1. Personal Data Controller
The Controller of your personal data will be Komandor S.A. with its registered office in Radom, ul. Potkanowska 50, 26- 600 Radom, KRS: 0000085569, with the share capital of PLN 500,000 (say: five hundred thousand) paid-up in full, NIP:817-10-04-109.
You can contact us by the following means:
- by post to the following address: ul. Potkanowska 50, 26-600 Radom,
- by e-mail: info@komandor.com

2. Purposes of the Processing and Legal Basis for the Processing
• your consent e.g. to giving an answer to all inquiries received and being contacted to this end (Article 6(1)(a) of GDPR),
• taking action at your request, i.e. answering an inquiry, giving a quotation, preparing an offer or correspondence for establishing cooperation (Article 6(1)(b) of GDPR),
• the Controller’s legitimate interest in the form of marketing of the Controller’s products and services, including carrying on correspondence, investigating a complaint, resolving a dispute should one arise (Article 6(1)(f) of GDPR).

3. Storage Period of Personal Data
The Controller will store your personal data no longer than …….. of the date of giving an answer to an inquiry or of the expiry of validity of a(n) quotation, offer, or until such time as you withdraw your consent. Should a contract be made, your personal data will be stored until the expiry of all potential claims and of the period of storing financial documentation.

4. Data Recipients
We know how important it is to ensure the protection of and manage your personal data. We have appropriate security measures in place to protect personal data against accidental loss and unauthorised access, use, change and disclosure.
Your personal data may be disclosed to entities cooperating with the Controller in accordance with the personal data protection legal regulations in force, in particular to a territorially competent given your residence partner of ours for handling the matter more conveniently for you.
We announce that should a partner of ours and/or other recipients collect personal data from you alone and on their own behalf and e.g. offer products and services, then they are a separate data Controller, and they are held liable for the processing of such personal data within this scope, not being subject to the terms and conditions of our Policy.

5. Transfers of Data to Third Countries
Your personal data may be transferred to a territorially competent given your residence partner of ours in a third country for handling the matter more conveniently for you. If we send your personal data to a partner of ours competent given your residence, we will oblige the entity to protect your personal data, however, it should be borne in mind that should the data given your residence be transferred outside the EEA, i.e. to third countries, then some of those countries apply different personal data protection standards than those established in the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR). Should the personal data be sent, those data may be subject to the regulations of the jurisdiction of a given state. The source of the risk is the absence of an adequacy decision by the Commission and of appropriate safeguards.
Your personal data may be transferred to third countries exceptionally and only to a territorially competent given your residence partner of ours for handling the matter more conveniently for you, based on the exceptions listed in Article 49(1)(a), i.e.:
a) the data subject has explicitly consented to the proposed transfer, after having been informed of the possible risks (referred to above) of such transfers for the data subject due to the absence of an adequacy decision and appropriate safeguards;
b) the transfer is necessary for the performance of a contract between the data subject and the controller or the implementation of pre-contractual measures taken at the data subject’s request;
If you do not give your consent to the transfer of personal data, please do not fill in the form.

6. Consequences of Failure to Provide Personal Data:
The provision of personal data by you is voluntary, but necessary for the fulfilment of the aforementioned purposes.

7. Automated Decision-Making:
Not applicable. Your personal data will not be processed by automated means.

8. Rights Relating to the Processing of Personal Data
You have the following rights relating to the processing of personal data:
• the right of access to your personal data,
• the right to request your personal data be rectified,
• the right to request your personal data be erased,
• the right to request the processing of your personal data be restricted,
• the right to object to processing your data due to your specific situation – in cases where we are processing your data under our legitimate interest,
• the right to your personal data portability, i.e. the right to obtain from the Controller your personal data, in a structured, commonly used, machine-readable, computer format. You have the right to data portability only as to those data which are processed by us under your consent,
• the right to withdraw your consent to the processing of data. The aforementioned right may be exercised by contacting the Controller. Please be informed that the withdrawal of your consent does not affect the lawfulness of processing of your data based on consent before its withdrawal.

9. You also have the right to lodge a complaint with a supervisory authority protecting personal data, i.e. President of the Personal Data Protection Office.

10. Privacy Policy:
I have read the privacy policy. The provision of data is voluntary.