GDPR – Personal Data Protection Policy

From 25th May 2018, in connection with the entry into force of the GDPR – a new regulation on the protection of personal data, we inform that we are making every effort to adapt our actions to the new legal requirements. All this is done to ensure the highest level of personal data security and to inform about the processing of personal data, access to them and other rights that the regulation guarantees. As an administrator of our customers’ personal data, we operate based on the highest data processing standards.

We will inform about all changes related to our services and documentation, which may affect the customer and his data, as part of the communication possibilities on an ongoing basis.

The Administrator, i.e., the entity deciding how personal data will be used, is Prochemist Sp. z o.o. with its registered office in Złoty Stok, Rynek 1 Street, 57-250 Złoty Stok, KRS 0000420055.

How to contact us to get more information about processing your personal data?

In all matters related to the processing of personal data and the use of rights related to data processing, you can contact us at the email address: rodo@zlotystok.com.pl.

Goals and bases for processing:

We process personal data for the purpose of controlling the right to purchase explosive materials. Data processing is based on the consent expressed by the customer (legal standing: Art. 6 para. 1 lit. a GDPR).

Data storage period:

We will process personal data for the period required by law by the authorities supervising the circulation of explosive materials.

Data recipients:

Personal data during their processing can be disclosed to the following categories of recipients: our authorized employees and associates of our company, entities to whom we have entrusted the processing of personal data to provide services, and authorized persons employed in these entities.

Transfer of data to third countries or international organizations:

The processed personal data will not be transferred to recipients located in countries outside the European Economic Area (EU countries and Iceland, Liechtenstein, and Norway).

Rights of the data subject

We assure that all people whose personal data are processed by us are entitled to the appropriate rights arising from the GDPR, i.e.:

1. the right to access personal data, including the right to obtain a copy of this data;
2. the right to request the rectification (correction) of personal data – if the data are incorrect or incomplete;
3. the right to request the deletion of personal data (the so-called “right to be forgotten”) – in the case when: a) the data are no longer necessary for the purposes for which they were collected or otherwise processed, b) the person to whom the data relate has objected to the processing of personal data, c) the person to whom the data relate has withdrawn the consent on which the processing is based and there is no other legal basis for processing d) data are processed unlawfully e) data must be removed to fulfill an obligation arising from legal provisions
4. the right to request a limitation of data processing – in the case when: a) the person to whom the data relate disputes the accuracy of personal data, b) data processing is unlawful, and the person to whom the data relate opposes the deletion of data, requesting in return their limitation, c) the administrator no longer needs the data for his purposes, but the person to whom the data relate needs them to establish, defend or pursue claims, d) the person to whom the data relate has objected to the processing of data – until it is determined whether legally justified grounds on the part of the administrator are overriding the basis of the objection.
5. the right to transfer personal data in the case when: a) the processing is based on a contract concluded with the person to whom the data relate or on the consent expressed by such a person, b) the processing is carried out in an automated manner.
6. the right to object to the processing of personal data, including profiling, when: a) there are reasons related to your particular situation, b) data processing is based on the necessity for purposes resulting from our legally justified interest, referred to in point II above.

If you want to exercise these rights, write to us at the email address: rodo@zlotystok.com.pl.

The right to withdraw consent to the processing of personal data

To the extent that you have given us consent to the processing of personal data, you have the right to withdraw consent to the processing of personal data. The withdrawal of consent does not affect the legality of data processing, which was carried out based on consent before its withdrawal. If you want to exercise these rights, write to us at the email address: rodo@zlotystok.com.pl.

The right to lodge a complaint with the supervisory authority

In case you believe that our processing of personal data violates the GDPR provisions, the customer has the right to lodge a complaint with the relevant supervisory authority.

Information about voluntariness:

Providing data by the customer is voluntary. Without the customer’s consent, however, we will not be able to inform him about upcoming events and promotions.

Profiling and automated decision-making:

The customer’s personal data will not be used for profiling or for automated decision-making regarding the customer.