PRIVACY POLICY

We respect your privacy, so we want to inform you how we process your personal data by making the Privacy Policy available on our website. We have divided the Privacy Policy into several sections. Depending on whether you are a newsletter subscriber, a job candidate, or simply visit our website, different parts of the Privacy Policy apply to you. In each section, we describe in detail which of your personal data we have and how we use it. We have also added information about your rights, e.g. how you can access your data and request that we stop using it.

GENERAL INFORMATION

Who is the controller of your personal data?

The controller of your personal data is LED-POL sp. z o.o., sp. k. with its registered office in Bielsko-Biała, ul. Kustronia 40, 43-300 Bielsko-Biała.
For what purpose can we process your personal data?

We may process your personal data for different purposes, depending on how you interact with us.
• If you are our customer or have contacted us to buy a product offered by us, we process your personal data in order to establish and execute the contract between us, as well as to fulfill legal obligations, e.g. tax obligations. We may also process your data in order to pursue any claims arising from the contract.
• If you are a subscriber to our newsletter, we process your personal data with your consent to send it to you regularly.
• If you are our potential customer who has provided us with your contact details to receive information about our products in a way other than the newsletter, we process your personal data with your consent to inform you about our products.
• If you are a person representing our contractor or a contact person who supports the parties to the contract in its execution, we process your data in order to execute this contract.
• If you are a job candidate for our company, we process your personal data for the purpose of employing you.
• If you are our employee, we process your personal data in order to perform the employment contract between us and to meet the legal obligations to which we are subject as an employer.
• If you have simply entered our website because you are interested in our company, we process some data relating to your computer through cookies in order to make it easier for you to use our website.

What rights do you have?

Right of access to data:

At any time, you have the right to request information about which of your personal data we process. To do so, contact LED-POL.

The right to request data portability:
When LED-POL processes your personal data, you have the right to receive a copy of your data in a structured, commonly used and machine-readable format. This copy can be sent to you or to another entity.

The right to correct data:
You have the right to request the correction of your personal data if it is incorrect, as well as to supplement incomplete data.

Right to erasure:
You have the right to request the deletion of any data processed by LED-POL at any time, except for the following situations:

• you have an unfinished business with the Customer Service Department
• you have an open order that has not yet been shipped or has only been partially shipped
• you have an unsettled debt to LED-POL, regardless of the payment method
• If you have made any purchases, we will retain your personal data relating to the transaction for accounting purposes for as long as necessary in accordance with applicable regulations.

Right to object to the processing of your data based on the legitimate interest of LED-POL: You have the right to object to the processing of your data based on the legitimate interest of LED-POL due to your particular situation. We will stop processing your personal data unless we can demonstrate that our legitimate interest overrides your right to privacy, e.g. in connection with the need for us to pursue legal claims.

The right to withdraw consent to the processing of personal data: You may withdraw your consent to our processing of your personal data at any time if the legal basis for the processing is your consent. Remember that the withdrawal of consent does not affect the lawfulness of the processing that we carried out on the basis of your consent before its withdrawal.
The right to restrict processing:
You have the right to request that LED-POL restrict the processing of your personal data under the following conditions:

• if you do not consent to the processing of data based on LED-POL’s legitimate interest, then LED-POL will restrict any processing of such data after verifying whether such legitimate interest exists.
• if you report that your personal data is incorrect, then LED-POL must restrict any processing of the data until its accuracy is verified.
• if the processing of your data is unlawful, you may object to the deletion of your personal data and instead request the restriction of the use of your personal data.
• if LED-POL no longer needs your personal data, but it is required to establish, pursue or defend a legal claim.

How can you exercise your rights?

Please direct any questions, requests and demands to us at e-mail daneosobowe@led-pol.pl or send us a letter by regular mail to the address LED-POL sp. z o.o., sp. k., 40 Kustronia St., 43-300 Bielsko-Biała.

The right to file a complaint with the supervisory authority:

If you believe that LED –POL processes your personal data in an improper manner, you can contact us. You also have the right to file a complaint with the President of the Personal Data Protection Office.

Privacy policy update:

In the future, it may be necessary to update the Privacy Policy. Its latest version will always be available on our website. We will keep you informed of any changes in the best way to reach you.

