Privacy Policy DUKO Sp. z o.o.

Ladies and Gentlemen!

Below we present the most important information on the principles of personal data processing in relations with DUKO Sp. z o.o. as well as cookies and other technologies that are used on the www.duko.pl website.

PERSONAL DATA ADMINISTRATOR

The personal data controller is DUKO Sp. z o. o. with registered office at 14 Małopolska Street, (81-555) Gdynia, registered with the District Court of Gdańsk Północ in Gdańsk, VIII Commercial Division of the National Court Register (KRS) 0000236920, Tax Identification Number (NIP): 5862152785, REGON: 220069300, hereinafter referred to as the Company.

CONTACT DETAILS

In all matters related to the protection and processing of personal data in the Company you may contact the Administrator

by post at the address of the manufacturing plant DUKO Sp. z o.o. : 1c Składowa Street, (89-400) Sępólno Krajeńskie.
by e-mail: malgorzata.p@duko.pl or by telephone +48 52 338 37 78

PROCESSING OF PERSONAL DATA OF NATURAL PERSONS

Users of the www.duko.pl website
Candidates to work
Customers and business partners
Staff of customers and business partners

FINAL PROVISIONS

There may be changes in this document which may be affected by the development of internet technology, changes in data protection law and the development of our website. Any changes will be communicated to you immediately in a visible and understandable manner.

Users of the www.duko.pl website

Personal data sent in the forms or directly to the Company’s e-mail addresses are processed for the purpose:

PURPOSES OF PROCESSING	LEGAL BASIS FOR DATA	RETENTION
establishment of commercial relations – sale of services	processing is necessary for the purposes of the legitimate interests of the controller (Article 6(1)(f) GDPR)	consisting of seeking to sell the services until an effective objection / request for removal is made
answering the inquiry and other information sent by means of forms available on the website, by e-mail, by phone or through social media, which serve to develop the subject matter and conditions of the contract;	processing is necessary to take action before concluding the contract (Article 6(1)(b) GDPR)	until the termination of the contract
recovery and defence against claims;	processing is necessary for the purposes of the legitimate interests of the controller (Article 6(1)(f) GDPR) – defending the interests of the entrepreneur	6 years after the end of cooperation

Cookies and Other Tracking Technologies

Www.duko.pl, like almost all other websites, uses cookies.
Cookies are small text information, stored on your terminal equipment (e.g. computer, tablet, smartphone), which can be read by the ICT system (own cookies) or the ICT system of third parties (third party cookies). Some of the cookies used in the Service are deleted after the end of the Internet browser session, i.e. after it is closed (so-called session cookies). Other cookies are stored on the terminal device and allow us to recognize your browser at the next entrance to the Service (permanent cookies). During the first visit to the site you are displayed information on the use of cookies. You can change the settings of cookies from your browser or delete [clear] cookies at all. The browsers manage the cookie settings in various ways. In the auxiliary menu of your browser you will find an explanation for changing the cookie settings.
NOTE. Disabling or limiting the use of cookies may cause difficulties in using the Website as well as many other websites that use cookies. Website Users’ data contained in cookie files are processed for the purpose:

PURPOSES OF PROCESSING	LEGAL BASIS	DATA RETENTION
ensuring the proper functioning of the website	is necessary for the purposes of legitimate interests	data from cookies will be stored depending on the type of file: a. for the duration of use of the website (session files)

Server Logs

Using www.duko.pl involves sending queries to the server where the website is stored. Each query addressed to the server is saved in the server logs. The logs include, among others, your IP address, date and time of the server, information about your web browser and operating system you are using. Logs are saved and stored on the server. The data stored in the server logs are not associated with specific individuals using the site and are not used by me to identify you. The server logs are only a support material for administering the website and their content is not disclosed to anyone except for persons authorized to administer the server.

Service Data Recipients

Personal data may be transferred to the following recipients:- entities supporting the Company in its activities on our behalf, in particular:

about suppliers of external ICT systems supporting the Company’s operations, including Microsoft,
about the provider of hosting and webmail services.

Rights of the Data Subject

You have:

– the right to access your personal data (including obtaining a copy of your personal data),
– The right to rectify (correct) your personal data,
– the right to request erasure where the controller no longer has a legal basis for processing, where the data are no longer necessary for the purposes of processing or have been processed unlawfully, or where the data subject has withdrawn the consent on which the processing was based,
– the right to limit the processing of personal data.

