This site uses cookies to deliver services in accordance with our Privacy Policy. You can independently determine the conditions of storage or access cookies on your browser.

These cookies are necessary for the website to function and do not require your consent.

Privacy policy

PRIVACY POLICY
 
 
Table of Contents:
 
I. Background information.
II. Who is the controller of your personal data?
III. How can you contact us?
IV. What are your rights in relation to your personal data?
V. What can you do if you believe that we process your personal data unlawfully?
VI. What personal information do we collect?
VII. Why do we process your personal data?
VIII. On what basis do we process your personal data?
IX. Do you have to give your personal data to us?
X. How long do we process (store) personal data?
XI. Who can be the recipient of personal data?
XII. Do we process personal data by automated means?
XIII. Do we transfer personal data to third countries?
XIV. What do you need to know when you visit our website?
XV. What do you need to know when you visit our premises?
XVI. What do you need to know when applying for a job or a contract with us?
XVII. What do you need to know when you are our customer or business partner?
XVIII. What do you need to know when your employer designates you as a contact person in connection with the performance of a contract concluded with us (e.g., a cooperation agreement)?  
XIX. What do you need to know if you have sent us an offer or other correspondence?
XX. What do you need to know if you have given us permission to send you marketing information?
XXI. Final information.
 
 
I. Background information:
 
Below you will find information about what personal data we collect and how we use it, particularly when you visit our website or our premises, use our services, are our business partner, employee, associate, or when you apply for a job at our company.
 
What is personal data? It is information about an identified or identifiable natural person (hereinafter referred to as personal data). Typical examples of your personal data are your name, identification number, home address, phone number.
 
Our company attaches importance to the processing of personal data in accordance with the law, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR. 
 
We apply technical and organisational measures that ensure the protection of the processed personal data that is appropriate for the threats and the category of data covered by the protection. In particular, we protect the data against disclosure to unauthorised persons, being taken by unauthorised persons, being processed with the violation of the binding provisions and against change, loss, damage or destruction.
 
This Privacy Policy serves to explain, among other things, who exactly is the controller of your personal data, how you can contact us, how we collect personal data, for what purpose and on what legal basis, and what rights you have in connection with the processing of your personal data.
 
 
II. Who is the controller of your personal data?
 
The personal data is controlled by Mirosława Kozłowska, who operates under the business name of P.P.H.U. "DARTEX” MIROSŁAWA KOZŁOWSKA, permanent place of business:  ul. Adwokacka 10/12, 91-305 Łódź, Tax Identification Number (NIP): 9471225772, National Business Registry Number (REGON): 471529402, hereinafter referred to as Data Controller.
 
 
III. How can you contact us?
 
You can contact the Data Controller by letter to the following address: P.P.H.U."DARTEX" Mirosława Kozłowska ul. Adwokacka 10/12, 91-305, Łódź.
 
 
IV. What are your rights in relation to your personal data?
 
You have the right to:
1. access your personal data, rectify it, erase it or restrict the processing;
2. transfer your personal data and obtain copies of your personal data;
3. withdraw your consent at any time if the processing of personal data is based on a previously given consent. Withdrawal of the consent does not affect the lawfulness of the processing carried out before the withdrawal.
4. object to the processing of personal data. If your data is processed for direct marketing purposes, you do not need to justify such an objection. If your data is processed on the basis of our legitimate interests, such an objection requires a justification of your particular situation.
 
If you wish to exercise any of the above rights, please contact us as indicated in Paragraph III above. 
 
For more information on the data subjects' rights, please refer to Art. 12-23 of the GDPR.
 
 
V. What can you do if you believe that we process your personal data unlawfully?
 
Contact us as indicated in Paragraph III above. Every signal of this kind is important to us. Moreover, in such a situation, you can always lodge a complaint to the supervisory authority (i.e., to the President of the Office for Personal Data Protection).
 
