Information on the processing of personal data

Please be advised that we process your personal data. Due to the entry into force of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals in connection with the processing of personal data and in the case of the free flow of such data and repealing Directive 95/46/EC (general data protection regulation), hereinafter referred to as "RODO", below we present information on the processing of personal data and the rules of their processing.

I. who is the administrator of your personal data

The administrator of your personal data is DPI sp. Z oo ul. Fabryczna 14, 53-609 Wrocław, NIP: 8982136566 (hereinafter as the "administrator" or "we").

II. How to contact us to get more information about the processing of your personal data?

We did not designate the Data Protection Inspector. In matters of processing your personal data, contact us:

• by e-mail: biuro@drukarniadpi.pl,
• in writing to the address: DPI sp. Z oo, ul. Fabryczna 14, 53-609 Wrocław.

III. What are the purposes of data processing and the legal basis for the processing of your personal data?

Your personal data is processed on the basis of:

1. art. 6 para. 1 liter of GDPR, when it is made to conclude a contract with us, start a service for your services or selling goods, in order to perform your contract concluded with us;
2. art. 6 para. 1 lit. C of the GDPR, when the processing is necessary to fulfill the legal obligation incumbent on the administrator (e.g. considering complaints, tax and accounting settlements, fulfillment of obligations related to storage of documents);
3. art. 6 para. 1 lit. D GDPR, when the processing is necessary to protect the vital interests of the data subject, or another natural person;
4. art. 6 para. 1 lit. F GDPR, when processing is necessary for the purposes arising from legitimate interests (such as, e.g. investigation, determination, defense against claims, securing information in the event of a legal need to demonstrate facts, debt collection; the data subject is a child;
5. art. 6 para. 1 lit. And the GDPR, when you experience voluntary consent to the processing of your personal data in one or more specific goals not covered by the provisions indicated above, in particular when you agree to receive our marketing materials (information about our products, promotions and the latest offers).

IV. What data categories do we process?

1. For the purposes indicated in points III.1-III.4 The Administrator may process the following categories of your personal data;
   • in the case of potential customers: name and surname, e -mail address, telephone number,
   • In the case of customers: name and surname, address or delivery, telephone number, NIP, e -mail address.
2. In addition, pursuant to art. 6 paragraph 1 lit. And the GDPR, you can consent to the processing of her/his data for purposes other than indicated in point III.1-III.4. Each time such consent will be granted for the purpose and extent described in the content of your individual statement, and the provision of this data and these consents in this respect is voluntary.

V. Who can be the recipient of your personal data?

Your personal data can be provided with the following categories of entities:

• entities providing consulting, consultation, audit, legal, tax or accounting services;
• entities providing IT, ICT, hosting services,
• entities providing payment services,
• entities providing postal or courier services,
• entities providing debt collection services or purchasing claims (in order to defend our claims under the contract);

VI. Will we transfer your personal data to a third country or an international organization?

Your personal data may be transferred outside the European economic area to such entities as:

• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, United States of North America,
• Hubspot Inc., 25 First Street, 2nd Floor Cambridge, has 02141, United States of North America,
• The Rocket Science Group LLC, 675 Ponce de Leon Ave Ne, Suite 5000, Atlanta, GA 30308, United States of North America.
• Meta Platforms, Inc. One Hacker Way; Menlo Park, Ca 94025; USA
• LinkedIn Corp. 1000 West Maude Avenue, Sunnyvale, Ca 94085, USA

Please be advised that the European Commission has not expressed an opinion as to the appropriate degree of personal data protection represented by the United States. However, the entities mentioned above are the participants of Privacy Shield Framework. You can find out more about Privacy Shield Framework at: https://www.privacyshield.gov/program-Overview.

VII. How long will we process your personal data?

We process your data until the end of the limitation period for potential claims related to the conclusion of the contract and/or the provision of services or the sale of goods or the sale of goods, but not shorter than it results from the provisions of the law regarding tax and accounting obligations

VIII. What are your rights related to the processing of personal data?

You are entitled to:

1. the right to access your data and receive their copies;
2. the right to rectify (correct) your data;
3. The right to delete data: If you think there is no reason for us to process your data, you can demand that we delete it;
4. Data processing restrictions: You can demand that we limit the processing of your personal data only to storing or performing actions agreed with you, if you think you have incorrect data on your topic or we process it unjustly; or you do not want us to remove them because you are needed to determine, investigate or defend claims; or for the time of your opposition to data processing;
5. The right to object to data processing: You also have the right to object to the processing of your data on the basis of a legitimate interest for purposes other than direct marketing, as well as when processing is necessary for us to perform the task implemented in the public interest or to exercise public authority entrusted to us. You should then indicate you a special situation that you think justifies the cessation of processing that we oppose. We will stop processing your data for these purposes, unless we show that the grounds for our data processing are superior to your rights or that your data is necessary for us to determine, investigate or defend claims;
6. The right to transfer data: you have the right to receive from us in a structured, commonly used format suitable for machine reading (eg ".csv" format Personal data of you, which was provided to us on the basis of a contract or your consent. You can order us to send this data to directly another entity;
7. the right to lodge a complaint to the supervisory authority: If you think that you are processing your data unlawfully, you can submit a complaint in this matter to the President of the Office for Personal Data Protection or other competent supervisory authority;
8. The right to withdraw consent to the processing of personal data: you have the right to withdraw your consent to the processing of these personal data that we process on the basis of your consent. Withdrawal of consent will not affect the lawfulness of the processing, which was made on the basis of your consent before its withdrawal.

As a result of processing, no decisions will be made in an automated manner, including in the form of profiling.

IX Information on the requirement/voluntary provision of data

Providing your data by you is voluntary, however, to the extent given in point IV.1, it is a necessary condition enabling the conclusion of the contract, its performance and the performance of the service.