In
accordance with art. 13 of Regulation (EU) 2016/679 of the European Parliament
and of the Council of 27 April 2016 on the protection of individuals with
regard to the processing of personal data and on the free movement of such data,
and repealing Directive 95/46/EC (“GDPR”), we inform that:
the administrator of your personal data is Prywatne Przedsiębiorstwo Produkcyjno – Handlowe „GRAS” Piotr Grabowski based in Korzybie, address: 77-230 Kępice, Korzybie, ul. Sławieńska 12, NIP: 8390201293 (“Administrator”). In matters related to the processing of your personal data by the Administrator, please contact the Administrator by sending an e-mail to or in writing to the following address: GRAS PPPH with its registered office in Korzybie, address: 77-230 Kepice, Korzybie, ul. Sławieńska 12 with the annotation “Personal data”.
Your personal data may be processed by the Administrator:
in order to perform a contract to which you are a party or take action at your request before the conclusion of the contract, in connection with the economic activity of the Administrator (legal basis: art.6 par.1 letter b of GDPR),
for marketing purposes related to GRAS products and services (legal basis: art.6 par.1 letter a of GDPR),
in order to fulfill the legal obligations incumbent on the Administrator, in particular the issue and storage of invoices / sales documents and other accounting documents (legal basis: art.6 par.1 letter c of GDPR),
in order to pursue claims and defend against claims arising from the Administrator’s business activities (legal basis: art.6 par.1 letter f of GDPR),
to carry out recruitment, in the case of applying for the recruitment process, based on the Administrator’s expressed consent and legal obligation (legal basis: art.6 par.1 letter a and c of GDPR),
in order to ensure the safety of people working in the Administrator’s premises, protection of the Administrator’s property, as well as the safety of persons visiting the Administrator’s premises, by recording entries and exits (legal basis: art.6 par.1 letter c and f of GDPR).
The recipients of your personal data may be the Administrator’s suppliers whom the Administrator has commissioned services related to the processing of personal data, e.g. IT service providers, accounting services providers, as well as employees and associates of the Administrator, with the help of which the Administrator conducts business activities. The processing of your personal data by these entities will take place on the basis of an agreement with the Administrator, or authorization from the Administrator, and in accordance with his instructions. Recipients of personal data may also be entities authorized to obtain personal data on the basis of applicable law.
The administrator shall store personal data:
processed for the purpose referred to in point 2.1. and 2.4. – for the period of limitation of claims due to the Administrator and against the Administrator,
processed for the purpose referred to in point 2.3. – for the period in which the Administrator is obliged to store personal data on the basis of applicable law,
processed for the purpose referred to in point 2.2. – for the period in which the Administrator will have consent to data processing,
processed for the purpose referred to in point 2.5. – for the period during which recruitment will be conducted, unless the candidate has given separate consent for the data to be processed also after its completion, for further recruitment processes,
processed for the purpose referred to in point 2.6. – for a period of 12 months.
Your personal data are not processed in an automated manner, including they are not profiled and are not transferred to recipients in third countries or to international organizations.
In the event of providing the Administrator with personal data of a third party, the entity providing this data confirms in this way that it has the consent of that person to transfer the data to the Administrator.
You have the right to: request the Administrator to access personal data, the right to rectify data, delete or limit processing, the right to object to the processing, the right to transfer data, as well as the right to withdraw consent at any time to the extent in which your data is processed on the basis of such consent. Withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of your consent before its withdrawal.
In order to exercise the rights referred to in point 7 above, please contact the Administrator in accordance with the contact details provided in point 1 above.
You have the right to lodge a complaint with the supervisory body – the Office for Personal Data Protection.
Providing personal data is voluntary, but necessary to achieve the purposes for which these data are collected and processed by the Administrator, in particular providing data is a condition of using the Administrator’s products and services, and failure to provide data to the extent required by the Administrator may result in the inability to performance of the contract.
The Administrator is entitled to review the privacy policy and its changes in situations when it proves necessary or desirable, in particular due to: new law, new guidelines of the authorities responsible for supervision of personal data protection processes, best practices used in personal data protection area, or in the event of a change in the technology by which the Administrator processes data, as well as in the event of a change in the methods, purposes or legal grounds for the processing of personal data by the Administrator. The updated version of the security policy will be posted on the website of the data Administrator at: www.gras.pl
Prywatne Przedsiębiorstwo Produkcyjno – Handlowe „GRAS” Piotr Grabowski
