RODO - Cukiernia Jacek Placek - Ciasta Domowe Torty Pierogi

Jack Placek Bakery
Tomasz Kondlewski
84-215 Gowino, ul. Wejherowska 110
NIP 5882304608

INFORMATION CLAUSE FOR CLIENTS, POTENTIAL CUSTOMERS AND SUPPLIERS OF GOODS AND SERVICES

Who is the Administrator of your personal data?
According to Art. 13 sec. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR") we would like to inform you that the administrator of your personal data is – Cukiernia Jacek Placek Tomasz Kondlewski with its registered office in Gowin (84-215) ul. Wejherowska 110, NIP 5882304608 (hereinafter: "Administrator" or "Confectionery"). The administrator enables contact in the following form:

a) by post to the following address: Cukiernia Jacek Placek Tomasz Kondlewski ul. Wejherowska 110, 84-215 Gowino,
1. b) to the e-mail address: cake@jacekplacek.com.pl
2. c) by phone: (58) 572-03-31
What categories of personal data do we process?
As part of our business activity, we process the following categories of personal data concerning natural persons who are:

a) customers of the Confectionery,
b) potential customers,
c) suppliers of goods and services,
d) partners, employees, contractors, representatives, proxies,

proxies and persons representing clients and suppliers of goods and services (including commercial law companies).
What is the scope of personal data processed by us?
Within the categories of personal data indicated above, the Administrator collects and processes personal data to the extent necessary to achieve the purpose for which they were collected.

Depending on the purpose and legal basis for collecting and processing personal data, the Confectionery may process e.g. the scope of personal data indicated below:

a) identification data, including in particular: name, surname,
b) contact details, including in particular: address, telephone number, e-mail address,
c) data collected and processed in connection with the pursuit of rights and claims, and fulfilling the obligations incumbent on the Administrator, and in banking systems and documents,
d) data contained in the Administrator's accounting, bookkeeping and tax documentation,
e) data collected and processed for marketing purposes.
What is the purpose, legal basis and period of processing your personal data?
Your personal data will be processed in order to:
- ● the provision of services by us,
- ● performance of concluded contracts/execution of orders,
- ● cooperation related to the purchase of goods or services,
- ● making settlements for the implementation of concluded contracts, including the implementation of payments in the scope of arising from concluded contracts,
- ● issuing VAT invoices or other documents required by law and keeping accounting records,
- ● maintaining contact with you as part of cooperation, including responding to your inquiries,
- ● conducting direct marketing of own products and services.

a) If you are a customer of the Confectionery (you use the services we provide):

Purpose of data processing personal	Legal basis processing personal data	storage period or personal data processing
Implementation of the contract concluded with us	article 6 sec. 1 lit. b) GDPR	The period of performance of the contract concluded with us (which corresponds to the period services we provide), a then storage period documentation resulting from the regulations law (as a rule, 5 years from the end calendar year in which it had place, e.g. issue of fv)
Determining, pursuing claims and defense against claims the title of the activity economic as well as assurance information security, what is legally justified interest in data processing by the Administrator	article 6 sec. 1 lit. f) GDPR	Limitation period for claims resulting from the provisions of law (term the statute of limitations is 6 years, and for claims for periodic benefits and handling claims business activity - 3 years)
Bookkeeping and tax documentation	article 6 sec. 1 lit. c) GDPR in connection with Art. 74 sec. 2 of the Act on accounting and other regulations special	Documentation retention period accounting and tax resulting from provisions of law (as a rule, 5 years from end of the calendar year in which e.g. an fv issue took place)
Ensuring the safety of people and property at using monitoring video, recording image at headquarters administrator, which is legitimate interest data processing by Confectionery	article 6 sec. 1 lit. f) GDPR	4 weeks
Contact through use phone number or address e-mail for e.g. confirmation meetings, cancellations meetings, order receipt, implementation of the service provided -co is legally justified Administrator's interest	article 6 sec. 1 lit. b) GDPR article 6 sec. 1 lit. f) GDPR	Duration of the contract concluded with us, and then for a period documentation storage arising from the provisions of law (as to rule 5 years from the end of the year calendar year in which it had place, e.g. issuing fv

