INFORMATION ON THE PROCESSING OF PERSONAL DATA
at IMET PRODUCT s.c.

Based on Article. 13 sec. 1 and sec. 2 and art. 14 sec. 1 and sec. 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/56 / EC (hereinafter: "GDPR") used from May 25, 2018, we inform you about the method and purpose for which we process your personal data (hereinafter referred to as "data"), as well as about your rights related to data protection.


1. Who is responsible for data processing and who can be contacted
The administrator of your data is IMET PRODUKT s.c. W.Żok, H. Bachanek, who can be contacted in writing by sending correspondence to the following address: Muchocin 27, 64-400 Międzychód or by e-mail: imet1@wp.pl


2. Why, why and on what legal basis do we process your data?
2.1. The data is processed in order to perform the activities, conclude or perform the contract, in connection with which they were transferred to the Administrator (including order fulfillment, settlements, communication related to the provision of services, communication via the contact form). The basis for processing is the necessity to perform the contract (Article 6 (1) (b) of the GDPR).
2.2. The data is processed in order for the Administrator to perform commercial activities and provide other services as part of the implementation of contracts concluded with customers or in order to carry out activities performed at the customer's request before or in connection with the conclusion of the contract.
2.3. The data is processed in order to handle complaints and possible other claims. The basis for processing is the legitimate interest of the Administrator, consisting in securing information about cooperation in order to handle any claims.
2.4. Fulfillment by the Administrator of administrative and public-law obligations,
2.5. We process data based on your written or oral consent (Article 6 (1) (a) of the GDPR), given for specific purposes (e.g. marketing).
2.6. The consent to the processing of personal data granted so far remains in force.
2.7. The consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of data processing until the consent is withdrawn or in circumstances where the Administrator processes data on a basis other than your consent.


3. Where do we obtain your data from and what are their categories?
3.1. Most of the data processed by the Administrator comes directly from the interested entity (e.g. customer, employee),
3.2. Entrepreneurs' data is also obtained from public sources, i.e. from the National Court Register, the Central Register of Economic Activity or similar sources located in other countries, and from private entities specializing in collecting and sharing information about entrepreneurs,
3.3. In the case of data of persons representing entrepreneurs or acting on their behalf in a different way, the data is obtained in the above-mentioned manner, as well as from the entrepreneurs themselves.


4. Who can we transfer the data to?
4.1. The data may be made available to other recipients in order to perform the contract with you, in order to fulfill the legal obligation incumbent on the Administrator, based on your consent or for purposes resulting from the legitimate interests of the Administrator or a third party.
4.2. Recipients may be authorized employees of the Administrator and other persons acting under his authority. The data is transferred to entities processing data at the request of the Administrator, and such entities process data on the basis of an agreement with the Administrator and only
in accordance with his instructions and subject to professional secrecy.
4.3. The administrator does not sell your personal data to other entities.


5. Will your data be transferred to a third country (outside the European Union)?
The data may be transferred to recipients in countries outside the European Union, if it is necessary to perform the contract concluded between you and the Administrator or to take action before concluding such a contract in order to conclude it, as well as as part of the Administrator's use of IT infrastructure (cloud, e-mail).


6. Is the provision of personal data obligatory?
Providing personal information is voluntary.


7. How long will your data be processed (stored)?
Your data will be processed for the period necessary to achieve the goals indicated in point. 2, i.e .:
• In terms of the implementation of the concluded contract - until its completion, additionally after termination of the contract, the data will be stored due to the obligations arising from the regulations
accounting and tax, for their duration, and for reasons of legal security, until any claims are time-barred,
• In the scope of fulfilling the legal obligations incumbent on the Administrator in connection with running the business