Information on the processing of personal data (GDPR)
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”), we present the rules for the processing of personal data by Fortis Technology Rydzińska Sp. k.
1. Data Controller
The controller of your personal data is:
Fortis Technology Rydzińska Sp. k.
9 Cisowa Street
64-320 Niepruszewo
Tax ID: 7811875724
Contact regarding personal data protection:
email: [email protected]
mail: Fortis Technology Rydzińska Sp. k., 9 Cisowa Street, 64-320 Niepruszewo
phone: +48 61 820 94 29
The Controller has not appointed a Data Protection Officer.
2. Purposes and legal bases for data processing
Your personal data may be processed for the following purposes:
- Conclusion and performance of a sales, cooperation, or service agreement
Preparation of an offer, handling an inquiry, acceptance and fulfillment of an order, delivery execution, contact regarding the order, settlements, returns, complaints, and after-sales service.
Legal basis: Art. 6(1)(b) GDPR – performance of a contract or taking steps prior to entering into a contract. - Handling correspondence by email, phone, and forms
Responding to inquiries, exchanging business correspondence, and contacting customers, contractors, and prospective contractors.
Legal basis: Art. 6(1)(b) GDPR – if the contact concerns the conclusion or performance of a contract; Art. 6(1)(f) GDPR – the Controller’s legitimate interest in conducting correspondence and handling inquiries. - Direct marketing, including newsletters and commercial information
Sending information about the offer, products, services, promotions, new arrivals, events, or industry content.
Legal basis: Art. 6(1)(a) GDPR – consent; Art. 6(1)(f) GDPR – the Controller’s legitimate interest in marketing its own products and services to existing customers, within the limits permitted by law. - Pursuit or defense of claims
Participation in proceedings, securing claims, debt collection, defense of the Controller’s rights.
Legal basis: Art. 6(1)(f) GDPR – the Controller’s legitimate interest. - Fulfillment of legal obligations
Issuing and storing accounting, tax and financial documents, and archiving documentation required by law.
Legal basis: Art. 6(1)(c) GDPR – a legal obligation incumbent on the Controller. - Ensuring the security of information and IT systems
Securing email, networks, IT systems and technical infrastructure, log analysis, prevention of abuse and security incidents.
Legal basis: Art. 6(1)(f) GDPR – the Controller’s legitimate interest in ensuring the security of information and systems. - Statistical and analytical purposes
Internal analyses, business reports, analysis of operational effectiveness, analysis of the use of services or the website, development of the Controller’s business.
Legal basis: Art. 6(1)(f) GDPR – the Controller’s legitimate interest.
3. Obligation to provide data
Providing the data necessary to conclude and perform the contract is required. Failure to provide such data may make it impossible to conclude or perform the contract, prepare an offer, process an order, make delivery, settle payments or handle complaints.
Providing data for marketing purposes, including receiving the newsletter or commercial information, is voluntary.
To the extent that data processing results from the Controller’s legitimate interest, failure to provide data may prevent the proper fulfillment of specific purposes, such as handling an inquiry, conducting correspondence or ensuring system security.
4. Data recipients
Personal data may be transferred to:
- Entities cooperating with Fortis Technology Rydzińska Sp. k. in the scope of order processing, deliveries, customer service, technical and administrative support, in particular:
- organizationally or capital-related entities, if they participate in handling business processes,
- courier companies, carriers and postal operators,
- providers of IT systems, email, hosting, domains and security services,
- providers of marketing, analytics and communication tools,
- the accounting office, advisory, legal and tax entities,
- technical partners supporting the operation of systems, infrastructure and processes,
- banks, payment operators or other entities involved in payment processing, where applicable.
- Public authorities, courts, administrative bodies or law enforcement authorities, if required by law.
Entities processing data on behalf of the Controller process data solely on the basis of appropriate agreements, including personal data processing agreements, and in accordance with the Controller's instructions.
5. Data retention period
Personal data will be retained for the following periods:
- contracts and settlements: for the duration of the contract and for the limitation period for claims,
- accounting and tax documents: for the period required by law, generally 5 years from the end of the year in which the tax payment deadline expired,
- correspondence: up to 3 years from the end of contact, for evidentiary purposes, unless longer retention is justified for pursuing or defending claims,
- marketing and newsletter: until consent is withdrawn or an objection to direct marketing is raised,
- data processed to demonstrate that marketing consent was given: up to 3 years from its withdrawal or the end of marketing communication,
- claims and proceedings: until the expiry of the applicable limitation periods or until the final conclusion of the proceedings,
- statistics and analyses: until the analytical purposes are fulfilled or until an effective objection is raised, if processing is based on the Controller's legitimate interest,
- technical logs and IT security data: for the period necessary to ensure system security, generally no longer than 12 months, unless longer retention is necessary due to a security incident or claims.
6. Rights of the data subject
You have the right to:
- access to data,
- rectification of data,
- erasure of data,
- restriction of processing,
- data portability,
- object to data processing:
- for reasons related to your particular situation – with regard to data processed under Article 6(1)(f) of the GDPR,
- at any time to the processing of data for direct marketing purposes, including profiling related to such marketing.
- withdraw consent at any time, if processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal,
- lodge a complaint with the President of the Personal Data Protection Office if you believe that data processing violates personal data protection laws.
Requests regarding the exercise of the above rights may be sent to:
email: [email protected]
mail: Fortis Technology Rydzińska Sp. k., 9 Cisowa Street, 64-320 Niepruszewo
For security reasons, the Controller may request additional information to verify the identity of the person submitting the request.
7. Profiling and automated decision-making
Your data is not used to make decisions based solely on automated processing, including profiling, which would produce legal effects concerning you or similarly significantly affect you.
The Controller may use limited marketing or analytical profiling, e.g. analysis of interest in the offer, newsletter activity, or website usage, provided this is based on the Controller's legitimate interest or consent, where required.
8. Transfers of data outside the European Economic Area
As a rule, personal data is not transferred outside the European Economic Area. However, this may occur if the Controller uses tools or services whose providers process data outside the EEA, in particular as part of IT, analytics, marketing, advertising, email, or cloud services.
Transfers of data outside the EEA take place only using mechanisms provided for under the GDPR, in particular on the basis of:
- an adequacy decision of the European Commission,
- standard contractual clauses approved by the European Commission,
- additional safeguards, where required.
9. Additional information
Detailed information on the processing of personal data, including the use of cookies, Service user data, analytics tools, marketing tools, and social media, can be found in the Privacy Policy available on the Service at https://fortistechnology.pl/fortis-technology/polityka-prywatnosci-fortis-technology
