INFORMATION CLAUSE - Consent to data processing

Pursuant to Article 13 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), (Journal of Laws of the EU. L No. 119, p. 1) - hereinafter referred to as "RODO" - I inform you that:

The customer who has provided us with his personal data has the right to access such data and the right:

INFORMATION ON THE RIGHT TO OBJECT

If your personal data are processed for the purposes of direct marketing you have the right to object at any time, free of charge, to this primary or further processing - including profiling, insofar as it is related to direct marketing.

The administrator of your personal data is KOLBA sp. z o.o. Wiejska 46, 41-253 Czeladź, NIP 6252483366 REGON 522708960 KRS 0000984915.

For all matters relating to the processing of personal data by the Administrator and the exercise of rights related to the processing of personal data, you can contact at e-mail address: [email protected], or in writing to the above address of the Administrator with the note "personal data".

§1. Your personal data will be processed by us for the purpose for which you have given your consent and may be:

establishing and maintaining a user account on the kolba.pl website,
making the e-mail newsletter service available,
making the SMS newsletter service available,
participating in contests and promotional actions, including informing about the results of the contest and possibly providing the prize,
sending, to the e-mail address or telephone number provided by you, commercial information within the meaning of Article 10 Paragraph 2 of the Act of 18 July 2002 on the provision of services by electronic means (Journal of Laws of 9 September 2002 No. 144 item 1204) sent on your own behalf or at the request of business partners, as well as the use of telecommunications terminal equipment and automatic calling systems within the meaning of the Act of 16 July 2004. Telecommunications Law (i.e. Journal of Laws 2014, item 243 as amended),
making decisions towards you based solely on automated processing of my personal data (profiling) for the purpose of determining my preferences or needs regarding products and services and providing me with relevant online communications in the form of online advertisements.

Processing in the above regard is based on the consent you have given (Article 6(1)(a) RODO), in addition, the personal data provided may be processed:

possibly for the purpose of direct marketing of the Administrator's own products and services, the processing is carried out on the basis of the so-called legitimate interest of the Administrator which is to carry out direct marketing of its services and products (Article 6(1)(f) RODO),
the provision of services provided for account users in accordance with the Terms and Conditions, acceptance of which is tantamount to the conclusion of an agreement for the provision of such services. Processing takes place for the purpose of performing the contract (Article 6(1)(b) RODO),
possibly for the purpose of asserting claims related to the contract and the services provided. Processing takes place on the basis of the Administrator's legitimate interest in the possibility of pursuing claims (Article 6(1)(f) RODO),
performance of the Administrator's legal obligations. Processing is carried out on the basis of a legal obligation (Article 6(1)(c) RODO).

§2. The personal data provided to us may be made available to entities that process data at the direction of the Administrator, including but not limited to those providing IT services, courier services, payment processing, debt collection, mail delivery, legal services and other specialized services. Such entities process data only under contract with the Administrator and in accordance with our instructions. We only share personal data that enables the above-mentioned entities to provide their services. Your data may also be made available to third parties for marketing purposes if you agree to certain marketing purposes for which it is necessary to share your data. Personal data may also be available to a hosting service provider for website maintenance and marketing campaigns, but only in connection with the statutory activities carried out by the Administrator. In any case, however, the entity for which your personal data will be available will not become the administrator of the personal data entrusted to us.

§3. Your personal data will not be transferred to recipients located in countries outside the European Economic Area (countries of the European Union and Iceland, Norway and Liechtenstein).

§4. Your personal data will be stored until the statute of limitations for claims under the contract/provision of services or until the expiration of the obligation to store data under the law. Where we process personal data based on the legitimate interest of the Administrator, personal data will not be processed for the specified purpose if you object to such processing. Where we process data based on your consent, personal data will be processed until you withdraw it. After this period, your personal data will be deleted or anonymized, i.e. processed in such a way that it is not possible to link it to any person.

§5 You have the right to request access to your personal data, to receive a copy of it, to rectify (amend) it, to delete it or to restrict its processing. To object to such processing. If the basis of data processing is the legitimate interest of the Administrator, you may object to such processing, in particular to processing for direct marketing purposes, including profiling and for analytical purposes. You have the right to portability of your personal data. In such a situation, you will receive your personal data in a structured, commonly used, machine-readable format.

§6 You have the right to withdraw your consent at any time. However, the withdrawal of consent does not affect the legality of the processing that was performed on the basis of consent before its withdrawal. The statement on withdrawal of consent for the processing of personal data should be delivered to the address: 46 Wiejska St., 41-253 Czeladź, to e-mail [email protected].

