.pl.

1. The controller of your personal data is CarbonPro Sp. z o.o., with its registered office at ul. Francuska 13/7, 40-027 Katowice, Poland. NIP: 9542826712, e-mail: kontakt@carbonpro.pl
2. Personal data will be processed for one or more of the following purposes:
   1. for the performance of a contract to which you or your represented entity is a party, or to take steps at your request before entering into a contract (Article 6(1)(b));
   2. for compliance with legal obligations (e.g., accounting, tax) imposed on the Controller (Article 6(1)(c));
   3. for purposes of the legitimate interests pursued by the Controller, such as acquiring business contacts, conducting marketing and advertising campaigns, handling claims (Article 6(1)(f));
   4. for sales and marketing purposes based on your consent (Article 6(1)(a)).
3. Your personal data may be obtained:
   1. directly (e.g., via forms or correspondence),
   2. from publicly available sources and registers (e.g., CEIDG, KRS, REGON, NIP),
   3. through purchase of commercial contact databases (with confirmed third-party consent).
4. The categories of processed data may include: first name, last name, phone numbers, email addresses, IP addresses.
5. Your data may be transferred to third parties providing services to the Controller, including accounting, courier, telecom, hosting, legal, marketing, and banking services, as well as public authorities entitled under law.
6. Your data will not be transferred to a third country or international organization.
7. Your personal data will be retained for the longest of the following periods:
   1. as required by law (e.g., accounting or tax regulations);
   2. up to 3 years from last contact;
   3. for the duration of product/service warranties;
   4. for the duration of the contract;
   5. as needed to establish or defend legal claims;
   6. extended by the limitation period for claims, if applicable.
8. You have the right to access, correct, delete, restrict, or object to processing, as well as the right to data portability.
9. You have the right to lodge a complaint with the supervisory authority if you believe your data is processed unlawfully.
10. Providing data is required to respond to inquiries or to prepare, conclude, and perform a contract. Failure to do so may result in the inability to proceed.
11. Your data will not be subject to profiling. Automated processing is limited to IT systems for email, invoicing, and website operation.
12. We will fulfill the information obligation no later than within one month of obtaining the data or at the first communication with you.
13. The method of fulfilling this obligation depends on how the data was obtained:
    1. via form – redirect to this statement after submission,
    2. via business card – email with a link to this statement,
    3. via postal mail – reply via traditional or electronic mail with a link,
    4. via email – electronic reply with link,
    5. via public sources – electronic message after initial meeting or call,
    6. via purchased database – electronic message with link.
14. If your data must be deleted, it will be erased or anonymized. If deletion is not technically feasible, we will inform you accordingly.