GDPR

Information on the protection of personal data at Alupol Films Sp. z o.o.

Fulfilling the legal obligation imposed on the data controller by the provisions of Article 13 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the “GDPR”,  we present information on the processing of your personal data:

Controller and Data Protection Officer
The administrator of your personal data is Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street, tel. +48 32 324 57 41, e-mail: alupolfilms@grupakety.com), hereinafter referred to as “Alupol”.

You can contact the Data Protection Officer at Alupol in matters related to the protection of personal data via:

  • e-mail: IOD_AF@grupakety.com,
  • by post to the following address: Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street),
  • tel. at + 48 694 429 337.
Your rights
In connection with the processing of your personal data, you have the following rights:

  1. Right of access to personal data;
  2. Right to rectification;
  3. The right to erasure;
  4. The right to restrict the processing of your personal data;
  5. Right to data portability;
  6. Right to object. You have the right to object to the processing of your data on the basis of legitimate interest at any time. We will cease to process your data for these purposes, unless we are able to demonstrate that there are important legitimate grounds for us in relation to this data, which override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend claims, if any;
  7. Right to withdraw consent. In the case of processing personal data on the basis of consents, you have the right to withdraw your consent at any time without giving a reason, as well as without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease to process your data for the purpose covered by your consent. If you wish to withdraw your consent, please contact the Company directly at the above contact details.

If you want to exercise your rights or obtain additional information – please contact us in writing or by phone to the above-mentioned contact of the Data Protection Officer.

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
Purposes, legal bases for collecting and duration of processing of personal data 
1. If you are a contractor of Alupol (a natural person, including a person conducting business activity or a partner in a civil partnership)

If you have not provided us with your personal data directly, this data has been collected using publicly available and public sources, i.e. websites, public registers.

The scope of processed data includes:

  1. identification data (name and surname of persons representing the contractor, name of the business entity, NIP, REGON),
  2. contact data (e-mail address, telephone number, fax number) and correspondence data (address of the registered office of the business entity, correspondence address),
  3. data on concluded contracts, financial data, bank account number,
  4. in the case of natural persons who do not conduct business activity – also the address of residence,

We will process your personal data for the purpose of:

  1. concluding a contract with us or performing an order, including in connection with your participation in the process of collecting offers, as well as the performance and monitoring of the performance of the contract/order that you have concluded with us (hereinafter jointly referred to as the Agreement) – for the period preceding the conclusion of the Agreement and for the period of performance of the Agreement (Article 6(1)(b) of the GDPR – conclusion and performance of the Agreement);
  2. archiving to the extent necessary to perform legal obligations, in particular tax regulations, accounting regulations – for the period resulting from these regulations (legal basis: Article 6(1)(c) of the GDPR – performance of an obligation imposed by law);
  3. possible determination and pursuit of claims or defence against claims, including the sale of receivables – for the duration of the proceedings and the period of limitation of potential claims (legal basis: Article 6(1)(f) of the GDPR – implementation of the controller’s legitimate interest in the form of pursuing claims and defending against claims related to the Agreement);
  4. verification of the counterparty’s credibility – i.e. implementation of the necessary actions in the form of risk assessment before the conclusion of the contract, after its conclusion, during the performance of the contract. In order to achieve this objective, we may additionally obtain your data from business information registers, business intelligence agencies and other publicly available information sources. The personal data referred to in the previous sentence will relate to your obligations and business activity (legal basis: Article 6(1)(f) of the GDPR – implementation of the legitimate interest of the controller), for the period necessary to make such an assessment;
  5. creating analyses of the results of our business activity for internal purposes – for a period not longer than the one indicated in points b) and c) above (legal basis: Article 6(1)(f) of the GDPR – implementation of the legitimate interest of the administrator in the form of optimization of the conducted business activity).
2. If you are an employee/co-worker of a contractor of Alupol

Your personal data has been made available to Alupol by your employer or a person (company) with whom you cooperate in connection with concluding a contract with Alupol or the performance of an order, as well as the performance by the Alupol Contractor of a contract or order concluded with us (hereinafter referred to as the Agreement).

