Your privacy is our priority

Privacy policy

In accordance with Article 13, Sections 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we inform you that:

  1. Personal Data Controller

    The controller of your personal data is Drewplast sp. z o.o., with its registered office in Grabowno Wielkie 5E, 56-416 Twardogóra, Poland.

  2. Purpose of Data Processing

    Your personal data will be processed solely for the following purposes:

    1. To conclude and perform a contract – processing is necessary for the conclusion and performance of the contract to which the data subject is a party, or to take action upon the request of the data subject prior to entering into a contract (based on Article 6(1)(b) of the General Data Protection Regulation);
    2. To maintain accounting and tax documentation – processing is necessary to fulfill a legal obligation as required by Article 74 of the Polish Accounting Act and other relevant tax legislation (based on Article 6(1)(c) of the General Data Protection Regulation).

  3. Recipients of Personal Data

    Your personal data will be shared only with trusted entities, such as companies providing and supporting selected IT systems and solutions, accounting and legal service providers, as well as entities authorized under applicable laws.

  4. Transfer of Personal Data to a Third Country

    Your personal data will not be transferred to any third country (i.e., a country outside the European Economic Area) and/or international organization.

  5. Data Retention Period

    Your personal data will be stored for the period necessary to achieve the purpose for which it was collected, followed by a 5-year archival period, starting from the end of the calendar year in which the data was last used.

  6. Your Rights Related to Data Processing

    In connection with the processing of personal data, you have the following rights:

    1. The right to access your data;
    2. The right to rectify your data;
    3. The right to delete your data or restrict its processing;
    4. The right to data portability;
    5. The right to object to data processing;
    6. The right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office) if you believe that the processing of your personal data violates GDPR regulations.

  7. Voluntary Nature of Providing Data

    Providing your personal data is voluntary but necessary for the conclusion and performance of the contract.

  8. Automated Decision-Making

    The processing of your personal data will not involve decisions based solely on automated processing, including profiling.