INFORMATION CLAUSE ON PERSONAL DATA PROCESSING

YAVO Sp. z o.o.

In order to comply with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation “GDPR”), we hereby inform you about the principles of processing your personal data and your related rights.

The following principles apply from May 25, 2018.

1. The controller of your personal data processed by Przedsiębiorstwo Yavo Sp. z o.o., 97-400 Bełchatów, ul. Bawełniana 17
2. If you have any questions regarding the manner and scope of processing of your personal data within the scope of Przedsiębiorstwo Yavo Sp. z o.o.’s operations, as well as your rights, you can contact the administration specialist at the company’s headquarters: 97-400 Bełchatów, Bawełniana 17, at info@yavo.com.pl.
3. The Personal Data Controller – Przedsiębiorstwo Yavo Sp. z o.o. – processes your personal data based on applicable law, concluded agreements, and your consent.
4. Your personal data are processed for the following purposes:
   • a. fulfillment of legal obligations incumbent on Przedsiębiorstwo Yavo Sp. z o.o.;
   • b. performance of agreements concluded with Przedsiębiorstwo Yavo Sp. z o.o.’s contractors.
   • c. in other cases, your personal data are processed solely on the basis of your prior consent, to the extent and for the purpose specified in the consent.
5. In connection with the processing of data for the purposes referred to in point 4, the recipients of your personal data may include:
   • a. public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes specified in generally applicable law;
   • b. other entities that process personal data based on relevant agreements signed with Przedsiębiorstwo Yavo Sp. z o.o., for which Przedsiębiorstwo Yavo Sp. z o.o. is the Controller.
6. Your personal data will be stored for the period necessary to achieve the purposes specified in point 4, and thereafter for the period and to the extent required by generally applicable law.
7. In connection with the processing of your personal data, you have the following rights:
   • a. the right to access your personal data, including the right to obtain a copy of such data;
   • b. the right to request rectification (amendment) of personal data – if the data is inaccurate or incomplete;
   • c. the right to request the deletion of personal data (the so-called right to be forgotten) where:
     • a. the data are no longer necessary for the purposes for which they were collected or otherwise processed,
     • b. the data subject has objected to the processing of personal data,
     • c. the data subject has withdrawn consent to the processing of personal data, which is the basis for the processing and there is no other legal basis for the processing,
     • d. the personal data are processed unlawfully,
     • e. the personal data must be erased in order to fulfill an obligation arising from the law;
   • d. the right to request the restriction of the processing of personal data – where:
     • a. the data subject contests the accuracy of the personal data,
     • b. the data processing is unlawful and the data subject objects to the deletion of the data and requests its restriction instead,
     • c. the controller no longer needs the data for its own purposes, but the data subject needs it to establish, defend, or pursue legal claims,
     • d. the data subject has objected to the processing of the data, pending the determination of whether the controller’s legitimate grounds override the grounds for the objection;
   • e. the right to data portability – where all of the following conditions are met:
     • a. Data processing is based on a contract concluded with the data subject or on the basis of the data subject’s consent,
     • b. Processing is carried out by automated means;
   • f. the right to object to data processing – where all of the following conditions are met:
     • a. There are reasons relating to your particular situation, in the case of data processing on the basis of a task carried out in the public interest or in the exercise of official authority by the Controller,
     • b. Processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data, in particular when the data subject is a child.
8. Where personal data processing is based on the data subject’s consent to the processing of personal data (Article 6(1)(a) GDPR), you have the right to withdraw your consent at any time. This withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
9. If you become aware of unlawful processing of your personal data, you have the right to lodge a complaint with the supervisory authority responsible for personal data protection.
10. If personal data processing is based on the data subject’s consent, providing your personal data to the Controller is voluntary.
11. Providing your personal data is mandatory where the basis for personal data processing is a legal provision or an agreement between the parties.
12. Your data may be processed automatically and will not be profiled.