Information about the processing of personal data In accordance with the provisions of the General Data Protection Regulation personal - hereinafter referred to as RODO - we want to pass on to you the following information: 1. Administrator. The administrator of your personal data is: BILLS Sp. z o.o., ul. Ignacego Daszyńskiego 31, 63-500 Ostrzeszów, NIP: 5140361901, hereinafter referred to as the "Administrator". The data administrator decides about this in how your data will be used and secured and implemented Your rights resulting from the GDPR. You can contact the Administrator in the following way: - sending a message to the e-mail address: rodo@bills.pl - personally with the Administrator at its headquarters, either - sending a letter to the following address: BILLS Sp. z o.o. ul. Ignacego Daszyńskiego 31 63-500 Ostrzeszów. 2. The purpose and legal basis for the processing of personal data. 2.1 Personal data provided to the Administrator is used by him for the following purposes: a. conclusion and execution of the contract that connects us, implementation of the State powers under the warranty and to contact you in matters from related (legal basis - Article 6 (1) (b) of the GDPR: processing data is necessary to perform the contract and take action on Your request before its conclusion); b. the creation and storage of VAT invoices and other documents accountants, as well as keeping records and books required by law (legal basis - Article 6 (1) (c) of the GDPR: data processing is necessary to fulfill the obligation imposed on the Administrator by tax law); c. stablish, defend, investigate and recover any claims, which may arise in connection with the conclusion and performance of a contract or with warranty title, as well as opening an Account or using the website www.powermatic.pl (legal basis - Article 6 paragraph 1 lit. f) RODO: data processing is necessary for the purposes arising from legitimate interests pursued by the Administrator); d. setting up an Account at www.powermatic.pl providing access to and providing other electronic services in under the site (legal basis - Article 6 (1) (b) of the GDPR: processing data is necessary for the conclusion and performance of a contract for the provision of services by electronic means); e. To answer inquiries, if you have submitted them for using the contact form available at www.powermatic.pl (Legal basis Article 6 (1) (a) of the GDPR: processing takes place at based on the consent of the data subject); f. sending a newsletter and commercial information by road by electronic or telephone, if you have agreed to this (Legal basis Article 6 (1) (a) of the GDPR: processing takes place at based on the consent of the data subject); g. marketing and promotion of services and goods of the Administrator (legal basis - Article 6 (1) (f) of the GDPR: data processing is necessary for purposes arising from legitimate interests realized by the Administrator - direct marketing); h. monitoring and improving the quality of goods and customer service, and customer satisfaction surveys (legal basis - Article 6 paragraph 1 letter f) RODO: data processing is necessary for legitimate purposes legitimate interests pursued by the Administrator - improvement customer service and getting to know customers' opinions about the offer). 2.2 In the case when it is necessary to conclude or perform the contract processing of data of persons who are not a party to this agreement (name and name, address, telephone number, e-mail address of employees or recipients orders that the customer has sent), the Administrator uses their data on the basis of the implementation of its legitimate interest (art. 6 par. 1 lit. f) RODO), which consists in the necessity to perform duties resulting from agreements concluded with clients. 3. Is it mandatory to provide data to the Administrator? Providing personal data is not required by law, but not required data required in forms (data marked with an asterisk) entered on the website; www.powermatic.pl will cause the impossibility of: a) creating an Account, b) the conclusion of a contract (placing an order) or c) submit a request - in the case of a contact form. 4. How long will the Administrator store your data? Your personal data provided in connection with the conclusion and performance sales contracts will be kept during the period of limitation of claims, which may result from the conclusion of the contract. If an invoice has been issued VAT, your personal data will be stored for a period of 6 years counted from the end of the year in which it was issued, regardless of shorter limitation period for claims that may arise from the contract. However, your personal data provided in connection with the Account creation website www.powermatic.pl will be stored by the duration of the Account and the period of limitation for claims that may result from the provision of services by the Administrator in this regard. The data provided via the contact form will be stored for 3 months from the day the answer was given question. 5. Recipient of your data. The administrator will provide your data to the following categories of recipients: - Carriers delivering ordered goods to you, - subcontractors supporting the Administrator during the order processing, - entrepreneurs who service the website www.bills.pl, - entities providing payment services (eg banks), advisory services, marketing, legal or accounting, - authorized public administration bodies. 6. State permissions. You have the right to demand from the Administrator: a. access to their data and receipt of copies thereof, b. rectification or completion of data, c. transfer data to another data controller or to release them you, d. deletion of data processed by the Administrator, e. restrictions on data processing. The right to object Option to withdraw consent If the Administrator uses your data based on the provided You can withdraw your consent at any time. Withdrawal of consent however, it does not affect the lawfulness of data processing it was made before it was withdrawn. The right to object Regardless of the rights indicated above, you can choose any at the time you oppose the processing of your personal data by the Administrator. The right of objection is in the case use of your data for direct marketing purposes and among others in a situation where the Administrator processes your data on the basis of its legitimate interest (Article 6 (1) (f) of the GDPR). 