We will process the following categories of your personal data:

  1. identifying data (e.g. name, surname),
  2. contact details (e.g. e-mail address, telephone number, fax number),
  3. data concerning: employment with the Alupol Contractor or cooperation with the Alupol Contractor (e.g. company name, position), profession or business activity and participation in a civil partnership, rights necessary for the performance of the Agreement,

We will process your personal data for the purpose of:

  1. conclusion and performance of the Agreement with Alupol’s Contractor, in particular for purposes such as communication, performance of information obligations, cooperation and other obligations under the Agreement – for the period preceding the conclusion of the Agreement and for the period of performance of the Agreement (legal basis: Article 6(1)(f) of the GDPR – implementation of the legitimate interest of the controller in the form of performance of the Agreement with the contractor);
  2. archiving to the extent necessary to comply with legal obligations, in particular tax regulations, accounting regulations – for the period resulting from these regulations (legal basis: Article 6(1)(c) of the GDPR – performance of an obligation imposed by law);
  3. possible determination and pursuit of claims or defence against claims, including the sale of receivables – for the duration of the proceedings and the period of limitation of potential claims (legal basis: Article 6(1)(f) of the Regulation – implementation of the controller’s legitimate interest in the form of pursuing claims and defence against claims related to the Agreement);
  4. creating analyses of the results of our business activity for internal purposes – for a period not longer than the one indicated in points b) and c) above (legal basis: Article 6(1)(f) of the GDPR – implementation of the legitimate interest of the controller in the form of optimisation of the conducted business activity).
Data recipients
In certain situations, we may transfer your data, as it is often necessary for the performance of the Agreement or the fulfilment of an obligation resulting from the law.

We may transfer your personal data to the following categories of recipients:

  1. courier companies, transport companies or postal operators,
  2. banks and payment institutions,
  3. Insurers
  4. business intelligence agencies, economic information bureaus and credit information bureaus,
  5. purchaser of receivables,
  6. law firms,
  7. tax offices,
  8. entities acting on our behalf, i.e. subcontractors cooperating with Alupol (e.g. entities operating ICT systems and providing IT services, entities providing us with advisory, consulting, auditing, legal, tax, accounting, document archiving, debt collection services),
  9. entities which are part of the group of enterprises to which we belong (Grupa Kęty S.A. with its registered office in Kęty and companies controlled by it),
  10. entities or bodies authorized under the law (including courts, prosecutors, bailiffs, regulatory and supervisory authorities),

to the extent that it is necessary to achieve the purposes for which the personal data is processed.
Other information 
We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if the need arises, we can do so by providing an appropriate level of protection and applying the relevant legal provisions.

Providing personal data is a necessary condition for the performance of the Agreement or taking action before the conclusion of the Agreement. If you do not provide personal data, it will not be possible to perform the Agreement or take action before its conclusion.

Your personal data is not subject to automated decision-making, including profiling related to automated decision-making.
Controller and Data Protection Officer
The administrator of your personal data is Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street, tel. +48 32 324 57 41, e-mail: alupolfilms@grupakety.com), hereinafter referred to as “Alupol”.

You can contact the Data Protection Officer at Alupol in matters related to the protection of personal data via:

  • e-mail: IOD_AF@grupakety.com,
  • by post to the following address: Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street),
  • tel. at + 48 694 429 337.
Your rights
In connection with the processing of your personal data, you have the following rights:

  1. Right of access to personal data;
  2. Right to rectification;
  3. The right to erasure;
  4. The right to restrict the processing of your personal data;
  5. Right to data portability;
  6. Right to object. You have the right to object to the processing of your data on the basis of legitimate interest at any time. We will cease to process your data for these purposes, unless we are able to demonstrate that there are important legitimate grounds for us in relation to this data, which override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend claims, if any;
  7. Right to withdraw consent. In the case of processing personal data on the basis of consents, you have the right to withdraw your consent at any time without giving a reason, as well as without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease to process your data for the purpose covered by your consent. If you wish to withdraw your consent, please contact the Company directly at the above contact details.

If you want to exercise your rights or obtain additional information – please contact us in writing or by phone to the above-mentioned contact of the Data Protection Officer.

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
Purposes, legal bases for collecting and duration of processing of personal data 
1. If you are a contractor of Alupol (a natural person, including a person conducting business activity or a partner in a civil partnership)

If you have not provided us with your personal data directly, this data has been collected using publicly available and public sources, i.e. websites, public registers.