Implementation of settlements within concluded contracts	article 6 sec. 1 letter b) GDPR	The period of cooperation
Direct marketing own products and services	article 6 sec. 1 lit. a) GDPR - in case of marketing driven by road electronic article 6 sec. 1 lit. f) GDPR	Duration of the contract concluded with us or until revoked consent

b) If you are a potential customer of the Confectionery:

Purpose of data processing personal	Legal basis processing personal data	storage period or personal data processing.
Taking action before concluding a contract for you task	article 6 sec. 1 lit. b) GDPR	Until a decision is made on the issue conclusion or refusal to conclude contract/placement of an order, no longer than one year from the date you take it actions
Reply to posted by your inquiries or notifications, which is legally justified Administrator's interest	article 6 sec. 1 letter f) GDPR	1 year unless news contain content relevant to pursuing claims or defending against claims - then selected news we will store for up to 6 months years or 3 years, i.e. until the end of the period limitation of claims in accordance with applicable law
Ensuring the safety of people and property at using monitoring video, recording image at headquarters administrator, which is legitimate interest data processing by Confectionery	article 6 sec. 1 lit. f) GDPR	4 weeks

c) If you are a supplier of goods or services:

Purpose of data processing personal	Legal basis processing personal data	storage period or personal data processing
Implementation of the contract concluded with us	article 6 sec. 1 lit. b) GDPR	The implementation period concluded with us contract followed by a period documentation storage

		arising from the provisions of law (as to rule 5 years from the end of the year calendar year in which it had place, e.g. issue of fv)
Determining, pursuing claims and defense against claims the title of the activity economic as well as assurance information security, what is legally justified interest in data processing by the Administrator	article 6 sec. 1 lit. f) GDPR	Limitation period for claims resulting from the provisions of law (term the statute of limitations is 6 years, and for claims for periodic benefits and handling claims business activity - 3 years)
Bookkeeping and tax documentation	article 6 sec. 1 lit. c) GDPR in connection with Art. 74 sec. 2 of the Act on accounting and other regulations special	Documentation retention period accounting and tax resulting from provisions of law (as a rule, 5 years from end of the calendar year in which e.g. an fv issue took place)
Contact through use phone number or address e-mail for e.g. confirmation meetings, cancellations meetings, order fulfillment - which is legally justified Confectionery business	article 6 sec. 1 lit. b) GDPR article 6 sec. 1 lit. f) GDPR	Duration of the contract concluded with us, and then for a period documentation storage arising from the provisions of law (as to rule 5 years from the end of the year calendar year in which it had place, e.g. issue of fv)
Implementation of settlements within contracts we have concluded	article 6 sec. 1 letter b) GDPR	The period of cooperation
Ensuring the safety of people and property at using monitoring video, recording image at headquarters administrator, which is legitimate interest data processing by Confectionery	article 6 sec. 1 lit. f) GDPR	4 weeks

d) If you act as a partner, employee, contractor, representative, proxy, proxy, member of the client's management board or supplier of goods and services:

