RODO

RODO Information Clause on the Processing of Personal Data

Dear Sirs/Madam,

In light of our cooperation and business contacts, we have your contact details and data necessary for meeting tax or settlement requirements with your company.

To fulfill the informational obligation imposed on entrepreneurs by the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), we inform:

1. Data Controller – CREO Sp. z o.o. with its registered office in Bąkowo (83-050) at Ordynacka 8, informs that it is the data controller of the Customer’s personal data. Contact details of the Data Protection Officer appointed at CREO Sp. z o.o.: address: Ordynacka 8, Bąkowo (83-050), email: creo@creo.gda.pl. Providing personal data is necessary to conclude and execute the Agreement.

2. Purposes and legal basis for data processing. Customer’s personal data will be processed for the following purposes:

a) to execute the Agreement or take actions before concluding the Agreement (legal basis: Article 6(1)(b) of the GDPR);
b) to fulfill legal obligations on CREO Sp. z o.o. in connection with the implementation of the Agreement, especially obligations in the field of accounting and tax settlements (legal basis: Article 6(1)(c) of the GDPR);
c) to establish, investigate, or defend claims between the Customer and CREO Sp. z o.o. (legal basis: Article 6(1)(f) of the GDPR);
d) for direct marketing of products or services of CREO Sp. z o.o. during the validity of the Agreement with the Customer (legal basis: Article 6(1)(f) of the GDPR);
e) for customer satisfaction surveys on services and products provided by CREO Sp. z o.o. (legal basis: Article 6(1)(f) of the GDPR);
f) with the Customer’s consent, personal data may be processed for purposes indicated in each consent clause, e.g., sending commercial offers or making phone contacts by CREO Sp. z o.o. based on Article 6(1)(a) of the GDPR. Providing consent for the processing of personal data for the above purposes is not required to conclude and execute the Agreement.

3. Data recipients – CREO Sp. z o.o. may disclose the Customer’s personal data to entities providing legal services to CREO Sp. z o.o. CREO Sp. z o.o. may also entrust the processing of the Customer’s personal data to:
• service or product providers, acting on behalf of CREO Sp. z o.o., especially entities providing IT, legal, accounting, service, sales, agency, postal, courier, printing services, and partners with whom CREO Sp. z o.o. collaborates in combining products or services.

In accordance with agreements concluded with such entities for the processing of personal data, CREO Sp. z o.o. requires compliance with privacy and data security regulations applicable to the processing of Customer’s personal data by them on behalf of CREO Sp. z o.o.

4. Data retention period – Customer’s personal data will be stored for the period necessary to execute the Agreement, after which the data will be kept for a period appropriate for the expiration of claims and offenses or for the period required by law, e.g., tax regulations. During the validity of the Agreement with the Customer, personal data will be processed for direct marketing purposes and will be stored until the Customer objects to the processing of their personal data for such purposes. After the termination of the Agreement with the Customer, personal data will be processed for direct marketing purposes and will be stored until the Customer withdraws their consent. However, CREO Sp. z o.o. will retain the Customer’s first name, last name, and PESEL number solely to avoid reusing the person’s data for purposes subject to objection or withdrawn consent.

5. Customer’s rights – The Customer has the right:

a) to access the content of their data – within the limits of Article 15 of the GDPR,
b) to rectify them – within the limits of Article 16 of the GDPR,
c) to erase them – within the limits of Article 17 of the GDPR,
d) to restrict their processing – within the limits of Article 18 of the GDPR,
e) to data portability – within the limits of Article 20 of the GDPR.
f) in the case of processing personal data for direct marketing of products or services of CREO Sp. z o.o. during the validity of the Agreement with the Customer, customer satisfaction surveys on services and products provided by CREO Sp. z o.o., and invitations to participate in contests organized by CREO Sp. z o.o. – the right to object to the processing of their personal data for the purpose of fulfilling such objectives.

6. In the case of processing personal data based on consent (e.g., giving consent to the processing of personal data for direct marketing of products or services of CREO Sp. z o.o. after the termination of the Agreement with the Customer) – the Customer has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

7. The exercise of the rights mentioned above may take place by indicating the requests sent to the Data Protection Officer at the email address: creo@creo.gda.pl

8. The Customer has the right to lodge a complaint with the President of the Office for the Protection of Personal Data if they believe that CREO Sp. z o.o. processes their personal data in violation of the GDPR.