The scope of processed data includes:

  1. identification data (name and surname of persons representing the contractor, name of the business entity, NIP, REGON),
  2. contact data (e-mail address, telephone number, fax number) and correspondence data (address of the registered office of the business entity, correspondence address),
  3. data on concluded contracts, financial data, bank account number,
  4. in the case of natural persons who do not conduct business activity – also the address of residence,

We will process your personal data for the purpose of:

  1. concluding a contract with us or performing an order, including in connection with your participation in the process of collecting offers, as well as the performance and monitoring of the performance of the contract/order that you have concluded with us (hereinafter jointly referred to as the Agreement) – for the period preceding the conclusion of the Agreement and for the period of performance of the Agreement (Article 6(1)(b) of the GDPR – conclusion and performance of the Agreement);
  2. archiving to the extent necessary to perform legal obligations, in particular tax regulations, accounting regulations – for the period resulting from these regulations (legal basis: Article 6(1)(c) of the GDPR – performance of an obligation imposed by law);
  3. possible determination and pursuit of claims or defence against claims, including the sale of receivables – for the duration of the proceedings and the period of limitation of potential claims (legal basis: Article 6(1)(f) of the GDPR – implementation of the controller’s legitimate interest in the form of pursuing claims and defending against claims related to the Agreement);
  4. verification of the counterparty’s credibility – i.e. implementation of the necessary actions in the form of risk assessment before the conclusion of the contract, after its conclusion, during the performance of the contract. In order to achieve this objective, we may additionally obtain your data from business information registers, business intelligence agencies and other publicly available information sources. The personal data referred to in the previous sentence will relate to your obligations and business activity (legal basis: Article 6(1)(f) of the GDPR – implementation of the legitimate interest of the controller), for the period necessary to make such an assessment;
  5. creating analyses of the results of our business activity for internal purposes – for a period not longer than the one indicated in points b) and c) above (legal basis: Article 6(1)(f) of the GDPR – implementation of the legitimate interest of the administrator in the form of optimization of the conducted business activity).
2. If you are an employee/co-worker of a contractor of Alupol

Your personal data has been made available to Alupol by your employer or a person (company) with whom you cooperate in connection with concluding a contract with Alupol or the performance of an order, as well as the performance by the Alupol Contractor of a contract or order concluded with us (hereinafter referred to as the Agreement).

We will process the following categories of your personal data:

  1. identifying data (e.g. name, surname),
  2. contact details (e.g. e-mail address, telephone number, fax number),
  3. data concerning: employment with the Alupol Contractor or cooperation with the Alupol Contractor (e.g. company name, position), profession or business activity and participation in a civil partnership, rights necessary for the performance of the Agreement,

We will process your personal data for the purpose of:

  1. conclusion and performance of the Agreement with Alupol’s Contractor, in particular for purposes such as communication, performance of information obligations, cooperation and other obligations under the Agreement – for the period preceding the conclusion of the Agreement and for the period of performance of the Agreement (legal basis: Article 6(1)(f) of the GDPR – implementation of the legitimate interest of the controller in the form of performance of the Agreement with the contractor);
  2. archiving to the extent necessary to comply with legal obligations, in particular tax regulations, accounting regulations – for the period resulting from these regulations (legal basis: Article 6(1)(c) of the GDPR – performance of an obligation imposed by law);
  3. possible determination and pursuit of claims or defence against claims, including the sale of receivables – for the duration of the proceedings and the period of limitation of potential claims (legal basis: Article 6(1)(f) of the Regulation – implementation of the controller’s legitimate interest in the form of pursuing claims and defence against claims related to the Agreement);
  4. creating analyses of the results of our business activity for internal purposes – for a period not longer than the one indicated in points b) and c) above (legal basis: Article 6(1)(f) of the GDPR – implementation of the legitimate interest of the controller in the form of optimisation of the conducted business activity).
Data recipients
In certain situations, we may transfer your data, as it is often necessary for the performance of the Agreement or the fulfilment of an obligation resulting from the law.

