Privacy Policy

Privacy Policy

I – Information About the Personal Data ControllerNORMATEK, with its registered office at ul. Ukryta 49, 42-200 Częstochowa, Poland,Phone: +48 34 364 39 23
Mobile: +48 531 755 106, +48 796 354 884
Email: b.gajowczyk@normatek.plis the controller of the personal data of our customers and business partners.

II – Categories, Purposes, Legal Bases, and Retention Periods of Personal Data1. Compliance with Legal ObligationsWe process personal data to fulfill our legal obligations, including:
Issuing, receiving, and storing sales and purchase invoices.
Issuing, receiving, and storing complaint forms.
Preparing, receiving, and storing accounting documentation.
Receiving, sharing, and storing product certificates.
Receiving and storing VAT declarations.
Legal basis: Article 6(1)(c) of the General Data Protection Regulation (GDPR).Retention period: For the period required by applicable laws and regulations.2. Conclusion and Performance of Contracts, Assignments, and OrdersWe process personal data for the purpose of entering into and fulfilling contracts, assignments, and orders.Legal basis: Article 6(1)(b) of the GDPR.Retention period: For the duration of the contract or order and subsequently until the expiration of the applicable limitation period for claims. If legal proceedings are initiated by or against us, personal data may be retained for the duration of those proceedings.3. Our Legitimate InterestsWe process personal data for purposes arising from our legitimate business interests, including:Establishing, protecting, and pursuing claims made by or against our company.
Verifying the creditworthiness and payment reliability of business partners.
Obtaining information from publicly available registers, including CEIDG, KRS, GUS, tax authorities, VIES, and other relevant databases.
Preparing statistics, analyses, and reports for our company's internal business purposes.
Legal basis: Article 6(1)(f) of the GDPR.Retention period: For the duration of the contract or order and subsequently until the expiration of the applicable limitation period for claims. Where legal proceedings are initiated by or against us, personal data may be retained for the duration of those proceedings.

III – Categories of Recipients of Personal DataYour personal data may be disclosed to the following categories of recipients:1. Professional Service ProvidersEntities cooperating with our company in providing accounting, tax, bookkeeping, human resources, legal, advisory, consulting, and other professional services.2. Authorized EmployeesEmployees of our company who are authorized to access and process personal data as part of their professional responsibilities.3. Postal and Courier Service ProvidersPostal operators and courier companies, where necessary for sending letters, documents, parcels, or goods.4. Financial and Payment InstitutionsBanks and payment service providers, where necessary to process payments, refunds, financial transactions, or claims.5. Debt Collection and Receivables Management EntitiesEntities acquiring receivables or handling debt recovery in cases where outstanding payments have not been settled.6. Public Authorities and InstitutionsCourts, police authorities, public prosecutors, enforcement officers, tax offices, the Polish Social Insurance Institution (ZUS), the National Labour Inspectorate (PIP), the Trade Inspection Authority (PIH), and other authorized public institutions, where disclosure is legally required or necessary for pursuing claims and protecting our rights.

IV – Your Rights Regarding Personal DataUnder applicable data protection legislation, you have the right to submit a written request concerning your personal data.Such requests should be submitted with confirmation of receipt, either in person, by post, or by email.Depending on the applicable legal conditions, you have the following rights:Right of access: To obtain information about the personal data we process concerning you.
Right to rectification: To request the correction or updating of inaccurate or incomplete personal data.
Right to restriction of processing: To request that the processing of your personal data be restricted in certain circumstances.
Right to erasure: To request the deletion of personal data processed without a valid legal basis.
Right to data portability: To request the transfer of your personal data where applicable.
Right to withdraw consent: To withdraw previously granted consent to the processing of personal data, where consent is the legal basis for processing.
Right to object: To object to the processing of your personal data in circumstances provided for by law.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych – UODO) if you believe that the processing of your personal data violates applicable data protection laws.

V – Security of Your Personal DataWe take the protection of your personal data seriously and apply various security measures to safeguard the information entrusted to us.We make every effort to ensure the security of personal data and to protect it against unauthorized access, unlawful processing, accidental loss, destruction, or damage.