Scope and protection of personal data processing in AGRO-INTERSTAR Sp. z o. o.

Based on art. 13 sec. 1-2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ( OJ EU L 2016, No. 119) – hereinafter referred to as GDPR – we inform you that:

  1. The administrator of your personal data is Agro- Interstar Sp. z o. o., ul. Spacerowa 11, Młynek Nieświński, 26-200 Końskie, e-mail address: biuro@agro-interstar.pl, hereinafter referred to as the Administrator.
  2. Your personal data in the scope of:
  • name and surname
  • NIP/PESEL/REGON identification number
  • registered office address, business address, branch office address, correspondence address, residential address
  • email address
  • contact number

(hereinafter: personal data)
were obtained from you on the basis of previous cooperation (concluded agreement, orders, offers) and from publicly available sources, i.e. via websites, the National Court Register, the Central Registration and Information on Economic Activities, the Central Statistical Office.

  1. Your personal data will be processed to the extent necessary to protect the legally justified interests of Agro- Interstar Sp. z o. o., i.e. for the purpose of:
  • necessary for the performance of a contract to which you are a party, pursuant to Article 6(1)(b) of the GDPR;
  • necessary to conclude a contract based on your interest in the offer, pursuant to Article 6 paragraph 1 letter b of the GDPR;
  • researching the level of customer satisfaction and determining the quality of service, as well as the level of customer satisfaction with the products and services we provide, including for marketing purposes, after obtaining consent to the above processing purpose;
  • any pursuit or defence against claims under Article 6(1)(f) of the GDPR;
  • accounting and tax settlement of cooperation, in particular issuing invoices, based on accounting and tax regulations, whereby the possibility of processing personal data for this purpose results from the legitimate interest pursued by the Controller in ensuring the correctness of the documentation maintained and the Controller’s implementation of statutory obligations under Article 6 paragraph 1 letter b of the GDPR;
  • Your personal data will be processed for the purpose of conducting business communication and may be made available to entities cooperating with Agro- Interstar Sp. z o. o. in order to fulfill your orders pursuant to Article 6 section 1 letter f of the GDPR;
  • conducting complaint processes – pursuant to Article 6 paragraph 1 point f of the GDPR.
  1. The right to object.
    You have the right to object to the processing of your personal data, on the basis of which we will cease processing your data for the purposes specified in point 2, except where we demonstrate that we have legally justified grounds in relation to your data that override your interests, rights and freedoms, in particular within the framework of our legitimate interest and when the data is necessary to establish, pursue or defend claims.
  2. Data storage period.
    1. Personal data will be processed for the period necessary to perform the contract/provide services. The processing period may be extended by the limitation period for claims if the processing of personal data is necessary to pursue potential claims or defend against such claims by the Data Administrator. After this period, personal data will be processed only to the extent and for the period resulting from the provisions of law, in particular accounting and tax law regulations.
    2. Data processed for the purposes of direct marketing of our products and services are processed until you object to their processing for this purpose.
  3. Sharing personal data.
    Your personal data may be shared with the following recipients:
    – our partners with whom we cooperate by combining products or services, – our subcontractors (processors), e.g. accounting firms, law firms, banks, companies providing postal and courier services, entities providing IT and audit services.

The Data Administrator declares that personal data will not be transferred to countries outside the EU.

  1. Rights of the person whose personal data is being processed.
    1. The right to access the content of their personal data, i.e. the right to obtain confirmation whether the Administrator is processing the data and information concerning such processing,
    2. The right to rectify the data if the data processed by the Administrator is incorrect or incomplete, 3. The right to request that the Administrator delete the data, 4. The right to request that the Administrator restrict the processing of the data, 5. The right to transfer the data, i.e. the right to receive the personal data provided to the Administrator and to send them to another administrator, 6. The right to object to the processing of the data based on the legitimate interest of the Administrator or to the processing for the purpose of direct marketing, 7. The right to lodge a complaint with the Polish supervisory authority or the supervisory authority of another Member State of the European Union, competent for the place of habitual residence or work of the data subject or for the place of alleged violation of the GDPR, 8. The right to withdraw consent at any time (without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal), 9. The right to obtain human intervention on the part of the Controller, to express one’s own position and to challenge a decision based on automated data processing.
    The rights listed in points 1-9 can be exercised by contacting the Controller, i.e. Agro- Interstar Sp. z o. o., ul. Spacerowa 11, Młynek Nieświński, 26-200 Końskie, e-mail address: biuro@agro-interstar.pl.
  2. Information on the voluntary provision of data.
    In a situation where the processing of personal data results from a concluded contract (Article 6 paragraph 1 letter b), from applicable legal provisions (Article 6 paragraph 1 letter c) or the legitimate interest of the Administrator in connection with the determination, defense and pursuit of claims or in order to respond to submitted letters or complaints (Article 6 paragraph 1 letter f), the provision of data is voluntary, but necessary for the conclusion and performance of the contract. In the event of failure to provide the indicated personal data, we may refuse to conclude the contract. In a situation where the processing of personal data is based on the consent granted for a specific purpose, the provision of data is voluntary in the same way as giving consent. It should also be remembered that you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing of personal data carried out on the basis of the consent granted before its withdrawal.
  3. Automated data processing.

With respect to the collected data, the Ordering Party declares that decisions are not made in an automated manner, in accordance with Article 22 of the GDPR.