We may transfer your personal data to the following categories of recipients:

  1. courier companies, transport companies or postal operators,
  2. banks and payment institutions,
  3. Insurers
  4. business intelligence agencies, economic information bureaus and credit information bureaus,
  5. purchaser of receivables,
  6. law firms,
  7. tax offices,
  8. entities acting on our behalf, i.e. subcontractors cooperating with Alupol (e.g. entities operating ICT systems and providing IT services, entities providing us with advisory, consulting, auditing, legal, tax, accounting, document archiving, debt collection services),
  9. entities which are part of the group of enterprises to which we belong (Grupa Kęty S.A. with its registered office in Kęty and companies controlled by it),
  10. entities or bodies authorized under the law (including courts, prosecutors, bailiffs, regulatory and supervisory authorities),

to the extent that it is necessary to achieve the purposes for which the personal data is processed.
Other information 
We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if the need arises, we can do so by providing an appropriate level of protection and applying the relevant legal provisions.

Providing personal data is a necessary condition for the performance of the Agreement or taking action before the conclusion of the Agreement. If you do not provide personal data, it will not be possible to perform the Agreement or take action before its conclusion.

Your personal data is not subject to automated decision-making, including profiling related to automated decision-making.

Joint controllers of personal data 
The co-controllers of your personal data are the companies of the Flexible Packaging Segment of the Capital Group of Grupa Kęty S.A., namely:

  1. Alupol Packaging S.A. with its registered office in Tychy, at 4 Strefowa Street, 43-109 Tychy, KRS 0000357912, tel. +48 32 324 57 00, e-mail: alupol@grupakety.com;
  2. Alupol Packaging Kęty Sp. z o.o. with its registered office in Kęty, at 111 Kościuszki Street, 32-650 Kęty, KRS 0000331243, tel. +48 33 844 64 33, e-mail:  alupol@grupakety.com;
  3. Alupol Films Sp. z o.o. with its registered office in Oświęcim, at 18 Gospodarcza Street, 32-600 Oświęcim, KRS 0000535820, tel. +48 32 324 57 41, e-mail: alupolfilms@grupakety.com.
Data Protection Officer
In matters related to joint control of personal data, you may contact the Data Protection Officer appointed by the Joint Controllers by:

  • e-mail: IOD_AP@grupakety.com,
  • by post to the following address: Alupol Packaging Spółka Akcyjna (43-109 Tychy, 4 Strefowa Street),
  • tel. at + 48 694 429 337.
Common purposes, legal bases for collecting and duration of processing personal data 
The Joint Controllers process your personal data for the purposes of:

  1. ensuring and improving the organisation of the work of the Joint Controllers as entities of the Flexible Packaging Segment of the Capital Group of Grupa Kęty S.A., reporting and analytical – until the time necessary to perform the tasks of the Joint Controllers or to object to the objection of the person to whom the personal data relates (legal basis: Article 6(1)(f) of the GDPR – implementation of the legitimate interest of the Joint Controllers of personal data),
  2. commercial – for the period preceding the conclusion of the contract/mandate (hereinafter referred to as the Agreement) and for the period of performance of the Agreement (legal basis: Article 6(1)(b) of the GDPR – conclusion and performance of the Agreement),
  3. marketing – until the consent of the data subject is objected to or withdrawn (legal basis: Article 6(1)(f) or (a) of the GDPR – implementation of the legitimate interest of the joint controllers of personal data or consent of the data subject).
Data recipients
In certain situations, we may transfer your data to the following categories of recipients:

  1. courier companies, transport companies or postal operators,
  2. banks and payment institutions,
  3. Insurers
  4. business intelligence agencies, economic information bureaus and credit information bureaus,
  5. purchaser of receivables,
  6. law firms,
  7. tax offices,
  8. entities acting on our behalf, i.e. subcontractors cooperating with Alupol (e.g. entities operating ICT systems and providing IT services, entities providing us with advisory, consulting, auditing, legal, tax, accounting, document archiving, debt collection services),
  9. entities which are part of the group of enterprises to which we belong (Grupa Kęty S.A. with its registered office in Kęty and companies controlled by it),
  10. entities or bodies authorized under the law (including courts, prosecutors, bailiffs, regulatory and supervisory authorities),

to the extent that it is necessary to achieve the purposes for which the personal data is processed.
Your rights
In connection with the processing of your personal data, you have the following rights:

  1. The right to access personal data,
  2. Right to rectification,
  3. The right to erasure,
  4. The right to restrict the processing of personal data,
  5. Right to data portability,
  6. Right to object. You have the right to object to the processing of your data on the basis of legitimate interest at any time. We will cease to process your data for these purposes, unless we are able to demonstrate that there are important legitimate grounds for us in relation to this data, which override your interests, rights and freedoms, or the data will be necessary for us to establish, pursue or defend claims, if any,
  7. Right to withdraw consent. In the case of processing personal data on the basis of consents, you have the right to withdraw your consent at any time without giving a reason, as well as without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease to process your data for the purpose covered by your consent. If you want to withdraw your consent, please contact the Co-Administrator to whom the consent has been granted directly at the contact details indicated above.

