Information provided to fulfil the obligation set out in Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "GDPR").
Data controller
The controller of your personal data is CETUSPRO sp. z o.o. with its registered office in Rzeszów, ul. Adama Matuszczaka 14, 35-083 Rzeszów, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) kept by the District Court in Rzeszów, 12th Commercial Division of the National Court Register, under KRS number: 0000877163, REGON: 387860607, NIP (tax ID): 8133850782 (the "Controller").
You can contact the Controller by e-mail at rodo@cetuspro.com or in person at the Controller's registered office.
Purposes and legal bases of processing
Personal data comprising your first name and surname, name (business name) and contact details (e-mail address or telephone number) will be processed for the purpose of sending commercial information about the Controller's products and services.
The legal basis for processing the personal data listed above is the Controller's legitimate interest (Article 6(1)(f) GDPR), consisting in direct marketing of the Controller's own products or services.
Your personal data will not be subject to automated decision-making, including profiling.
Recipients of the data
The recipients of your personal data may be, in particular, entities providing the Controller with technical services in the broad sense that are necessary for carrying out direct marketing of the Controller's products or services.
Because processing is entrusted to external entities, in some cases personal data may be transferred to third countries (outside the EEA).
If personal data are transferred to third countries, the Controller ensures that this will take place only on the basis of a decision of the European Commission finding an adequate level of protection in the country concerned or using standard contractual clauses adopted by the European Commission, together with appropriate technical and organisational safeguards.
Retention period
Your personal data will be processed for the period necessary to achieve the purpose for which they were collected, but no longer than until you object to their further processing.
In any case, personal data will not be processed for a period shorter than the period required by law for storing the given type of information.
Your rights
In connection with the processing of your personal data, you have the following rights:
- to access your data and to request its rectification, erasure or restriction of its processing; and
- the right to object to further processing of your personal data for the purpose referred to above.
To exercise these rights, contact the Controller in the way indicated above.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) if you consider that the processing of your personal data infringes the GDPR.
Whether you must provide your data
Providing your personal data is voluntary, but necessary to achieve the purposes for which they are collected.