On May 25, 2018, the EU personal data protection regulation came into force - 2016/679 EU Regulation by the European Parliament and Council dated April 27, (protection of physical individuals) concerning the processing of personal data and the free movement of such data, replaced 95/46 EC Directive (referred to as „GDPR").
Thus, we would like to inform you about the principles of processing your personal data by us.

Information clause

The controller of your data is CARDMAN Krzysztof Wołoszyn and the company CARDMAN Sp. z o.o., with headquarters in Krakow, 49 Lipska street, hereinafter referred to as CARDMAN. The personal data provided by you (name and surname, company name, tax identification number, National Business Registry Number, PESEL, telephone number, e-mail address, Polish Company Register) will be processed for the following purposes:
a) performance of the contract for the purchase and sale of products and services offered by CARDMAN - pursuant to art. 6 sec. 1 point b) GDPR - processing is necessary to perform the contract, until the completion of the contract;
b) direct marketing - pursuant to art. 6 sec. 1 point f) GDPR - relevant to legitimate interest of CARDMAN Krzysztof Wołoszyn, until the completion of the contract or any objections to data processing;
c) finance and accounting - pursuant to art. 6 sec. 1 point c) GDPR - processing is necessary to comply with the law, including tax, including Article 74 of the Accounting Act, until required by the applicable tax law;
d) defense against claims and redress - pursuant to art. 6 sec. 1 point f) GDPR - relevant to legitimate interest of CARDMAN, until the claims period expires in accordance with the Civil Code;
e) conducting complaint processes - pursuant to art. 6 sec. 1 point f) GDPR - relevant to legitimate interest of CARDMAN, for a period of 5 years from the completion of the contract;

In connection with the purposes referred to above, the recipients of your personal data may be entitled to intermediation in the contractual obligations performed by the controller, e.g. IT service providers, accounting services, law firms.

You have the right to access your data and the right to rectify, delete, limit processing, the right to transfer data, the right to object (e.g. if the data is processed on the basis of your consent, or for marketing purposes or sharing your data); you have the right to withdraw your consent at any time. In order to withdraw your consent, you can contact the CARDMAN office or send an e-mail to the following address: biuro@cardman.pl. You have the right to lodge a complaint with the supervisory body - the President of the Personal Data Protection Office (formerly GIODO).