Privacy Policy.

I. General provisions
The following Privacy Policy is intended to inform you about our use of your personal data, with respect to which we comply with all the requirements of the Regulation of the European Parliament and of the Council (EU) 2016/679 EU of April 27, 2016. (hereinafter: “RODO”). It defines the type, scope and purpose of the personal data collected, processed and stored by you.

A user is any natural person to whom the data pertains who uses the www.steuler-kch.pl website (hereinafter referred to as the website) or electronic services available through the website.

II. Terms of use of the service by the Users

1. The use of the service does not require User registration and is possible without providing any personal data enabling the Administrator to identify Users directly or indirectly in accordance with the provisions of RODO.
2. the Administrator allows only to view the content made available and published on the site.
3.Users may provide their personal data (name, surname, e-mail address) by filling out a contact form or by establishing a business relationship (concluding a contract).
4. The administrator of the site reserves the right to collect and process anonymous statistics on Users, in order to learn about their preferences and assess respect for the rules of use of the site. This data does not constitute personal data under the provisions of RODO.

III. Administrator’s data

The administrator of your personal data is STEULER-KCH Polska Sp. z o.o., 64B Wincentego Witosa Street, 25-561 Kielce.

IV. Contact regarding personal data

The Administrator has not appointed a Data Protection Officer because it does not meet the conditions set forth in Article 37(1) of the RODO. The Administrator is not a public authority or entity. The main activity of the Administrator does not consist of processing operations that, due to their nature, scope or purposes, require regular and systematic monitoring of data subjects on a large scale. Nor is the main activity the large-scale processing of special categories of personal data.

For information on data protection, you may contact the Data Controller: STEULER-KCH Polska Sp. z o.o., 64B Wincentego Witosa Street, 25-561 Kielce, tel. +41 368 41 01, e-mail address: biuro@steuler-kch.pl.

V. Purpose of personal data processing

The personal data you have provided is processed in accordance with the provisions of the RODO for one or more of the purposes listed below:
– Fulfilling legal requirements related to employment,
– Communicating about your inquiries, handling complaints about services provided, or other content arising from correspondence with you,
– Conclusion and execution of a contract between you and the Administrator,
– Fulfillment of the Administrator’s legal obligation to you,
– Carrying out the Administrator’s marketing activities within the framework of the Administrator’s legitimate interest, as well as, after your prior consent, carrying out the marketing activities of third parties, and making your personal data available to entrepreneurs who cooperate with the Administrator so that they can use it for marketing purposes.

VI. Legal basis for processing of personal data

– Pursuant to Article 6(1), letter 1a) RODO, processing of personal data is possible with the consent of the data subjects.
– Pursuant to Article 6(1), letter b) RODO, processing is possible when it is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract.
– On the basis of Article 6(1), point (c) of the RODO, processing is possible when it is necessary for the fulfillment of a legal obligation incumbent on the Controller,
– Pursuant to Article 6(1), point (f) of the RODO, processing is possible if it is necessary to pursue the legitimate interests of the Controller or of a third party, provided that those interests are not overridden by the interests or fundamental rights and freedoms of the data subjects requiring protection of personal data.

VII. Categories of personal data processed

As Administrator, in connection with the purposes listed above, we may process the following categories of data: first name, last name, contact data, i.e. e-mail address, telephone number, as well as data required for identification for the purpose of concluding a contract, performing a service and issuing an invoice. Each time, the scope of personal data may vary depending on the service provided by the Administrator.

VIII. Recipients of personal data

The personal data you have provided to us may be shared with other data recipients if:
– this is required for the proper execution of contracts concluded with you,
– within the scope of legal obligations incumbent on the Administrator,
– due to the purposes arising from the legitimate interests pursued by the Administrator, such as the establishment, investigation and enforcement of claims.
These may include separate controllers of personal data, as well as processors with whom the Administrator has entered into a contract for entrustment of personal data processing. These may be, for example: entities cooperating with the Administrator in handling accounting, legal, tax matters, entities authorized under separate regulations to obtain personal data, entities conducting postal or courier services, IT service providers, persons delegated to execute contracts.

IX. Rights of the data subject

Right to request access to data from the Controller.
The data subject is entitled to obtain confirmation from the Controller as to whether personal data concerning him or her is being processed, and if this is the case, he or she is entitled to access the data.
Right to rectification of data.
The data subject has the right to request from the Controller the immediate rectification of personal data concerning him/her that is inaccurate. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by providing an additional statement.
Right to erasure (“right to be forgotten”).
The data subject has the right to demand from the Administrator the immediate erasure of personal data concerning him/her, and the Administrator is obliged to erase the personal data without undue delay if one of the following circumstances applies:
– The personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
– The data subject has withdrawn the consent on which the processing is based,
– Personal data is processed unlawfully,
– Personal data must be erased in order to comply with a legal obligation under European Union or national law.

However, the right to be forgotten does not apply when the processing is necessary for the exercise of the right to freedom of expression and information, the collection of data is necessary to fulfill a legal obligation (e.g., storage obligations), the deletion of data is hindered by archiving obligations, or when the processing is used to establish, assert or defend legal claims.
Right to restrict processing
The data subject has the right to request the Controller to restrict processing in the following cases:
– the data subject disputes the accuracy of the personal data – for a period of time that allows the Administrator to verify the accuracy of such data
– the processing is unlawful, and the data subject objects to the erasure of the personal data, requesting instead a restriction on its use,
– The controller no longer needs the personal data for the purposes of the processing, but the data are needed by the data subject to establish, assert or defend claims,
– The data subject has objected under Article 21(1) of the RODO (right to object) to the processing – until it is determined whether the legitimate grounds on the part of the controller override the grounds for the data subject’s objection.

Right to data portability.

The data subject has the right to receive in a commonly used machine-readable format the personal data concerning him or her that he or she has provided to the Controller, and has the right to send this personal data to another controller if the processing is carried out, for example, with consent and by automated means.

Right to object.

The data subject has the right to object at any time – for reasons related to his/her particular situation – in accordance with Article 21 of the RODO

The right to object to a supervisory authority.

If you consider that the processing of your personal data violates the provisions of the RODO, you can address a complaint to the supervisory authority, which is the President of the Office for Personal Data Protection, based in Warsaw, 2 Stawki Street, 00-193 Warsaw.

Automated processing, including profiling

Your personal data will not be subject to automation (including profiling) that may produce legal effects against you or similarly significantly affect you.

Source of data

We obtain personal data directly from you or from publicly available sources, e.g. National Court Register, Central Register and Information on Economic Activity and others.

I. Data storage period
Your personal data will be stored for as long as it is necessary for the performance of the contract between you and STEULER-KCH Polska Sp. z o.o. or the contract concluded by another entity on your behalf, and thereafter for a period of time corresponding to the period of limitation of claims that STEULER-KCH Polska may raise and that may be raised against our company.
If your personal data will be processed:
– in order to fulfill a legal obligation incumbent on the Administrator, we will keep your personal data for the time necessary to fulfill that obligation.
– based on your consent, we will process your data until you withdraw that consent.
– on the basis of the legitimate interest of the Administrator, when the processing requires the execution of a contract concluded with STEULER-KCH Polska on your behalf, we will process the data until the fulfillment of the legitimate interest constituting the basis for this processing.
– on the basis of the legitimate interest of the Administrator, when the basis of this processing is direct marketing of its products and services, your personal data will be processed until you raise an objection.