INFORMATION CLAUSE FOR B2B PARTNERS / CONTACTORS

INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA

In connection with the processing of your personal data, we inform you – in accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, 4.5.2016, p. 1), hereinafter referred to as "GDPR," that:

I. DATA CONTROLLER

The controller of your personal data is Lynka Sp. z o.o. You can contact the Controller in writing via traditional mail at the address: ul. Ppor. Mieczysława Majdzika 16, 32-050 Skawina, via email: kontakt@lynka.pl, or by phone at: +48 12 293 80 00.

II. LEGAL BASIS AND PURPOSES OF PERSONAL DATA PROCESSING

Your personal data will be processed for the purpose of:

1) conclusion and performance of the contract, including making necessary payments, contacting you (legal basis: Article 6(1)(b) and (f) of the GDPR),

2) fulfilling tax, accounting, and other legal obligations incumbent on the Controller (legal basis: Article 6(1)(c) of the GDPR),

3) possible establishment or pursuit of claims or defense against claims (legal basis: Article 6(1)(f) of the GDPR).

III. INFORMATION ON THE REQUIREMENT/VOLUNTARINESS OF PROVIDING DATA AND THE CONSEQUENCES OF NOT PROVIDING PERSONAL DATA

The provision of personal data is voluntary, but necessary for the conclusion and execution of the contract. The provision of data necessary for invoicing is a statutory requirement and results from the Value Added Tax Act.

IV. RECIPIENTS OF PERSONAL DATA

1. The recipients of your personal data will only be entities authorized by law, including the National Revenue Administration or other state authorities. Your personal data will also be shared with banks where the Controller has bank accounts.

2. Your data may be transferred to entities processing it on behalf of the Administrator, e.g. IT service providers, entities providing accounting services, legal and advisory services and other entities processing data for the purposes specified by the Administrator - such entities process data only on the basis of a contract with the Administrator.

V. PERIOD OF PERSONAL DATA STORAGE

Your personal data will be processed for the duration of the contract and then:

1) for tax and accounting purposes - for a period of 5 years from the end of the calendar year in which the tax payment deadline has passed,

2) for the purpose of possible determination or pursuit of claims or defense against claims - for a period of 3 years from the end of cooperation/performance of the contract, and in the case of pending proceedings, until their legally binding conclusion and until the claims become time-barred.

VI. RIGHTS OF DATA SUBJECTS

In connection with the processing of personal data, you have the right to:

1. Access your personal data.
2. Obtain a copy of your personal data.
3. Rectify your personal data.
4. Erase your personal data.
5. Restrict the processing of your personal data.
6. Object to the processing of your personal data.
7. Withdrawal of consent to the processing of personal data at any time without affecting the lawfulness of the processing carried out prior to its withdrawal – if the processing is based on consent given to us,

in the cases and under the conditions specified in the GDPR. The rights listed above can be exercised by contacting the Administrator.

VII. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that your personal data is being processed by the Controller in violation of the GDPR.