GDPR Information Clause for Clients and Contractors
Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR, we inform you that:
1. Data Controller
The controller of your personal data is CHEMLEX Sp. z o.o., with its registered office at ul. Skowronków 7/107, 33‑100 Tarnów, entered into the Register of Entrepreneurs of the National Court Register under number 0000781749 by the District Court for Kraków‑Śródmieście in Kraków, 12th Commercial Division of the National Court Register, NIP: 8733271041, REGON: 383120428, email: biuro@chemlex.com.pl, hereinafter referred to as CHEMLEX.
2. Purposes and Legal Basis for Processing
Your personal data will be processed for the following purposes:
- Performance of contracts – pursuant to Article 6(1)(b) GDPR.
- Marketing of the company’s own products and services – pursuant to Article 6(1)(f) GDPR; our legitimate interest is to provide information about our commercial offer.
- Ensuring the security of online services, including registering IP addresses of website users – pursuant to Article 6(1)(f) GDPR; our legitimate interest is to ensure the security of electronically provided services.
- Pursuing or defending against claims – pursuant to Article 6(1)(f) GDPR; our legitimate interest is to establish, pursue, or defend legal claims.
3. Data Retention Period
Your personal data will be stored for the period necessary to achieve the purpose for which it was collected, with systematic monitoring of its relevance, no less frequently than every 3 years from the date of collection.
In particular:
- data will be processed for the duration of the offer or contract, but no longer than the duration of the contract,
- if processing is based on consent – until the consent is withdrawn,
- for marketing purposes – until you withdraw consent or object to processing.
The processing period may be extended by the limitation period for claims if processing is necessary to pursue or defend against claims. After this period, data will be processed only to the extent required by law, including tax and accounting regulations.
4. Data Recipients
Your personal data may be transferred only to:
- carriers or intermediaries handling postal shipments on behalf of the company,
- entities providing services necessary for the performance of the contract, including legal services,
- postal operators and courier companies,
- banks processing payments,
- persons performing regulated professions, such as lawyers.
5. Your Rights You have the right to:
- access your personal data, including obtaining a copy,
- rectify your personal data,
- delete your personal data (“right to be forgotten”),
- restrict the processing of your personal data,
- transfer your personal data to another controller,
- object to the processing of your personal data, including profiling and processing for direct marketing purposes,
- withdraw consent at any time, if processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal,
- lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the GDPR.
6. Right to Object
You have the right to object to the processing of your personal data for the purpose of sending you marketing content. You also have the right to object to processing carried out on the basis of the company’s legitimate interests, for reasons related to your particular situation.
7. Voluntary Provision of Data
Providing your personal data is voluntary, but necessary to respond to an inquiry submitted via the contact form.
Your personal data will not be subject to profiling.