Source: https://www.storck.pl/pl/information/
Timestamp: 2020-07-02 17:52:55
Legal References Found: Art. 6

Art. 6
 Art. 45
 Art. 46
 Art. 49
 Art.13

Art. 6

Art. 6

Art. 6

Art. 6

Art. 6

Art. 6

Art. 6

Art. 6

Art. 6

Art. 6

Art. 6

Art. 6
 Art.22

Art. 6
 Art. 22

Art. 6
 Art.22

Art. 9
 art. 22

Art. 6

Art. 6

Art. 6

Art. 6

Art. 6
 Art. 45
 Art. 46
 Art. 49

Document Content:
Data Protection Information ). Znajdują się tam również informacje o środkach bezpieczeństwa, jakie stosujemy w transmisjach online.
Odbiorcą danych jest August Storck KG.
2.8. Konkursy
Organizowanie konkursów oraz loterii.
Dane będą przetwarzane do czasu rozliczenia konkursu, loterii. W przypadku konieczności przekazania danych do urzędu skarbowego – przez okres 5 lat od zakończenia roku, w którym zaktualizował się obowiązek podatkowy.
Art. 6 ust. 1 lit a RODO, tj. na podstawie zgody wyrażonej przez uczestnika konkursu, loterii,
Art. 6 ust. 1 lit c RODO, tj. w celu realizacji obowiązków wynikających z przepisów dotyczących konieczności rozliczeń podatkowych.
Odbiorcami danych są:
dostawcy systemów informatycznych,
zewnętrzne podmioty, które mogą wspierać administratora w przeprowadzaniu konkursów lub loterii.
3. Przekazywanie danych stronom trzecim
Przekazujemy Państwa dane w ramach spółki do działów, odpowiedzialnych za dany obszar współpracy. W ramach Grupy Storck dane są przekazywane w wewnętrznych celach administracyjnych (np. w celu prowadzenia jednolitej polityki handlowej dla dostawców), jeżeli wymaga tego interes administratora (Art. 6, ust.1. lit. f RODO).
W przypadkach, objętych niniejszą polityką, przekazujemy Państwa dane również stronom trzecim (np. jeśli jest to konieczne aby udzielić Państwu odpowiedzi na przesłane pytanie).
Ponadto, z tych samych względów, możemy przesłać dane osobowe do podmiotów przetwarzających dla nas dane, zwłaszcza w kontekście świadczonego przez nich wsparcia naszej firmy w obszarze IT, prowadzonych akcji promocyjnych czy innych.
Aby uzyskać informację, zawartą w podpunkcie 2.1 f) (Sprawdzanie wiarygodności kredytowej kontrahentów), przekazujemy dane do naszej macierzystej spółki August Storck KG (Waldstraße 27, 13403 Berlin, Niemcy) jako do podmiotu przetwarzającego dane osobowe.
Wszystkie współpracujące z nami podmioty, przetwarzające dane, są zobowiązane do należytego wypełniania przepisów w zakresie ochrony danych osobowych.
W sytuacjach, w których jesteśmy ustawowo zobowiązani do przekazywania danych, możemy przekazywać Państwa dane do instytucji państwowych (np. w celu wypełniania ustawowych obowiązków sprawozdawczości podatkowej).
Przekazywanie danych osobowych do krajów spoza Europejskiego Obszaru Gospodarczego (EOG) ma miejsce tylko w przypadku, kiedy jest to niezbędne do osiągnięcia właściwych celów a także, gdy są spełnione wymogi Rozdziału V RODO (np. jeśli Komisja Europejska wydała decyzję o adekwatności ochrony danych osobowych w przedmiotowym kraju trzecim, zgodnie z Art. 45 RODO); jeżeli uzgodniliśmy z odbiorcą danych standardowe klauzule ochrony danych osobowych, zgodnie z Art. 46 GDPR; lub w przypadku, gdy takie środki nie są wymagane prawem w wyjątkowych przypadkach, zgodnie z Art. 49 RODO).
Administrator danych osobowych (Storck Sp. z o.o.) podjął niezbędne środki techniczne i organizacyjne w celu ochrony Państwa danych przed utratą, zniszczeniem lub nieuprawnionym dostępem. Nasi Pracownicy oraz wszystkie osoby zaangażowane w przetwarzanie danych są zobowiązani do przestrzegania przepisów w zakresie ochrony danych osobowych oraz wykorzystywania i przetwarzania danych z zachowaniem zasad poufności i przechodzą w tym celu stosowne szkolenia.
5. Uprawnienia w zakresie przetwarzania danych
5.1 Przepisy dotyczące ochrony danych osobowych gwarantują Państwu prawa w odniesieniu do danych Państwa dotyczących (tzw. prawa osoby, której dane dotyczą).
Osobom, których dane dotyczą, przysługuje prawo dostępu do swoich danych osobowych, ich sprostowania, usunięcia, ograniczenia przetwarzania, prawo do przenoszenia danych, prawo wniesienia sprzeciwu, jak również prawo do złożenia skargi do Prezesa Urzędu Ochrony Danych Osobowych.
5.2 Jeżeli wyraziliście Państwo zgodę na przetwarzanie danych osobowych, może ona zostać wycofana w dowolnym momencie, bez wpływu na zgodność z prawem przetwarzania, którego dokonano przed jej wycofaniem.
5.3 Państwa dane zostaną usunięte w przypadku, gdy ich gromadzenie nie będzie dłużej konieczne dla realizacji celów, dla których były przetwarzane, a zatem nie będą występować żadne przesłanki do tego, aby je dalej przechowywać.
6. Dobrowolność podania danych
W przypadku danych osobowych gromadzonych od osoby, której dane dotyczą, dane te są niezbędne do rozpoczęcia współpracy, a w pozostałych zakresach podanie danych jest dobrowolne.
7. Przetwarzanie danych osobowych w sposób zautomatyzowany
Administrator nie podejmuje w stosunku do Państwa danych jakichkolwiek decyzji na podstawie zautomatyzowanego przetwarzania danych, w tym profilowania.
Personal data protection and information clause (GDPR)
Storck Sp. z o.o. treats your personal data with due care. Our company gathers, processes and uses your data always in accordance with provisions for the protection of personal data, in particular with Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to processing of personal data and on free movement of such data, repealing Directive 95/46/EC; and in accordance with Personal Data Protection Act of 10th May, 2018 (Journal of Laws of 2018, item 1000).
