Privacy policy

PRIVACY POLICY

We provide you with the following information in order to ensure the fairness and transparency of the processing of personal data at Wojnarowscy Sp. z o.o., in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1) - hereinafter referred to as the GDPR.

1.    PERSONAL DATA CONTROLLER
The controller of your personal data is Wojnarowscy Sp. z o.o. with its registered office at ul. Gospodarcza 16, 40-432 Katowice
Contact details:
- e-mail: ado@spectrumled.pl
- telephone number: +48 32 735 0 614
- correspondence address: Wojnarowscy Sp. z o.o., ul. Gospodarcza 16, 40-432 Katowice

2.    OBJECTIVES AND LEGAL BASIS OF PROCESSING

 The company Wojnarowscy Sp. z o.o. processes your personal data to the extent necessary for the implementation of individual activities, for the following purposes:
 a) handling of messages sent
Sending a message directly to your e-mail address or through the contact form on the website requires you to provide your personal data:
- in order to handle the message sent and to respond to the enquiry sent,
- the legal basis for the processing of this data by the Controller is Article 6 (1)(f) of the GDPR – a legally justified interest of the controller, i.e. response to enquiries of customers/partners, maintaining contact prior to the conclusion of cooperation,
- providing personal data is voluntary, however, failure to provide data will prevent the Controller from handling your enquiry and responding to your message.

b) creating an account on the website
Creating/registering an account on the website requires you to provide personal data:
- in order to provide services related to the maintenance and operation of your account,
- the legal basis for the processing of this data by the Controller is Article 6 1(b) of the GDPR – processing is necessary for the performance of a service agreement,
- providing personal data is voluntary; however, failure to provide data marked in the form as mandatory is a condition for your registration on the website, and the consequence of failing to provide such data will be the inability to create an account.

c) recruitment
The submission of an application (CV) requires you to provide personal data:
- in order to carry out the recruitment process,
- the legal basis for the processing of this data by the Controller is Article 6 (1)(a) of the GDPR – voluntary consent of the applicant,
- The provision of personal data in the CV is voluntary but necessary to carry out the recruitment process. Failure to provide personal data will result in not being able to participate in the recruitment process.

d) marketing activities (newsletter, text message)
Direct marketing and promotion of the Controller's own products require your personal data:
- in order to send you messages containing information on current promotions, events and new developments,
- the legal basis for the processing of this data is Article 6 (1)(a) – your voluntary consent, which may be withdrawn at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
- the provision of personal data is voluntary.

e) conclusion of the agreement
The conclusion of the agreement requires you to provide your personal data:
- in order to fulfil your obligations under this agreement and the law, such as the invoicing of the products sold;
- the legal basis for the processing of this data is Article 6 (1)(b) – i.e. the agreement concluded between us and Article 6 (1)(f) - a legally justified interest of the controller, i.e. an investigation of possible future claims.

4.    PERIOD OF PERSONAL DATA PROCESSING

Your personal data will be processed for no longer than is necessary to achieve the above-mentioned objectives. The length of this period depends on the type of service and the purpose of processing:

a) personal data collected for the purpose of handling enquiries will be processed until the correspondence related to the enquiry sent is completed and the request is closed,
b) personal data collected for the purpose of concluding and performing an agreement and for the fulfilment of the Controller's legally justified purposes will be processed for the duration of this agreement and:
- until the claims arising from the agreement are statute-barred,
- until the Controller has completed the legal obligation related to tax law and for accounting purposes.
c) Personal data collected for the purpose of recruitment will be processed until the recruitment process is completed or, with the consent of the candidates, within a period of 6 months from the end of the recruitment process, personal data will be processed in subsequent recruitments conducted by the personal data controller
d) personal data collected on the basis of your voluntary consent for marketing purposes – until such consent is withdrawn. Consent is voluntary and may be withdrawn at any time. It does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

5.    USER RIGHTS

In connection with the processing of personal data, you have the following rights:
a) the right to obtain information on the processing of your personal data and, above all, the purposes and legal bases of such processing, the scope of data, the entities to whom the data is transferred and the periods of processing,
b) the right to access your data, i.e. obtain confirmation from the Controller that your data is processed, information about this processing and copies of personal data subject to processing,
c) the right to rectify the data, i.e. correct / complete personal data which is incorrect or incomplete,
d) the right to erasure (‘right to be forgotten’) if processing is no longer necessary for any of the purposes of processing,
e) the right to restrict processing,
f) the right to data portability, i.e. the possibility of obtaining from the Controller your personal data that have been delivered in connection with the performance of the agreement or on the basis of consent, in an electronic form, in a commonly used format suitable for computer reading. It is also possible to send this data directly to another entity indicated by you, if there are technical possibilities in this respect.
g) the right to object, which means that you have the right to object to the processing of your personal data at any time and this objection will be processed by the Controller.
If you make a request related to the exercise of the above rights, the Controller shall comply with this request without undue delay, but no later than within one month of receipt of this request If it is necessary to extend this period, the Controller shall inform the applicant of the reasons for such extension.
In addition, you have the right to lodge a complaint with the President of the Office for the Protection of Personal Data when you consider that your data is being processed in violation of the law.

6.    DATA RECIPIENTS

Your personal data may be transferred by the Controller to external entities or bodies, in particular:
a) entities authorised under applicable laws,
b) processors that perform specific services on behalf of the Controller and on the Controller's express instructions (e.g. IT service providers, accounting services, legal services, marketing services, payment operators, couriers, debt collectors and other suppliers that supply the Controller to enable the performance of services under the agreement concluded with you),
c) other independent recipients within the Controller's group of companies, business partners and other recipients authorised by you.