GDPR – General Data Protection Regulation

I. Inspector for Personal Data Protection SOLBET Lubartów S.A.

Agnieszka Robaszkiewicz
iodo@solbet.pl

II. Information for Clients/Contractors of SOLBET Lubartów S.A. on the processing of personal data

in connection with the entry into force on 25 May 2018 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal EU L 119, p. 1), hereinafter referred to as GDPR, we inform you as follows:

1. Controllers of personal data

The Controller of your personal data is SOLBET Lubartów S.A.

with its registered office in Lubartów (ZIP 21-100)
at 18 Nowodworska St., phone: 81 855 62 51,
e-mail: zarzad@solbet-lubartow.pl

The Joint Controllers of your personal data are: SOLBET Capital Group companies, and so:

1) SOLBET Sp. z o.o.

with its registered office in Solec Kujawski (ZIP 86-050)
at 71 Toruńska St., phone: 52 387 41 00,
e-mail: sekretariat@solbet.pl

2) SOLBET STALOWA WOLA

Spółka Akcyjna
with its registered office in Stalowa Wola
(ZIP 37-450) at 4 Spacerowa St., phone: 15 842 39 51 to 53,
e-mail: sekretariat@solbet-stw.pl

3) SOLBET KOLBUSZOWA

Spółka Akcyjna
with its registered office in Kolbuszowa
(ZIP 36-100) at 10 Kolejowa St., phone: 17 227 14 44,
e-mail: sekretariat@solbet-kolbuszowa.pl

The contractor database is common for all companies of the SOLBET Capital Group. The Joint Controllers jointly determine the purposes and methods of processing the personal data of SOLBET Capital Group’s contractors, as well as fulfil the obligations arising from the provisions of the GDPR.

2. Common arrangements between Controllers

As part of the agreement on the Joint Controllers of personal data, together with the Joint Controllers, we have agreed on the scopes of responsibility of the SOLBET Capital Group Companies concerning the fulfilment of the obligations arising from GDPR, in particular, we have agreed that:

1. each of the Joint Controllers shall exercise due diligence to ensure the security of the processing of your data, and as Joint Controllers, we shall jointly determine the choice of technical measures concerning IT infrastructure and data security,

2. the Joint Controllers who make the sale/provide the service and issue the invoice and who conclude a civil contract are responsible for handling the contract with the client/contractor,

3. The Controller referred to in point 2) is responsible for:

– performance of the information obligation required by the provisions of the GDPR towards the client/contractor with whom they have concluded a contract,

– the exercise of the rights of the data subjects under the GDPR, as listed in paragraph 6.

3. Purposes and grounds for processing

The personal data in question are processed in order to conclude and perform the contract between us (legal basis: Article 6(1)(b) of the GDPR).

4. Data retention period

Your personal data will be stored for the duration of the contract and thereafter for the period necessary for:

– complaint handling,

– securing or pursuing any claims due to the Controller,

– fulfilment of the Controller’s legal obligations arising from tax regulations.

5. Data recipients

Your personal data may be disclosed to: SOLBET Capital Group companies – Joint Controllers. Your personal data may also be accessed by our subcontractors (processing entities), e.g. carriers, entities operating our IT and ICT systems, lawyers, and persons providing advisory services.

6. Rights of data subjects:

In accordance with the GDPR, you are entitled to:

a) the right to access your data,
b) the right to rectify (correct) your data,
c) the right to delete data, limit data processing,
d) the right to object to data processing,
e) the right to transfer data,
f) the right to lodge a complaint to the President of the Office for Personal Data Protection.

In order to exercise the rights provided for in the provisions of the GDPR, you should personally appear at the Administrator with whom you have concluded a contract in order to verify your identity.

7. Information on the requirement/voluntary provision of data

Providing data is voluntary, but it is necessary to conclude and perform the contract.

8. The Inspector of Personal Data Protection of the SOLBET Capital Group:

contact details: e-mail: iodo@solbet.pl