§7 Providing personal data is voluntary, but necessary for the provision of services covered by the consent given - without their provision it is not possible to provide services. Providing data for marketing purposes is voluntary. Provision of personal data to the extent having a basis in the contractual obligation, including primarily in the provision of services to account users is voluntary, however, it is a condition for the conclusion and performance of the contract. The consequence of failure to provide data will be the inability to provide services intended for account users. Providing personal data to the extent required by law is mandatory and necessary for the Administrator to provide services/perform the contract.

§8. You have the right to lodge a complaint to the President of the Office for Personal Data Protection if you consider that the processing of your personal data violates the provisions on personal data protection,

§9. Your data will be processed in an automated manner ( including in the form of profiling), however, this will not produce any legal effects against you or in a similar manner significantly affect your situation. Profiling of personal data consists in the processing of your data (including in an automated manner) by using it to evaluate certain information, in particular to analyze or forecast your personal preferences and interests and to send you offers to purchase goods. You have the right to object to profiling.

INFORMATION CLAUSE - Sale of goods

Pursuant to Article 13 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), (OJ EU. L No. 119, p. 1) - hereinafter referred to as "RODO", I inform you that:

INFORMATION ON THE RIGHT TO OBJECT

If your personal data are processed for direct marketing purposes you have the right to object at any time, free of charge, to such primary or further processing - including profiling, insofar as it is related to direct marketing.

The administrator of your personal data is KOLBA sp. z o.o. with its registered office in Czeladź 41-253 Wiejska 46 Street, NIP 6252483366 REGON 522708960 KRS 0000984915.

In all matters relating to the processing of personal data by the Administrator and the exercise of rights related to the processing of personal data, you can contact at e-mail address: [email protected], or in writing to the above address of the Administrator with the note "personal data".

§1. Your personal data will be processed by us in order to:

concluding and executing a sales contract for goods purchased in the kolba.pl online store (art. 6.1.b) RODO),
To conclude and execute marketing agreements (art. 6.1.b) RODO),
responding to inquiries regarding goods. Processing is done in connection with actions taken at the request of the data subject prior to entering into a contract (Article 6(1)(b) RODO),
handling of requests, demands and requests including purposes related to the services we provide. The processing is carried out in connection with the legitimate interest pursued by us and consisting in meeting customer needs (Article 6(1)(f) RODO),
alternatively, for the purpose of handling complaints and claims, the processing takes place in connection with the fulfillment of an obligation incumbent on the Administrator (Article 6(1)(c) RODO),
possibly for the purpose of asserting claims related to the concluded sales contract, the processing is carried out on the basis of the so-called legitimate interest of the Administrator which is the possibility of asserting claims (Article 6(1)(f) RODO),
Alternatively, for the purpose of direct marketing of the Administrator's own products and services, the processing takes place on the basis of the so-called legitimate interest of the Administrator which is to conduct direct marketing of its services and products (Article 6(1)(f) RODO),
the provision of services provided for account users in accordance with the Terms and Conditions, acceptance of which is tantamount to the conclusion of an agreement for the provision of such services. Processing takes place for the purpose of performing the contract (Article 6(1)(b) RODO),
Performing the Administrator's legal obligations e.g.,: issuing and storing VAT invoices and accounting documents. Processing is done on the basis of a legal obligation (Article 6(1)(c) RODO).

§2. The personal data provided to us may be made available to entities that process data at the direction of the Administrator, including but not limited to those providing IT services, courier services, payment processing, debt collection, mail delivery, legal services and other specialized services. Such entities process data only under contract with the Administrator and in accordance with our instructions. We only share personal data that enables the above-mentioned entities to provide their services. Your data may also be made available to third parties for marketing purposes if you consent to specific marketing purposes for which it is necessary to share your data. Personal data may also be available to a hosting service provider for website maintenance and marketing campaigns, but only in connection with the statutory activities carried out by the Administrator. In any case, however, the entity for which your personal data will be available will not become the administrator of the personal data entrusted to us.

§3. Your personal data will not be transferred to recipients located in countries outside the European Economic Area (countries of the European Union and Iceland, Norway and Liechtenstein).

INFORMATION CLAUSE - For contractors

In connection with the applicability of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), (OJ EU. L No. 119, p. 1) - hereinafter "RODO", KOLBA sp. z o.o. provides the following information regarding the processing of personal data.

In this information clause, KOLBA sp. z o.o. provides information on the forms of use of personal data ("processing") with respect to individuals who are:

suppliers or contractors,
partners, employees, representatives, agents or representatives of such suppliers, contractors and,
other persons whose data the Company processes for the purpose of fulfilling the contract between the parties (including commission and work contracts).