DETAILS

1) Customers
We would like to inform you that the administrator of your personal data is LED-POL sp. z o.o. sp. k. with its registered office in Bielsko-Biała, ul. Kustronia 40 (“Administrator”)
In addition, we inform that

1. Your personal data will be processed by the Administrator in order to conclude and perform the contract and to take action at your request before concluding the contract. The legal basis is Article 6 paragraph 1 letter b) of the GDPR. In connection with the concluded contract, the Administrator processes your personal data in order to fulfill its legal obligations, for example tax obligations. The legal basis for processing is Article 6 paragraph 1 letter c) of the GDPR. The Administrator may also process your personal data for the purpose of pursuing or defending claims and direct marketing, which constitutes the legitimate interest of the Administrator. The legal basis for processing is Article 6 paragraph 1 letter f) of the GDPR

2. Your personal data will be processed for the period necessary to conclude and execute the contract binding you with the Data Controller. Your personal data will be

processed by the Administrator also after its expiry until the expiry of the limitation period for claims arising from this contract and possibly longer, provided that such an obligation results from legal regulations, e.g. tax regulations.

3. For the purposes specified above, the Administrator may share your personal data with other entities. The recipients of your personal data may be internal bodies and entities that must process your personal data in connection with the processing and implementation of the contract and our legitimate interest, as well as external service providers such as accountants, auditors, lawyers, entities providing IT services, banks, entities conducting insurance activities, entities providing postal and courier services. The recipients of the data are located in countries within the European Economic Area (EEA).

4. The Administrator may use profiling to best adapt its advertising to your needs. We will use tools to send mailings and then track the history of email opening by users to send them information that is most useful to them. The profiling we use is not of an exclusively automated nature and will not cause legal effects for you or significantly affect you in a similar way. You may request that profiling be discontinued at any time.

5. Providing personal data is voluntary but necessary for the conclusion and performance of the contract. Failure to provide personal data will prevent the contract from being concluded.

6. In cases and under the terms described in the GDPR, you have the right to access your personal data, the right to request their rectification, deletion, restriction of processing and transfer. The exercise of the above rights may occur by sending a request to the Administrator.

7. At any time, you have the right to object to the processing of your personal data based on the legitimate interest pursued by the Controller, referred to in Article 6 paragraph 1 letter f) of the GDPR for reasons related to your particular situation. The above-mentioned right may be exercised by submitting an appropriate application.

8. You have the right to lodge a complaint with the President of the Personal Data Protection Office for the protection of data if you believe that the Administrator is processing your personal data in a manner contrary to the law.
In any matters related to the protection of personal data, please contact the Administrator at the e-mail address daneosobowe@led-pol.pl or in writing to the address of the Administrator’s registered office.

2) Newsletter subscribers
Led-Pol sp. z o.o. sp.k., wishing to provide its customers with the best possible access to all information regarding its activities, promotions and events in which it participates, offers its customers the possibility of receiving current information via the “Newsletter” service.
We would like to inform you that the administrator of your personal data is LED-POL sp. z o.o. sp. k. with its registered office in Bielsko-Biała, ul. Kustronia 40 (“Administrator”)
In addition, we inform that

1. Personal data shall be processed by the Administrator solely for the purpose of providing the service
“Newsletter” i.e. for the purpose of direct marketing of products offered by LED-POL. For this purpose, LED-POL obtains e-mail addresses from interested persons.

2. The legal basis for such processing is the consent of the subscriber – Article 6 paragraph 1 letter a) of the GDPR.

3. The above personal data will be processed until you withdraw your consent to the processing of personal data.

4. For the purposes specified above, the Administrator may share your personal data with other entities. The recipients of your personal data may be internal bodies and entities that must process your personal data in connection with the implementation of our legitimate interest and external service providers processing personal data on behalf of or on behalf of the Administrator, such as entities providing IT services, entities providing marketing and advertising services, entities providing postal and courier services.

5. The recipients of the data are located in countries within the European Economic Area (EEA).

6. The administrator does not use automated decision-making, including profiling.

7. Providing personal data is voluntary but necessary for sending you information about the Administrator’s offers and promotions.

8. In cases and under the terms described in the GDPR, you have the right to access your personal data, the right to request their rectification, deletion, restriction of processing and transfer. The exercise of the above rights may occur by submitting an appropriate application.

9. You have the right to withdraw your consent to the processing of personal data at any time, whereby withdrawal of consent shall not affect the legality of the processing performed on the basis of consent before its withdrawal.

10. You have the right to lodge a complaint with the President of the Personal Data Protection Office for the protection of data if you believe that the Administrator is processing your personal data in a manner contrary to the law.

11. In any matters related to the protection of personal data, please contact the Administrator at the following e-mail address: daneosobowe@led-pol.pl or in writing to the address of the Administrator’s registered office.

