Caring for the confidentiality and transparency of personal data processing and in accordance with fair information practices and applicable data protection laws, we inform you that the data controller of users’ personal data is KARNATECH Andrzej Karnat, located at Osiedle 48, 37-400 Nisko, NIP: 8651004517, REGON: 830216476 (hereinafter “KARNATECH”).
Data Collection
Data is collected from the person who enters data into the system or form on the website.
Data Usage
We use data only to enable the user to contact a Data Controller employee via the contact form on the website. Depending on the matter or content of the correspondence, the data may be used in the process of handling the person and the legitimate interest of the Data Controller.
Scope of Processed Data
We may process data including:
- Email address
- Date
- Time
- Name or user designation
- Phone numbers
- Type of inquiry and its content with attachment
- Possible further information regarding the correspondence
Legal Bases for Data Processing
We may process your personal data based on the following legal grounds:
- 830216476
- User consent: You have given us consent to contact our employees via the contact form on the website (Art. 6 (1) a) GDPR). Please note that this consent can be withdrawn at any time, but it will not affect the legality of the processing based on consent before its withdrawal.
- Contract performance: Data processing is necessary to perform the contract or to take steps necessary to enter into a contract (Art. 6 (1) b) GDPR).
- Establishing, pursuing, or defending claims: Data processing within the framework of the judiciary by courts (Art. 9(2) f GDPR).
- Legitimate interests: Data may also be used for purposes arising from legitimate interests pursued by us or by a third party (Art. 6 (1) f GDPR). Legitimate interests mainly focus on planning service delivery, internal management and reporting, analysis and development of business and quality processes.
Right to Object
If the collection and use of data are based on our legitimate interest, you have the right to object to the processing. In such a case, we will cease further processing of your relevant personal data unless we demonstrate the existence of valid legally justified grounds for their processing.
Data Sharing
We may share your personal data:
- With cooperating entities, where the sharing is necessary for the proper operation of the entity or the performance of the contract.
- With other entities in the event that a new entity is created or the organization is taken over by another entity if the controller is involved in a merger, sale, or transfer of part or all of its business.
- With other entities when the entity is obliged to do so, for example, in accordance with a valid court order or legal regulations.
- With service providers who process data exclusively on the instructions of the data controller and are contractually obligated to protect the data entrusted to them.
Data Transfer to Third Countries
Personal data may be shared with entities in third countries after ensuring an adequate level of protection and in accordance with applicable legal regulations. Ensuring an adequate level of protection will be achieved by applying technical measures and signing standard contractual clauses issued by the European Commission or based on commitments made under the Privacy Shield between the EU and the USA.
Data Retention Period
The data retention period depends on the matter or content of the submitted correspondence. Data is stored for the time necessary to achieve the specific purpose of processing.
Voluntariness of Data Provision
Providing data is voluntary, but without their processing, we cannot conduct correspondence or handle the matter that the user has addressed to us.
User Rights
You have the right to:
- Request access to your personal data and receive a copy of it.
- Request the correction of your personal data.
- Request the deletion of your personal data.