In connection with the cooperation between you and KOLBA, it processes information that identifies individuals (also referred to as "personal data"), in particular, such as:

first and last name, residential address,
company, business address and mailing addresses,
numbers held in relevant registers (e.g., NIP or REGON number),
PESEL number,
contact information, such as e-mail address or telephone or fax number,
position held within the organization,
specific identification numbers that are not commonly assigned numbers (e.g., business ID number),
bank account number.

In view of the above, we inform you that:

The administrator of the personal data (hereinafter "ADO") is KOLBA sp. z o.o. with its registered office in Czeladź 41-253 Wiejska 46 Street, NIP 6252483366 REGON 522708960 KRS 0000984915 in all matters of personal data processing by us and exercising rights related to data processing, you can contact us at e- mail:[email protected], or in writing at the Administrator's address given above.
Your personal data will be processed for:
- concluding and executing a contract or taking action at your request prior to concluding a contract, including contacting you in connection with its execution (legal basis: Article 6(1)(b) RODO),
- possibly for the purpose of dealing with complaints and claims, the processing is done in connection with the fulfillment of an obligation incumbent on the Administrator (legal basis: Article 6(1)(c) RODO),
- possibly for the purpose of asserting claims related to the concluded agreement, processing is carried out on the basis of the so-called legitimate interest of the Administrator which is the possibility of asserting claims (Article 6(1)(f) RODO),
- performance of the Administrator's legal obligations, e.g.: issuing and storing VAT invoices, accounting documents, etc. Processing is done on the basis of a legal obligation (Article 6(1)(c) RODO).
Personal data provided to us may be made available to entities that process data at our direction, including those providing IT services, courier services, payment processing, debt collection, mail delivery, legal services and other specialized services. Such entities process data only on the basis of a contract concluded with us as the Administrator and in accordance with our instructions. We share only the personal data that enables the above-mentioned entities to provide their services. Your data may also be made available to third parties for marketing purposes if you consent to the specific marketing purposes for which it is necessary to share your data. Your personal data may also be available to a hosting service provider, in terms of website maintenance, but only in connection with the statutory activities carried out by the Administrator. In any case, however, the entity for which your personal data will be available will not become the administrator of the personal data entrusted to us. Personal data will also be transferred to the competent authorities in connection with the obligations imposed by law.
The collected personal data will not be transferred to recipients located in countries outside the European Economic Area (European Union countries and Iceland, Liechtenstein and Norway).
Your personal data will be stored until the statute of limitations for claims under the contract/provision of services, or until the obligation to store data under the law expires. Where we process personal data based on your consent, your personal data will be processed until you withdraw it. Where we process data based on the legitimate interests of the Controller, personal data will not be processed for a specific purpose if you object to such processing, unless we demonstrate the existence of valid legitimate grounds for processing that override your interests (e.g., the assertion of claims).
You have the right to request access to your personal data from the Data Controller, to receive a copy of your personal data, the right to rectify (amend), erase (in cases specified in the provisions of the DPA) or restrict the processing of your personal data (in cases specified in the provisions of the DPA), to object to such processing, to data portability, to receive personal data provided to KOLBIE in a structured, commonly used and machine-readable format, and to request the transfer of such personal data to another Data Controller, without hindrance on our part and subject to our own confidentiality obligations.
Insofar as the processing of personal data is based on consent, you have the right to withdraw your consent at any time. However, withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. A statement of withdrawal of consent for the processing of personal data should be delivered to the Administrator's address given in point 1.
You have the right to lodge a complaint with the President of the Office for Personal Data Protection if you consider that the processing of your personal data violates the regulations on personal data protection.
The provision of your personal data is voluntary, but necessary for the purpose of concluding, executing the contract, handling mutual cooperation.
Your data will not be processed by automated means, including profiling.
Please be informed that we may obtain your personal data from publicly available sources, such as CEIDG or KRS business registers in order to verify the information provided to us. The scope of data processed in such case will be limited to the data publicly available in the relevant registers. We may also obtain your personal data from entities in which you are employed, or of which you are a representative. The scope of the processed data in such a case will include information necessary for the performance of the contract between KOLBA and such entity, e.g. information about the termination of your employment with the entity, change of contact details or change of official position.

INFORMATION CLAUSE - For customers of stationary store

Pursuant to Article 13 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), (Journal of Laws of the EU. L No. 119, p. 1) - hereinafter referred to as "RODO" - I would like to inform you that

INFORMATION ON THE RIGHT TO OBJECT

The administrator of your personal data is KOLBA sp. z o.o. Wiejska 46, 41-253 Czeladź, NIP 6252483366 REGON 522708960 KRS 0000984915. with registered office in Czeladź 41-253 Wiejska 46 Street, NIP 6252483366 REGON 522708960 KRS 0000984915.

