INFORMATION STATEMENT ON PERSONAL DATA - processed at Śrubena Unia Sp. z o.o.

The personal data controller in relation to personal data processed at the company is Śrubena Unia Sp. z o.o. with its registered office at Żywiec, ul. Grunwaldzka 5, 34-300. If you have any questions regarding personal data processing, please ask your supervisor. Queries about personal data can also be sent to this email address:

Śrubena Unia S.A. will be processing your personal data, in particular:
  1. pursuant to Article 6, section 1, letter b), of GDPR* for the purposes of: taking steps at the request of the data subject prior to entering into a contract or performing a contract to which the data subject is a party (the personal data necessary for entering into a contract are set out in the contract form) as well as Article 6, letter c), of GDPR, for the purposes of: complying with a legal obligation to which the Controller is subject;
  2. pursuant to the legitimate interests of Śrubena Unia Sp. z o.o. [i.e. pursuant to Article 6, section 1, letter f) of GDPR] for the purposes of: marketing of the company's products or services, exercise or defence of legal claims;
  3. based on separate consent [i.e. pursuant to Article 6, section 1, letter a), of GDPR] for the purposes of: providing the customer with information on contractual terms and conditions, including in particular: proposed amendments to the contract, changes of the name (business name), address or registered office, confirmation of receipt of a complaint and sending a response thereto to the electronic mail address (email) indicated as well as for the purposes of direct marketing of Śrubena Unia Sp. z o.o.'s products or services, which may be carried out by Śrubena Unia Sp. z o.o. via electronic communication (e.g. e-mail) or telecommunications (e.g. telephone, video).

Length of time that your personal data will be stored for:

  1. personal data processed for the purpose of the Controller's complying with a legal obligation as well as entering into and performing a contract will be stored for the time period as required under statutory provisions or for the duration of the contract, and after the termination thereof - for the time period necessary for: aftersales customer service (e.g. handling complaints); defending or exercising Śrubena Unia Sp. z o.o.'s legal claims; complying with a legal obligation imposed on the Controller (e.g. provided for under tax or accounting regulations);
  2. personal data processed for the purposes of product marketing pursuant to legitimate interests will be processed until the time the data subject objects to such processing;
  3. personal data processed pursuant to separate consent will be stored until the time such consent is withdrawn.

Data subjects have the following rights:

  1. right of access to their personal data, i.e. the right to obtain from the Controller confirmation as to whether or not personal data are being processed, and information on such processing,
  2. right to have the data processed by the Controller rectified if they are inaccurate or incomplete,
  3. right to demand that the Controller should erase their data, as provided for under Article 17 of GDPR,
  4. right to data portability, i.e. the right to receive the personal data once provided to the Controller and to transmit those data to another controller, as provided for under Article 20 of GDPR,
  5. right to demand that the Controller should restrict data processing, as provided for under Article 18 of GDPR,
  6. right to object to data processing based on the Controller's legitimate interest or to data processing for direct marketing purposes, as provided for under Article 21 of GDPR,
  7. right to withdraw their consent at any time (this will not affect the lawfulness of processing based on consent before its withdrawal),
  8. right to obtain human intervention on the part of the Controller, to express their point of view and to contest decisions based on automated data processing.

You can exercise afore-mentioned rights by, among other things, writing to the address provided at the top of this statement. 

Moreover, a data subject has got the right to lodge a complaint with a supervisory authority in Poland or in another EU member state that is competent for the data subject's place of habitual residence or work or for the location of the alleged GDPR infringement.

Data recipients (entities processing personal data on behalf of Śrubena Unia Sp. z o.o.) include such entities as: business partners, telecommunications companies, medical service providers, insurers, banks, postal operators, carriers, records archiving firms, market research companies, businesses rendering technical services (e.g. IT services, services associated with websites).

*Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).