According to Art.13 i 14 GDPR, we inform, as follows:
Storck Sp. z o.o., with its registered office at 26 Przyokopowa St.,01-208 Warsaw, is responsible for processing your personal data.
With regard to protection of your personal data you can contact us at: odo@pl.storck.com;
2. Scope and purposes of processing your data:
2.1. Business relations with partners: distributors, warehouses, points of sale
Purposes of processing your data:
a) Proper execution of business contracts
Duration of processing your data:
Entire duration of business relationship.
Art. 6 (1) (b) GDPR, if processing is necessary for the performance of a contract to which the data subject is party.
b) Processing personal data of employees and contact persons of the Processor’s business partners
Data are processed within duration of the agreement between the Processor and the partner (e.g. distributor); in case of assertion of claims – until the proceedings are lawfully concluded of claim is satisfied.
Art. 6 (1) (f) GDPR, i.e. legitimate interest of the Processor, namely execution of business contracts.
c) Asserting claims and protection of rights
Until claims, related to business relationship, are limited; when the claim is asserted – until the proceedings are lawfully concluded or the claim is satisfied.
Art. 6 (1) ( f) GDPR, i.e. legitimate interest of the Processor, expressed in asserting claims and protection of rights.
d) Making public, legal and financial settlements; accounting
Documents related to financial transactions shall be stored for 5 years since the end of the calendar year when the tax liability reaches its maturity (Article 86 of the Tax Ordinance of August 29th, 1997 (Journal of Laws of 2017, item 201 with amendments); other accounting documents, regulated by The Tax Ordinance or by The Accounting Act within periods specified therein.
Art. 6 (1) (c) GDPR, i.e. aiming at fulfilment of legal obligations the Processor is subject to, in accountancy and any legal, public and financial settlements, including archiving of documents in accordance with legal requirements.
e) Handling warranties for defects in sold goods
Until claim on warranty limits.
Art. 6 (1) (c) GDPR, i.e. for execution of legal obligations on warranty for physical or legal defects of sold goods.
Data recipients are:
providers of IT solutions (used for cooperation with distributors)
providers of telematic and mobile systems of sale (SFA type)
external companies, supporting the Processor in promotional and merchandising campaigns
couriers (including transport companies)
Polish Post,
state authorities upon applicable regulations
f) Checking creditworthiness of our partners
In B2B relations we regularly check the creditworthiness of the business partner or interested party when concluding contracts and in certain other cases in which there is a legitimate interest.
Personal data shall be processed within entire duration of business relationship and until claims, related to business relationship are limited; in case of assertion of claims – until the proceedings are lawfully concluded of claim is satisfied.
Art. 6 (1) ( f) GDPR, i.e. legitimate interest of the Processor, expressed in minimising the risk of default on the side of the partner, buying our products.
The recipients of the above-mentioned data are:
- rating agencies:
Creditreform Bielefeld Riegel & Unger KG, Sunderweg 3, 33649 Bielefeld, Germany
Bürgel Hannover Bielefeld GmbH & Co, Fredeburger Str. 21, 33699 Bielefeld, Germany
Bisnode D&B Deutschland GmbH, Robert-Bosch-Straße 11, 64293 Darmstadt, Germany
Scope of transferred data: first and last name of contact persons, official contact data, company’s data
- insurance companies:
Hermes Deutschland, Friedensallee 254, 22763 Hamburg
Euler Hermes Aktiengesellschaft, Gasstraße 27, 22761 Hamburg.
Scope of transferred data: first and last name, company’s name and address.
- August Storck KG
g) Making settlements of trade conditions between the Processor and distributors/warehouses
Personal data shall be processed until you object to the processing.
Art. 6 (1) (f) RODO, i.e. legitimate interest of the Processor, expressed in making settlements of trade conditions between the Processor and its business partners (e.g. distributors), giving adequate discounts, settlements with partners based on actual sale, sale analyses, aimed at (including, but not limited to) making offers, merchandise activities etc.
h) Traceability within food business, aimed at targeted and accurate withdrawal food from the market
Personal data shall be processed for 5 years since the end of calendar year when the tax duty, related to sale of a given lot, accrued.
Art. 6 (1) (c) GDPR i.e. processing is necessary to fulfil the Processor’s legal obligation under Regulation no. 178/2002 of European Parliament and European Council, defining general principles and requirements of food law, establishing The European Food Safety Authority (the EFSA) and providing procedures in food safety, imposing an obligation to trace food business in such way that the targeted and accurate withdrawal food from the market can be undertaken.
