We hereby inform that with regard to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR):

  1. The Controller: The Controller of your personal data will be SM Spedition Marcin Żurek based in Ostrow Wielkopolski, Irysowa 3, VAT id: 6222305565, REGON: 301897170
  2. The Processor: The Controller can act by a third party that will be permitted to process personal data by agreement with full disclosure of the third party information.
  3. Personal Data: The data collected by the Controller will include (fully or partially) natural persons (for legal persons their organs/representatives): names and surnames, addresses: both living and mailing, personal ID numbers, VAT IDs, REGON, ID documents, contact data: phone numbers, email addresses, bank account numbers, certificate numbers and insurance policy numbers.
  4. Contact data: With regards to matters related to personal data protection you can contact us at rodo@smspedition.com
  5. The purpouse of processing personal data:
    1. Contractual – required to perform the contract of which you will be a part of (Article 6(1)(b) GDPR)
    2. Contractual – required to sign a contract based on your interest in our offers (Article 6(1)(a) GDPR)
    3. Exercising the Controllers legal right to assess the level of provided services (Article 6(1)(f) GDPR)
    4. Exercising the Controllers legal right to investigate and defend from legal claims (Article 6(1)(f) GDPR)
    5. Exercising the Controllers legal right to propose offers of services which include services provided by parties connected or cooperating with the Controller. (Article 6(1)(f) GDPR)
    6. Exercising the Controllers legal right to rightfully fullfill legal obligations such as: processing personal data for tax purpouses, debt collection, court cases, arbitration and mediation, archiving of personal data with the purpouse of being able to provide evidence of obeing existing laws, GDPR included, maintaining full safety of the services provided (Article 6(1)(c) GDPR)
  1. As the Data Controller, we wish to inform you that you have the right to access your data, rectify them, request that your data be deleted or that the processing of your data be restricted. You also have the right to lodge an objection against the processing of your data by the Controller and the right to data portability to another data controller. If you give your consent voluntarily, you have the right to withdraw the consent to data processing at any time, which shall not affect the legal compliance of processing performed on the basis of such consent before its withdrawal. We also wish to inform you that you have the right to lodge a complaint with a supervisory authority for the personal data protection regulations.
  2. The right to restrict personal data access can be ignored in the event that it is presented that we have legal grounds for overriding your request, your interests and freedoms, especially when the data is required to assess, pose or defend claims.
  3. The period of data archiving:
    1. During the time of the signed contract being carried out, and after it dissolves for the time until all claims regarding the contract are overdue and all periods presented by applicable laws are overdue.
    2. For the time neccessary to prepare to act (i.e sign a contract) and to carry the act out.
    3. After the contract is complete your data which was obtained during completing the contract will be archived in unchanged form (paper, electronic, scans) for the period of 10 years, unless any law instructs to archive them for a different period of time or in another form. In the event that there are any ongoing legal disputes, the period of archiving will be calculated starting with the day of an official court order closing the dispute or last of the disputes if there are multiple ongoing disputes.
  1. Sharing personal data: your personal data can be shared with these recipients: connected parties, cooperating parties including the Processor, proffesional advisors (accounting companies, legal and tax advisors, debt collection companies, public administration fullfilling legal obligations)
  2. As the subject of personal data you have the right to:
    1. Access your data and to recieve a copy of it
    2. Transfer your data
    3. Object to the processing of your data
    4. Make changes to your personal data
    5. Erase your data and restrict access to your data
    6. Send a complaint to the regulating authorities – the Personal Data Protection Office
  1. Willingness to provide personal data: The personal data provided by you is being provided willingly but is neccessary to carry out services included in the contract, prepare an offer and to carry out other services of the Controller.
  2. The personal data processed by the Controller is not made available to any country outside of the EEA.
  3. The Controller does not process personal data in an automated manner (profiling)
  4. In order to fullfill the signed contract and for SM Spedition Marcin Żurek to fullfill any legal obligations we hereby inform you that the processing of your personal data is based in law (Article 6(1)(b/c) GDPR) and your consent to the processing of your personal data is not required.
  5. The GDPR clause above fullfills legal obligations. No actions are required on your part.