I [Data Administrator]
The Administrator of personal data of newsletter subscribers is:
Sikorski Supreme Furniture Sp. z o. o limited partnership with headquarters in Lublin as the data Administrator Sikorski Supreme Furniture Sp. z o. o limited partnership , entered in the register of entrepreneurs kept by the District Court XII Commercial Division of the National Court Register under no. KRS 0000506546, NIP: 7010422752, REGON: 147212952
Subscribers can contact the Administrator:
1) via the above-mentioned address of the registered office;
II [Purposes, legal bases, and time of data processing]
1. The Administrator processes the e-mail addresses of newsletter subscribers in order to perform the ordered newsletter service, provided electronically on the basis of the Terms and Conditions available <here>. The Administrator processes data such as:
1) the e-mail address provided;
2) the date of subscription;
3) information about sending newsletters.
3. This data is processed in accordance with Art. 6 para. 1 subparagraph b GDPR in order to provide the newsletter service.
1. In order to deal with complaints, the service provider processes the personal data of users submitting complaints, in particular e-mail address, name, content of the complaint, circumstances of the event giving rise to the complaint, information obtained in the course of considering the complaint, including explaining the event causing it. In the course of considering the complaint, the service provider may process a number of other information, including the user's name and surname, information about the subscriber's use of the newsletter service, cookies or other similar technologies, device information.
2. This data is processed in accordance with Art. 6 para. 1 subparagraph b GDPR in order to provide the newsletter service, i.e. the contract for the provision of electronic services, in accordance with the regulations, and are processed for the time necessary to consider the complaint and no longer than one year after the complaint procedure is completed for archiving purposes in accordance with the Accounting Act in the event of the need to defend against any claims against the service provider in accordance with the information provided below.
3. Explanatory proceedings, pursuing claims
1. In the event of undertaking an investigation regarding a possible breach of the provisions of the regulations or legal provisions, rules of social coexistence or good manners, the Administrator may process the personal data of certain subscribers until the end of the ongoing proceedings and until the expiry of the statute of limitations for the Administrator's claims against the subscriber, which is usually 3 years but in special cases provided for by law it may be longer.
2. This data will then be processed, including made available in accordance with Art. 6 para. 1 subparagraph f GDPR, i.e. in the legitimate interest of the Administrator consisting in pursuing his claims against the user. The legitimate interest of the Administrator will then be the goal that overrides the rights and freedoms of the subscriber.
III [Recipients of subscriber data]
The Administrator discloses personal data of subscribers only to processing entities under the concluded contracts for entrusting the processing of personal data in order to provide services to the Administrator, e.g. hosting and operating the Website, IT services, marketing and PR services, legal and advisory services.
IV [Sending personal data to third countries]
Personal data will not be processed in third countries.
V [Rights of data subjects]
1. Each data subject has the right to:
1) access - obtain confirmation from the Administrator as to whether their personal data is being processed. If data about a person is processed, they are entitled to access i and obtain the following information: about the purposes of processing, categories of personal data, recipients or categories of recipients to whom the data has been or will be disclosed, about the period of data storage or the criteria for determining them on the right to request rectification, deletion or limitation of the processing of personal data due to the data subject, and to object to such processing (Article 15 of the GDPR);
2) receive a copy of the data - obtain a copy of the data subject to processing, the first copy being free of charge, and the Administrator may charge a reasonable fee for subsequent copies, resulting from administrative costs (Article 15 (3) of the GDPR);
3) rectify - request the rectification of incorrect personal data concerning them or the supplementation of incomplete data (Article 16 of the GDPR);
4) delete data - request the deletion of their personal data, if the Administrator no longer has a legal basis for their processing or the data is no longer necessary for the purposes of processing (Article 17 of the GDPR);
5) limit processing - requests to limit the processing of personal data (Article 18 of the GDPR), when:
a) the data subject questions the accuracy of the personal data - for a period enabling the Administrator to check the accuracy of the data,
b) the processing is unlawful and the data subject opposes its removal, requesting the restriction of its use,
c) the Administrator no longer needs this data, but it is needed by the data subject to establish, assert or defend claims,
d) the data subject has objected to the processing - pending verification whether the legitimate grounds of the Administrator override those of the data subject;
6) transfer data - receiving in a structured, commonly used and machine-readable format personal data concerning them, which they provided to the Administrator, and requesting this data to be sent to another Administrator, if the data is processed on the basis of the consent of the data subject or a contract concluded with them, and if the data is processed in an automated manner (Article 20 of the GDPR);
7) object - object to the processing of their personal data for the legitimate purposes of the Administrator, for reasons related to their particular situation, including profiling. Then the Administrator assesses the existence of valid, legitimate grounds for processing that override the interests, rights and freedoms of data subjects, or the grounds for establishing, investigating, or defending claims. If, according to the assessment, the interests of the data subject are more important than the interests of the Administrator, the Administrator will be obliged to stop processing data for these purposes (Article 21 of the GDPR);
2. In order to exercise the above-mentioned rights, the data subject should contact the Administrator using the contact details provided and inform them which right and to what extent they want to exercise.
VI [President of the Personal Data Protection Office]
The data subject has the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office with its seat in Warsaw, ul. Stawki 2, which can be contacted in the following way:
1) by post: ul. Stawki 2, 00-193 Warsaw;
2) via the electronic inbox available at: https://www.splot.me/en/contact
VII [Data protection officer]
In any case, the data subject may also contact the Administrator's data protection officer directly:
2) to the above-mentioned correspondence address with the note: Data protection officer.
IX. [Legal acts cited in the clause]
1) GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (Official Journal of the European Union L 2016 No. 119, p. 1);
2) art. 74 paragraph. 2 subparagraph 6 of the Act of 29 September 1994 - of accounting (i.e. Journal of Laws of 2018, item 395 as amended).