 
VI. What personal information do we collect?
 
It depends on the circumstances, in particular how and as who you contact us. For example, we collect different personal data when you visit our website, different data when you send us an enquiry, and different data when you are our associate or business partner. Examples of situations and the scope of data collected in these situations are discussed further in this Privacy Policy (see Paragraph XIV - XX).
 
 
VII. Why do we process your personal data?
 
Personal data is processed by the Data Controller only to: 
1. reply to your message or resolve an issue raised by you; 
2. possibly conclude a contract or perform a contract concluded between you and the Data Controller, or take action at your request prior to the conclusion of a contract;
3. comply with the legal obligations incumbent on the Data Controller (e.g., to issue and store invoices);
4. pursue the legitimate interests of the Data Controller (e.g., video surveillance at the Data Controller's premises, protection against claims);  
5. pursue marketing purposes which consist in the promotion of products or services of the Data Controller; however, this purpose is only pursued if you have previously given your consent for this.
 
 
VIII. On what basis do we process your personal data?
 
The legal basis for the processing of your personal data, depending on the type of personal data, is:
1. the contract, if one has been concluded between you and the Data Controller;
2. the legitimate interest pursued by the Data Controller consisting in particular in the possibility of demonstrating in the future that the Data Controller complied with the law and duly performed the contract, and of ensuring security, protecting its rights or defending itself against claims;
3. the legal obligation incumbent on the Data Controller (e.g., under the tax and accounting regulations);
4. your or another natural person's vital interests;
5. your consent, if the processing of personal data is based on a previously given consent.
 
Examples of situations in which we process personal data, and the purpose and legal basis for processing in such situations, are discussed further in the Privacy Policy (see Paragraph XIV - XX).
 
 
IX. Do you have to give your personal data to us?
 
Your personal data is provided to us voluntarily; however, the consequence of a failure to provide it is the inability to undertake a given action by our company. This means that if, for example, you wish to visit our premises, apply for a job or a contract, be our employee or associate, use our services or become our business partner, you will need to provide us with your personal data to the extent set out in Paragraph VI above, as appropriate.
 
Providing personal data for marketing purposes is voluntary and does not condition any other actions on our part.
 
 
X. How long do we process (store) personal data?
 
This depends on the type of personal data and the purpose of the processing. For example, the time of processing personal data of persons who apply for a job is different to the time of processing data of persons employed at our company. In the following section of the Privacy Policy, you will find examples of situations where we process personal data together with the period of data retention (see Paragraph XIV - XX). 
 
 
XI. Who can be the recipient of personal data?
 
In connection with our business, we may disclose your personal information to the following entities: 
1. entities carrying out work or services for the Data Controller in the field of accounting, human resources, health and safety at work, legal support, IT systems provision and support, including hosting providers - under relevant agreements on entrusting data processing concluded between the Data Controller and the above-mentioned entities;
2. public administration bodies, courts and other entities entitled to obtain your personal data on the basis of relevant legal regulations;
3. postal operators and couriers;
4. banks, in case of a need to carry out settlements;
5. online recruitment portals when recruiting employees/associates;
6. selected electronic payment or payment card processors (if you use this method of payment);
7. providers of websites’ analytics tools.
 
 
XII. Do we process personal data by automated means?
 
We do not use personal data for automated decision-making, including in the form of profiling.
 
 
XIII. Do we transfer personal data to third countries?
 
As a rule, personal data will not be transferred outside the European Economic Area (hereinafter: "EEA") to third countries or international organisations. However, we may transfer your personal data outside the EEA when this is necessary in order to provide a service (in particular, when the provision of a service requires the involvement of subcontractors based outside the EEA).
 
 
XIV. What do you need to know when you visit our website?
 
The scope of personal data collected: Some data is only collected if you provide it to us (e.g., by entering specific personal data in the contact form). 
In addition, our website uses cookies and other technologies with functions similar or identical to cookies, in particular, to provide services and adapt the content to your needs. For more information, see our Cookie Policy https://dartex.pl/cookie-policy. 
 