If you want to exercise your rights or obtain additional information – please contact us in writing or by phone to the above-mentioned contact of the Data Protection Officer.

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
Other information
We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if the need arises, we can do so by providing an appropriate level of protection and applying the relevant legal provisions.

Providing personal data is a necessary condition to take action before concluding a Contract with us.

If you do not provide personal data, it will not be possible to perform the Agreement or take action before its conclusion.

Your personal data is not subject to automated decision-making, including profiling related to automated decision-making.

The main content of the joint controllership arrangements is made available at the request of the data subject sent to the above-mentioned contact details of the Data Protection Officer.
Joint controllers of personal data 
The co-controllers of your personal data are the companies of the Flexible Packaging Segment of the Capital Group of Grupa Kęty S.A., namely:

  1. Alupol Packaging S.A. with its registered office in Tychy, at 4 Strefowa Street, 43-109 Tychy, KRS 0000357912, tel. +48 32 324 57 00, e-mail: alupol@grupakety.com;
  2. Alupol Packaging Kęty Sp. z o.o. with its registered office in Kęty, at 111 Kościuszki Street, 32-650 Kęty, KRS 0000331243, tel. +48 33 844 64 33, e-mail:  alupol@grupakety.com;
  3. Alupol Films Sp. z o.o. with its registered office in Oświęcim, at 18 Gospodarcza Street, 32-600 Oświęcim, KRS 0000535820, tel. +48 32 324 57 41, e-mail: alupolfilms@grupakety.com.
Data Protection Officer
In matters related to joint control of personal data, you may contact the Data Protection Officer appointed by the Joint Controllers by:

  • e-mail: IOD_AP@grupakety.com,
  • by post to the following address: Alupol Packaging Spółka Akcyjna (43-109 Tychy, 4 Strefowa Street),
  • tel. at + 48 694 429 337.
Common purposes, legal bases for collecting and duration of processing personal data 
The Joint Controllers process your personal data for the purposes of:

  1. ensuring and improving the organisation of the work of the Joint Controllers as entities of the Flexible Packaging Segment of the Capital Group of Grupa Kęty S.A., reporting and analytical – until the time necessary to perform the tasks of the Joint Controllers or to object to the objection of the person to whom the personal data relates (legal basis: Article 6(1)(f) of the GDPR – implementation of the legitimate interest of the Joint Controllers of personal data),
  2. commercial – for the period preceding the conclusion of the contract/mandate (hereinafter referred to as the Agreement) and for the period of performance of the Agreement (legal basis: Article 6(1)(b) of the GDPR – conclusion and performance of the Agreement),
  3. marketing – until the consent of the data subject is objected to or withdrawn (legal basis: Article 6(1)(f) or (a) of the GDPR – implementation of the legitimate interest of the joint controllers of personal data or consent of the data subject).
Data recipients
In certain situations, we may transfer your data to the following categories of recipients:

  1. courier companies, transport companies or postal operators,
  2. banks and payment institutions,
  3. Insurers
  4. business intelligence agencies, economic information bureaus and credit information bureaus,
  5. purchaser of receivables,
  6. law firms,
  7. tax offices,
  8. entities acting on our behalf, i.e. subcontractors cooperating with Alupol (e.g. entities operating ICT systems and providing IT services, entities providing us with advisory, consulting, auditing, legal, tax, accounting, document archiving, debt collection services),
  9. entities which are part of the group of enterprises to which we belong (Grupa Kęty S.A. with its registered office in Kęty and companies controlled by it),
  10. entities or bodies authorized under the law (including courts, prosecutors, bailiffs, regulatory and supervisory authorities),

to the extent that it is necessary to achieve the purposes for which the personal data is processed.
Your rights
In connection with the processing of your personal data, you have the following rights:

  1. The right to access personal data,
  2. Right to rectification,
  3. The right to erasure,
  4. The right to restrict the processing of personal data,
  5. Right to data portability,
  6. Right to object. You have the right to object to the processing of your data on the basis of legitimate interest at any time. We will cease to process your data for these purposes, unless we are able to demonstrate that there are important legitimate grounds for us in relation to this data, which override your interests, rights and freedoms, or the data will be necessary for us to establish, pursue or defend claims, if any,
  7. Right to withdraw consent. In the case of processing personal data on the basis of consents, you have the right to withdraw your consent at any time without giving a reason, as well as without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease to process your data for the purpose covered by your consent. If you want to withdraw your consent, please contact the Co-Administrator to whom the consent has been granted directly at the contact details indicated above.

