Information clause

1. Information about the Data Controller

The Controller of your personal data is Zakład Uboju Bydła Biskupiec spółka z ograniczoną odpowiedzialnością (limited liability company) with its registered office in Biskupiec-Kolonia Trzecia, at Olsztyńska 3, 11-300 Biskupiec, entered into the Register of Entrepreneurs maintained by the District Court in Olsztyn, VIII Commercial Division of the National Court Register under KRS number: 0000797492, holding NIP: 7393930365, REGON: 384007102 (hereinafter referred to as "We" or "Company").

2. Contact Information

You may contact us via mail at: Olsztyńska 3, Biskupiec – Kolonia Trzecia, 11-300 Biskupiec
or via email: kontakt@zubb.pl.

3. Purposes of Processing Personal Data and Legal Basis for Processing

As part of email correspondence, we process your data for the following purposes, depending on the case:

1. To respond to your message (Article 6(1)(f) of the General Data Protection Regulation of April 27, 2016 (“GDPR”)),
2. To present an offer in response to your inquiry (Article 6(1)(f) GDPR),
3. To continue and properly execute contractual relationships between the Company and you or the entities you represent or serve on their governing bodies (Article 6(1)(b) GDPR),
4. To continue and properly execute contractual relationships between the Company and entities with which you have an employment relationship (Article 6(1)(f) GDPR),
5. To establish or maintain business relationships between the Company and the entities you represent or serve on their governing bodies (Article 6(1)(f) GDPR),
6. If processing your data is required by law, we process the data based on Article 6(1)(c) GDPR,
7. To store data to ensure accountability (including demonstrating our compliance with legal obligations) (Article 6(1)(f) GDPR),
8. To conduct direct marketing of the Company’s products and services (Article 6(1)(f) GDPR),
9. To establish, protect, and pursue potential legal claims (Article 6(1)(f) GDPR),
10. To store data for archival or statistical purposes (Article 6(1)(f) GDPR).

4. Information on Recipients of Your Personal Data

If necessary, we will transfer your personal data to fulfill our services. We will share your data with three categories of entities:

• Authorized individuals – our employees and associates who need access to perform their duties,
• Data processors – entities we entrust with processing, such as companies managing our IT systems, providers of IT tools, email hosting providers, and advisory service providers,
• Public authorities – if required by law.

5. Source of Your Data

We have obtained your personal data either directly from you or from an entity you represent, cooperate with, or have an employment relationship with. In some cases, we may have obtained the data from publicly available sources, particularly public registers such as CEIDG or KRS.

6. Categories of Processed Data

In email correspondence, we typically process contact details such as email addresses and phone numbers. In some cases, we also process identifying information (e.g., name, surname, position). The specific data categories depend on the subject of correspondence between you and the Company.

7. Data Retention Period

Personal data will be retained for as long as necessary to conduct correspondence on the given topic. After that, the data will be stored for the period required by legal obligations and/or until the expiration of any claims related to the aforementioned purposes.

8. Your Rights

Regarding the processing of your personal data, you have the following rights under applicable law:

a) The right to access and rectify your data or restrict processing,

b) The right to request the deletion of personal data, except when processing is necessary for compliance with legal obligations or to establish, pursue, or defend claims,

c) The right to object to processing based on our legitimate interests,

d) The right to lodge a complaint with the President of the Personal Data Protection Office if data processing violates GDPR.

9. Information on Data Transfers to Third Countries

We do not transfer your personal data to third countries.

10. Information on Profiling

We do not engage in automated decision-making, including profiling*, based on your personal data.

* Profiling means any form of automated processing of personal data that uses personal data to evaluate certain personal aspects of an individual, particularly to analyze or predict aspects concerning work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.