7. How can you use your rights? If you want to use these rights, it is enough contact the Administrator about this in person at his headquarters or by sending a relevant request by post or to the address provided e-mail. The administrator can ask you for additional information necessary for your identification and fulfillment of the request. The possibility of implementation some rights depend on the basis on which the Administrator uses your data. 8. Complaint to the supervisory body. If you believe that the Administrator processes your data incorrectly with the law, you have the right to lodge a complaint with the authority supervisory body, ie the President of the Office for Personal Data Protection. Contact details of the Polish supervisory authority: Office for the Protection of Personal Data ul. Rates 2 00-913 Warsaw www.uodo.gov.pl 9. Transmission of data to third countries. The administrator does not intend to transfer your data to countries not belonging to the European Union. 10. Profiling and automated decisions. Based on your personal data, the Administrator will not take towards your automated decisions, including those that are the result of profiling. 11. Data protection. The administrator applies the necessary measures to your data properly secured and that they can not be used by people unauthorized. 12. KA brief description of your rights. 12.1. The right of access to data and receipt of copies - Art. 15 THE RHODE. You can obtain from the Administrator free confirmation of whether Your data is processed by him and request access to these data and information on: a. the purpose of data processing, b. categories of data processed, c. recipients or categories of recipients of such data, d. the planned period of data storage, e. Your rights, f. the possibility of lodging a complaint to the supervisory body, g. source from which the Administrator obtained your data. You also have the right to receive a copy of the data processed by Administrator (using this permission can not negatively influence the rights and freedoms of others). Data copies can be issued in electronic or paper form, and the first copy is free. 12.2. The right to rectify data - art. 16 THE RHODE. If your personal details are incorrect or incomplete, they may You want the Administrator to correct or supplement them. 12.3. The right to delete data (the right to be forgotten) - art. 17 RODO. You may request removal of your personal data being processed by the Administrator. The administrator is obliged in the short term delete this personal data if there is at least one of the following circumstances: a. personal information is no longer necessary for the purpose for which it was provided collected or otherwise processed, b. you have obtained the consent on which the processing was based and it is not there another basis for processing your data, c. You object to the processing of data and are missing overriding legitimate interests of the Administrator towards the grounds for this objection, or you object use of data for direct marketing purposes, d. The personal data was processed unlawfully, e. the obligation to delete personal data results from the law, f. Personal data were collected in connection with offering to children information society services. The administrator should also notify the entities to whom he provided data personal, about exercising your right to be removed links to these data, their copies or replications. The administrator will be able to refuse to delete your data, including if data processing is required by law or is necessary for determination, investigation or defense of claims. 12.4. The right to data transfer - art. 20 RHODE. You have the right to request the Administrator to issue processed documents personal data in an easy-to-read format on your computer. They You can send it to another data controller yourself or indicate it data administrator, which the Administrator is to directly transfer these data, if technically possible. This right applies only data that you have transferred to the Administrator and they are processed in an automated manner (for example using computer programs). They must also be used by Administrator based on your consent (Article 6 (1) (a) of the RD0) or on the basis of a contract in accordance with art. 6 par. 1 lit. b) THE RODO. 12.5. The right to limit processing - art. 18 RHODE. You can use the right to limit the processing of data in case where: a.you question the correctness of personal data processed by the Administrator (for the time of verification of their correctness), b. personal data are processed unlawfully, but they are opposed You are removing them, c. The administrator does not need your personal data anymore, but they are they need you to determine, assert or defend claims, d. you lodge an objection (at the time of the assessment or interest of the Administrator) is superior to the grounds on which you base your opposition). Processing should be kept by the Administrator during processing restrictions personal data and can not process them in any other way without your permission, unless it is necessary to establish, investigate or defend claims to protect the rights of another person or for important reasons public interest. The administrator should also inform recipients to whom you provided your data about the restriction processing. The administrator will also inform you about the intended annulment restrictions on data processing. 12.6. The right to object - art. 21