Skip to content

GDPR Compliance Information

Dear Sir or Madam,

We would like to inform you that on 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, known as the GDPR, became applicable. The Regulation applies uniformly across all European Union member states and aims to harmonize the rules for processing personal data within this area.

Taking the above into account, we wish to inform you about the principles governing the processing of personal data by Prespack sp. z o.o., located at ul. Grzybowa 8C, 62-081 Wysogotowo, NIP: 7812016420, hereinafter referred to as the “Administrator”, as well as about your rights related to such processing, ensuring that you have the knowledge and comfort when using our services.

Your personal data are processed for the purpose of presenting the Administrator’s offer, conducting negotiations, and concluding and performing a contract pursuant to Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council, as well as pursuant to Article 6(1)(c) of the GDPR when necessary for compliance with a legal obligation to which the Administrator is subject, pursuant to Article 6(1)(f) when processing is necessary for the purposes of the legitimate interests pursued by the Administrator—including the implementation and securing of documentation for the purpose of defending against potential claims or pursuing claims, and other activities falling within the scope of business operations—and based on your consent if you have consented to their processing for marketing purposes. Recipients of your Data include, among others, entities processing data on behalf of the Administrator. Furthermore, you have the right to request access to your personal data, rectification, erasure, or restriction of processing, the right to object to processing, and the right to data portability.

Detailed information on the processing of personal data of potential Customers and Customers

1. Personal Data Administrator

The Administrator of your personal data is Prespack spółka z ograniczoną odpowiedzialnością with its registered office in Wysogotowo, holding NIP: 7812016420, REGON: 387877393, KRS: 0000877047, District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register.

You can contact us in the following ways:

  • By mail at: Prespack sp. z o.o., ul. Grzybowa 8C, 62-081 Wysogotowo
  • By e-mail: office@prespack.pl
  • By phone: +48 61 839 24 75

2. We will process your personal data in order to:

Prepare an offer for you, make arrangements regarding the conclusion of a sales contract for our products, verify your identity upon contract conclusion, conduct direct marketing of our products, conduct negotiations leading to contract conclusion, and perform the contract—including fulfilling legal obligations incumbent upon us, such as storing accounting documents containing your data—as well as to pursue our legitimate legal claims in the event of your failure to perform the Contract.

3. The legal basis for processing your personal data is:

  1. Article 6(1)(a) of the GDPR – processing of data of our potential Customers for purposes related to direct marketing of our products (e.g., newsletter dispatch, information about new products);
  2. Article 6(1)(b) of the GDPR – processing of data aimed at performing a contract and taking steps prior to entering into a contract, including the preparation of a relevant offer for you, as well as the conclusion and performance of the contract;
  3. Article 6(1)(c) of the GDPR – the necessity to collect data to issue accounting documents for the performance of a contract for a natural person, and the necessity to store them in accordance with legal regulations;
  4. Article 6(1)(f) of the GDPR – pursuit of our legitimate legal interests in the event of compulsory claim enforcement and undertaking activities related to direct marketing of our products for our Customers (e.g., newsletter dispatch, information about new products).

4. Personal data retention period

We will store your personal data until:

  1. In the event that we do not reach an agreement regarding the conclusion of a contract – until the end of negotiations;
  2. In the event of signing a contract – until the expiry of the limitation period for claims arising from non-performance of the contract and throughout the limitation period for claims. Accounting documents containing your personal data will be stored for a period of 5 years from the end of the financial year in which the invoice for the service was issued;
  3. In the event that data is processed for direct marketing purposes – until an objection to such processing is raised or consent to processing is withdrawn. Data will be deleted from the backups of the marketing data processing program no later than 30 days from the date of raising the objection or withdrawing consent.

5. Data recipients

Recipients of your data may include:

  1. Our suppliers to whom we commission services related to personal data processing, i.e.:
    1. IT service providers,
    2. entities providing accounting services to us,
    3. postal and courier service providers,
    4. transport service providers,
    5. entities providing debt collection and legal support services to us,
    6. legal advisors and attorneys cooperating with us,
    7. entities providing marketing services to us.

Such entities process data on the basis of a contract with us and only in accordance with our instructions, while maintaining the obligation of confidentiality.

6. Your rights related to personal data processing and automated decision-making

You have the following rights related to the processing of personal data:

  1. The right to withdraw consent to data processing;
  2. The right of access to personal data;
  3. The right to request rectification of personal data and completion of incomplete personal data. You have the right to request us to rectify such data (if incorrect) and complete them (if incomplete) (Article 16 of the GDPR);
  4. The right to request restriction of processing of your personal data in the following cases:
    1. When you contest the accuracy of your personal data – we will restrict their use for a period enabling us to verify the accuracy of your data, for no longer than 7 days;
    2. When the processing of your data is unlawful and you oppose the erasure of the data and request the restriction of their use instead;
    3. When your personal data are no longer needed for the purposes for which we collected or used them, but they are required by you for the establishment, exercise, or defense of legal claims;
    4. When you have objected to the use of your data – the restriction applies for the period necessary to consider whether—due to your particular situation—the protection of your interests, rights, and freedoms overrides the interests pursued by us in processing your personal data (Article 18 of the GDPR);
  5. The right to request erasure of your personal data (right to be forgotten – Article 17 of the GDPR). You have the right to request the deletion of all or some personal data if:
    1. You have withdrawn specific consent, to the extent that personal data were processed based on your consent and there is no other legal basis for processing;
    2. Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
    3. Your personal data are processed unlawfully;
  6. The right to object to the processing of your data when the data are processed for direct marketing purposes; from the moment of objection, the Administrator will no longer be able to use the data for this purpose;
  7. The right to data portability, i.e., the right to receive your personal data from us in a structured, commonly used, machine-readable format. You may send these data to another data controller or request that we transmit your data to another controller. However, we will do so only if such technical feasibility exists. You have the right to data portability only for data that we process on the basis of a contract with you or on the basis of your consent.

To exercise the above rights, please contact us (contact details in section 1 above).

Right to withdraw consent

To the extent that your data are processed on the basis of consent – you have the right to withdraw consent to data processing at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Consent can be easily withdrawn by sending a statement of consent withdrawal to our mailing address provided above or to our e-mail address: office@prepack.pl.

Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with the supervisory authority dealing with personal data protection, i.e., the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).