PRIVACY POLICY

Information Clause on the Processing of Personal Data for GLI-THERM Customers

In compliance with the obligation set out in Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “GDPR”), GLI-THERM informs that:

  1. The data controller is GLI-THERM sp. z o.o. with its registered office in Jastrzębie-Zdrój, address: ul. Rozwojowa 11, 44-338 Jastrzębie-Zdrój, entered in the National Court Register – Register of Entrepreneurs maintained by the District Court in Gliwice, 10th Commercial Division, under KRS number 0000409483, NIP 6423178990, with a share capital of PLN 75,800 (hereinafter “Company”).
  2. The Company has not appointed a Data Protection Officer.
  3. To exercise the rights of individuals whose data is being processed, please contact us at gdpr@glitherm.com.
  4. Personal data will be processed when the data subject has given their consent (Article 6(1)(a) GDPR), and also for the following purposes:
    1. Conclusion and execution of contracts, for the duration of these contracts – the legal basis for processing is the necessity to conclude a contract (Article 6(1)(b) GDPR);
    2. Direct marketing of the Company’s products and services until the data subject objects to the processing of their data for this purpose – the legal basis for processing is the legitimate interests of the Company (Article 6(1)(f) GDPR);
    3. Responding to inquiries from the data subject – for the period necessary to provide a response or take appropriate actions – the legal basis for processing is the legitimate interests of the Company (Article 6(1)(f) GDPR) or actions taken at the request of the data subject (Article 6(1)(b) GDPR);
    4. Fulfillment of the Company’s legal obligations (e.g., tax, accounting, complaint handling, or other legal requirements) – for the duration of these obligations or for the period necessary to demonstrate compliance with such obligations to authorized authorities – the legal basis for processing is the Company’s legal obligation (Article 6(1)(c) GDPR);
    5. Establishment, defense, and pursuit of claims – for the period after which claims become time-barred (e.g., those arising from contracts) or for the duration of any legal proceedings – the legal basis for processing is the Company’s legal obligation (Article 6(1)(c) GDPR).
  5. Personal data will be shared with third parties cooperating with the Company (e.g., courier, accounting, and legal firms) as well as other entities as required by applicable law.
  6. Personal data will be stored for a period of 7 years, but not less than the expiration of the limitation period for claims.
  7. Personal data will be processed on behalf of the data controller by individuals authorized to do so.
  8. The data subject has the right to:
    1. Access their personal data;
    2. Request rectification if the data is incorrect or outdated;
    3. Request deletion, restriction of processing, and data portability in cases provided for by law;
    4. Object to the processing of their data;
    5. Lodge a complaint with the President of the Office for Personal Data Protection if their data is processed unlawfully.
  9. Decisions regarding personal data will not be made in an automated manner.