Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)(Official Journal of the EU L 119 of 04.05.2016, p. 1), hereinafter „RODO”, we inform you that:

1. the Administrator of your personal data is IMA Polska S.A. with its registered office at ul. Polna 21, 62-095 Murowana Goślina, KRS: 0000566925, NIP: 7822510305, REGON: 30153074200000, Tel: (+48) 530 595 395, e-mail address: rodo@imapolska.eu

(2) For data protection matters, you can contact at email address: rodo@imapolska.eu or to the Administrator's registered office address with the subject line Data Protection.

3 The controller processes personal data:

1) Contractors who are natural persons:

(a) on the basis of Article 6(1)(b) of the RODO - for the purpose of concluding and performing contracts binding the Administrator - for the duration of the contract;
(b) on the basis of Article 6(1)(c) of the RODO - in order to comply with the Administrator's obligations under applicable law, including in particular obligations under tax law - until such time as the obligations are fulfilled or expire;
c) on the basis of Article 6(1)(f) of the RODO - for the purposes of the legitimate interests pursued by the Administrator, including in particular the investigation, establishment and defence of claims, for archiving and statistical purposes and for the application of direct marketing - until an objection to the processing is raised or until the statute of limitations for claims/the Administrator's legitimate interest has expired;
d) on the basis of Article 6(1)(a) of the RODO - if you have given the relevant consent to send commercial information and promote your own services - until you withdraw your consent;

2) persons staying on the Administrator's premises - on the basis of Article 6(1)(f) RODO - in the form of image recorded by the video surveillance system - in order to ensure the safety of persons staying on the Administrator's premises and protect the property, as well as to maintain the confidentiality of information the disclosure of which could expose the Administrator to damage.

4 The recipients of the personal data may be other entities cooperating with the Administrator in the realization of the purposes of the processing specified in point 3. The entities to which the personal data may be transferred undertake to maintain confidentiality and to implement appropriate technical and organizational measures guaranteeing the protection of the personal data transferred.

5 You have the right of access to the content of your data and the right to rectification, erasure, restriction of processing, the right to data portability, the right to object to processing and the right to withdraw your consent at any time (without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal).

(6) You have the right to lodge a complaint with the President of the Data Protection Authority if your personal data is processed in breach of the provisions of the RODO, the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws 2018, item 1000 as amended) and any other national regulations for the application of the RODO.

7 Your personal data will not be processed by the Administrator on the basis of automated decision-making, including profiling.

8 The controller will not transfer your personal data to third countries (outside the European Union or the European Economic Area) or to international organisations.

9. personal data is provided by you voluntarily, however, it is a necessary requirement for the purposes of the processing set out in section 3.