This document implements the information policy for visitors to www.westatre.pl website, as well as those contacted by phone and email, in all aspects of the processing and protection of personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR").

Filling out the contact form available at www.westatre.pl implies your consent to the processing of personal data listed in item 2, for the purposes indicated below.

1. Personal data controller

   The controller of your personal data is WESTA TRE sp. z o.o., address: Gorzowska street No. 7, 65-127 Zielona Góra, NIP 9731076583, REGON 38842163700000, registered under KRS No. 0000889475 with the Register of Entrepreneurs of the National Court Register by the District Court in Zielona Góra, share capital of PLN 5 000.00 ("Company").

   You may contact the Company by letter to the following address: Westa Tre Sp. z o.o., ul. Gorzowska 7., 65-117 Zielona Góra or via e-mail: biuro@westatre.pl.

2. The scope of your personal data subject to processing by the controller, the purposes of processing and the legal basis for processing

   The Company will process your following personal data:

   1. first and last name,
   2. telephone number,
   3. e-mail address,

   The personal data listed above will be processed for the purpose of:

   • preparation and presentation of an offer of Company's services following an inquiry received, execution of a contract (basis: GDPR Art. 6(1)(b));
   • esponding to enquiries rceived and conducting correspondence related to the contract (basis: GDPR Art. 6(1)(f));
   • direct marketing of Company's products and analysis of sales and use of Company's services (basis: GDPR Art. 6(1)(a) and (f)).
3. Profiling

   The Company does not use automated data processing, including profiling to make decisions that could affect the rights and obligations or freedoms of data subjects, as defined in GDPR.

4. Retention period of your personal data

   The Company will process personal data, depending on the purpose of processing, for the following periods:

   • if for the purpose of exercising rights and obligations under concluded contract - until its expiry and then for the period of the statute of limitations for claims;
   • if for accounting purposes - until the date of approval of the financial statements for relevant fiscal year, however at least until the date of settlement of persons entrusted with the asset for retail sale;
   • if for tax purposes - at least 5 years of the end of the calendar year of the tax liability,
   • if for bookkeeping purposes - 5 years (the retention period of accounting records);
   • if for internal statistics, reports - until expiry of claims under contracts (up to 10 years of the date of execution, expiry, termination or dissolution of the contract, unless otherwise specified in the contract or applicable law);
   • if for the purpose of document archiving - until expiry of obligations under the contract, and then for the period of the statute of limitations for claims or the period prescribed by legal rgulations;
   • if to defend against claims or if it isnecessary for the Controller to pursue claims - for the period of the statute of limitations for such claims.

   If personal data are processed for direct marketing purposes - the Company retains personal data for the period necessary for the purpose of processing or until an effective objection is submitted. If personal data are processed under a consent - the Company retains personal data for the period necessary for the purpose of processing or until consent is withdrawn.

   Upon expiry of the periods indicated above, personal data will be deleted.

5. Recipients of your personal data

   Your personal data may be transferred to:

   • persons authorised by the Company - employees and associates;
   • entities to which the Company entrusted the processing of personal data (processors) under relevant contracts (including: providers of IT services, consulting companies, courier companies, law firms, etc.);
   • companies affiliated with the Company - group companies;
   • entities the Company will have to reveal the data under legal regulations.
6. Transfer of data outside the European Economic Area

   Your personal data will not be transferred outside the European Economic Area (EEA).

7. Your rights in the processing of personal data

   Due to the processing of your personal data you have the right to:

   • withdraw consent to the processing of personal data;
   • object to the processing of data for marketing purposes;
   • access your personal data;
   • request rectification of personal data;
   • request deletion of personal data;
   • request restriction of processing of personal data;
   • the right to personal data portability, i.e. the right to receive your personal data from the Company, in a structured, commonly used machine-readable computer format. You may transfer these data to another controller or request that the Company transfer your data to another controller (the Company will perform the above obligation only if such transfer is technically possible).

   Right to withdraw consent
   You have the right to withdraw your consent to data processing at any time. The withdrawal of consent will not affect the assessment of the conformity with thelaw of personal data processing by the Company performed based on the consent granted and before its withdrawal.

   The right to object to the processing of personal data
   You have the right to object to the processing of the personal data you provided for our marketing purposes - for reasons related to your specific situation.

   To exercise the above rights, please contact us (contact information as in point 1 above).

   The right to lodge a complaint with the authority
   If the data subject believes that the processing of personal data is being carried out in violation of GDPR, they have the right to lodge a complaint with the supervisory authority - currently the President of the Office for Personal Data Protection.

8. Freedom of providing personal data.

   Providing personal data is voluntary. In certain situations, if you refuse to provide we may not be able to:

   • submit an offer;
   • conclude and implement a contract;
   • respond to an inquiry.