The purpose of personal data processing: To reply to your message or resolve an issue raised by you.
Marketing of our products and services, if you request such information or consented to us doing so.
Processing of cookies for the purposes set out in the Cookies Policy https://dartex.pl/cookie-policy.
 
The legal basis for personal data processing: Art. 6(1)(f) of the GDPR - the legitimate interest pursued by the Data Controller:
- the possibility to answer your questions or resolve an issue raised by you;
- adaptation of the website content to the users' needs. 
Art. 6(1)(a) of the GDPR - your consent (if you have consented to the marketing of our products or services).
The period of personal data processing: The personal data provided in the contact form is stored for the time needed to answer your question or resolve the issue raised or until the expiry of the statute of limitations for claims.
Cookies are processed for the period indicated in the Cookies Policy https://dartex.pl/cookie-policy or until an objection is made. An objection can only be made by changing the settings of your web browser, which will prevent the collection of information with the use of cookies.
XV. What do you need to know when you visit our premises (Łódź, ul. Adwokacka 10/12)? 
 
The scope of personal data collected: In our company, we use video surveillance. When you visit our premises, your image is recorded on the surveillance video. Detailed information in this respect is contained in the Rules and Regulations of Video Surveillance, which is available at our premises.
The purpose of personal data processing: To increase the security of persons and the protection of property in and around the facility, ensure production control, and maintain the confidentiality of information the disclosure of which could expose the Data Controller to damage.
The legal basis for personal data processing: Art. 6(1)(f) of the GDPR - the legitimate interest pursued by the Data Controller:
- ensuring the security of persons and protection of property in and around the facility;
- production supervision;
- confidentiality of any information the disclosure of which could expose the Data Controller to damage.
The period of personal data processing: Video surveillance recordings are stored for 21 days from the moment of recording unless the recording shows an incident and may be used as evidence in a case. In such a case, the video surveillance recording will be stored until the case is clarified or the relevant proceedings are finally concluded.
 
 
XVI. What do you need to know when applying for a job or a contract with us?
 
The scope of personal data collected: When you apply for a job, you will be asked to provide the data listed in Article 22[1] § 1 of the Labour Code (i.e., your name, date of birth, contact details, education background, professional qualifications, work experience), provided that this data is necessary to perform a specific job or work in a particular position. We may ask you to provide us with other data if this is necessary to exercise a legal right or to comply with a legal obligation (see art. 22[1] § 4 of the Labour Code). In addition, we process personal data that you have provided voluntarily in your recruitment documents (e.g., CV, cover letter).
 
When you apply to cooperate with us, you will be asked to provide the following data: name, surname, date of birth, contact details, education background, professional qualifications, work experience - provided that this data is necessary to start the cooperation. We may ask for further personal data when this is necessary to exercise a legal right or comply with a legal obligation. In addition, we process personal data that you have provided voluntarily in your recruitment documents (e.g., CV, cover letter).
The purpose of personal data processing: to carry out the recruitment process
The legal basis for personal data processing: Art. 6(1)(f) of the GDPR - the legitimate interest pursued by the Data Controller (i.e., carrying out the recruitment process).
Art. 6(1)(a) of the GDPR - the candidate's consent (where unrequested additional data is provided);
Art. 6(1)(b) of the GDPR - taking an action at the request of the candidate prior to the conclusion of a possible contract of employment/cooperation;
Art. 6(1)(c) of the GDPR - complying with a legal obligation incumbent on the Data Controller.
The period of personal data processing: We process the personal data of candidates for a job for up to one month following the end of the recruitment process and, when receiving consent for the processing of personal data in further recruitment processes, no longer than for one month after obtaining the consent.
 
