Privacy Policy – rules for the processing of personal data by
MULTITECH – LESZEK BOKUŃ

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter referred to as the "GDPR", we would like to inform you about the principles of processing your personal data and about your rights related to it.

The following rules apply from 25 May 2018.

1. Personal Data Administrator.

The administrator of your personal data is Leszek Bokuń conducting business activity under the name MULTITECH – LESZEK BOKUŃ at 21 Zagadki Street, 02-227 Warsaw, REGON: 017402283, NIP: 5342174177 (hereinafter referred to as "We" or "MULTITECH").

2. Contact us.

MULTITECH has appointed a single point of contact for all issues relating to personal data. If you want to contact us, write us an e-mail to the address: info@multitech.pl or send a letter to the address: MULTITECH – LESZEK BOKUŃ, 21 Zagadki Street, 02-227 Warsaw, with the note: "Personal data".

3. Where do we get your personal data from?

We receive your data directly from you when you send us a message via e-mail, via the contact form, when you call a MULTITECH Staff Member, when you sign up for a newsletter or register on our website www.multitech.pl (hereinafter referred to as the "Website") or when you visit our premises in person.

4. What is the scope of the data processed?

Your personal data that MULTITECH may process is as follows:

  1. Your name;
  2. Email address
  3. contact phone number;
  4. residential or correspondence address;
  5. the company (entity) you work for (including your business company, if you run one);
  6. name, address of your business activity, tax identification number, REGON, bank name and bank account number;
  7. the position held;
  8. profession;
  9. additional information about yourself, which you may include in e-mail correspondence or which you may provide during a telephone conversation with the MULTITECH Staff (whereby the conversations conducted are not recorded by us);
  10. consent granted by you (if, for example, you have given MULTITECH consent to the processing of data for marketing purposes).

5. For what purpose and on what basis do we process your personal data?

Below we indicate and describe the specific goals:

  1. registration on our website – we process your personal data for the purpose of performing a contract for the provision of services by electronic means, i.e. maintaining and servicing your account (pursuant to Article 6(1)(b) of the GDPR);
  2. conclusion and performance of the contract – we process your personal data for the purpose of concluding and performing the sales contract, including contacting you, delivering the purchased goods to the indicated address, and subsequently also enabling you to use the warranty guarantee (pursuant to Article 6(1)(b) of the GDPR);
  3. maintenance of our website - data from the analysis of cookies and server logs are processed for the purposes of operating the functionality of our website: login, presentation of content, handling forms (pursuant to Article 6(1)(f) of the GDPR);
  4. fulfilling our obligations in the field of accounting and tax settlements – we process your personal data for accounting and tax purposes (pursuant to Article 6(1)(c) of the GDPR;
  5. sending the newsletter - we process your personal data in order to provide the newsletter service ordered by you (Article 6(1)(b) of the GDPR);
  6. marketing – if you consent to receive marketing communications of a certain type from us, we process your data in order to address these messages to you (pursuant to Article 6(1)(f) of the GDPR, i.e. marketing purposes as a legitimate interest of the personal data administrator);
  7. debt collection and accountability – we process your personal data for the purpose of debt collection, court, arbitration and mediation proceedings, archiving and the possibility for us to settle accounts for the correctness of the processing of your data (pursuant to Article 6(1)(f) of the GDPR).

6. How long do we process your personal data?

The period for which we process your personal data depends on the purpose of the processing. And so on:

  1. registration on our website – for this purpose, we process your data for the period you are registered until you unsubscribe from our website;
  2. conclusion and performance of a contract - for this purpose, we process your data for the duration of the contract;
  3. maintenance of our website - data from the analysis of cookies and server logs We process data for the entire period in which you use our website or services provided electronically (such as newsletters) and thereafter for a period of 5 years counting from the time you stopped using our website or services;
  4. accounting and tax purposes - we process your data for accounting purposes for a period of 5 years, counting from the beginning of the year following the financial year to which the accounting documents relate (Article 74(2) and (3) of the Accounting Act of 29.09.1994 (Journal of Laws of 2018, item 395, as amended). As far as tax purposes are concerned, the data will be processed for a period of 5 years, counting from the end of the calendar year in which the deadline for payment of a given tax expired (Article 70 § 1 of the Tax Ordinance Act of 29 August 1997 (Journal of Laws of 2017, item 201, as amended);
  5. sending newsletters - for this purpose, we process your data until you are a subscriber to this service, or until you object to such processing, whichever occurs first;
  6. marketing – for this purpose, we process your data until you object to such processing or withdraw your consent to conduct such activities;
  7. debt collection and accountability - for this purpose, we process your personal data until the end of the limitation period (this period will depend on the type of claim in accordance with the Civil Code or other legal acts governing the principles of non-civil liability) or the end of the period in which we, as the Administrator, may be held to another type of legal liability related to the proper performance of the obligations imposed on us.

7. Who is the recipient of your personal data?

We only share your data when it is necessary. We don't sell your data. On the other hand, we may transfer your personal data to our Contractors, i.e. entities/companies that provide services necessary for the proper functioning of MULTITECH, e.g.:

  1. companies providing services for the delivery and maintenance of database and other software, thanks to which MULTITECH can, for example, keep appropriate records and e-mail communication and newsletters;
  2. hosting providers;
  3. consulting and law firms, as well as accounting offices, supporting us in our daily operations;
  4. suppliers/manufacturers/servicers of goods that you purchase from us;
  5. entities with which we cooperate in order to provide services to our Clients, e.g. courier companies. For entities from each category, MULTITECH provides only the data that are necessary to achieve the goals of my cooperation with it.

