PRIVACY NOTICE

Dear Sir/Madame,

in fulfilment of the information obligation specified in the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27/04/2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data, hereinafter referred to as "GDPR", bearing in mind the fact that we collect your personal data, in particular by respecting your privacy and by ensuring that you know who processes your personal data and how it is processed , we present the following information:

1. The administrator of your personal data is OKECHAMP S.A. with headquarters in Poznań, ul. Wichrowa 1A, 60-449 Poznań, hereinafter referred to as "Data Administrator". The Data Administrator has established a the Data Protection Officer, who is available at the following e-mail address: iod@okechamp.pl

2. Your personal data is processed by the Data Administrator for the following purposes:
a) in order to offer you directly by the Data Administrator, our products and services which is the implementation of our legally legitimate interest (the legal basis is Article 6, paragraph 1, point f) of GDPR),
b) for the proper performance of contracts concluded by the Data Administrator with contractors, being the implementation of our legally legitimate interest (the legal basis is Article 6, paragraph 1, point f) of GDPR),
c) in order to establish commercial relations with you or the company on behalf of which you act , for who you work or with who you cooperate , including for that purpose conducting business correspondence, negotiating and concluding relevant agreements with the company on behalf of which you operate, for which you work or with which you cooperate, being the implementation of our legally legitimate interest (the legal basis is Article 6, paragraph 1, point f) of GDPR),
d) to inform you about the offers and activities of the Data Administrator, as well as, about events organized by us (the legal basis is Article 6, paragraph 1, point a) and GDPR),
e) for the purpose of determining, investigating or defending against claims, which is the implementation of our legally legitimate interest (the legal basis is Article 6, paragraph 1, point f) of GDPR),
f) for analytical purposes, in particular for purposes of building knowledge about contractors or potential counterparties of the Data Administrator, optimization of the sales and service process, being the implementation of our legally legitimate interest (the legal basis is Article 6, paragraph 1, point f) of GDPR).
g) for archiving purposes, in particular to ensure that it is possible to demonstrate the performance of obligations towards you resulting from the provisions of GDPR, which constitute the implementation of our legally legitimate interest (the legal basis is Article 6 paragraph 1 point f).

3. The Data Administrator processes the following categories of personal data that apply to you: the contact details (first name, last name, e-mail address, telephone number, place of employment, including address, position), history of activity.

4. Your personal data will be processed no longer than it is necessary and results from specified in point 2 above purposes of processing, i.e.:
a) for the proper performance of contracts entered into by the Data Administrator with contractors, as well as, to establish, investigate or defend against the claims arising from these contracts, your data will be processed for a period during which claims arising from such contracts may arise, i.e. for a period of 3 years from the end of the year in which the contractual relationship has ended,
b) for the purposes of direct marketing, the data may be processed until you object to their processing for the above-mentioned purpose or to determine that such data have become obsolete.

5. Your personal data may be disclosed to the following categories of recipients:
a) entities to which the Data Administrator has a legal obligation to disclose personal data processed by them,
b) entities that process personal data on the basis of contracts entrusting the processing of personal data.
6. Your personal data is not transferred to third countries.

7. You have the right to request from the Data Administrator access to your personal data and you are entitled to:
a) the right to rectify them,
b) the right to remove them or the right to limit data processing,
c) the right to object to the processing of your personal data, as well as,
d) the right to transfer your personal data (in cases specified in the provisions of GDPR, you have the right to demand that your personal data are sent directly by the Data Administrator to another administrator, if it is technically possible).

8. Based on your personal data, automated decisions can be made against you, including decisions resulting from profiling (i.e. your personal data may be processed in an automated manner, involving the use of your personal data to assessment of specific features / factors when making decisions by the Data Administrator to match and ensure the adequacy of the type and availability of services and marketing activities offered by the Data Administrator. Using the Data Administrator indicated in this point of the mechanism may result in marketing activities directed towards you that do not match your interests or activities

9. In connection with the processing of your personal data, you have the right to lodge a complaint to the supervisory body, in a situation when you consider that the processing of personal data concerning you violates the provisions of the GDPR.

10. If you have given your consent to the processing of personal data, you can cancel it at any time with effect for the future. If the processing of your personal data is based on the weighing of interests, you may object to such processing. In the event of such an objection, please provide reasons why your personal data should not be processed in the same way as done before by the Data Administrator. Your objection will be examined and if it proves to be justified, the processing of your personal data will be stopped or adapted, or you will be given important reasons for continuing the processing. At any time, you may object to the processing of your personal data for marketing purposes and data analysis, in which case it will result in the termination of the processing of your personal data by the Data Administrator for these purposes. You can send your consent cancellation or objection to the processing of your personal data by e-mail or to the address indicated in point 1 above.