Purpose of data processing
personal

Legal basis
data processing
personal

Storage period and / or
personal data processing

Implementation of the concluded contract by the administrator of entity in which on behalf of you you are present, what constitutes legitimate interest data processing by Confectionery	article 6 sec. 1 lit. b) GDPR	Term of the contract, for which you act as customer/supplier representative goods or services, followed by a period documentation storage arising from the provisions of law (as to rule 5 years from the end of the year calendar year in which it had place, e.g. issue of fv, contract termination)
Determination, investigation claims and defense against claims for activities economic, which is legitimate interest data processing by Confectionery	article 6 sec. 1 lit. f) GDPR	Limitation period for claims resulting from the provisions of law (the limitation period is 6 years, and for claims for benefits periodical and related claims with running a business business - 3 years)
Book keeping accounting and documentation tax if your details were provided in the contract or other documents related to the implementation by Duties Administrator resulting from the regulations law, in particular tax regulations and accounting	article 6 sec. 1 lit. c) GDPR w in connection with Art. 74 sec. 2 Accounting Act and other regulations special	Storage period accounting records and resulting from the regulations law (as a rule, 5 years from the end of calendar year in which fv was issued, for example, contract termination)
Contact via use of the number phone or e-mail address in for e.g. confirmation meetings, cancellations meetings, implementation of the order or provided services - what constitutes legally legitimate interest of the Confectionery	article 6 sec. 1 lit. b) GDPR article 6 sec. 1 lit. f) GDPR	Duration concluded with us contract and then for a period documentation storage arising from the provisions of law (as to rule 5 years from the end of the year calendar year in which it had place, e.g. issue of fv, contract termination)
Ensuring the safety of people and property at using monitoring video, recording image at headquarters administrator, which is legitimate interest data processing by Confectionery	article 6 sec. 1 lit. f) GDPR	4 weeks

V From what sources do we obtain your personal data?

Customers	The data is obtained directly from you or a person authorized when booking a meeting, submission order, as well as before or during the conclusion of the contract implementation
Potential customers	Data is obtained directly from you or from sources publicly available. Where personal data are collected from publicly available sources, Administrator collects your personal data in the following scope: name, name, company name, telephone number, e-mail address.
Suppliers of goods and services	The data is obtained directly from you or a person authorized before the conclusion of the contract (submission order) or during its implementation
Representatives customers/suppliers of goods and services, contact persons	The data is obtained from the entity on behalf of which you you are performing or directly from you. If personal data is provided by the entity on whose behalf You are present, the Administrator collects the following data about you: name, surname, telephone number, e-mail adress.

Your personal data may be obtained by us from publicly available sources, in particular from the CEIDG Register of Entrepreneurs or the National Court Register, in order to verify the information provided by you. In this case, the scope of the processed data will be limited to the data publicly available in the above-mentioned registers. We may also obtain your personal data from entities in which you are employed, with whom you cooperate on the basis of civil law contracts or which you represent. In this case, the scope of the processed data will include information necessary to perform the contract concluded with us or to perform the order placed,
including in particular: name and surname, position held and business contact details (e-mail address and telephone number).

VI. Who do we share your personal data with?
Personal data processed as part of the services we provide may be made available to:

● our employees and associates who may have access to your data in connection with their duties,
● entities entrusted by the Administrator with the processing of personal data, including:

✔ entities providing accounting and bookkeeping services:

● Accounting Office BWWasielka sc ul. Jana III Sobieskiego 227, 84-200 Wejherowo,

✔ entities providing IT services:
● Biuroland Systemy Sp. z o. o. ul. Strzelecka 7b, 84-200 Wejherowo,

✔ law firms,
✔ banks,

● mBank S.A. ul. Prosta 18, 00-850 Warsaw,
✔ other entities or authorities - to the extent and on the terms specified provisions of law (including courts, prosecutors, bailiffs, the Police, authorities regulatory and supervisory).

Your personal data provided to us in connection with the use of our services will not be transferred to third countries, i.e. countries outside the European Union and the European Economic Area.

VII. Is providing personal data voluntary?

Customers	Providing by you the data necessary to use the services we provide is voluntary, but at the same time is a condition for concluding a contract/providing services by us. Refusal to provide them will result in the inability to do so order fulfillment. In addition, your data is necessary for comply with our legal obligations resulting in particular from accounting regulations and tax regulations.
Potential customers	If you provide your data directly to the Confectionery (incl its representative), providing them is voluntary, but necessary to take steps to establish a relationship commercial purposes, including placing an order and concluding a contract.
Suppliers of goods and services	Providing by you the data necessary to submit by Your order is voluntary, however, it is a condition conclusion of the contract/placement of an order. Refusal to provide them will result in the inability to conclude a contract/submission orders.
Representatives customer/supplier of goods and services, contact persons	If you provide your personal data directly Confectionery (including its representative), their application is voluntary, but necessary for us to perform the contract for the entity on behalf of which you are acting, including in particular to keep in touch with you in in connection with the performance of a contract concluded with an entity that you you represent. In the event of failure to provide data, implementation contract may be difficult or impossible.