Where the processing of personal data is based on a person’s consent to the processing of personal data (Art. 6(1)(a) GDPR), you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the conformity of the processing, which was carried out on the basis of consent before its withdrawal, with the applicable law.

If you become aware of unlawful processing of your personal data, you have the right to lodge a complaint with the supervisory body, which is the President of the Office for Personal Data Protection, with its registered office in Warsaw, at 2 Stawki Street, 00-193 Warsaw. In order to exercise the aforementioned rights, the data subject should contact the Administrator using the contact details provided and inform which right and to what extent he/she wants to exercise it. If the Administrator is not able to identify the person on the basis of the application made, he will ask the Applicant for additional information.
In order to prevent your rights or freedoms from being violated due to a breach of security of your personal data, we inform you that we will not exercise any of your rights under Articles 15-21 of the GDPR in a telephone conversation.

Information about the Data Requirement

The provision of personal data is voluntary. Failure to provide personal data, where providing personal data is voluntary and is not a statutory or contractual requirement, results in the Administrator’s inability to provide maintenance services, including the inability to answer the questions asked.

Candidates for the job

Applications should be sent to the address indicated in the advertisement in the title of the correspondence by writing “Recruitment”.

Please include a statement of contents in the application:
“I agree to the processing of my personal data contained in the application documents for the purpose of the recruitment procedure.”

If you wish to take part in further recruitments conducted by the employer, please include an additional statement in your CV:
“I agree to the processing of my personal data in order to use them in subsequent calls for the next 12 months”.

Purposes of the processing and legal basis of the processing

Your personal data will be processed for the purpose of the employment law: conducting the current recruitment procedure. The legal basis for the application of the data referred to in this announcement is art. 22¹ § 1 and 4 of the Labour Code and art. 6.1.c of the GDPR, so the person responding to the following recruitment announcement is obliged to submit them. Other personal data, including telephone and e-mail contact details, will be processed on the basis of the consent given, which may be revoked at any time. The legal basis is Article 6(1)(a) of the GDPR. If the documents contain the data referred to in Article 9(1) of the GDPR, your consent to the processing of these data will be required, which can be revoked at any time. The legal basis is Article 9(2)(a) of the GDPR. If you give your express consent, the controller will process your personal data, also in subsequent recruitments.

Profiling

Your personal data shall not be subject to profiling, understood as any form of automated processing of personal data which involves the use of personal data to evaluate certain personal factors of an individual, in particular to analyse or forecast aspects relating to the individual’s performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movement.

Time of data processing

Your data collected during the current recruitment process will be stored until the end of the recruitment period.
The data of persons not selected in the recruitment process concerning the employment will not be further processed as a result of this recruitment announcement and their personal data will be destroyed in a way that makes it impossible to retrieve them.
In the case of your consent to the use of your personal data for the purposes of future recruitment, your data will be kept until revoked or for a maximum of 12 months from the date of application.
If the processing of personal data is based on the person’s consent to the processing of personal data (art. 6.1.a GDPR) you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the conformity of the processing, which was carried out on the basis of consent before its withdrawal, with the applicable law.

Data recipients

Personal data may be transferred to the following recipients:

– entities which process your personal data on behalf of the Company on the basis of an agreement of entrustment concluded with the Company for the processing of personal data (so-called processing entities), e.g. providing IT services, postal services, legal services and other services supporting the Company’s operations,
– other entities that can demonstrate the legal basis for their acquisition

Transfer of data to a third country

As a general rule, the controller shall not transfer your personal data to a third country or international organisation.

Rights of the data subject

You have:

the right to access your personal data (including obtaining a copy of your personal data),
The right to rectify (correct) your personal data,
the right to request erasure where the controller no longer has a legal basis for processing, where the data are no longer necessary for the purposes of processing or have been processed unlawfully, or where the data subject has withdrawn the consent on which the processing was based,
the right to limit the processing of personal data,
The right to object to the processing of personal data for legally justified purposes by the Company.

In case you become aware of illegal processing of your personal data, you have the right to lodge a complaint to the supervisory body, which is the President of the Office for Personal Data Protection, with its registered office in Warsaw, Stawki 2, 00-193 Warsaw.

In order to exercise the aforementioned rights, the data subject should contact the Company using the contact details provided and inform which right and to what extent he/she wants to exercise it.

