Information Obligation Clause

1. Spedimex Sp. z o.o. with its seat in Sosnowiec 15A, 95-010 Stryków, entered into the register of entrepreneurs kept by the District Court for Łódź Śródmieście in Łódź under the KRS number: 0000110889, Tax ID no: 728-00-19-486, REGON: 470785296, acting in accordance with Art. 13 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Journal of Laws of the EU.L.2016.119.1), hereinafter referred to as "GDPR", informs that it is the Administrator of your personal data.

2. Contact with the Administrator is possible under the telephone number: 42 61 64 100, e-mail address: spedimex@spedimex.pl or in writing via the contact details of Spedimex Sp. z o.o.

3. In order to properly protect personal data, the administrator has appointed a Data Protection Officer, with whom contact is possible via the following e-mail address: iod@spedimex.pl

4. The administrator will process your personal data for the following purposes:

a) if you are a natural person acting on your own behalf (also as a natural person running a business):

• enabling the performance of activities related to the submission and implementation of an order/conclusion of a sales agreement (Article 6 (1) (b) of the GDPR, throughout the duration of the order/concluded agreement;
• establishing, investigating or defending against possible claims that may be related to the order or the concluded contract - for the implementation of the Administrator's legitimate interest in the form of securing claims, i. e. pursuant to Article 6 (1) (f)) GDPR, for the time provided for by law regarding the limitation of claims;
• implementation of the obligations incumbent on the Administrator, resulting primarily from the provisions of tax and accounting law (Article 6 (1) (c) of the GDPR), for the period provided for by law.

b) if you are a natural person acting on behalf of a company (legal person, organizational unit without legal personality):

• performance of the agreement to which the company you represent is a party, i.e. for the implementation of the legitimate interest of the Administrator, as a party to the agreement concluded with the company you represent (Article 6 (1) (f) of the GDPR);
• establishing, investigating or defending against possible claims that may be related to the order or the concluded agreement - for the implementation of the Administrator's legitimate interest in the form of securing claims, i. e. pursuant to Article 6 (1) (f)) GDPR, for the time provided for by law regarding the limitation of claims.

c) if you are an employee of the Carrier or people cooperating with the Carrier in connection with activities aimed at the conclusion and implementation of an order/ agreement between the Carrier and the Administrator:

• contact regarding the conclusion and implementation of the order/ agreement - for the implementation of the legitimate interest of the Administrator, i. e. pursuant to Article 6 (1) (f)) GDPR for the duration of the agreement/duration of the contract;
• establishing, investigating or defending against possible claims that may be related to the order or the concluded agreement - for the implementation of the Administrator's legitimate interest in the form of securing claims, i.e. pursuant to Article 6 (1) (f)) GDPR, for the time provided for by law on the limitation of claims;
• implementation of the obligations incumbent on the Administrator, resulting primarily from the provisions of tax and accounting law (Article 6 (1) (c) of the GDPR), for the period provided for by law.

Your personal data may be made available to the Administrator by the Carrier with whom you are bound by an employment agreement or a civil law contract in the scope of name (names) and surname, telephone number, e-mail address, position, place of employment.

5. The recipients of your personal data may be entities providing and supporting IT systems used by the Administrator and entities providing services related to the Administrator's current activities, including hosting services - on the basis of concluded agreements for entrusting the processing of personal data and ensuring the use by the above-mentioned entities of adequate technical and organizational measures ensuring data protection, as well as public authorities authorized to access this data, on the basis of applicable law.

6. You have the right to access your personal data and the right to rectify, delete or limit processing, the right to transfer data and the right to object to their processing.

7. You have the right to lodge a complaint with the supervisory body - the President of the Personal Data Protection Office, if you feel that the processing of your personal data violates the provisions of generally applicable law.

8. Providing personal data is voluntary, but necessary for the implementation of specific purposes carried out by the Administrator.

9. Your personal data will not be transferred to a third country or an international organization.

10. Your personal data will not be processed for the purpose of automated decision making, including profiling.