INFORMATION NOTE ON PERSONAL DATA IN BALEX METAL

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we hereby inform you that:

 

1. The Controller.

The Controller of personal data is: Balex Metal sp. z o.o. with its registered seat in Bolszewo, Wejherowska st. 12C, 84—239 Bolszewo (Poland), KRS 0000176277, NIP: 5881130299, REGON: 191112216, („Controller”).

You can contect the Controller in writting, by traditional post via adress:  Balex Metal sp. z o.o., ul. Wejherowska 12C, 84—239 Bolszewo or e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

 

2. Processing of personal data.

a)

Candidates for an employee– the purpose of personal data processing is to execute the recruitment process. The processing of personal data of candidates for an employee is made upon its consent. Sharing of personal data is voluntary, however, if personal data are not shared, it will not be possible to participate in the recruitment process. The data necessary for the recruitment process is: name, surname, address of residence, data on education and previous experience. Data retention period: up to 6 months. If you agree to data processing during further recruitment: up to 24 months.

b) 

Persons who contact with Balex Metal sp. z o.o. - the purpose of personal data processing is to communicate with persons contacting Balex Metal sp. z o.o. The legal basis for the processing of personal data is the Controller's legitimate interest in enabling communication, possibly establishing a relationship with the contact person, providing the necessary information. The scope of personal data processed is: name, surname, e-mail address, telephone number, correspondence address and other information provided by the person contacting the Controller. Sharing of personal data is voluntary, however, if personal data are not shared, the communication process may be difficult or impossible to implement. Data retention period in case of advisory, information or registration requests to the company newsletter: until the request of the person contacting to erase his data and the content of inquiries from the database or as long as it is necessary for the legitimate interest of the Controller or a third party. Data retention period in the case of complaints: pending the outcome of the complaint process or until the end of the warranty period for the purchased / advertised product.

c)

Counterparties and their representatives - the purpose of personal data processing is the conclusion and / or implementation of the contract. The processing of personal data of counterparties and persons indicated by them (including their employees and associates) takes place in order to conclude or perform the contract or on the basis of the Controller's legitimate interest, i.e. enabling communication with the counterparty and performance of the contract with the counterparty. The scope of personal data processed is: first and last name e-mail address, telephone number, place of work, position, business address, NIP, REGON number, PESEL number, in some cases also data on documents: identity card, passport. Sharing of personal data when a contract is to be concluded with a natural person is necessary for the conclusion or implementation of the contract, and in the case of persons who represent a legal entity it is not necessary, but it allows contact. Data retention period: the duration of the contract concluded with the contractor and the period necessary to enable the parties to enforce claims arising from such a contract, for not less than for a period resulting from legal provisions or for as long as it is necessary for the legitimate interest of the Controller or person third.

d)

Guests of Balex Metal sp. z o.o. - the purpose of personal data processing is to identify and host visitors in the Balex Metal sp. z o.o. and ensuring the safety of persons and property. Processing of personal data of guests of Balex Metal sp. z o.o. it is based on the legitimate interest of the Controller, i.e. enabling the person to appear in Balex Metal sp z o.o., ensuring security. The scope of personal data processed is: image (monitoring), name and surname. Data retention period: up to 3 months image (monitoring) and up to 2 years other data.

e)

Persons participating in marketing projects such as promotions or purchase contests - the purpose of personal data processing is to communicate with persons participating in marketing projects of Balex Metal sp. z o.o. The legal basis for the processing of personal data is the legitimate interest of the Controller consisting in enabling communication, possibly establishing a relationship with the person submitting, providing necessary information or consent of the person taking part in the project. The scope of personal data processed is: name, surname, e-mail address, telephone number, correspondence address and other information provided by the participant. Sharing of personal data is voluntary, however, if you do not share your personal information, the process may be difficult or impossible to implement. Data retention period: until the end of the promotion or other project or as long as it is necessary for the legitimate interest of the Controller or a third party.

 

3. Sharing and entrusting of personal data.

Personal data may be made available to entities and authorities authorized to process such data on the basis of law. Data may also be entrusted for further processing to third parties which are other companies from the Balex Metal capital group, technical and organizational service providers (e.g. IT service providers) and legal and advisory services providers, who will process data on the basis of an agreement with the Controller’s and under its supervision.

 

4. Automated individual decision-making.

The processing of personal data will not be carried out by automated means, and will exclude profiling.

 

5. The rights of data subjects.

  • right to request from the Controller for the access to processed personal data,
  • right to request from the Controller for the rectification of the processed personal data,
  • right to request from the Controller for the erasure of the processed personal data,
  • right to request the from Controller for the restriction of the processed personal data,
  • right to object to processing of the processed personal data,
  • right to request the from Controller for the restriction of the processed personal data,
  • right to data portability,
  • right to withdraw the consent to process the personal data, where its withdrawal does not affect the lawfulness of the processing based on the consent before its withdrawal,
  • right to lodge a complaint with a supervisory authority (Prezes Urzędu Ochrony Danych Osobowych)

 

6. The source from which the personal data originate.

If we have received personal data from entities other than the data subject, this means that we have received them from counterparties, social media, the Internet or other publicly available sources.