Information obligation pursuant to Art. 13 para. 1 and 2 of the GDPR

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR), we hereby inform you that:

1) The Controller of your personal data is:

Big Pak s.c.
ul. Żelazna 11
19-300 Ełk
Warmińsko-Mazurskie Voivodeship
NIP: 5423112973
e-mail: biuro@bigpak.pl

2) Contact regarding personal data protection:

In matters related to the processing of personal data, you can contact the Controller via e-mail at: biuro@bigpak.pl or in writing to the company's registered address indicated above.

3) Your personal data will be processed on the basis of:

a) Art. 6 para. 1 lit. a of the GDPR – for the purpose and to the extent necessary to receive marketing materials regarding products and services offered by Big Pak s.c., in accordance with the consent granted, which can be withdrawn at any time;

b) Art. 6 para. 1 lit. b of the GDPR – for the purpose and to the extent necessary to handle the matter submitted by you and to take steps towards entering into or performing a contract between Big Pak s.c. and you;

c) Art. 6 para. 1 lit. c of the GDPR – for the purpose and to the extent necessary to comply with legal obligations incumbent upon the Controller;

d) Art. 6 para. 1 lit. f of the GDPR – for the purpose of pursuing the legitimate interests of the Controller, consisting in:

  • conducting marketing of its own products and services,

  • responding to inquiries submitted via the contact form, e-mail, or by telephone,

  • establishing, pursuing, or defending against claims.

4) Recipients of personal data

Your personal data may be shared with entities cooperating with the Controller, providing services necessary for conducting business activity, in particular IT, accounting, legal, courier, or hosting services, as well as public authorities, if such an obligation results from applicable legal provisions.

5) Transfer of data to third countries

Your personal data will not be transferred to a third country or an international organisation, unless such an obligation arises from legal provisions or applied technological solutions, while maintaining GDPR requirements.

6) Storage period of data

Your personal data will be stored until the purpose of their processing ceases, for the period required by legal provisions, or until consent is withdrawn, if the processing was based on consent.

7) Rights of the data subjects

You have the right to:

  • access the content of your personal data,

  • rectify the data,

  • erase the data,

  • restrict the processing of data,

  • object to the processing,

  • data portability, i.e. to receive your personal data from the Controller in a structured, commonly used and machine-readable format.

8) Withdrawal of consent

If the processing of data is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.

9) Right to lodge a complaint

You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if you consider that the processing of your personal data violates the provisions of the GDPR.

10) Voluntariness of providing data

Providing personal data is voluntary, however, it may be necessary to properly address and handle the matter submitted by you, conclude a contract, or perform obligations resulting from legal provisions.

11) Automated decision-making

Your personal data will not be subject to automated decision-making, including profiling, which would produce legal effects concerning you or similarly significantly affect your situation.