If you want to exercise your rights or obtain additional information – please contact us in writing or by phone to the above-mentioned contact of the Data Protection Officer.

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
Other information
We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if the need arises, we can do so by providing an appropriate level of protection and applying the relevant legal provisions.

Providing personal data is a necessary condition to take action before concluding a Contract with us.

If you do not provide personal data, it will not be possible to perform the Agreement or take action before its conclusion.

Your personal data is not subject to automated decision-making, including profiling related to automated decision-making.

The main content of the joint controllership arrangements is made available at the request of the data subject sent to the above-mentioned contact details of the Data Protection Officer.

Controller and Data Protection Officer
The administrator of your personal data is Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street, tel. +48 32 324 57 41, e-mail: alupolfilms@grupakety.com), hereinafter referred to as „Alupol”.

You can contact the Data Protection Officer at Alupol in matters related to the protection of personal data via:

  • e-mail: IOD_AF@grupakety.com,
  • by post to the following address: Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street),
  • tel. at + 48 694 429 337.
Your rights
In connection with the processing of your personal data, you have the following rights:

  1. Right of access to personal data;
  2. Right to rectification;
  3. The right to erasure;
  4. The right to restrict the processing of your personal data;
  5. Right to data portability;
  6. Right to object. You have the right to object to the processing of your data on the basis of legitimate interest at any time. We will cease to process your data for these purposes, unless we are able to demonstrate that there are important legitimate grounds for us in relation to this data, which override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend claims, if any;
  7. Right to withdraw consent. In the case of processing personal data on the basis of consents, you have the right to withdraw your consent at any time without giving a reason, as well as without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease to process your data for the purpose covered by your consent. If you wish to withdraw your consent, please contact the Company directly at the above contact details.

If you want to exercise your rights or obtain additional information – please contact us in writing or by phone to the above-mentioned contact of the Data Protection Officer.

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
Purposes, legal bases for collecting and duration of processing of personal data
The data will be processed for the purpose of:

  1. perform activities related to the concluded employment contract and activities preceding its conclusion, pursuant to Article 6(1)(b) of the GDPR*, for the period of employment, as well as for a period of 10 years from the end of the calendar year in which the employment relationship was terminated or expired, unless separate regulations provide for a longer period of storage of employee documentation,
  2. fulfilment of legal obligations incumbent on the Controller, including in particular on the basis of labour law provisions in connection with the employment of employees – pursuant to Article 6(1)(c) and Article 9(2)(h) of the GDPR*, for the period of employment, as well as for a period of 10 years from the end of the calendar year in which the employment relationship was terminated or expired,  unless separate regulations provide for a longer period of storage of employee documentation,
  3. ensuring the safety of employees, property protection and production control, as well as maintaining the secrecy of information, the disclosure of which could expose the employer to damage – by means of video surveillance, pursuant to Article 222 of the Labour Code, for a period not longer than up to 4 weeks from the date of recording, except for situations in which the image recordings constitute evidence in proceedings conducted on the basis of the law or the employer has become aware of it,  that they may constitute evidence in the proceedings, this period is extended until the final conclusion of the proceedings,
  4. implementation of the legitimate interests of the Administrator – pursuant to Article 6(1)(f) of the GDPR*, including:
    • pursuing claims, conducting court and debt collection proceedings, for the duration of proceedings and the period of limitation of claims regulated by law,
    • administrative purposes, including personnel management and statistics, for the duration of the employment;
  5. perform other activities specified in the consent to the processing of data – if it has been given by you – on the basis of Article 6(1)(a) and/or Article 9(2)(a) of the GDPR*, which you can withdraw at any time without affecting the processing of personal data before its withdrawal, and your data will be processed only until its withdrawal.
Data recipients
The recipients of the data may be:

a)  institutions authorised by law, in particular entities authorised to receive data on the basis of relevant provisions of law (e.g. the Social Insurance Institution, the Tax Office, the National Health Fund and judicial or other authorities, including bailiffs and the police, the financial institution managing the PPK),

b) entities that process your personal data on behalf of the Administrator on the basis of a concluded agreement for entrusting the processing of personal data, e.g. IT, legal, advisory, audit, debt collection, protection of persons and property, training, business trips, insurance,

to the extent that it is necessary to achieve the purposes for which the personal data is processed.
Other information
We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if the need arises, we can do so by providing an appropriate level of protection and applying the relevant legal provisions.