providers of IT system solutions, that enable transfer of data between the Processor and the
state authorities upon applicable regulations.
Personal data of business partners’ clients (distributors, warehouses, points of sale) have been provided by the partners, selling the Processor’s products. The Processor receives the following categories of data: telephone number, first and last name, its geographical address, email address, Tax Identification Number, transaction data;
Personal data of employees and contact persons of the Processor’s business partners (i.e. distributors)have been provided by the partners and shall include: first and last name, email address, telephone number, position.
2.2. Consumers complaints and claims
a) Handling of complaints and claims
For the period, necessary for their processing and possible redress, however, no longer than 3 years
Art. 6 (1) (c) GDPR: for the purpose of processing complaints and claims.
b) Handling of complaints, addressed to a dedicated e-mail
One year from submission of the report or inquiry, subject to periods scheduled above, for handling complaints and claims.
Art. 6 (1) (f) GDPR, i.e. legitimate interest of the Processor, expressed in handling of complaints directed to a dedicated email; answering to reports and inquiries, sent to a dedicated email address (or given in any other form of communication), including storage of integral complaints and given answers.
IT system providers,
couriers (incl. transport companies),
Handling of reports from a corporate website contact form
One year from submission of the report or inquiry, subject to periods scheduled above for handling complaints and claims.
Art. 6 (1) (f) GDPR, i.e. legitimate interest of the Processor, expressed in handling of reports directed by the contact form, answering to reports and inquiries, directed by contact form or by any other form of communication, including storage of integral complaints and given answers.
2.4. Proceeding collisions and car accidents
Redress in case of collision with the Processor’s company car
Personal data of participants/witnesses of an accident/collision shall be processed until damage liquidation is completed or period for claims limits.
Art. 6 (1) (f) GDPR, i.e. upon legitimate interest of the Processor, expressed in holding personal data of participants of a collision (to claim for redress with regard to the damage) or witnesses to a car accident (to obtain information on the course of traffic event).
Data of participants/witnesses of an accident/collision have been provided by the user of the company’s car, being also a participant of the collision/accident. The Processor gains the following data:
participants of the collision: car make and model, personal data of the participant (name, last name, personal identification number (PESEL), address, driving licence number, date of issuing, issuing body), data on third party liability policy (name of the insurance agency, number of policy, insurance period);
witnesses to the accident: first and last name, telephone number, email address, place of residence;
car leasing companies,
2.5. Recruitment
Direct recruitment or recruitment involving external partners
Personal data shall be stored until:
recruitment is completed or the consent for processing of personal rights is withdrawn, in scope that the data laying beyond the provisions of Art.22 (1) of the Labour Code has been sent in application documents,
until the consent is withdrawn (in case of expressing the consent for processing personal data also for future recruitment projects), however, no longer than 12 months from the date of expressing the consent for processing data for this purpose.
Art. 6 (1) lit. (b) GDPR, i.e. for the purpose of entering into employment agreement or cooperation agreement with the Processor, within the scope of data, specified in Art. 22 (1) of the Act on June 26th, 1974 “The Labour Code”(Journal of Laws of 2018, item 917 with further amendments) (hereinafter referred to as „Labour code”);
Art. 6 (1) (a) GDPR, i.e. upon consent, in scope that the data laying beyond the provisions of Art.22 (1) of the Labour Code, not required by the Processor, have been sent in application documents,
Art. 9 (2) ( b) GDPR, i.e. for the purpose of execution of the Processor’s obligations under labour law, expressed in conducting pre-employment health examination before entering into employment agreement.
In recruitment involving external entities, personal data of candidates have been provided by entities, such as recruitment agencies, supporting the Processor with recruitment process. The Processor declares that processes personal data upon art. 22(1) of the Labour Code and personal data, falling outside this scope, provided voluntarily by the candidate.
Personal data can be transferred to entities supporting the Processor in recruitment, including those, providing IT systems for recruitment.
2.6. Registering correspondence
Registering correspondence (incl. e-mails)
Personal data are processed within the period of cooperation – when processing data, related to concluded agreement