8. Do we process your personal data automatically (including through profiling) in a way that affects your rights?

We do not use profiling or process your data in an automated manner.

9. How do we process personal data?

We process personal data in accordance with applicable law, in particular in accordance with the GDPR. We bear in mind the following rules that guide us when processing your personal data:

  1. The rule of adequacy. We only process data that is necessary to achieve the purpose of the processing; for each process, we have conducted an analysis of whether this rule is met;
  2. Transparency rule. You should have full knowledge of what is happening with your data. This document, in which we try to provide you with full information about the rules of processing your personal data by us, is a manifestation of it;
  3. Rule of regularity. We strive to keep your personal information in our systems up to date and truthful;
  4. Integrity and confidentiality rule. We take the necessary measures to protect the confidentiality and integrity of your personal data. We are constantly improving them, along with the changing environment and technological progress. Safeguards include physical and technological measures to limit access to your data, as well as appropriate safeguards against the loss of your data;
  5. Accountability rule. We want to be able to account for each of our actions on personal data, so that in the event of your inquiry, we can provide you with full and reliable information about what activities we have carried out on your data.

10. What rights do you have?

Data protection laws give you a number of rights that you can exercise at any time. As long as you do not abuse these rights (e.g. unjustified daily requests for information), the use of them will be free of charge for you and should be easy to exercise.

Your rights include:

  1. The right to access the content of your personal data. This right means that you can ask us to export the information we hold about you from our databases and send it to you in one of the commonly used formats (np. XLSX, DOCX, etc.);
  2. Right to rectification. If you become aware that the data we process is incorrect, you have the right to ask us to correct it, and we will be obliged to do so. In this case, we have the right to ask you to provide some document or other evidence of the fact that the data has changed;
  3. Right to restriction of data processing. If, despite our compliance with the adequacy rule, you believe that we process too wide a catalogue of your personal data for a particular process, you have the right to request that we restrict this scope of processing. Unless your request is contrary to the requirements imposed on us by applicable law, we will comply with your request;
  4. Right to request deletion of data. This right, also known as the right to be forgotten, means your right to request that we remove any information containing your personal data from our database systems and from our records. Please note that we will not be able to do this if we are required by law to process your data (e.g. transaction documents for tax purposes, the obligation to ensure accountability of our activities). In any case, however, we will delete your personal data to the fullest extent possible and, where this is not possible, we will ensure that it is pseudonymised (which means that it is not possible to identify the data subject without an appropriate link key), so that your data, which we are required to retain in accordance with applicable law, will only be accessible to a very limited group of people;
  5. The right to transfer data to another data controller. In accordance with the GDPR, you can ask us to export the data you have provided to us in the course of all our contacts to a separate file, in order to further transmit it to another data controller;
  6. Right to withdraw consent. If we process your personal data on the basis of consent, you can withdraw this consent at any time. Withdrawing consent will not affect the lawfulness of the processing we have carried out on the basis of the consent given before its withdrawal. However, we would like to inform you that your personal data to the extent covered by the withdrawn consent, i.e. within the scope of the purpose to which the consent related, will cease to be processed for this purpose. Nevertheless, your personal data covered by your consent will be further processed in order for us to comply with our obligations under the law, including, in particular, the obligation for us to account for the correctness of the processing of personal data, or for purposes based on our legitimate interest.

You can exercise the rights referred to above by contacting us at the e-mail address info@multitech.pl or by letter to the following address: MULTITECH – LESZEK BOKUŃ ul. Zagadki 21, 02-227 Warsaw, with the note: "Personal data".

In matters related to personal data, you can also write to us when an action or situation you encounter raises your concerns, whether it is in accordance with the law, whether it does not violate your rights or freedoms. In this case, we will answer your questions and doubts and address the issue immediately.

If you believe that we have violated the rules of processing your personal data in any way, you have the right to file a complaint directly with the supervisory authority (since 25 May 2018 it is the President of the Office for Personal Data Protection). As part of the exercise of this right, you should provide a full description of the situation and indicate what action you consider to be a violation of your rights or freedoms. A complaint should be submitted directly to the supervisory authority.

11. What is the right to object?

Separately, we would like to inform you that you are also entitled to the so-called object to the processing of your personal data. You have the right to object if you do not want us to process your personal data for a specific purpose (e.g. for marketing purposes).

You also have the right to object if the processing of your personal data is based on a legitimate interest or for statistical purposes and the objection is justified by the particular situation in which you find yourself.

In this case, we will continue to process your data for the purposes of other processes (for other purposes), but no longer for the purpose for which you objected. You can submit the right to object to the e-mail address: info@multitech.pl or by letter to the address: MULTITECH – LESZEK BOKUŃ ul. Zagadki 21, 02-227 Warsaw, with the note: "Personal data".

12. Is it your obligation to provide data?

You provide your personal data to MULTITECH voluntarily. There is no provision that would impose a legal obligation on you to hand them over.

However, if you want to conclude an agreement with us, you must provide data that will enable us to conclude and perform this agreement, as well as its proper tax settlement and documentation of the correctness of our actions.

Personal data provided for contact or marketing purposes, for example, is necessary for us to be able to contact you or to carry out marketing activities to which you agree or at least do not object. If you do not provide them, our communication with you will be either difficult (e.g. if you only provide a phone number, but no longer an email address) or even impossible (if you do not provide any contact details).

13. Do we share your data outside the EU?

No. The Administrator will not transfer your data to a third country or to international organizations.