DATA PROTECTION STATEMENT
In this personal data protection statement we would like to inform, in tranparent manner, all visitors to Prymus websites about the type, scope and purpose of collected, used and processed personal data and to advise on your rights.
The use of our website is, in principle, possible without providing personal data.
If any data is automaticly downloaded while visiting our websites, it is processed in accordance with the current statuary regulations regarding personal data protection.
If the processing of personal data is necessary, and there is no statuary basis for such a processing, we acquire, in principle, the consent necessary to process the data.
As a unit responsible for processing data, we've established technical and organizational mesures to guarrantee protection of your rights at the highest possible level.
1. Contact details:
Personal Data Administrator is:
PHU PRYMUS Zygmunt Grygorczuk
85-079 Bydgoszcz, ul. Kościuszki 27B
NIP: 554-015-82-91, REGON: 090220013
2. Rights regarding the personal data of the persons concerned.
If you have any querries regarding your personal data, you can contact us in writing, via email or over the phone. We will answer your questions as soon as possible.
In accordance with GDRP you have the following rights:
Right to information: (Art.15 GDPR)
At any time, you have the right to obtain information about what categories of personal data and what information we process about you,and for what purpose we do it, as well as how long and by what criteria these data are stored and whether profiling is therefore applied.
In addition, you have the right to know which recipients or the categories of recipients have been disclosed or are still disclosed; in particular for recipients in third countries or international organizations. In this case, you also have the right to obtain instruction on the applicable guarantees in connection with the transfer of your personal data.
In addition to the right to submit a complaint to the supervisory body and the right to obtain information about the origin of your data, you have the right to remove it, correct it, as well as the right to limit its processing or object to the processing of your personal data.
In all of the above-mentioned cases, you have the right to request from the Data Administrator a free copy of your personal data that we process. For all other copies that you request or which go beyond the right to information of a given person, we are entitled to collect an appropriate administrative fee.
The right to rectify data (Art.16 GDPR)
You have the right to demand immediate rectification of personal data being processed and - having regard to the purposes of processing - the right to request the supplementation of incomplete personal data.
If you would like to exercise the right to rectify the data, you can contact the Data Administrator at any time to make the necessary corrections.
The right to delete data (Art.17 GDPR)
You have the right to request immediate deletion of your data ("right to be forgotten"), in particular when data collection is no longer necessary when you have revoked your consent to data processing if your data is being processed unlawfully or unlawfully downloaded and there is a legal obligation to delete data in accordance with European Union law or national law.
The right to be forgotten, however, is not applicable when there is a prevailing right to freedom of opinion or freedom of information, data collection is necessary to fulfill a legal obligation (eg storage obligations), deletion of data is not possible due to AD archiving obligations or collection Data is used to investigate, enforce or defend legal claims.
The right to limit (Art.18 GDPR)
You have the right to request the restriction of processing your data when you question the accuracy of data, its processing is illegal, refuse to delete your personal data and demand a limitation of processing in exchange if the necessary processing purpose ceases to exist or you oppose data processing in accordance with art. 21 par. 1, until it is determined whether the legitimate interests on our part exceed your interests.
The right to move data (Art.20 GDPR)
You have the right to transfer your personal data, in a commonly used form, to transfer it without prejudice to another responsible unit, if, for example, there is consent from you and processing is carried out by means of automated proceedings.
The right to object (Art.21 GDPR)
You have the right to object at any time to the collection, processing or use of your personal data for the purpose of direct sourcing or market research and marketing (promotional) data processing, unless we can provide convincing and demanding evidence for data processing, which the evidence outweighs your interests, rights and freedoms.
In addition, you can not exercise your right to object if the law provides for the downloading, processing and use of data or obliges you to download, process or use this data.
The right to lodge a complaint to the supervisory body (Art.77 GDPR)
You have the right to submit a complaint to the competent supervisory authority if you believe that a breach has occurred in the processing of your personal data.
The right to withdraw consent in relation to the right to the protection of personal data (Art.7.3 GDPR)
Your consent to the processing of your personal data can be canceled at any time without giving a reason. This also applies to the cancellation of statements of consent that were granted to us prior to the entry into force of the European Union regulation on the protection of personal data (RODO).
Legal basis for data processing.
In the case of processing personal data, in connection with which we obtain the consent of persons whose data are processed, the legal basis is Article. 6 par. 1a GDPR.
In the case of processing of personal data necessary for the performance of the contract in which the party to the contract is a person whose data is processed, the legal basis is Article 6 para. 1b GDPR. This regulation also covers data processing events that are necessary for the implementation of pre-contractual activities.
If the processing of personal data is necessary to fulfill the legal obligation to which our company is subject, the legal basis is Art. 6 par. 1c GDPR.
If the processing of data is necessary to preserve the legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not exceed the first priority, then the legal basis for data processing is Art. 6 par. 1f GDPR. The legitimate interest of our company lies in the implementation of our commercial activities and analysis, optimization and maintaining the security of our internet offer.
4. Providing data to third parties.
The transfer of data to third parties exceeding the scope indicated in this statement on the protection of personal data is made only when it is necessary to perform the requested services.
We provide data only if there is an appropriate legal obligation. It happens when state units (eg law enforcement agencies) ask in writing for information or there is a court order.
Your personal data is not transferred to the so-called third countries outside the European Union / European Economic Area.
5. Automated decision making - profiling.
As a unit aware of our responsibilities, due to our duties resulting from what we and our websites offer, we do not use profiling of people visiting our websites.