GDPR

Data Administrator
Stalflex Sp. z o.o.
You can contact us in the following ways:

In person or by mail to the address: ul. Piaskowa 134A, 97-200 Tomaszów Mazowiecki
E-mail: bok@stalflex.pl
By phone: +48 575 777 254

Purposes and Legal Basis for Processing
Your personal data is processed for the following purposes:

Contract conclusion and performance: Processing is necessary for the conclusion of a contract and the performance of actions related to it (Article 6(1)(b) GDPR).
Evidence and archival purposes: Processing serves to preserve evidence in case the need arises to prove facts, which is a legitimate interest (Article 6(1)(f) GDPR).
Protection against claims: If necessary, your data may be processed for the purpose of establishing, pursuing, or defending against claims (Article 6(1)(f) GDPR).
Tax obligations: Data processing is required for tax settlements in accordance with applicable laws (Article 6(1)(c) GDPR).
Marketing of own products and services: Your data may be used to promote our products and services, which is a legitimate interest of the company (Article 6(1)(f) GDPR).

Requirement to provide personal data
Providing personal data is voluntary but necessary for the conclusion and performance of the contract. Failure to provide data may prevent the conclusion of the contract or the taking of actions prior to its conclusion.

Data recipients
Your data may be shared with:

Entities processing data on our behalf: These are subcontractors, such as companies managing branches on our behalf, law firms, insurance companies, and warranty service providers.
Entities authorized by law.
Banks financing investments.
Detailed information about data recipients is available from the Administrator.

Data transfer
Stalflex Sp. z o.o. does not plan to transfer your personal data to third countries or international organizations.

Your rights
You have the following rights in relation to the processing of your personal data:

Right of access: You can access your personal data and receive a copy of it (Article 15 GDPR).
Right to rectification: You can request the correction of your data if it is incorrect or incomplete (Article 16 GDPR).
Right to restrict processing: You have the right to request the restriction of processing your personal data in certain cases (Article 18 GDPR).
Right to erasure: You can request the deletion of your personal data, subject to the exceptions provided in Article 17(3) GDPR.
Right to object: You can object to the processing of your data under Article 6(1)(e) and (f) GDPR, unless there are compelling legitimate grounds for the processing or it is necessary for the defense of claims.

Data retention period
Personal data processed based on contracts will be stored for the duration of the contract and for 6 years after its termination for archival and tax purposes, or until the final conclusion of any legal proceedings.

Right to lodge a complaint with a supervisory authority
You have the right to file a complaint with the supervisory authority responsible for data protection, i.e., the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

Information about automated decision-making
Your personal data will not be subject to automated decision-making, including profiling.

Contact with the Administrator
You can contact the Administrator via email: bok@stalflex.pl and by phone: +48 575 777 254. Stalflex Sp. z o.o., located at ul. Piaskowa 134A, 97-200 Tomaszów Mazowiecki.