PRIVACY NOTICE – GDPR INFORMATION CLAUSE In accordance with the information obligation set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – “GDPR”), and with respect for your privacy and the need to ensure transparency in data processing, we hereby provide the following information to help you understand how your personal data is processed. Data Controller The Controller of your personal data is ESPERANZA SP. J. POTEREK with its registered office in Ożarów Mazowiecki, ul. Poznańska 129/133, 05-850 Ożarów Mazowiecki, entered into the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw, 14th Commercial Division of the National Court Register under number KRS 0000247371, REGON: 140368987 (hereinafter referred to as the “Data Controller”). You may contact the Data Controller regarding the protection of your personal data at the above address, by email at: rodo@esperanza.com.pl, or by phone at: +48 22 721 35 71. Legal Basis for Processing Your personal data is processed for the purpose of entering into and performing contracts concluded between you and the Data Controller – pursuant to Article 6(1)(b) GDPR. Additionally, processing may be based on the legitimate interests pursued by the Data Controller (Article 6(1)(f) GDPR), including the conclusion and execution of contracts with business partners, conducting commercial correspondence, and direct marketing activities. Purpose of Processing Your personal data is processed for the following pu11:35 2025-06-24rposes: conclusion and performance of contracts with the Data Controller, commercial correspondence, proper execution of contracts between your employer (as the Data Controller’s business partner) and the Data Controller, establishment, exercise or defense of legal claims, tax and accounting purposes (where applicable), website personalization based on user preferences and usage optimization, analytics and marketing purposes, configuration and maintenance of the website. Our website uses cookies and tracking technologies (e.g. Google Analytics) to: Customize website content to user preferences (e.g., language, region, layout), Analyze traffic for improved website performance, Conduct marketing activities (e.g., remarketing, product recommendations). You can manage your cookie preferences – including disabling cookies entirely – using your browser settings or tools available on our website during your first visit. Categories of Personal Data The Data Controller processes the following categories of personal data: contact details (name, surname, email address, phone number, business address/place of employment), invoicing data, bank account information (account number, bank name), and data concerning the history of cooperation. Data Retention Period Your personal data will be stored no longer than necessary, i.e., for the duration of the commercial relationship between you (or your employer) and the Data Controller, and afterward until the expiry of the limitation period for potential claims and the completion of statutory archiving obligations. Recipients of Data Your data may be disclosed to: entities to whom the Data Controller is legally obliged to disclose data, data processors acting under data processing agreements with the Data Controller, including logistics providers, IT service providers, and other cooperating companies, the Tax Office, and banks. Data Processing Agreements (Article 28 GDPR) We collaborate with external entities (e.g., courier companies, IT, accounting services) that process data on our behalf. Each of these entities has signed a data processing agreement with us in accordance with Article 28 GDPR. These agreements specify the scope and purpose of processing, technical and organizational safeguards (per Article 32 GDPR), confidentiality obligations, compliance with data subject rights, support in fulfilling GDPR obligations, and a prohibition on further processing without our consent. Transfers to Third Countries The Data Controller does not intend to transfer your personal data to countries outside the European Economic Area. Your Rights under GDPR You have the right to: access your personal data, rectify inaccurate or incomplete data, request erasure or restriction of processing, object to the processing of your data, request data portability (where applicable, data may be transmitted to another controller if technically feasible). Right to Lodge a Complaint If you believe that the processing of your personal data infringes GDPR provisions, you have the right to lodge a complaint with the supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO). Voluntary Provision of Data Providing your personal data is voluntary, but necessary for the establishment and execution of the cooperation between you and the Data Controller. In certain cases, your data may have been obtained from the Data Controller’s business partner – your employer – for the same purposes. Automated Decision-Making Your personal data is not subject to automated decision-making, including profiling. All decisions concerning your data are made manually by the Data Controller or authorized personnel. Special Categories of Data We do not process special categories of personal data such as information concerning health, political opinions, religious beliefs, trade union membership, or genetic, biometric, or sexual data. In the event of a data breach: We will notify the President of UODO within 72 hours if there is a risk to the rights and freedoms of individuals, If the breach poses a high risk to individuals, we will inform the affected persons without undue delay, All incidents are documented in our internal breach register. Our internal procedures are fully compliant with GDPR requirements. No automated decisions, including profiling, will be made based on your personal data. Yours sincerely, Data Controller ESPERANZA SP. J. POTEREK |
