Information clause on the processing of personal data:

Pursuant to Article 13(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), I hereby inform you that:

The controller of your data is:
FLEXOR POLAND Spółka z ograniczoną odpowiedzialnością

Contact details:
FLEXOR POLAND Spółka z ograniczoną odpowiedzialnością
95-080 Tuszyn, ul. Strażacka 4
E-mail: info@flexor.pl

Your data are processed for the following purpose:

When you visit our website, technical data are automatically collected by our IT systems. This includes, in particular, the internet browser used, the operating system, the time of access, and the IP address. These data are collected automatically as soon as you access our website.

Depending on the use of our website, we process different categories of personal data. These include, in particular:

• contact data (e.g. name, email address)
• contract data
• usage data (e.g. visited pages, duration of visit)
• communication data
• technical data (e.g. IP address, browser information)

for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract, as well as in connection with the use of our website for the purposes of providing the website technically, ensuring IT security, measuring reach, analysing user behaviour, and optimising conversion rates.

The legal basis for the processing of your personal data is:

1. Article 6(1)(b) GDPR – performance of a contract concluded with you,
2. Article 6(1)(c) GDPR – compliance with a legal obligation,
3. Article 6(1)(f) GDPR – legitimate interests (for ensuring IT security, preventing misuse, and for the economic optimisation of our services),
4. Article 6(1)(a) GDPR – consent (e.g. in the case of cookies, analytics tools, or newsletters).

Information on the disclosure of data to other recipients:

Your personal data will only be disclosed insofar as this is necessary for the performance of our contractual and legal obligations or where you have given your consent. Recipients of the data include, in particular, IT and hosting service providers, providers of analytics and marketing tools (e.g. Google Ireland Limited), as well as other processors with whom data processing agreements pursuant to Article 28 GDPR have been concluded.

A transfer to third countries (e.g. the United States) may take place in the context of the use of certain services. In such cases, the transfer shall be carried out exclusively on the basis of appropriate safeguards pursuant to Articles 44 et seq. GDPR, in particular by means of Standard Contractual Clauses or within the framework of the EU–US Data Privacy Framework.

The processing is carried out on the basis of Article 6(1)(b), (c) and (f) GDPR and – where necessary – on the basis of your consent pursuant to Article 6(1)(a) GDPR.

We use external service providers who process personal data on our behalf (so-called processors). Appropriate data processing agreements pursuant to Article 28 GDPR have been concluded with these service providers, ensuring that the processing is carried out exclusively in accordance with our instructions and in compliance with the applicable data protection provisions.

Where we process personal data jointly with other parties, this is carried out on the basis of an arrangement on joint controllership pursuant to Article 26 GDPR, in which the respective responsibilities are defined.

Data retention period:

Contract and billing data: 5 years after the preparation of the annual financial statements, as well as for the duration of the contract and the assertion of any claims.

Marketing data: until withdrawal of your consent.

You have the right:

1. to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data (Article 15 GDPR),
2. to obtain rectification of inaccurate personal data concerning you or completion of incomplete data (Article 16 GDPR),
3. to obtain erasure of your personal data, provided that no statutory retention obligations oppose this (Article 17 GDPR),
4. to obtain restriction of processing (Article 18 GDPR).
5. You have the right to obtain restriction of processing of your personal data, in particular:
   – where you contest the accuracy of the data,
   – where the processing is unlawful,
   – where we no longer need the data, but you require them for the establishment, exercise or defence of legal claims,
   – where you have objected to processing.
6. to receive your personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller (data portability) (Article 20 GDPR),
7. to object to the processing of your data where such processing is based on Article 6(1)(f) GDPR (Article 21 GDPR).
8. You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data where such processing is based on legitimate interests. 
9. In the event of an objection, your personal data shall no longer be processed unless there are compelling legitimate grounds for the processing or for the establishment, exercise or defence of legal claims.
10. Where your personal data are processed for direct marketing purposes, you have the right to object at any time to such processing. Following your objection, your data shall no longer be processed for such purposes.
11. to lodge a complaint with a supervisory authority.

You also have the right to withdraw your consent at any time with effect for the future.

The data provided by you are:

collected on the basis of Article 6(1)(b) GDPR.

Failure to provide the data will result in the inability to perform the order/contract.

Hosting:

Our website is hosted by an external service provider. The provider is Hostpoint AG, Switzerland. Further information can be found in the provider’s privacy policy.

In this context, personal data (e.g. IP address, access data) may be processed on the provider’s servers. The processing is carried out on the basis of Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.

An adequacy decision of the European Union exists for Switzerland pursuant to Article 45 GDPR.

Server log files

The provider of our website automatically collects and stores information in so-called server log files, which your browser automatically transmits. These include, in particular:

• • browser type and browser version
• operating system usedreferrer URL
• hostname of the accessing computer
• time of the server request
• IP address

These data are not merged with other data sources. The processing is carried out for the purpose of ensuring the proper functioning of the website and improving our services.

Cookies:

Our website uses cookies. Technically necessary cookies are stored on the basis of Article 6(1)(f) GDPR. Analytics and marketing cookies are only used on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time.