3) Potential customers who have provided us with their contact details to receive information about our products in a way other than the newsletter
We would like to inform you that the administrator of your personal data is LED-POL sp. z o.o., sp. k. with its registered office in Bielsko-Biała, ul. Kustronia 40, 43-300 Bielsko-Biała (“Administrator”)
In addition, we inform that

1. The Administrator processes your personal data for the purpose of:
– marketing of goods and services offered by the Administrator. The legal basis for such processing is your consent – Article 6 paragraph 1 letter a) of the GDPR.
– ensuring that the advertisements we provide to you about the products we offer (profiling) are tailored to your needs. The legal basis for processing is the legitimate interest of the Administrator – Article 6 paragraph 1 letter f) of the GDPR.

2. The above personal data will be processed until you withdraw your consent. Personal data is not stored longer than necessary to fulfill the intended purpose or longer than required by applicable legal regulations.

3. For the purposes specified above, the Administrator may share your personal data with other entities. The recipients of your personal data may be internal bodies and entities that must process your personal data in connection with the preparation and implementation of the contract and in connection with the implementation of our legitimate interest, as well as external service providers processing personal data on behalf of the Administrator, such as accountants, auditors, lawyers, entities providing IT services, banks, entities conducting insurance activities, entities providing marketing and advertising services, entities providing postal and courier services.
The recipients of the data are located in countries within the European Economic Area (EEA).

4. The Administrator may use profiling to best adapt its advertising to your needs. We will use tools to send mailings and then track the history of email opening by users to send them information that is most useful to them. The profiling we use is not of an exclusively automated nature and will not cause legal effects for you or significantly affect you in a similar way. You may request that profiling be discontinued at any time.

5. Providing personal data is voluntary but necessary to send you marketing information from the Administrator.

6. In cases and under the terms described in the GDPR, you have the right to access your personal data, the right to request their rectification, deletion, restriction of processing and transfer. For reasons related to your special situation, you may also object to profiling. The above rights may be exercised by submitting an appropriate application.

7. You have the right to withdraw your consent at any time, but the withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

You have the right to lodge a complaint with the President of the Personal Data Protection Office for the protection of data if you believe that the Administrator is processing your personal data in a manner contrary to the law.

In any matters related to the protection of personal data, please contact the Administrator at the e-mail address daneosobowe@led-pol.pl or in writing to the address of the Administrator’s registered office.

4) Persons representing our contractor

We would like to inform you that the administrator of your personal data is LED-POL sp. z o.o., sp. k. with its registered office in Bielsko-Biała, ul. Kustronia 40, 43-300 Bielsko-Biała (“Administrator”)
In addition, we inform that

1. Your personal data will be processed by the Controller for the purpose of concluding and implementing the Agreement between the Controller and the entity you represent, which constitutes the Controller’s legitimate interest in accordance with Article 6 paragraph 1 letter f) of the GDPR.

2. The Administrator will process the following categories of your personal data: name and surname and position, address, e-mail, landline and mobile telephone number, however, the processing of special categories of personal data referred to in Article 9 of the GDPR is not planned.

3. The above personal data will be processed for the period necessary to conclude an agreement binding the Administrator with the entity you represent and after its expiry for the duration of the contractual obligations arising from it and later until the expiry of the limitation period for claims relating to the subject of the agreement or until the expiry of the periods resulting from accounting regulations, whichever is longer.

4. If the data is not obtained directly from you, its source is the other party to the contract concluded with the Administrator.

5. For the purposes specified above, the Administrator may share your personal data with other entities. The recipients of your personal data may be internal bodies and entities that must process your personal data in connection with the processing and implementation of the contract and our legitimate interest, as well as external service providers such as accountants, auditors, lawyers, entities providing IT services, banks, entities conducting insurance activities, entities providing postal and courier services. The recipients of the data are located in countries within the European Economic Area (EEA).

6. The Administrator does not use automated decision-making, including profiling.

7. Providing personal data is voluntary but necessary for the conclusion and performance of the contract between the Administrator and the entity you represent.

8. In the cases and under the terms described in the GDPR, you have the right to access your personal data, the right to request their rectification, deletion, restriction of processing and transfer. The above rights may be exercised by submitting an appropriate application. The application form is available on the Administrator’s website.

9. At any time, you have the right to object to the processing of your personal data based on the legitimate interest pursued by the controller, referred to in Article 6 paragraph 1 letter f) of the GDPR, for reasons related to your particular situation. The above-mentioned right may be exercised by submitting an appropriate application.

10. Ma Pani/Pan prawo złożyć skargę do Prezesa Urzędu Ochrony Danych Osobowych w celu ochrony danych w przypadku, gdy sądzi Pani/Pan, że Administrator przetwarza Pani/Pana dane osobowe w sposób sprzeczny z prawem.

