Personal data administrator
The administrator of your personal data processed for the purposes of the production activity is Atex Sp. z o.o. with its headquarters in Godzikowice 50 L, 55-200 Oława, registered by the District Court for Wrocław Fabryczna in Wrocław, 6th Commercial Department, KRS: 0000182048, NIP: 912-176-90-00, REGON: 932965256. In all matters related to the processing of your personal data by Atex Company you can contact us:
Scope and purpose of personal data processing
Atex processes personal data in order to process your order and sales, i.e. for purposes related to:
It is necessary to enable us to process the following personal data:
In addition, we may process your data contained in your CV if you send it to us in connection with our recruitment process. In this case, we will process your data on the basis of Article 221 § 1 of the Labour Code, if you provide additional data on the basis of your agreement
If you agree, we also process your personal data for the following purposes:
– to contact you, including for permitted marketing purposes, through the available communication channels, in particular by e-mail and by telephone
– to send you commercial information by electronic means.
You may withdraw your consent to the processing of your personal data, including for recruitment purposes, at any time – simply write to us and inform of your wish to withdraw your consent at the email address firstname.lastname@example.org. Otherwise, we will continue to process your personal data until you withdraw your consent or unless we will decide by ourselves that the purpose for which the data was collected has ended.
Data collected through the website
Browsing through the content of our website does not require you to provide personal data, except when you contact the Administrator using the data provided in the “CONTACT” tab. Personal data provided by you during telephone or e-mail contact will be processed by the Administrator excusively for the purpose of answering your enquiry, conversation or general contact with you.
Through the website, we collect data by automatic way. As a user of our website, we process data about your activity on the website, that is, session data, your device and operating system, browser, location and unique ID. This data is processed in order to facilitate your use of the website, as well as to improve the functionality of the website. None of this information is used to identify an individual user, as we use it to monitor and improve IT services.
Automated decision-making and profiling
Your personal data will not be processed by automated means (including profiling).
Recipients of the data
Like most organisations, we use the help and services of other parties in our business, which sometimes involves the transfer of personal data. Accordingly, where necessary, we will only pass on your personal data to:
– processors to whom we entrust the data for processing, i.e. companies providing IT services for us;
– other data recipients such as: carriers, banks.
These entities process your personal data only on our instructions to a minimum extent.
In addition, it may happen, e.g. on the basis of a relevant legal provision, that we have to forward your personal data to authorised authorities (e.g. judicial authorities).
Transfers of personal data to third countries
The information generated by the cookie about your use of the Website (including your IP address) will be transmitted to and stored by Google on servers outside the European Economic Area under appropriate legal safeguards, which are standard contractual data protection clauses approved by the European Commission.
Period of processing the personal data
Your personal data processed for the purpose of handling your enquiry will be processed for the duration of the correspondence and then, depending on the outcome of the correspondence, will either be added to Atex’s customer database and further processed for the purpose of fulfilling the contract or will be deleted if there is no possibility of establishing cooperation. In the event of a clear closure of the discussions on the part of the user to the Administrator, the data will be deleted immediately from the working system databases and from the security copies before the expiry of thirty days. In case of no response and unclear situation, the data will be stored for a period of 6 months from the date of sending the last message. Personal data used for the performance of the contract will be stored for the duration of the contract and after the end of the contract in order to comply with the legal obligation incumbent on the Controller of the personal data and for a period in accordance with applicable law and/or until the expiry of the limitation period for possible claims. Data processed on the basis of consent will be processed until the consent is withdrawn or the purpose of processing ceases. The period of 30 days needed to remove them from the security copy should also be added.
Rights of data subjects
Under the provisions of the General Data Protection Regulation, you have the right:
– Access to your data and to receive a copy of it. You have the right to obtain confirmation from us as to whether we are processing your personal data and, if this is the case, you have the right to:
(a) obtain access to your personal data, (b) obtain information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of that data, the intended period of storage of your data or the criteria for determining that period, your rights under the RODO and your right to lodge a complaint to a supervisory authority, about the source of that data, automated decision-making, including profiling, and the safeguards applied in relation to the transfer of that data outside the European Union, (c) obtain a copy of your personal data.