If the Company is not able to identify the person on the basis of the submitted application, it will ask the Applicant for additional information.

In order to prevent a breach of your rights or freedoms due to a breach of security of your personal data, we inform you that we will not exercise any of your rights under Articles 15-21 of the GDPR in a telephone conversation.

Information about the data requirement

The provision of your personal data is voluntary. The provision of your personal data is a prerequisite for the conclusion and implementation of the contract, in accordance with the provisions of generally applicable law. The consequence of failure to provide personal data required by law is the impossibility of concluding and performing the contract.

Individual/Business Customers and Contractors

Purposes of the processing and legal basis of the processing

Your personal data will be processed for the purpose:

establishing a commercial/services relationship where processing is necessary for the purposes of the legitimate interests of the controller (Article 6(1)(f) GDPR)
the conclusion and performance of a commercial/services contract where processing is necessary to take action prior to the conclusion of the contract and the performance of the contract (Article 6(1)(b) GDPR)
work organisation, document circulation, keeping a register of correspondence and a register of contracts – the legal basis for processing is the necessity of their processing to fulfil the Administrator’s legally justified interest (Article 6(1) f of the GDPR),
keeping the Administrator’s accounts – the legal basis for the processing is the necessity of their processing in order to fulfil the legal obligation incumbent on the Administrator (Art. 6(1)(c) of the GDPR), resulting from generally applicable legal regulations, in particular the Tax Ordinance Act of August 29, 1997, the Accounting Act of September 29, 1994 and the Goods and Services Tax Act of March 11, 2004,
conducting evaluations and classifications of subcontractors and the quality of their work and statistical analyses – the legal basis for processing is the necessity of their processing to fulfil the Administrator’s legitimate interest (Article 6(1) f of the GDPR),
to assert and defend against claims where processing is necessary for the purposes of the legitimate interests of the controller (Article 6(1)(f) GDPR),
marketing own services, through the chosen communication channel [tel., e-mail, social media], based on the person’s consent to the processing of personal data (Article 6(1)(a) GDPR).

Profiling

Time of data processing

Your personal data will be kept for the period necessary to achieve the purposes and thereafter for the period and to the extent required by generally applicable law:

personal data obtained in connection with the conclusion of a contract will be processed until the end of the statute of limitations for claims under the contract;
I store basic contact details (name, surname, date of birth, e-mail address, telephone number) for the purposes of direct marketing of my services until you object to their processing and for this purpose, you revoke your consent;
I keep the data necessary for accounting or tax purposes for a period of 6 years, counting from the end of the calendar year in which the payment deadline for the tax related to the service performed expired.

Where the processing of personal data is based on a person’s consent to the processing of personal data (Article 6(1)(a) of the GDPR), you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the conformity of the processing, which was carried out on the basis of consent before its withdrawal, with the applicable law.

Data categories

The personal data transmitted for the purposes of achieving the objectives are ordinary data and include the following categories of data:
– Name and surname, company e-mail address, company contact telephone, position.

Source of data collection

Your data were obtained directly from you or from the central economic records, i.e. CEIDG or KRS.

Data recipients

The recipients of your personal data may be:

entities which provide me as the Administrator with the so-called hosting services, i.e. they ensure the functioning and maintenance of my website, e-mail, and provide electronic documentation transfer services;
other entities that will demonstrate the legal basis for obtaining them.

Transfer of data to a third country

As a general rule, the controller shall not transfer your personal data to a third country or international organisation.

Rights of the data subject

You have:

the right to access your personal data (including obtaining a copy of your personal data),
The right to rectify (correct) your personal data,
the right to request erasure where the controller no longer has a legal basis for processing, where the data are no longer necessary for the purposes of processing or have been processed unlawfully, or where the data subject has withdrawn the consent on which the processing was based,
the right to limit the processing of personal data,
The right to object to the processing of personal data for legally justified purposes by the Company.

In order to exercise the aforementioned rights, the data subject should contact the Company using the contact details provided and inform which right and to what extent he/she wants to exercise it.

If the Company is not able to identify the person on the basis of the submitted application, it will ask the Applicant for additional information.

Information about the data requirement

Your failure to provide personal data, where the provision of personal data is voluntary and is not a statutory or contractual requirement, will result:

inability to provide the service by the Administrator;
inability to conduct direct marketing;
inability to answer your questions.