Polski
English
Home
Information about personal data
- Personal data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR.
- The administrator of personal data is Toruńskie Zakłady Materiałów Opatrunkowych S.A., ul. Żółkiewskiego 20/26, 87-100 Toruń. In the scope of personal data of the administrator's contractors, personal data of persons employed by or applying for employment with the administrator (based on an employment contract or other agreement), entities dependent on Toruńskie Zakłady Materiałów Opatrunkowych S.A. belonging to the TZMO Group may also be administrators (co-administrators) of personal data. The current list of these entities is available on the website www.tzmo-global.com/RODO
- For matters concerning the processing of personal data and the exercise of rights related to personal data processing, you can contact the Data Protection Officer. Mr. Jan Stemposz, Toruńskie Zakłady Materiałów Opatrunkowych S.A. ul. Żółkiewskiego 20/26, 87-100 Toruń, e-mail address: iod@tzmo.com.pl.
- The Administrator processes personal data in particular:
- on the basis of Article 6(1)(a) of the GDPR – the data subject has given consent to the processing of his or her personal data for one or more specific purposes – in particular for the purpose of maintaining contact with the data subject; sharing or providing (also by e-mail) commercial information, other information or product samples; organizing, conducting and documenting events, including competitions, promotions and other marketing activities;
- on the basis of Article 6(1)(b) of the GDPR – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract – in particular for the purpose of fulfilling all rights and obligations arising from contracts concluded by the administrator;
- on the basis of Article 6(1)(c) of the GDPR – processing is necessary for compliance with a legal obligation to which the administrator is subject – in particular for the purpose of fulfilling the administrator's rights and obligations arising from applicable legal provisions, in particular in the field of tax law, labor law and social security;
- on the basis of Article 6(1)(f) of the GDPR – processing is necessary for the purposes of the legitimate interests pursued by the administrator – in particular for the purpose of pursuing claims.
- Recipients of personal data are persons employed by the administrator (based on an employment contract or other agreement) and trusted entities cooperating with the administrator – to the extent necessary to achieve the processing purposes; personal data may also be disclosed to public authorities and other entities authorized to do so on the basis of legal provisions, at their request.
- The administrator does not intend to transfer personal data to a third country or an international organization.
- Personal data is stored:
- in the case of data processed on the basis of Article 6(1)(a) of the GDPR – until the processing purposes specified in the granted consent are achieved;
- in the case of data processed on the basis of Article 6(1)(b) of the GDPR - until all obligations related to the performance of the contract are fulfilled by the parties, and then until the expiration or statute of limitations period for any claims related to the contract;
- in the case of data processed on the basis of Article 6(1)(c) of the GDPR – until the legal obligation imposed on the administrator is fulfilled, in particular the obligation to retain documentation;
- in the case of data processed on the basis of Article 6(1)(f) of the GDPR – until the processing purposes are achieved, in particular until the claim is satisfied, expires or becomes time-barred.
- The data subject has the right to request from the administrator access to their personal data, and in cases specified in the GDPR, also their rectification, erasure or restriction of processing; they also have the right to data portability.
- The data subject has the right to lodge a complaint with the legally foreseen supervisory authority for personal data protection if they believe that the processing of their personal data violates the provisions of the GDPR.
- In the case of personal data processed on the basis of Article 6(1)(a) of the GDPR, the provision of personal data is not a statutory or contractual requirement and is voluntary; however, the consequence of not providing data may be the inability or difficulty in achieving the processing purposes, in particular lack of contact with the administrator; non-disclosure or non-delivery of commercial information, other information or product samples; inability to participate in events, including competitions, promotions and other marketing activities. In other cases, the provision of personal data may be a statutory or contractual requirement if so stipulated by law or contract.
- In connection with the processing of personal data by the administrator, automated decision-making, including profiling, does not occur.