INFORMATION CLAUSE FOR CUSTOMERS

Due to the requirements set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation),

Biuromax Sp. z o.o. would like to inform you about the key issues related to the processing of personal data:

1. Biuromax Sp. z o.o. with its seat in Solec 156 a, 05-532 Baniocha is the administrator of personal data.
2. We process all personal data for the purpose of current cooperation, maintaining mutual relations or the desire to establish cooperation in the future. The legal basis for the processing of your data is:
   1. An obligation expressed in a legal provision (Art. 6(1)(c) RODO) - where regulations (in particular) of tax law impose obligations on us to store information for evidential purposes;
   2. Contract entered into (Article 6(1)(b) RODO) - where we have entered into a partnership, the processing of your data is necessary for the conclusion of the contract, its performance and mutual settlements,
   3. Legitimate interest pursued by us (Article 6(1)(f) RODO) - in the situation when we terminate our cooperation, we will store certain information for the purpose of possible establishment, defence, assertion of mutual claims
   4. To prepare and respond to a voluntarily submitted enquiry (Art. 6(1)(a) RODO)
   5. Processing and handling of service complaints submitted (Article 6(1)(c) RODO)
   6. Statistical and archiving purposes (Art. 6(1)(f) RODO)Depending on the consent given for the purposes of:
      1. Direct marketing (art. 6(1)(a) RODO)
      2. Sending commercial information (art. 6(1)(a) RODO)
3. Your personal data may be made available to entities cooperating with Biuromax Sp. z o.o. to whom the Company has entrusted the processing of personal data on the basis of agreements on entrustment of personal data processing (so-called processors) for the purpose of providing services. In addition, your personal data may be made available to entities which are entitled to access your data on the basis of legal regulations.
4. We do not plan to transfer your personal data outside the European Economic Area.
5. You have the right to request from the controller access to, rectification, erasure or restriction of processing of personal data concerning the data subject, or the right to object to processing, as well as the right to data portability;
6. In certain situations (as described above), we process your data on the basis of your consent. You always have the right to withdraw the consent you have given at any time. The withdrawal of such consent does not make the processing we have carried out up to that point no longer permissible/legal.
7. You have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection.
8. We will keep your personal data for:
   1. the period of time prescribed by applicable law
   2. or until you request that we delete your data (in cases where you can effectively exercise this right)
   3. in other situations for no longer than is necessary for the purpose intended (i.e. a maximum of 10 years)
9. We obtain your personal data directly from you (in the course of concluding contracts) or from publicly available sources such as business registers: CEIDG or KRS. The scope of the data collected in this way includes the name of the company, basic address and contact details, the scope of business activity.
10. In all cases, the provision of personal data by you is voluntary. Failure to provide such data in certain situations may make it difficult or impossible to conclude a contract and carry out cooperation.
11. Your personal data will not be subject to processes that would involve automated decision-making, including profiling.