within the period of potential redress – when electronic correspondence is related to pending proceedings or proceedings to be initiated
until the objection to the processing is expressed – if processing is based on a legitimate interest of the Processor.
Art. 6 (1) (b) GDPR, i.e. in scope determined by the execution of agreements concluded;
Art. 6 (1) (f) GDPR, i.e. upon legitimate interest of the Processor, expressed in registering the incoming and outgoing correspondence.
providers of IT solutions, used for the purpose of registering the correspondence,
August Storck KG (with regard to electronic mail)
2.7. Cookie files
Adjustment of websites to users’ needs; optimization of websites.
Personal data are processed until the consent for processing is withdrawn. Withdrawal of the consent is effective solely by end users’ change of browser settings what prevents it from collecting data from cookies files.
Art. 6 (1) (a) GDPR, i.e. upon consent for processing personal data.
Information on the processing of personal data within the scope of our website, in particular on handling of usage data for the purpose of web analysis and website optimisation, as well as on the use of tracking technology, cookies and social plugins or share buttons can be found in the website privacy policy (https://www.storck.pl/pl/polityka-prywatnosci/) There you will also find information on security measures we use for online transmissions.
August Storck KG is the recipient of your data.
2.8. Contests
Organizing contests and lotteries
Data are processed until the contest/lottery is settled. If there is an obligation to transfer personal data to tax office, data are being processed for 5 years from the end of the year when the tax duty accrued.
Art. 6 (1) (a) GDPR, i.e. upon consent, expressed by a participant of the contest or lottery
Art. 6 (1) (c) GDPR, i.e. for execution of legal obligations on tax settlements
external entities, supporting the Processor in organizing such contests or lottery.
We transfer your data within the company to the responsible departments. Within the Storck group of companies, we may transfer data for internal administrative purposes (e.g. for joint supplier management) if there is a legitimate interest in doing so (Art. 6(1)(f) GDPR).
In the cases mentioned in this policy, we also transfer your data to third parties (e.g. if this is necessary to answer an inquiry). In addition, we may transfer personal data to data processors used by us for the above-mentioned purposes, in particular to the extent that they support us with IT, supporting the processor in promotional and merchandising campaigns, other. In order to obtain the information specified in Section 2.1 f) (Checking creditworthiness of our partners), we will transmit the data to our parent company August Storck KG (Waldstraße 27, 13403 Berlin, Germany) as our data processor. All data processors working for us are duly obliged to comply with data protection regulations.
Furthermore, we may transfer data to government agencies if we are legally entitled and obliged to do so (e.g. to fulfil tax reporting obligations).
A transfer to countries outside the European Economic Area will only take place if it is necessary to achieve the respective purpose and if the requirements of Chapter V of the GDPR are fulfilled (e.g. if the EU Commission has passed a resolution on the adequacy of the data protection in the third country concerned according to Art. 45 GDPR, if we have agreed standard data protection clauses according to Art. 46 GDPR with the recipient or if such measures are not required in exceptional cases according to Art. 49 GDPR).
Storck has taken necessary technical and organisational measures to protect the personal data you have provided against loss, destruction, manipulation and unauthorised access. Our employees and all persons involved in data processing are obliged to comply with data protection laws and to treat personal data confidentially. Our employees are trained accordingly.
5. Rights on processing personal data
5.1 Data protection law grants you a number of rights with regard to data relating to you (so-called data subject rights).
Data subjects are entitled to: the right to access to their personal rights, the right to correction, the right to deletion, the right to limit its processing, the right to transfer, the right to object as well as the right to claim to competent data protection authority (in Poland: to the President of the Personal Data Protection Office).
5.2 If you expressed the consent for processing your personal data, the consent may be withdrawn at any time, without affecting the compliance of processing with data protection regulations, if such processing has occurred prior to withdrawal;
5.3 Your personal data shall be deleted as soon as they are no longer required for the purposes for which they were processed and insofar as there are no legal obligations to retain them.
6. No Obligation to Provide Data
When Processing data of data subject – it is necessary to process the data in order to commence cooperation; within other types of use – providing data is voluntary;
7. No Automated Individual Decision-Making
The processor does not take any action on your personal data on the basis of automated individual decision-making (including ‘profiling’).