GDPR information obligation

On May 25, 2018, new rules on the protection of personal data entered into force, resulting from Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free the flow of such data and the repeal of Directive 95/46 / EC (GDPR).

We would like to assure you that we exercise special care in the processing of personal data, operate in accordance with the law and implement appropriate technical and organizational measures to ensure the security of personal data entrusted to our company. We care for the protection of personal data when designing new activities.

Personal data controller

Dragonfly Colors Tomasz Sykutera with its registered office in Gdańsk (80-299), ul. FLory 9/2, is the administrator of the personal data of its employees, associates, clients, and people who provided their data via the form on the website or e-mail, as well as other entities that have consented to the processing of personal data.

Entity processing personal data

Dragonfly Colors Tomasz Sykutera also processes personal data entrusted to the processing of other administrators, in particular when orders are carried out in which Dragonfly Colors Tomasz Sykutera is a subcontractor. In this case, Dragonfly Colors Tomasz Sykutera acts as a personal data processor.

Legal grounds and purposes of personal data processing

Dragonfly Colors Tomasz Sykutera processes personal data only if at least one of the following conditions is met:

1. The data subject has consented to the processing of his personal data (Article 6 (1a) of the GDPR),
2. Processing is necessary for the performance of a contract to which the data subject is a party or to take steps prior to entering into a contract (Article 6 (1b) of the GDPR),
3. Processing is necessary to fulfill the legal obligation incumbent on Dragonfly Colors Tomasz Sykutera (Article 6 (1c) of the GDPR);
4. Processing is necessary to protect the vital interests of the data subject or another natural person (Article 6 (1d) of the GDPR);
5. Processing is necessary to perform a task carried out in the public interest (Article 6 (1e) of the GDPR),
6. Processing is necessary for the purposes of the legitimate interests pursued by Dragonfly Colors Tomasz Sykutera or by a third party (Article 6 (1f) of the GDPR).

The processing of data provided to Dragonfly Colors Tomasz Sykutera via e-mail or the form on the website is carried out on the basis of art. 6 sec. 1 a) b), c) or f) GDPR and includes, inter alia, such data as name, surname, e-mail address, telephone number, and other data that will be provided in electronic correspondence. These data are processed for the purpose for which they were made available.

Data processed on the basis of consent (Article 6 (1a) of the GDPR), in particular name, surname, e-mail address, telephone number, are used for the purpose for which the consent was given and are processed until the consent is withdrawn or until the purpose is achieved for which consent has been granted.

The data processed in connection with the conclusion of the contract pursuant to art. 6 sec. 1b GDPR includes, in particular, name, surname, address, telephone number, e-mail address, NIP / PESEL number, bank account number, and other data resulting from the specificity of a specific contract and are used to perform this contract.

Data of persons with whom our contractors perform contracts concluded with Dragonfly Colors Tomasz Sykutera are processed on the basis of art. 6 sec. 1f of the GDPR and include, among others name, surname, e-mail address, telephone number. These data are used to perform the contract.

Data entrusted for processing by other administrators, in particular for the performance of services provided by Dragonfly Colors Tomasz Sykutera, are processed on the basis of art. 6 sec. 1c or 1 f GDPR and include, among others: name, surname, correspondence address, e-mail address, PESEL number and other data necessary for the provision of services, depending on its type. Processing takes place in order to perform the requested service.

Obligation to provide data and the consequences of failure to provide data

Providing personal data in connection with the concluded contract is voluntary, but necessary for the conclusion and performance of the contract and the related financial settlements.

Expressing consent to the processing of personal data, in particular for marketing or information purposes, is voluntary, and the consent may be withdrawn at any time, without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.

Providing the e-mail address and other data in electronic correspondence is voluntary. Withdrawal of consent to the processing of data will result in the inability to conduct further e-mail correspondence.

Period of personal data storage

Personal data obtained in order to perform the contract are stored until the claims under the contract are time-barred or until the data storage obligation resulting from legal provisions expires, in particular the obligation to store financial and accounting or employee documents.

If the consent granted is the sole basis for processing, the withdrawal of consent will result in the cessation of data processing, without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

Rights of data subjects

The data subject has the right to access their personal data, the right to rectify it, request removal, as well as the right to limit their processing, the right to transfer data, the right to object to the processing of personal data.

If the legal basis for the processing of personal data is consent, you have the right to withdraw consent at any time, without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

In addition, if it is found that the processing of personal data violates the provisions of the EU GDPR Regulation, you have the right to lodge a complaint with the supervisory body – the President of the Office for Personal Data Protection ( https://uodo.gov.pl/pl/p/kontakt  ).

Recipients of personal data

Personal data may be made available to third parties with the consent of the data subject.

In addition, personal data may be made available when required by the performance of the contract between the parties or in order to fulfill the obligations of the Personal Data Administrator.

In the case of processing personal data at the request of third parties, Dragonfly Colors Tomasz Sykutera acts as a processor, and the data is made available in accordance with the rules set out by the Personal Data Administrator.

The entities to which the data may be made available are, depending on the data category: entities processing personal data at the request of Dragonfly Colors Tomasz Sykutera of the Administrator’s subcontractors, IT service providers, entities providing accounting services, entities providing occupational health and safety training, entities concluding an insurance contract and other institutions authorized by under the law, such as the Tax Office, Court or Social Insurance Institution.

Profiling

Dragonfly Colors Tomasz Sykutera may automatically adjust certain content to the needs of customers and people who provided their data via the form on the website or e-mail, as well as other entities that have consented to the processing of personal data, i.e. profiling, using the personal data they provide.

This profiling consists primarily of the automatic assessment of what products these people may be interested in, based on their previous activities on the Internet, including as part of the Dragonfly Colors Tomasz Sykutera websites, and displaying product advertisements profiled in this way.

Profiling, carried out by Dragonfly Colors Tomasz Sykutera, does not result in making decisions that cause specific legal effects to these persons or affect them in a similarly significant way.

Information on automated decision making

The data will not be profiled, which means that they will not constitute a basis for automatically assigning specific properties, and features, and will not be used to predict behaviors and preferences.

Contact details:

You can contact us as follows:

• by correspondence to the address of the seat: Dragonfly Colors Tomasz Sykutera with its seat in Gdańsk (80-299), ul. Flory 9/2,
• via e-mail, e-mail address: info@dragonfly-colors.com