1. The Controller of your personal data is MISTA Sp. z o.o. with its registered office at ul. W. Grabskiego 36 in Stalowa Wola, represented by:

– Waldemar Wilk – President of the Management Board
– Oleksii Guziev – Vice-President of the Management Board

hereinafter referred to as the “Controller”.

2. The personal data of clients are processed for the purpose of performing a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract, sending commercial information by electronic means of communication, direct marketing of the Controller’s own products or services, pursuing claims arising from business activity, and fulfilling a legal obligation imposed on the Controller.

3. The legal basis for the processing of personal data is Article 6(1)(a) GDPR¹, Article 6(1)(b) GDPR, Article 6(1)(c) GDPR, and Article 6(1)(f) GDPR.

4. Information on recipients of personal data:

Your personal data may be transferred to:

– an IT company,
– courier companies,
– an accounting office.

5. Your personal data will not be transferred to a third country.

6. The period for which your personal data will be stored: for the period necessary to perform the contract or pursue claims arising from business activity, for the period required by applicable law, and in the case of personal data processed on the basis of the consent of the data subject — until such consent is withdrawn.

7. We inform you that you have the right to:

1) access your personal data, rectify them, erase them or restrict their processing,
2) data portability,
3) lodge a complaint with a supervisory authority,
4) submit a written, reasoned request to cease processing your data due to your particular situation,
5) object to the processing of your data when the Controller intends to process them for marketing purposes or to transfer your personal data to another data controller,
6) obtain comprehensive information concerning:
a) the presence of your data in the Controller’s filing systems and the address of the Controller’s registered office,
b) the purpose, scope and method of processing the data contained in such filing system,
c) the date from which your data have been processed in the filing system,
d) the possible source of obtaining the data,
e) the disclosure of your data, in particular information about recipients or categories of recipients to whom the data are disclosed.

8. We inform you that:

1) providing your personal data is voluntary,
2) your personal data are not subject to automated decision-making, including profiling.

9. We further inform you that you have the right to withdraw your consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Consent may be withdrawn in the same form in which it was given.

¹ GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, General Data Protection Regulation.