 
XVII. What do you need to know when you are our customer or business partner?
 
The scope of personal data collected: We will ask you to provide your data: name, tax identification number, contact details. We may ask you to provide us with other data if this is necessary to exercise a legal right or to comply with a contractual or legal obligation. In addition, we process the personal data that you provide voluntarily in the trade documents (e.g., bank account number).
The purpose of personal data processing: 1. to take action at your request before concluding a contract;
2. to enter into a contract or perform a contract concluded between you and the Data Controller;
3. to comply with the legal obligations incumbent on the Data Controller (e.g., to issue and store invoices);
4. to pursue the legitimate interests of the Data Controller (e.g., to protect its rights or defend itself against claims).
The legal basis for personal data processing: Art. 6(1)(b) of the GDPR - taking action at your request, before the conclusion of a contract (e.g., sending an offer) or performing a contract (e.g., delivery, processing of complaints);
Art. 8(1)(f) of the GDPR - legitimate interest pursued by the Data Controller (e.g., to demonstrate the proper performance of the contract, determine and assert their rights, defend against claims);
Art. 6(1)(c) of the GDPR - complying with the legal obligations incumbent on the Data Controller (e.g., to issue invoices, keep accounts, and prepare financial reporting).
The period of personal data processing: Your data will be processed for the duration of the contract and, after its termination, until the expiry of the limitation period for claims related to the contract. After this period, the personal data recorded in the accounting documents will be processed only for the period required by law, including the accounting regulations.
 
 
XVIII. What do you need to know when your employer designates you as a contact person in connection with the performance of a contract concluded with us (e.g., a cooperation agreement)?  
 
The scope of personal data collected: Your data will be processed to the extent disclosed by that entity (usually, your name, position, company email address and telephone number).
The purpose of personal data processing: 1. To perform a contract concluded by the Data Controller;
2. To communicate with contact persons designated by the other contracting party. 
The legal basis for personal data processing: Art. 6(1)(b) of the GDPR - performance of a contract;
Art. 6(1)(f) of the GDPR - the legitimate interest pursued by the Data Controller (e.g., proper performance of the contract, the need to contact employees/associates of clients and business partners in connection with the activities undertaken to conclude, or perform the contract).
The period of personal data processing: Your data will be processed by us for the period specified in the contract in connection with which your data has been transferred to us or the period necessary for the Data Controller to perform its contractual obligations, possibly until the expiry of the statute of limitations for claims.
 
XIX. What do you need to know if you have sent us an offer or other correspondence?
 
The scope of personal data collected: We only process personal data that you provide in your enquiry/correspondence (e.g., contact details, etc.).
The purpose of personal data processing: To reply to your offer or inquiry or to resolve an issue raised by you. 
The legal basis for personal data processing: Art. 6 6(1)(f) of the GDPR - the legitimate interest pursued by the Data Controller, (i.e., the ability to respond to your inquiry or to resolve an issue raised by you).
The period of personal data processing: The personal data is stored for the time needed to answer your inquiry or resolve the issue raised or until the expiry of the statute of limitations for claims.
 
XX. What do you need to know if you have given us permission to send you marketing information?
 
The scope of personal data collected: We only process the personal data provided when agreeing to receive marketing information (usually, your email address or telephone number).
The purpose of personal data processing: To conduct marketing activities aimed at promoting our products or services (including by electronic means of communication).
The legal basis for personal data processing: Art. 6(1)(a) of the GDPR - your consent.
 
The period of personal data processing: Your personal data will be processed for marketing purposes for the duration of the marketing activities, but no longer than until you object to further processing of the data for marketing purposes.
You have the right to withdraw your consent at any time (e.g., by sending us a relevant message by email).
 
 
XXI. Final information.
 
1. The Privacy Policy and the Cookie Policy on our website may contain references (i.e., links that, after clicking, allow you to enter websites operated by other administrators). We informing you that we have no influence on and are not responsible for such administrators' privacy policies, including the cookie policies.
2. This Privacy Policy may be subject to change, as we deem necessary. The revised Privacy Policy will apply to users and the data they provide from the date of the update. We encourage you to check our Privacy Policy periodically to obtain current information on how we process personal data.