Privacy Policy

What changes are taking place in data protection?

On May 25, 2018, the Regulation of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free flow of such data (RODO), which replaced the provisions of the existing Polish Data Protection Act, became effective. The new regulations are intended to increase the protection of your personal data by, among other things, introducing additional rights for you and obligations for entities that process data. The RODO introduces a certain degree of discretion in the application of safeguards to ensure data protection - this means, for example, that the protection of personal data may vary significantly between entities that process it. We make every effort to ensure that the safeguards we use provide the highest possible level of protection and minimize the risk of a breach.

Who is the controller of your data?

The administrator of your personal data is Bydgoszcz Rubber Industry Plants „STOMIL” Joint Stock Company in restructuring, 155 Torunska St. 85-950 Bydgoszcz, NIP: 554-031-04-39.

How can you contact the Data Protection Officer?

In matters concerning the processing of your data, you can contact the Data Protection Officer via e-mail: iod@stomil.bydgoszcz.pl.

For what purpose do we process your data?

The following are all the purposes for which your personal data may be processed, the corresponding legal bases that allow us to process the data, and the periods for which each data will be processed.

Goal: Acquire and retain customers, including offering products, under which data are processed until the Company's existence, where the basis for processing is the legitimate interest of acquiring customers (Article 6(1)(f) RODO) through available communication channels, in particular and with the customer's consent - by e-mail, telephone and snail mail,

Purpose: Purchase of goods and services, under which the data are processed for the period necessary for the settlement of claims, i.e. also after the term of the contract, until the statute of limitations for such claims under generally applicable laws, and the basis for processing is the contract (Article 6(1)(b) RODO).

Purpose: To conduct a bidding process, under which the data are processed for the period necessary to conclude a contract or until an objection is expressed, where the basis for processing which is the legitimate interest of selecting the most advantageous offer (Article 6(1)(f) RODO).

Purpose: To execute sales, including customer service, handling complaints, taking collection actions and shipping goods, under which your data are processed for the period necessary for the settlement of claims, i.e. also after the term of the contract, until the statute of limitations for such claims under generally applicable laws, and the basis for processing is the contract (Article 6(1)(b) RODO). With regard to the issuance of an invoice, the legal basis for the processing of your data is also the provisions of law arising from the Goods Tax Act of March 11, 2004 (Article 6(1)(c) RODO). Your data is stored until your account is deregistered, and in the case of a purchase up to 6 years or until the expiration of mutual claims.

Goal: Provide security for people and property through video surveillance, under which data are processed up to 3 months after recording, based on the legitimate interest of protecting persons, property and Information (Article 6(1)(f) RODO).

Purpose: To keep a record of incoming and outgoing correspondence, under which data are processed for the duration of the Company's operation, based on the legitimate interest of recording correspondence (Article 6(1)(f) RODO).

Purpose: Receiving and issuing goods, under which the data is processed for the period of the Company's operation, based on the legitimate interest of verifying the person - the driver (Article 6(1)(f) RODO).

Purpose: Distribute NEWS via newsletter, under which the data are processed until the consent is withdrawn, based on the consent given (Article 6(1)(a) of the RODO).

Purpose: To maintain accounts with an online store, where data is processed on the basis of the expressed (Article 6(1)(a) of the RODO), in terms of the account maintained, and in terms of sales on the basis of the contract (Article 6(1)(b) of the RODO. With regard to the issuance of an invoice, the legal basis for the processing of your data is also provided by the provisions of the Law of March 11, 2004 on the tax on goods (Article 6(1)(c) RODO). Your data is stored until your account is deregistered, and in the case of a purchase up to 6 years or until the expiration of mutual claims.

Purpose: Running a fanpage and organizing brand promotion activities through social networks, under which personal data will be processed for the period of operation of the fanpage or until the data is deleted from the social network in question. The personal data provided will be processed by the Administrator for the purpose of running the fanpage and for promotional activities. Categories of recipients to whom we may share your personal data are entities managing promotional activities or fanpages. With regard to participation in the aforementioned activities and sharing your data on the fanpage, the processing takes place on the basis of your consent (Article 6(1)(a) of the RODO), understood as joining the organized promotional activity. With regard to data related to liking, tagging or commenting on a fanpage, processing takes place on the basis of the legitimate interest of promoting the brand (Article 6(1)(f) RODO). The co-controllers of the personal data are the operators of the respective social network, i.e.: in the case of Facebook, the operator is Facebook Ireland Limited, 4 Grand Canal Square, Dublin Dublin 2, and in the case of LinkedIn, the operator is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Pl, Dublin, 2, Ireland.

What is the scope of data processing?

The Administrator, through the Service and other forms of communication, collects and processes the following specified personal data of Users provided during the processes of registration on the Service: name and surname, residential address, e-mail address, telephone number.

What rights do you have?

You have the right to access and rectify the data you have provided. You also have the right to request deletion („right to be forgotten”) or restriction of processing, as well as the right to data portability. You may also object to the processing of your data. You can exercise the indicated rights by contacting the Administrator or the Data Protection Officer. You also have the right to lodge a complaint with the President of the Office for Personal Data Protection.

Are you required to provide personal information?

To the extent that the processing of your data is carried out for the purposes listed above, the provision of your data is voluntary, but it is necessary for the purpose in question. Provision of data necessary for issuing an invoice is a statutory obligation and results from the SERVICES Tax Act.

How to revoke consent?

You may give both all or some of your consents and none. You may withdraw any consent you have given in connection with the processing of your personal data at any time without suffering negative consequences. The will to revoke consent can be expressed at any time, the only condition is that it must reach us - in particular, in the field of newsletters, the withdrawal of consent is understood by unsubscribing. Withdrawal of consent does not affect the legality of the processing of your data before it was carried out, i.e. until you withdraw your consent, the processing of your data is legal.

When and to whom may we share your data?

We may disclose your data to recipients, in the form of companies cooperating with us and performing tasks on our order and for our benefit, i.e. on the basis of entrustment agreements, ensuring the security of your data. Such entities may be entities providing software supervision, hosting the website and e-mail, carriers of goods or couriers, and law firms. However, we will not transfer your personal data to a third country (outside the European Economic Area).

How will we not process your personal data?

Your personal data shall not be subject to automated processing (e.g. profiling) that produces legal effects against you or similarly significantly affects you.