We received your personal data in connection with the conclusion of a contract of sale of goods offered by KOLBA stationary store for which a permit is required and/or confirmation of the age of majority of the person making the purchase.

Your personal data will be processed by us in order to:
1. concluding and executing a contract of sale of goods purchased in the KOLBA stationary store for the possession of which a permit is required and/or confirming the age of majority of the person making the purchase (art. 6 par. 1 pt. b) RODO), and in connection with art. 30 and 31 of the Act of June 22, 2001 on the performance of economic activity in the field of manufacturing and trading in explosives, weapons, ammunition and products and technology for military and police use, and in connection with executive regulations issued on the basis of this Act;
2. alternatively, for the purpose of handling complaints and claims, the processing takes place in connection with the fulfillment of an obligation incumbent on the Administrator (Article 6(1)(c) of the DPA),
3. possibly for the purpose of asserting claims related to the concluded sales contract, processing is carried out on the basis of the so-called legitimate interest of the Administrator which is the possibility of asserting claims (Article 6(1)(f) RODO),
4. to comply with the Administrator's legal obligations, e.g.: issuing and storing VAT invoices, accounting documents and keeping records and making notifications regarding the trade in explosives, weapons, ammunition and products for military or police use Processing takes place on the basis of a legal obligation (Article 6(1)(c) RODO).
Personal data provided to us may be made available to entities that process data at the direction of the Administrator, including those providing IT services, courier services, payment processing, debt collection, mail delivery, legal services and other specialized services. Such entities process data only under contract with the Administrator and in accordance with our instructions. We only share personal data that enables the above-mentioned entities to provide their services. Your data may also be made available to third parties for marketing purposes if you agree to certain marketing purposes for which it is necessary to share your data. Personal data may also be available to a hosting service provider for website maintenance and marketing campaigns, but only in connection with the statutory activities carried out by the Administrator. In any case, however, the entity for which the users' personal data will be available will not become the administrator of the personal data entrusted to us. Personal data will also be transferred to the competent authorities in connection with the obligations imposed by law.
Your personal data will not be transferred to recipients located in countries outside the European Economic Area (countries of the European Union and Iceland, Norway and Liechtenstein).
Your personal data will be stored until the statute of limitations for claims under the contract/provision of services or until the expiration of the obligation to store data under the law. Where we process personal data based on the legitimate interest of the Administrator, personal data will not be processed for a specific purpose if you object to such processing. Where we process data based on your consent, personal data will be processed until you withdraw it. After this period, your personal data will be deleted or anonymized, i.e. processed in such a way that it cannot be linked to any person.
You have the right to request access to your personal data, receive a copy of it, rectification (amendment), deletion or restriction of processing. To object to such processing. If the basis of data processing is the legitimate interest of the Administrator, you may object to such processing, in particular to processing for direct marketing purposes, including profiling and for analytical purposes. You have the right to portability of your personal data. In such a situation, you will receive your personal data in a structured, commonly used, machine-readable format. The above rights are granted to the extent that they do not contradict the performance by the Administrator and authorized bodies of obligations imposed by law on the manner of recording personal data relating to the circulation of explosives, weapons, ammunition and products for military or police use.
In a situation where you have given your consent to the processing of personal data - you have the right to withdraw your consent at any time. However, the withdrawal of consent does not affect the legality of processing carried out on the basis of consent before its withdrawal. The statement on withdrawal of consent for the processing of personal data should be sent to the address:KOLBA sp. z o.o., 41-253 Czeladź, 46 Wiejska Street, at e-mail: [email protected].
Provision of personal data within the scope having a basis in the contractual obligation, including, above all, in the scope of conclusion and performance of the contract of sale of goods, the possession of which requires a permit and/or confirmation of the age of majority of the person making the purchase is voluntary, however it is a condition for the conclusion and performance of the contract. The consequence of failure to provide data will be the inability to sell the above-mentioned goods. Provision of personal data to the extent required by law is mandatory and necessary for the Administrator to provide services/perform the contract. Provision of personal data is voluntary, but necessary to provide services covered by the granted consent - without their provision it is not possible to provide these services. Providing data for marketing purposes is voluntary.
You have the right to lodge a complaint to the President of the Office for Personal Data Protection if you consider that the processing of your personal data violates the regulations on personal data protection.
Your data will not be processed by automated means (including profiling).