INFORMATION NOTICE REGARDING PERSONAL DATA PROCESSING AT TEKAEM SP. Z O.O.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we inform that:

1. Personal Data Controller

The personal data controller is: TEKAEM Spółka z o.o, 62-052 Komorniki 34 E, Poznańska 47a Poland, VIII ECONOMIC DEPARTMENT OF THE NATIONAL COURT REGISTER, NOWE MIASTO I WILDA IN POZNAŃ under number 0000878550. VAT: PL7773369343, hereinafter referred to as (“Controller”).

The Controller can be contacted in writing, by mail to the company address: TEKAEM sp. z o.o., 62-052 Komorniki 34 E or by email: biuro@tekaem.eu

2. Personal Data Processing

a) Job Candidates

The purpose of personal data processing is to conduct the recruitment process. Personal data processing of job candidates takes place based on their consent. Providing personal data is voluntary, however, in case of failure to provide personal data, it will not be possible to participate in the recruitment process. Data necessary to conduct the recruitment process are: name, surname, residential address, data regarding education and previous experience. Data retention period: up to 6 months. In case of consent to data processing during further recruitments: up to 24 months.

b) Persons Contacting TEKAEM sp. z o.o.

The purpose of personal data processing is communication with persons contacting TEKAEM sp. z o.o. The legal basis for personal data processing is the legitimate interest of the Controller consisting in enabling communication, possible establishment of relations with the contacting person, providing necessary information. Processed personal data are: name, surname, e-mail address, telephone number, correspondence address and other information provided by the person contacting the Controller. Providing personal data is voluntary, however, in case of failure to provide personal data, the communication process may be difficult or impossible to implement. Data retention period in case of inquiries of advisory, informational nature or subscription to the company newsletter: until the contacting person requests deletion of their data and inquiry content from the database or as long as it is necessary to pursue the legally justified interest of the Controller or a third party. Data retention period in case of complaint submissions: until resolution of the complaint process or until the end of the warranty period of the purchased/complained product.

c) Contractors and Representatives of Contractors

The purpose of personal data processing is conclusion and/or performance of a contract. Personal data processing of contractors and persons indicated by them (including their employees and collaborators) takes place for the purpose of concluding or performing a contract or based on the legitimate interest of the Controller, i.e., enabling communication with the contractor and performing the contract with the contractor. Processed personal data are: name, surname, e-mail address, telephone number, workplace, position, business address, Tax ID, REGON, PESEL number, in some cases also data regarding documents: identity card, passport. Providing personal data, when the contract is to be concluded with a natural person, is necessary for the purpose of concluding or performing the contract, while in the case of persons who represent a legal entity it is not necessary, but enables contact. Data retention period: the period of validity of the contract concluded with the contractor and the period necessary to enable the parties to pursue claims arising from such contract, but not less than the period resulting from legal provisions or as long as it is necessary to pursue the legally justified interest of the Controller or a third party.

d) Guests of TEKAEM sp. z o.o.

The purpose of personal data processing is identification and reception of guests on TEKAEM sp. z o.o. premises and ensuring the safety of persons and property. Personal data processing of TEKAEM sp. z o.o. guests takes place based on the legitimate interest of the Controller, i.e., enabling reception of persons appearing at TEKAEM sp z o.o., ensuring safety. Processed personal data are: image (monitoring), name and surname. Data retention period: up to 3 months for image (monitoring) and up to 2 years for other data.

e) Persons Participating in Marketing Projects such as Promotions or Purchase Contests

The purpose of personal data processing is communication with persons participating in TEKAEM sp. z o.o. marketing projects. The legal basis for personal data processing is the legitimate interest of the Controller consisting in enabling communication, possible establishment of relations with the applying person, providing necessary information or consent of the person participating in the contest. Processed personal data are: name, surname, e-mail address, telephone number, correspondence address and other information provided by the participating person. Providing personal data is voluntary, however, in case of failure to provide personal data, the process may be difficult or impossible to implement. Data retention period: until completion of the promotion or contest implementation process or as long as it is necessary to pursue the legally justified interest of the Controller or a third party.

3. Disclosure of Personal Data

Data may be disclosed to entities and authorities authorized to process such data on the basis of legal provisions. Data may also be disclosed to third parties in the form of other companies from the TEKAEM capital group, technical and organizational service providers (e.g., IT service providers) and legal and advisory service providers, whereby these entities process data on the basis of a contract with the Controller and in accordance with its instructions.

4. Automated Decision-Making

Personal data will not be processed in an automated manner for the purpose of making decisions, including for the purpose of profiling.

5. Rights of the Data Subject

• to request access from the Controller to processed personal data,
• to request rectification from the Controller of processed personal data,
• to request erasure from the Controller of processed personal data,
• to request restriction from the Controller of personal data processing,
• to object to personal data processing,
• to data portability,
• to withdraw consent to personal data processing, whereby its withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal,
• to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office).

6. Source of Personal Data Acquisition

If we have received personal data from entities other than the person concerned, it means that we have received them from contractors, from social media, the Internet or other publicly available sources.

7. Regulations

The regulations governing the security and data protection policy as well as the principles of their processing are available at the company’s registered office.