In any matters related to the protection of personal data, please contact the Administrator at the e-mail address daneosobowe@led-pol.pl or in writing to the address of the Administrator’s registered office.

4) Job candidates

We would like to inform you that the administrator of your personal data is LED-POL sp. z o.o., sp. k. with its registered office in Bielsko-Biała, ul. Kustronia 40, 43-300 Bielsko-Biała (“Administrator”)
In addition, we inform you that:

1. The Company processes personal data of candidates:

I. to the extent required by labor law in order to employ a candidate in the Company and to take action before concluding an employment contract. The legal basis for processing is Article 6 paragraph 1 points b) and c) of the GDPR.
II. personal data of candidates that go beyond the scope of data specified in the law and made available by the candidate are processed by the Company in order to assess the candidate and enter into an employment contract with him/her based on his/her consent. The legal basis for processing is Article 6 paragraph 1 point a) of the GDPR.

2. The above personal data of the employee will be collected, processed and used for the time necessary to conduct the recruitment process for a specific position and to take steps to establish an employment relationship. After the recruitment process is completed, the personal data of a candidate who has not been employed by the Company are deleted. If the candidate consents to the processing of his or her personal data also in future recruitments conducted by the Company, this data is stored for a maximum period of 1 year from the end of the first recruitment.

3. For the purposes specified in paragraph 1, the Company may share employees’ personal data with other entities. The recipients of employees’ personal data may be entities processing candidates’ personal data on behalf of the Company, such as employment agencies, entities providing IT services, entities conducting security activities, entities conducting monitoring activities and entities providing postal and courier services. The recipients of the data are located in countries within the European Economic Area (EEA) and there is no sharing of data outside this area.

4. The candidate has the right to access his/her personal data, the right to request their rectification, deletion, restriction of processing and data transfer.

The above-mentioned rights may be exercised by submitting an appropriate application.

5. In relation to personal data processed on the basis of the candidate’s consent, the candidate has the right to withdraw consent at any time, provided that the withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

6. The candidate acknowledges that providing personal data referred to in point 1
I) above is an obligation resulting from applicable legal regulations and is a condition for concluding and performing an employment contract. Failure to provide the above personal data may result in the inability to employ the candidate in the Company. Providing personal data processed on the basis of the candidate’s consent is voluntary, and refusing to grant consent or withdrawing it does not cause any negative consequences for the candidate.

7. The candidate has the right to file a complaint with the President of the Personal Data Protection Office for the protection of data if the Employee believes that the Company is processing his or her personal data in a manner contrary to the law.

8. The Company does not use automated decision-making, including profiling.

In any matters related to the protection of personal data, please contact the Administrator at the e-mail address daneosobowe@led-pol.pl or in writing to the address of the Administrator’s registered office.

5) Employees
We would like to inform you that the administrator of your personal data is LED-POL sp. z o.o., sp. k. with its registered office in Bielsko-Biała, ul. Kustronia 40, 43-300 Bielsko-Biała (“Administrator”)
In addition, we inform that

1. The employer processes personal data of employees:
a) in order to fulfil its legal obligations arising from the law related to the employment of employees and for the execution of employment contracts. The legal basis for processing is Art. 6 sec. 1 points b) and c) of the GDPR and Art. 9 sec. 2 points b), c) and h) of the GDPR as well as relevant generally applicable legal acts, in particular the Act of 26 June 1974 – the Labor Code (Journal of Laws 1974 No. 24 item 141, consolidated text Journal of Laws of 2018 item 108 as amended), the Act of 4 March 1994 on the Company Social Benefit Fund (Journal of Laws 1994 No. 43 item 163, consolidated text Journal of Laws of 2017 item 2191 as amended), the Act of 13 October 1998 on the Social Insurance System (Journal of Laws 1998 No. 137 item 887, consolidated text Journal of Laws of 2017 item 1778 as amended), the Act of 17 December 1998 on the pensions and annuities from the Social Insurance Fund (Journal of Laws 1998 No. 162 item 1118, consolidated text Journal of Laws of 2017 item 1383, as amended).
b) in order to pursue its legitimate interests such as:
– ensuring employee safety, property protection, production control and maintaining the confidentiality of information, the disclosure of which could expose the Employer to damage – in the scope of the image of employees captured in CCTV recordings. The legal basis for processing is Article 6 paragraph 1 point f) of the GDPR.
– ensuring the possibility of determining the location of the vehicle in the event of theft, ensuring work organization enabling full use of working time by employees and ensuring proper use of cars made available to the employee in the scope of GPS monitoring. The legal basis for processing is art. 6 sec. 1 points b) and f) of the GDPR in connection with art. 223 § 4 of the Labor Code and art. 6 sec. 1 point a) of the GDPR in the event of employees using company cars for private purposes.
– making available to contractors, suppliers and business partners for the purpose of conducting negotiations with contractors, concluding agreements with them and performing them, for the purpose of participating in conferences and undertaking other activities with business partners and suppliers. The legal basis for processing is Article 6 paragraph 1 point f) of the GDPR.
– promotion of offered products or services and marketing of its activities in the field of employee photos disclosed on the Employer’s website, including Facebook. The legal basis for processing is Article 6 paragraph 1 point a) of the GDPR.

