Personal Data

INFORMATION CLAUSE

In accordance with Article 13, paragraphs 1-2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR"), we inform you that:

I. The administrator of your personal data is Artus limited liability limited partnership (Tax Identification Number 8791734836, National Court Register Number 0000595187), with its registered office at ul. M. Skłodowskiej-Curie 75, 87-100 Toruń.

II. Regarding the protection of your personal data, you can contact the person responsible for data processing in the company at the email address: biuro@artus.com.pl, by phone at +48 56 645 35 24, or in writing at the address of our registered office indicated in point I above.

III. Purposes and legal bases for processing. We will process your data:
- for the purpose of concluding a purchase/sale agreement (commercial activity) (based on Article 6, paragraph 1, point b of the GDPR).
- for the purpose of performance and on the basis of a purchase/sale agreement when concluded (based on Article 6, paragraph 1, point b of the GDPR).
- for reporting purposes, which is the implementation of an obligation imposed on us by law (e.g., tax settlements, official controls) (based on Article 6, paragraph 1, point c).
- for archival purposes, which is the implementation of our legitimate interest in securing information in the event of a legal need to prove facts and to prevent data loss due to random events (backup copies) (based on Article 6, paragraph 1, point f of the GDPR).
- for the eventual determination, investigation, or defense against claims, which is the implementation of our legitimate interest in this regard (based on Article 6, paragraph 1, point f of the GDPR).
- for analytical purposes (better selection of services to meet our clients' needs, general optimization of our products, optimization of service processes, building knowledge about our clients, financial analysis of our company, etc.), which is the implementation of our legitimate interest in this regard (based on Article 6, paragraph 1, point f of the GDPR).
- for offering our products and services to you directly (direct marketing), including tailoring them to your needs, i.e., profiling, which is the implementation of our legitimate interest in this regard (based on Article 6, paragraph 1, point f of the GDPR).
The company does not process data for purposes requiring the consent of the data subject (such as marketing of third-party goods and services).

IV. Right to object
At any time, you have the right to object to the processing of your data processed on the basis of a legitimate interest. We will cease processing your data for these purposes, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms or if your data is necessary for the establishment, exercise, or defense of legal claims. At any time, you have the right to object to the processing of your data for direct marketing. If you exercise this right, we will cease processing data for this purpose.

V. Data retention period. We will retain your data for the following periods:
- Your personal data resulting from the conclusion of a contract will be processed for a period during which claims from the contract may be disclosed, i.e., for a period of 5 years. Due to technical conditions of accounting software, complete erasure of data is not feasible. After the processing period, your data will be marked as inactive, and processing will be restricted solely for archival purposes.
- If no contract is concluded within three months of our offer to you, your personal data related to the offer for that contract will be immediately deleted, except for data required for direct marketing (contact details).
Data processed for the purpose of direct marketing of products and services can be processed until you object to their processing (formal or actual, e.g., by unsubscribing from the newsletter) or until it is determined that they have become outdated.

VI. Data recipients
Your personal data may be transferred to:
a) Institutions specified by law, e.g., the Tax Office, Social Security Institution (ZUS), or others.
b) Our subcontractors (data processing entities), e.g., accounting firms, law firms, IT companies, marketing agencies, debt collection agencies, and transport companies, based on data processing agreements or service provision regulations.

VII. Rights of data subjects:
In accordance with the GDPR, you have the right to:
a) access your data and receive a copy of it
b) correct (amend) your data
c) delete, restrict, or object to the processing of your data
d) data portability
e) lodge a complaint with a supervisory authority

VIII. Information on the voluntary provision of data Providing data is:
a. voluntary (to enable direct marketing, e.g., by subscribing to the newsletter)
b. necessary for the conclusion of an agreement or for the performance of another purpose related to processing (e.g., to send an inquiry for an offer that may lead to a contract)

IX. Automated decision-making
We inform you that we do not make automated decisions in our commercial activity, and your data is not profiled.