GDPR Notice

Information on the processing of personal data by JFC Polska sp. z o.o.

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L. 2016 No. 119, p. 1) (hereinafter: "GDPR"), JFC Polska sp. z o.o., hereinafter referred to as the Company, informs about the principles of processing your personal data and the rights you have in connection therewith.

The following principles apply from 25 May 2018.

DATA CONTROLLER IDENTIFICATION
PURPOSES AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

concluding and performing contracts for the sale of products, goods, and services offered by JFC Polska sp. z o.o.
fulfilling legal obligations, including when applicable for proceedings before public authorities, dispute resolution, claims enforcement, and defense;
marketing purposes based on your consent.

OBLIGATION TO PROVIDE PERSONAL DATA TO THE COMPANY

Providing your personal data is voluntary but necessary for concluding and performing the contract with the Company. The necessity results from fulfilling legal obligations and justified interests of the Company.

Failure to provide all required personal data will prevent contract conclusion or performance.

RECIPIENTS OF YOUR PERSONAL DATA

In connection with the processing of your personal data for contract performance, your data may be shared with entities supporting the Company’s business activities and involved in contract execution, including:

employees, collaborators, advisory and consulting service providers;
IT system management service providers;
transport and courier companies;
installation and measurement companies;
payment system operators, debt collection agencies;
Polish Post S.A. headquartered in Warsaw.

Data disclosed is limited to the minimum necessary.

Your data may also be disclosed to public authorities if required by law.

DATA PROCESSING PERIODS

Your personal data will be processed for the time necessary to achieve the purposes listed above, i.e., during contract performance and for periods required by law or for the Company’s justified interests. If consent for data processing is given after contract termination, data will be processed until consent withdrawal.

DATA SUBJECT RIGHTS

The Company ensures all persons whose data it processes have rights under GDPR, including:

right to access data;
right to rectification;
right to erasure (right to be forgotten);
right to restriction of processing;
right to data portability;
right to object to certain processing, e.g., direct marketing;
right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office).

You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

AUTOMATED DECISION-MAKING AND PROFILING

The Company does not perform automated decision-making or profiling concerning personal data under Article 22(1) and (4) of GDPR.

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS

The Company exports goods and services outside the EU. For contract execution, personal data may be shared with partners outside the EU.

Data transfer is limited to the minimum necessary and is based on standard contractual clauses. The Company does not voluntarily transfer data to international organizations.

For questions on personal data processing or rights, contact the Company at ul. Białostocka 1, Karpin, 05-252 Dąbrówka or email info@jfcpolska.com