INFORMATION CLAUSE ON THE RODO

Statement

On May 25, 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 came into force / EC (referred to as "GDPR" or "General Data Protection Regulation").

Therefore, we would like to inform you about the processing of personal data and the rules on which it is carried out after May 25, 2018. Below you will find basic information on this subject.

Who will be the controller of your data?

The administrator of your personal data is the company RAW-POL STEFAŃSKI SPÓŁKA KOMANDYTOWO-AKCYJNA hereinafter abbreviated as RAW-POL with its registered office in Julianów 50, 96-200 Julianów entered into the register of entrepreneurs of the National Court Register under the number KRS 0000969687, NIP: 835-100-17-04, NIP EU: PL8351001704, REGON 750443308. Contact with the Personal Data Administrator is possible at the phone number: +48 468 149 500, e-mail: idok@rawpol.com.

Why do we want to process your data and what are the legal grounds for data processing?

We will process personal data for the purposes of your orders - to the extent necessary to perform the concluded contract pursuant to art. 6 sec. 1 lit. b GDPR.

Personal data of customers of our services may also be processed on the basis of art. 6 sec. 1 lit. c GDPR in order to fulfill the legal obligations incumbent on the Data Administrator - on the basis of generally applicable laws, including in particular accounting and tax law.

If you give your voluntary consent - the data will also be processed for marketing purposes, i.e. sending personalized offers, information about new products and promotions, information about organized events with the participation of RAW-POL, notifications generated on the basis of analysis of purchasing preferences. Your data for the purpose of sending commercial information will be processed on the basis of art. 6 sec. 1 lit. a GDPR (in connection with Article 6 (1) (f) of the GDPR, where the Controller's legitimate interest is marketing of its own goods and services.

We will also process your personal data on the basis of a legitimate interest, pursuant to art. 6 sec. 1 lit. f GDPR, consisting in keeping evidence of the performance of the contract for the time necessary until the expiry of the limitation period for any claims, after which the data will be deleted. Your personal data will be processed by RAW-POL pursuant to art. 6 sec. 1 lit. f GDPR also for the purposes of conducted marketing campaigns, including for the preparation and presentation of personalized advertising.

The consequence of profiling (for marketing purposes) will be the assignment of a profile to a given person in connection with the purchases made in order to enable the use of discounts or rebates based on the analysis of the user's purchasing preferences and traffic on the Website or on the basis of the type of orders placed.

Who can we pass the data to?

The recipients of your personal data are companies with which RAW-POL cooperates to meet your expectations as much as possible:

• IT support
• Accounting and legal services
• Administrative, office and warehouse services
• Hosting service
• Handling of banking transactions
• Insurance service
• Transport service

and in order to fulfill orders delivered from the manufacturer's warehouse and to decorate the goods. The data may also be transferred to authorities or public entities authorized to obtain data on the basis of applicable law, as well as to our associates in order to ensure proper customer service.

We require high standards of information security from all entities to which personal data is transferred.

Your personal data is generally not transferred to third countries. In the event that our partners or suppliers are based outside the EEA, the Administrator ensures that the transfer of data outside the EEA takes place in accordance with applicable law in this regard, in particular, data may be transferred to third countries on the basis of decisions issued by the European Commission or standard personal data protection clauses.

Until when will we keep your data?

In connection with the performance of the contract - the information necessary to demonstrate the implementation of the contract is stored after the end of the contract for the period of limitation of any claims in accordance with the provisions of the general civil code. After the expiry of this period, the data is deleted, unless specific provisions specify other data storage periods. In the event that the data will be processed based on the consent or the legitimate interest of the Administrator, the data will be processed until the consent is withdrawn or the user objects to the processing.

What are your rights regarding your data?

The data subject has the right to access their personal data and the right to rectify, delete, limit processing, the right to transfer data, the right to object. If the basis for processing is consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

Withdrawal of consent may be made, in particular, through the tab on the website that appears after logging in, as well as by other means, after contacting the provided telephone number or e-mail address of the Administrator.

In particular, you have the right to object to the processing of personal data based on the legitimate interest of the Administrator.

If you have any questions or doubts as to the processing of your personal data, please contact us at the e-mail address idok@rawpol.com.pl or telephone number +48468149500.

You have the right to lodge a complaint with the President of the Data Protection Office. However, first of all, we encourage you to contact us directly in order to clarify any doubts regarding your personal data. Providing your contact details is voluntary but necessary to perform the contract, while the permission to contact us to present our offers is voluntary, and if you do not consent to the processing of data for this purpose, we will not be able to inform you about changes in the offer, new products and promotions.