1.      Data Controller

The data controller for your personal data is Firma Handlowo-Produkcyjna Akma 2 Konrad Podstawski, ul. Długa 43, 33-132 Niedomice, NIP: 9930470472 (hereinafter referred to as the "Controller").

 2.      Contact Information

For any matters related to the processing of your personal data by the Controller and exercising your rights related to data processing, please contact the Controller at the following phone number: 14 6458777, email address: biuro@akma-niedomice.pl, or in writing at the address: 33-132 Niedomice, ul. Fabryczna 15, with the note "Personal Data."

 3.      Purposes of Processing and Legal Basis for Processing

Your personal data is processed by the Controller for the purpose of entering into and performing a contract, based on Article 6(1)(b) of the General Data Protection Regulation (GDPR). It is also processed to fulfill the legal obligation of collecting and storing accounting documents, in accordance with the provisions of Article 86(1) of the Tax Ordinance. Taxpayers are required to keep tax records and related documents until the expiration of the tax obligation, which expires after 5 years from the end of the calendar year in which the tax payment deadline expired (see Article 70(1) of the Tax Ordinance). Additionally, your personal data is processed by the Controller for the legitimate interests pursued by the Controller, such as the potential need to defend or enforce civil law claims, based on Article 6(1)(f) of the GDPR. With your separate consent, based on Article 6(1)(a) of the GDPR, the data may also be processed for the purpose of sending electronic marketing communications in accordance with Article 10(2) of the Act of 18 July 2002 on the provision of electronic services.

 4.      Categories of Personal Data Processed by the Controller

Basic identification, address, and contact information required for the proper performance of the contracts concluded and for compliance with legal obligations.

 5.      Recipients of Data

Your personal data may be disclosed to entities affiliated with the Controller or third parties for the purposes mentioned above. Your personal data may be transferred to entities processing personal data on behalf of the Controller, including hosting providers, IT service providers, entities processing data for debt collection purposes, accounting firms, and legal entities. Such entities process data on the basis of a contract with the Controller and solely according to its instructions. Your personal data may be disclosed to public authorities authorized to obtain data under applicable law.

 6.      Transfer of Data Outside the European Economic Area

Collected personal data will not be transferred to recipients located in third countries, meaning outside the European Economic Area.

 7.      Retention Period

Your personal data will be stored until the expiration of claims arising from the contract or until the obligation to store data prescribed by law, particularly the obligation to store accounting documents, expires. If the Controller processes personal data based on your consent, such data will be processed until you withdraw your consent.

 8.      Rights of the Data Subject

You have the right to access your personal data, the right to request correction of your personal data, the right to request erasure of your personal data, the right to restrict the processing of your personal data, and the right to object to the processing of your personal data. Furthermore, you have the right to withdraw your consent to the processing of your personal data, to the extent that the processing is based on consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You also have the right to data portability, to the extent