– to rectify (modify) your data. You have the right to rectify and complete the personal data you have provided. You have the right to request us to rectify this data (if it is incorrect) and to complete it (if it is incomplete);
– to data delation (right to be forgotten) – if in your opinion there are no grounds for us to process your data you can request that we erase it. You have the right to request delation of your personal data if:
a) you have withdrawn specific consent, to the extent that your personal data was processed based on your consent;
b) your personal data is no longer necessary for the purposes for which it was collected or for which it was processed;
c) you have objected the use of your data for the purpose of keeping statistics on the use of the Website, and the objection has been deemed legitimate;
d) your personal data is being processed unlawfully.
Despite a request to delete personal data, due to an objection or withdrawal of consent, we may retain certain personal data to the extent necessary for the establishment, assertion or defence of claims. This applies in particular to personal data such as your name, e-mail address and application history, which we retain for the purpose of investigating complaints and claims relating to the use of our services.
-to restriction of data processing – you can request that we restrict the processing of your personal data only to storing it or rying out activities agreed with you, if in your opinion we have incorrect data about you or we are processing it unfoundedly, or you do not want us to delete it because you need it to establish, assert or defend your claims, or for the duration of your objection to the processing. You have the right to request the restriction of the use of your personal data in the following cases:
(a) where you question the accuracy of your personal data, in which case we will restrict the use of your personal data for the time needed for us to verify the accuracy of your data;
(b) where the
processing of your data is unlawful and instead of erasure you request the restriction of the use of your personal data;
(c) where your personal data is no longer necessary for the purposes for which we collected or used it, but you need it to establish, assert or defend your claims;
(d) when you have objected to the use of your data, in which case the restriction is for the time necessary to consider whether, in view of your particular situation, the protection of your interests, rights and freedoms outweighs the interests we pursue by processing your personal data.
– to raise an objection against processing. If your objection proves to be legitimate and we have no other legal basis for processing your personal data, we will delete your data against the use of which you have objected;
– to data portability – you have the right to receive from us in a structured, commonly used machine-readable format, such as CSV, the personal data relating to you that you have provided to us based on your consent. You can also commission us to send this data directly to another party;
– to lodge a complaint with a supervisory authority. You can submit to us complaints, enquiries and requests regarding the processing of your personal data and the exercise of your rights. If you believe that we process your data unlawfully, you can lodge a complaint in this matter with the President of the Office for Personal Data Protection with its seat at Stawki 2 Street in Warsaw.
Protection of personal data
Atex ensures the security of your personal data by means of appropriate technical and organisational measures to prevent unlawful processing and accidental loss, destruction or damage. Regardless the above we make every effort to ensure that personal data is always:
a) correct and processed lawfully,
b) obtained only for specified purposes and not further processed in a way incompatible with those purposes,
c) kept no longer than necessary,
d) processed in accordance with the data subject’s rights, including the right to reserve access,
e) not transferred without adequate protection. For this purpose, we use the latest technology and appropriate procedures for the protection of personal data, as well as modern mechanisms for the protection of transferred data, and your personal data are stored in a database in which technical and organisational measures have been applied to ensure the protection of the processed data in accordance with the requirements set out by generally applicable laws on the protection of personal data. Access to the database is restricted to persons authorised by the data controller.
Cookies are small text information stored on your terminal device (e.g. computer, tablet, smartphone), which can be read by our ICT system. The Website uses the following types of cookies:
a) Session cookies – stored on your device until you stop using the Website or close your web browser.
b) Analytical cookies – cookies used by Google Analytics, referred to below. The Administrator stores cookies on your terminal equipment and then gains access to the information contained in there for the following purposes:
a) marketing, consisting of collecting information about the actions you have taken on the Website, i.e. what links you have clicked on and what pages of the Website you have visited, adjustment of the Website’s content to your interests and needs, including through generation of personalised content,
b) service of visit counters,
c) for statistical purposes, in particular to enable the Administrator to analyse the manner in which users use the Website. Google Analytics cookies
are used in this respect.