Do we make automated decisions regarding your data?
To your personal data they will not automated decisions (decisions without human participation), including your data, will not be subject to automated profiling.
What rights do you have in connection with the processing of your personal data by us?

The administrator enables you to exercise the following rights:
1. a) access to data content - you are entitled to access your personal data and obtain a copy thereof. In addition, you have the right to obtain information regarding, in particular, the purpose of processing, the category of processed data, information about recipients, the planned period of storage of your data and your rights,
2. b) rectification of data - if your data that we process is incorrect, you have the right to request immediate rectification of your data

concerning. In addition, if the data we hold is incomplete, you have the right to request that it be supplemented,

c) deletion of data - if your personal data are no longer necessary to achieve the purpose for which they were collected or you object to data processing, and at the same time there are no overriding, legitimate interests, and also when you consider that we process your data unlawfully, you have the right to request their removal in whole or in part. Law
however, this does not apply to data to the extent that they are necessary to pursue, establish or defend our claims or to fulfill our legal obligation to process or store them under applicable law,

d) restrictions on data processing - if in your opinion we have incorrect data about you or we process them unjustifiably or you do not want us to remove them because you will need them to establish, pursue or defend claims, as well as in the period preceding your objection to data processing - you have the right to request that we limit the processing of data only to their storage or to perform other activities agreed with you. Despite the exercise of the right indicated above, we may process your data in the event of establishing, pursuing or defending our claims,
e) object to the processing of personal data - for reasons related to your particular situation, you can object to the processing of your personal data by us at any time, if we process it based on our legitimate interest. After submitting the objection, we will not be able to process personal data based on the above-mentioned grounds
processing, unless we demonstrate the existence of important, legally justified grounds for data processing, overriding your interests, rights and freedoms or grounds for establishing, pursuing and defending claims,
f) withdraw your consent to the processing of personal data, in cases where such consent has been received - at any time you have the right to withdraw your consent to the processing of your personal data to the extent that such consent was required. Withdrawal of consent will not affect the lawfulness of the processing we have made on the basis of your consent before its withdrawal,
g) lodge a complaint with the supervisory authority - if you believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with the national supervisory authority, which is currently the President of the Personal Data Protection Office with its registered office in Warsaw (00-193), ul. . 2 rates.

If you exercise the rights indicated above, please send your request to the following e-mail address: cake@jacekplacek.com.pl or by post to the following address: Cukiernia Jacek Placek Tomasz Kondlewski ul. Wejherowska 110, 84-215 Gowino. At the same time, we would like to inform you that the rights indicated above are not absolute and will not apply in every case of processing your personal data by us.

We also inform you that prior to the implementation of the above-mentioned rights, we are obliged to verify the person making the request as the subject of the personal data covered by the request.

XI. Agreement on co-administration of personal data:
We would like to inform you that Cukiernia Jacek Placek Tomasz Kondlewski under the co-administration agreement concluded with Kondlewska Beata Przedsiębiorstwo Produkcyjno Handlowe "Jacek Placek" (NIP 5881418563) and Woodwalker Monika Kondlewska (NIP 5882165495), agreed on the scope of its responsibility regarding the duties resulting from the use of video monitoring on the premises of the plant. The deal has been made available for viewing on our website www.jacekplacek.com.pl.

How do we ensure the security of your personal data?
The administrator uses appropriate technical and organizational measures to keep your personal data safe, including protecting personal data against unauthorized access, loss or destruction. In order to ensure the security of your personal data, the Administrator has implemented appropriate personal, organizational, technical (IT) and physical security measures.
Changing the content of the information clause:
We are entitled to amend this Information Clause. The change of the Information Clause will be communicated to you by publishing a new version on our website www.jacekplacek.com.pl.

PREMISES

ORDERS

E-mail

Regulations