2. Personal data is not stored longer than necessary to fulfill the intended purpose or longer than required by applicable legal regulations. Employees’ personal data will be collected, processed and used during the employment relationship and some of them also after its termination. In particular, personal documentation is stored for 50 years from the date of termination of work for a given employer, payroll documentation is stored for 50 years from the date of production. CCTV recordings are processed for a maximum period of 3 months, unless the content of the recordings constitutes evidence in court proceedings, then they may be processed for a maximum period of 10 years from the final conclusion of the proceedings. Employees’ personal data disclosed to contractors, suppliers and business partners for the purpose of concluding or performing a contract are processed for the period before the conclusion of the contract and for a period of 5 years for contracts with entrepreneurs and 10 years for contracts with consumers from the date the claim becomes due.

Employee photos posted on the Internet are processed until the employee withdraws their consent, but for a maximum period of 10 years from the date they are made available.

3. For the purposes specified in paragraph 1, the Employer may share the personal data of employees with other entities. The recipients of the personal data of employees may be entities processing the personal data of employees on behalf of and on behalf of the Employer, such as entities conducting HR and payroll activities, entities conducting accounting activities, entities conducting training activities, entities providing occupational health and safety services, entities providing IT services, entities conducting security activities, entities conducting monitoring activities, including GPS, entities conducting health care activities, banks, airlines and other entities providing services related to transport, entities conducting insurance activities, entities providing recreational and sports services for employees, entities providing postal and courier services.

The recipients of employees’ personal data may also be other entities to whom personal data is made available in order to conclude a contract or take action prior to its conclusion, such as: business partners, vendors and suppliers in order to perform the contract. This data may also be made available to state authorities to the extent permitted by law.

The recipients of the data are located in countries within the European Economic Area (EEA) and in some cases may be located outside its territory. In the event that personal data is shared outside the EEA, the Employer guarantees an adequate level of data protection in accordance with applicable data protection regulations. In the event that the data is shared with a country outside the EEA, for which the European Commission has not issued a decision on an adequate level of protection, the Employer applies the protective measures provided for in the GDPR, in particular, it applies EU standard contractual clauses. In such a case, the employee has the right to obtain a copy of the shared personal data from the Controller.

4. The employee has certain rights in relation to his or her personal data, such as the right to access personal data, the right to request their rectification, deletion, restriction of processing and data transfer.

In the event of processing personal data based on the legitimate interest of the Employer, referred to in Article 6 paragraph 1 point f) of the GDPR, the Employee has the right to object due to his or her specific situation.

The above-mentioned rights may be exercised by submitting an appropriate application to the Administrator.

5. In relation to personal data processed on the basis of the employee’s consent, the employee has the right to withdraw consent at any time, provided that the withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

6. The employee acknowledges that the provision of personal data that the employer processes in the performance of a legal obligation is an obligation resulting from legal regulations and is a condition for concluding and performing an employment contract. Data processing

personal data that the employer processes in order to fulfil its legitimate interest towards the employees. Failure to provide the above personal data may result in the inability to employ the employee with the Employer and to perform the employment contract. Providing personal data processed on the basis of the employee’s consent is voluntary, and refusing to grant consent or withdrawing it does not cause any negative consequences for the employee.

7. The Employee has the right to file a complaint with the President of the Personal Data Protection Office for the protection of data if the Employee believes that the Employer is processing his or her personal data in a manner contrary to the law.

8. The employer does not use automated decision-making, including profiling.

9. In any matters related to the protection of personal data, please contact the Administrator at the e-mail address daneosobowe@led-pol.pl or in writing to the address of the Administrator’s registered office.

7. Cookie Policy

The websites partly use so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies serve to make our offer more user-friendly, more effective and more secure. Cookies are small text files that are stored on your computer and saved in your browser.

Most of the cookies we use are so-called “session cookies”. They will be automatically deleted after your visit. Other cookies remain saved on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies in certain cases or generally and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.