PERSONAL DATA PROCESSING INFORMATION

In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "GDPR"), we inform you that:

The controller of your personal data is MAGLY spółka z ograniczoną odpowiedzialnością, with its registered office in Wilkasy at ul. Niegocińska 1, 11-500 Wilkasy, Poland, registered in the Entrepreneurs Register of the National Court Register under KRS number 0000856301, NIP: 8451996431, REGON: 386829529.

We process your personal data for the purpose of performing this agreement. We process the following categories of data: (i) identification data (first and last name, company name), (ii) address and contact data, (iii) photograph.

We process your personal data: (i) for the purpose of concluding and performing the agreement, on the basis of Article 6(1)(b) GDPR, (ii) to comply with legal obligations imposed on the controller in connection with concluding and performing the agreement, in particular under tax law, on the basis of Article 6(1)(c) GDPR, and (iii) on the basis of our legitimate interests (i.e. the establishment and pursuit of claims), on the basis of Article 6(1)(f) GDPR.

Where necessary, your personal data may be disclosed to entities authorised under applicable law, in particular tax authorities, as well as to external IT service providers maintaining our IT systems, our partners providing physical security and video surveillance, and affiliated entities, where this is necessary.

Your personal data will be stored for the duration of the agreement and, after its termination, for the period required by tax regulations and the limitation period for claims.

You have the right to access the content of your data and the right to rectify, erase or restrict its processing, the right to data portability and the right to object.

You have the right to lodge a complaint with the competent supervisory authority, namely the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), if you consider that the processing of your personal data infringes the GDPR.

Providing your personal data is voluntary, but failure to provide it will make it impossible to perform this agreement.

Your personal data will not be used for profiling or automated decision-making and will not be transferred to third countries.