INFORMATION CLAUSE

Pursuant to Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC [ hereinafter referred to as GDPR ], we hereby inform you that the Data Controller of your personal data is Medisept sp. z o.o. with its registered office in Konopnica 159 C, 21-030 Motycz, Tax ID No. (NIP): 946-00-10-016.

Your personal data is processed by Medisept sp. z o.o. for the following purposes:

1) implementation of the agreement (establishment of cooperation, credit verification, conclusion of the agreement and any other applicable operations to achieve these objectives), pursuant to Article 6(1)(b) of GDPR;

2) compliance with legal obligations imposed on the Data Controller, in particular as regards accounting and tax settlements, pursuant to Article 6 (1)(c) of GDPR;

3) for the purposes resulting from legitimate interest pursued by the Data Controller or a third party, which according to the Data Controller includes in particular the following: investigation and defence against claims; as well as performance of analytics and business planning, pursuant to Article 6(1)(f) of GDPR;

Depending on the channel used by the Customer to establish relations with Medisept sp. z o.o., the data may also be processed via phone, e-mail or post. Personal data may be disclosed to employees or co-workers of the Company, as well as to entities providing support to the Company on the basis of commissioned services, in particular entities providing courier, transport, postal, legal services, as well as to Business Partners in accordance with concluded agreements and to entities authorized under the provisions of law. Personal data may also be made available to banks, credit institutions in order to manage payments and to insurers with regard to insurance coverage.

The data mentioned above may be obtained from the person concerned as well as from third parties. The provision of relevant data obtained on the basis of legal requirements or for the purpose of realisation of the contractual relationship is necessary for conclusion and performance of the agreement, and therefore failure to provide the required data will result in the non-conclusion and non-performance of the agreement.

The personal data will be kept in a complete manner for the entire term of the agreement. The personal data will then be stored for ten years in accordance with legal requirements. It is possible to store all or part of your personal data for a longer period of time in order to exercise or defend your rights, as well as for analytical and business planning purposes.

Providing your personal data is voluntary, but it is necessary to conclude a sale transaction. Failure to provide your personal data makes it impossible to conclude and perform the agreement [ e.g. realisation of delivery, settlements ].

The legislation in force gives the Data Subject a number of rights, which we warmly encourage you to familiarize yourself with. You have the right to (among others):

– access to your personal data [ within the limits of Article 15 of GDPR], rectify it [ within the limits of Article 16 of GDPR ], delete it [ within the limits of Article 17 of GDPR ], restrict its processing [ within the limits of Article 18 of GDPR ], object to the processing of your personal data [ within the limits of Article 21 of GDPR ].

The Customer has also the right to lodge a complaint with the President of the Office for Personal Data Protection if he/she thinks that the processing of his/her personal data violates the provisions of GDPR.

In order to exercise the aforementioned rights, please contact the Data Controller by sending your requests to the following e-mail address: rodo@medisept.pl or in writing to the following address: Medisept sp. z o. o., Konopnica 159 C, 21-030 Motycz.