Dear Sirs!

In accordance with the applicable provisions on the protection of personal data, especially with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and  repealing Directive 95/46 /EC  – hereinafter referred to as General Data Protection Regulation, to ensure the appropriate protection of personal data, the data subject should be provided with information concerning processing its personal data specified in art. 13 or 14 of the General Data Protection Regulation – depending on whether they are obtained directly from the data subject or from other sources.

Accordingly, we would like to inform that:

1. The controller of your personal data is S.T.M. Systemy i Technologie Mechaniczne Sp. Z o.o. with its registered office in Warsaw, Dziewosleby str.14/1, e-mail:  info@stmech.pl, nr tel.: 22-673-55-48 Barbara Rusecka is the proxy for personal data protection in our company e-mail address: barbara@stmech.pl
2. Your personal data are processed on the basis of art. 6 sec. 1 letter b of the General Data Protection Regulation, i.e. in consideration of the need to perform an agreement, to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into an agreement.
3. The data are processed in order to execute orders placed on the basis of the concluded agreements (sale agreements, order contracts, service contracts, and delivery agreements) and to maintain business contacts ith counterparties within this scope.
4. Your personal data shall be received exclusively by entities authorised to obtain the personal data or entities participating in execution of the order, that is courier companies, Poczta Polska S.A., transport companies.
5. Your personal data shall be kept in accordance with a legitimate interest realised by the controller arising from objectives relating to data processing, until termination of your authorisations resulting from universally applied legal norms.
6. You shall have the right to request from the Controller access to your personal data, as well as the right to rectification, deletion or processing restrictions, the right to object against processing and transfer the data.
7. You have the right to file a complaint with a supervisory body, i.e. with the Inspector General for the Protection of Personal Data.
8. Your data will not be processed in an automated manner and will not be transferred to a third country.
9. Providing personal data is voluntary, however, refusal to provide data may result in refusal to conclude an agreement (order contract).