Personal data processing notification – marketing

Please read carefully this personal data processing notification.

In compliance with the requirements set in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), Gerda Sp. z o.o. (LLC) in Sokołów provides you with the necessary information on the rules of processing your personal data and your ensuing rights.
If you have any questions about the method and scope of the processing of your personal data by Gerda, or your ensuing rights, please contact Gerda Sp. z o.o. in Sokołów, 49 Sokołowska St., 05-806 Komorów, by email at This email address is being protected from spambots. You need JavaScript enabled to view it., or our Data Protection Officer at This email address is being protected from spambots. You need JavaScript enabled to view it..

Who will be your Data Controller?
Your Personal Data Controller is Gerda sp. z o.o in Sokołów, 49 Sokołowska St., 05-806 Komorów.

What data are processed?
We collect and process marketing information about you, obtained from you in the process of:
• completing forms and questionnaires;
• telephone conversations;
• email correspondence.

What is the purpose and lawfulness of the processing of your personal data?
We will process your personal data:
a) based on your consent (GDPR, Art. 6 Sec. 1 L. a), for our marketing purposes (presenting Gerda's commercial offer), specifically including:
• contacting you by email or phone;
• identifying your needs and expectations;
• informing you about Gerda's current offers;
• informing you about Gerda's current promotions;
• your use of Partner Zone;
• sending a newsletter;
b) for the purposes of the legitimate interests pursued by the data controller (GDPR, Art. 6 Sec.. 1 L. f ), e.g. preparing breakdowns, analyses, statistics, reports for direct marketing and security purposes.
Who do we share your data with?
We can share your data, to a necessary extent, with:
a) authorized data recipients in accordance with the regulations of law (e.g. courts, law enforcement agencies, administrative bodies, supervisory authorities);
b) data processors acting as such on our behalf (e.g. our ICT system and tool operators or providers, consulting and advisory service providers, research agencies, etc.);
c) each time we share your data, we ensure that only a minimum of information, as necessary for the purpose of processing, is shared.
Your data will not be transferred beyond the European Economic Area (EEA). However, should your data be transferred beyond the EEA, we undertake to ensure the cooperation with relevant entities on the applicable legal basis, in compliance with the adequate protection standards.

How long will we store your data?
We will store your personal data as long as necessary for the purposes for which they have been collected or are being processed, to an extent as required to comply with the applicable legal requirement or as provided for in accordance with the applicable archiving regulations.
In case of processing based on your consent, we will store your data until your withdrawal thereof and thereafter for a period as necessary for Gerda to pursue its legitimate interests as the controller.

What rights do you have as the data subject?
Remember that you have the right to:

a) access contents of your personal data, including receiving a copy thereof;
b) demand that your personal data be rectified (corrected) if they are incorrect or incomplete;
c) demand that your personal data be erased (so called 'right to be forgotten') if (i) they are no longer necessary for the purposes for which they have been collected or otherwise processed, (ii) you have objected to processing, (iii) you have withdrawn your consent processing has been based on and there is no other lawful basis for such processing, (iv) your data are being processed unlawfully, (v) your data must be erased in order to discharge the legal obligation;
d) demand that processing of your personal data be restricted if (i) you contest the accuracy of your data, (ii) such processing is unlawful, but you oppose the erasure of your data and request the restriction of their use instead; (iii) we no longer need your data for our purposes, and you need your data for the establishment, exercise or defense of legal claims; (iv) you have objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject;
e) your data portability if (i) processing is based on your consent or on a contract entered into with you, (ii) processing is carried out by automated means;
f) object to processing of your personal data, including profiling, (i) on grounds relating to your particular situation, and (ii) processing is based on necessity for the legitimate interests of the controller;
g) withdraw your consent to processing of your personal data to an extent it has been given at any time, such withdrawal not affecting the lawfulness of processing based on consent before its withdrawal.
In addition, you have the right to lodge a complaint with the relevant supervisory authority, i.e. the Inspector General for the Protection of Personal Data, if you consider that the processing of personal data relating to you infringes the GDPR.

Profiling
Processing of your personal data may include profiling.

Do you have to provide your data?
Providing your data is absolutely voluntary. However, if you do not provide your data, this will make it impossible for us to inform you about Gerda's commercial offer.
Who to contact about data processing issues?
With regard to your data processing issues, you can contact us by email at This email address is being protected from spambots. You need JavaScript enabled to view it., or by regular mail at the address: Gerda Sp. z o.o. in Sokołów, 49 Sokołowska St., 05-806 Komorów. With a view to improving the security of the processing of your data, we have appointed our Data Protection Officer, available by email at This email address is being protected from spambots. You need JavaScript enabled to view it..
In compliance with the requirements set in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), Gerda Sp. z o.o. (LLC) in Sokołów provides you with the necessary information on the rules of processing your personal data and your ensuing rights.
If you have any questions about the method and scope of the processing of your personal data by Gerda, or your ensuing rights, please contact Gerda Sp. z o.o. in Sokołów, 49 Sokołowska St., 05-806 Komorów, by email at This email address is being protected from spambots. You need JavaScript enabled to view it., or our Data Protection Officer at This email address is being protected from spambots. You need JavaScript enabled to view it..