RODO

Information Clause on the Processing of Personal Data in the Company

In accordance with the information obligation under Article 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), we inform you that:

1. The administrator of your personal data is PB BAUMAR Sp. z o.o. Sp.k. (KRS: 0000498820) based in Polska Nowa Wieś (46-070) at Lipowa 132, co-administrating with PB BAUMAR Sp. z o.o., Lipowa 132, 46-070 Polska Nowa Wieś (KRS: 0000483715).
2. For information regarding your personal data, please contact us at: iod@baumar.com.pl.
3. Your personal data, such as name, surname, NIP and/or PESEL number, phone number, residential address, correspondence address, and email address, will be processed as follows, depending on the purpose:
   1. For recruitment purposes based on the provisions of the Labor Code, Civil Code, and your consent (Article 6(1)(c) and (a) GDPR for employment contracts, and Article 6(1)(b) and (a) for civil contracts). Your personal data may be processed for future recruitment if you provide separate consent under Article 6(1)(a). Your data may be shared with Poczta Polska S.A., recruitment portals, email hosting providers, HR consulting firms, IT service providers, and other entities where required by law. Your data will be processed until the recruitment process ends or until consent is withdrawn and for the duration necessary to address legal claims.
   2. For marketing activities based on consent or the legitimate interest of the administrator (Article 6(1)(a), (f) GDPR). Your data may be shared with Poczta Polska S.A., affiliated companies, legal offices, IT service providers, Google Analytics, website administrators, and Comarch software providers. Data will be processed until consent is withdrawn or the termination of cooperation.
   3. For contract execution and actions requested before contract conclusion (Article 6(1)(b) GDPR), compliance with legal obligations related to financial and accounting settlements (Article 6(1)(c) GDPR), claims enforcement (Article 6(1)(f) GDPR), and business relationship management (Article 6(1)(f) GDPR). Your data may be shared with affiliated companies, financial institutions, legal offices, IT service providers, auditors, Comarch software providers, and other entities required by law. Data will be processed for the duration of the contract and legal retention periods.
   4. For claims enforcement under the legitimate interest of the administrator (Article 6(1)(f) GDPR). Your data may be shared with legal offices, debt collection agencies, auditors, IT service providers, and software companies. Data will be processed for the duration of the contract and the statute of limitations.
   5. For video surveillance purposes (Article 6(1)(f) GDPR). Your data may be shared with legal offices, IT service providers, monitoring system providers, and law enforcement authorities if required by law. Data will be stored for no longer than 90 days.
   6. For managing social media accounts based on consent (Article 6(1)(a) GDPR) or legitimate interest in direct marketing and responding to inquiries (Article 6(1)(f) GDPR). Your data may be shared with platforms such as Facebook, LinkedIn, Google Ireland, marketing agencies, and affiliated companies. Your data may be transferred outside the EU. Data will be processed until consent is withdrawn.
   7. For the execution of public procurement contracts based on contract obligations and legal requirements (Article 6(1)(b), (c) GDPR). Your data may be shared with affiliated companies, procurement platforms, customers, auditors, legal offices, and public procurement authorities. Data will be processed for the duration of the contract and legal retention periods.
4. Providing your personal data is voluntary but necessary for the purpose for which they are processed.
5. Your data will not be transferred to third countries, except in the case mentioned in section 3, point 6.
6. Your data will not be subject to profiling, and no automated decisions will be made based on them.
7. You have the right to access, rectify, delete, restrict processing, transfer your data, withdraw consent at any time (without affecting the lawfulness of processing before withdrawal), and object to processing.
8. You have the right to file a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) if you believe that the processing of your personal data violates the law.