GDPR (General Data Protection Regulation)

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and pursuant to the Personal Data Protection Act of 10 May 2018 as amended, I hereby inform you that:

The controller of the personal data processed is: Renoplast Sp. z o.o. The controller's registered office is located at: 34-300 Żywiec, ul. Fabryczna 14. For matters related to personal data processing, you may contact us in writing at our registered office address or via email at: rodo@renoplast.pl. The controller implements an Information Security Policy to comply with data protection laws.

Personal data will be processed for the following purposes:

• concluding contracts, including ensuring appropriate service quality, managing the complaint process, and settling accounts during or upon termination of the contract;
• complying with legal obligations resulting from generally applicable laws (including the Act on the Protection of Persons and Property), tax regulations, and accounting standards;
• conducting direct marketing of our own services, and maintaining customer relations, such as responding to enquiries, based on your consent;
• creating summaries, analyses, and statistics;
• providing payment services, data archiving, and debt collection;
• verifying financial credibility and repayment capacity when concluding, extending, or expanding a contract—this also applies to data obtained from other sources or data we already hold.

Personal data will be shared with:

• public authorities, to the extent they are entitled to receive it under the law;
• entities processing data on our behalf based on concluded agreements, including data processing agreements, such as IT service providers, tax and billing services, accounting and legal services, sales intermediaries, payment service providers (banks), debt purchasers, and courier or postal services.

Providing personal data is voluntary but necessary to execute and perform contracts.

Data subjects have the right to:

• access their personal data, and request its rectification or erasure;
• restrict processing;
• data portability;
• withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
• lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) pursuant to Articles 77 and 79, if you believe the processing of your data violates the GDPR.

Personal data will be processed for no longer than is necessary to achieve the purposes for which it is collected. The controller will not use automated decision-making, including profiling, for marketing or offer tailoring. Your data is not and will not be transferred outside the European Economic Area.

Information Clause on Personal Data Processing
In accordance with Article 13(1) and (2) of the General Data Protection Regulation (GDPR) of 27 April 2016, we hereby inform you of the following:

1. Data Controller
The controller of your personal data is Renoplast Sp. z o.o., with its registered office at: ul. Fabryczna 14, 34-400 Żywiec.

2. Contact Details
Regarding data protection matters, you may contact us:

Via email: rodo@renoplast.pl

In writing: at the controller's registered office address provided above.

3. Purpose and Legal Basis for Processing
The data is collected for the purpose of issuing an invoice, in accordance with:

Article 106e(1) of the Goods and Services Tax Act of 11 March 2004.

Article 6(1)(c) of the GDPR (compliance with a legal obligation).

4. Your Rights
You have the following rights regarding your personal data:

Right to access, rectification, erasure, or restriction of processing.

Right to object and demand the cessation of processing.

Right to data portability.

Right to withdraw consent at any time.

Right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office).

5. Voluntariness of Data Provision
Providing your data is voluntary but necessary for the issuance of a VAT invoice. Failure to provide this data will result in the inability to issue the invoice.

6. Data Recipients
Your data may be disclosed to:

Relevant inspection authorities in accordance with the law.

Poczta Polska S.A. (only if you request the invoice to be sent via post).

7. Data Transfers and Storage
International Transfers: The controller does not intend to transfer data to a third country or an international organisation.

Storage Period: Data will be stored for the period specified in Article 112 of the Goods and Services Tax Act and Article 70 §1 of the Tax Ordinance, and will subsequently be archived.

8. Automated Decision-Making
The controller may use automated decision-making, including profiling, for marketing purposes and to tailor offers.

Note: The receipt of an invoice is equivalent to acknowledging the above provisions.

Pursuant to the provisions of Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and in accordance with the Personal Data Protection Act of 10 May 2018, as amended, I hereby inform you that:

The Controller of personal data processed in the employment process is: Renoplast Sp. z o.o. with its registered office at: 34-300 Żywiec, ul. Fabryczna 14.

In matters related to the processing of personal data, you may contact us in writing at the registered office address or via e-mail at rodo@renoplast.pl.

Personal data is processed for the purpose of carrying out the Controller's tasks related to the recruitment for an open position.

The legal basis is the Act of 26 June 1974 – the Labour Code, and to the extent exceeding the provisions of law, the consent of the data subject.

Personal data is stored for a period no longer than necessary to achieve the purposes for which they are processed, and no longer than until the end of the recruitment process.

Personal data may be used by the Controller for future recruitments, provided that the person whose data is in the CV gives consent, but for no longer than 1 year.

Personal data may be disclosed to entities acting on the Controller's behalf in the scope of technical support, IT service providers, etc., and to entities authorized under the provisions of applicable law.

The person whose data is processed has the right to:

• Access the content of their personal data, request their rectification or erasure, under the principles specified in Articles 15-17 of the General Data Protection Regulation.
• Restrict data processing, in cases specified in Article 18 of the General Data Protection Regulation.
• Data portability, under the principles specified in Article 20 of the GDPR.
• Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You have the right to lodge a complaint with the President of the Personal Data Protection Office (address: ul. Stawki 2, 00-193 Warszawa), if you consider that the data processing violates the provisions of applicable law.