1. data controller

Sollux Lighting Muzolf sp. j. with its registered office in Budzyn, ul. Łokietka 35 (64-840 Budzyn), registered in the National Court Register under the KRS number 0000591772, NIP 6070082443, is the administrator of personal data processed for marketing purposes.
The administrator can be contacted:
1) at the mailing address: ul. Władysława Łokietka 35, 64-840 Budzyn;
2) at the e-mail address: rodo@sollux-lighting.pl.

2. purposes and legal basis for processing personal data

The administrator processes the personal data provided for marketing purposes on the basis of a separate, voluntarily given consent (Article 6(1)(a) of the DPA).

3. time of processing personal data

The controller will process personal data for marketing purposes until the consent given is withdrawn or an objection is made. However, in order to ensure a high level of care for the rights of data subjects, the controller will ask for a refreshment of consent after a period of approximately 3 years, unless the data subject withdraws consent or objects within that time.

4 Recipients of personal data

The administrator may disclose personal data only to entities cooperating with the administrator on the basis of written contracts of entrustment of personal data processing, in order to carry out the tasks and services specified in the contract for the administrator, in particular, in the field of marketing and PR, e-mail service, hosting, IT, administrative service, legal or consulting service. Data may also be disclosed to postal operators and couriers.

5. rights of personal data subjects

(1) Every data subject has the right:
1) access – to obtain confirmation from the controller as to whether his/her personal data is being processed. If data about a person is processed, he/she is entitled to access it and obtain the following information: the purposes of processing, categories of personal data, recipients or categories of recipients to whom the data have been or will be disclosed, the period of data retention or the criteria for determining it, the right to request rectification, erasure or restriction of the processing of personal data of the data subject, and to object to such processing (Article 15 RODO);
2) to obtain a copy of the data – to obtain a copy of the data being processed, with the first copy being free of charge, and for subsequent copies the controller may charge a reasonable fee based on administrative costs (Article 15(3) RODO);
3) To rectify – to request the rectification of personal data pertaining to him or her that is incorrect, or to complete incomplete data (Article 16 of the RODO);
4) to erasure – to request the deletion of her personal data if the controller no longer has a legal basis for processing or the data are no longer necessary for the purposes of processing (Article 17 RODO);
5) to restrict processing – request to limit the processing of personal data (Article 18 RODO), when:
(a) the data subject questions the accuracy of the personal data – for a period that allows the controller to verify the accuracy of the data,
(b) the processing is unlawful and the data subject objects to the erasure of the data by requesting restriction of its use,
(c) the controller no longer needs the data, but it is needed by the data subject to establish, assert or defend a claim,
(d) the data subject has objected to the processing – until it is determined whether the legitimate grounds on the part of the controller override the grounds of the data subject’s objection;
6) to data portability – to receive in a structured, commonly used, machine-readable format the personal data concerning him or her that he or she has provided to the controller, and to request that the data be sent to another controller if the data are processed on the basis of the data subject’s consent or a contract with him or her, and if the data are processed by automated means (Article 20 RODO);
7) to object – to object to the processing of his/her personal data for the legitimate purposes of the controller, on grounds relating to his/her particular situation. In such case, the controller shall assess the existence of valid legitimate grounds for the processing, overriding the interests, rights and freedoms of the data subjects, or grounds for establishing, asserting or defending claims;
8) to withdraw consent at any time and without stating a reason, but the processing of personal data performed prior to the withdrawal of consent will continue to be lawful. Withdrawal of consent will result in the controller ceasing to process personal data for the purpose for which the consent was given.
2. In order to exercise the above-mentioned rights, the data subject should contact, using the contact details provided, the controller and inform him/her of which right and to what extent he/she wishes to exercise it.

6. president of the Office for Personal Data Protection

The data subject has the right to lodge a complaint to the supervisory authority, which in Poland is the President of the Office for Personal Data Protection with its seat in Warsaw, Stawki 2 Street, which can be contacted as follows:
1) by mail: Stawki 2 Street, 00-193 Warsaw;
2) in electronic form: via electronic sub-box available at https://www.uodo.gov.pl/pl/p/kontakt;

7 Acts cited in the clause

RODO – Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (Official Journal of the EU L 2016 No. 119, p. 1).