Providing your personal data to the extent resulting from the provisions of law is necessary for the Controller to achieve the objectives indicated above. Providing other data by you is voluntary.

Your personal data is not subject to automated decision-making, including profiling related to automated decision-making.
Controller and Data Protection Officer
The administrator of your personal data is Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street, tel. +48 32 324 57 41, e-mail: alupolfilms@grupakety.com), hereinafter referred to as „Alupol”.

You can contact the Data Protection Officer at Alupol in matters related to the protection of personal data via:

  • e-mail: IOD_AF@grupakety.com,
  • by post to the following address: Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street),
  • tel. at + 48 694 429 337.
Your rights
In connection with the processing of your personal data, you have the following rights:

  1. Right of access to personal data;
  2. Right to rectification;
  3. The right to erasure;
  4. The right to restrict the processing of your personal data;
  5. Right to data portability;
  6. Right to object. You have the right to object to the processing of your data on the basis of legitimate interest at any time. We will cease to process your data for these purposes, unless we are able to demonstrate that there are important legitimate grounds for us in relation to this data, which override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend claims, if any;
  7. Right to withdraw consent. In the case of processing personal data on the basis of consents, you have the right to withdraw your consent at any time without giving a reason, as well as without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease to process your data for the purpose covered by your consent. If you wish to withdraw your consent, please contact the Company directly at the above contact details.

If you want to exercise your rights or obtain additional information – please contact us in writing or by phone to the above-mentioned contact of the Data Protection Officer.

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
Purposes, legal bases for collecting and duration of processing of personal data
The data will be processed for the purpose of:

  1. perform activities related to the concluded employment contract and activities preceding its conclusion, pursuant to Article 6(1)(b) of the GDPR*, for the period of employment, as well as for a period of 10 years from the end of the calendar year in which the employment relationship was terminated or expired, unless separate regulations provide for a longer period of storage of employee documentation,
  2. fulfilment of legal obligations incumbent on the Controller, including in particular on the basis of labour law provisions in connection with the employment of employees – pursuant to Article 6(1)(c) and Article 9(2)(h) of the GDPR*, for the period of employment, as well as for a period of 10 years from the end of the calendar year in which the employment relationship was terminated or expired,  unless separate regulations provide for a longer period of storage of employee documentation,
  3. ensuring the safety of employees, property protection and production control, as well as maintaining the secrecy of information, the disclosure of which could expose the employer to damage – by means of video surveillance, pursuant to Article 222 of the Labour Code, for a period not longer than up to 4 weeks from the date of recording, except for situations in which the image recordings constitute evidence in proceedings conducted on the basis of the law or the employer has become aware of it,  that they may constitute evidence in the proceedings, this period is extended until the final conclusion of the proceedings,
  4. implementation of the legitimate interests of the Administrator – pursuant to Article 6(1)(f) of the GDPR*, including:
    • pursuing claims, conducting court and debt collection proceedings, for the duration of proceedings and the period of limitation of claims regulated by law,
    • administrative purposes, including personnel management and statistics, for the duration of the employment;
  5. perform other activities specified in the consent to the processing of data – if it has been given by you – on the basis of Article 6(1)(a) and/or Article 9(2)(a) of the GDPR*, which you can withdraw at any time without affecting the processing of personal data before its withdrawal, and your data will be processed only until its withdrawal.
Data recipients
The recipients of the data may be:

a)  institutions authorised by law, in particular entities authorised to receive data on the basis of relevant provisions of law (e.g. the Social Insurance Institution, the Tax Office, the National Health Fund and judicial or other authorities, including bailiffs and the police, the financial institution managing the PPK),

b) entities that process your personal data on behalf of the Administrator on the basis of a concluded agreement for entrusting the processing of personal data, e.g. IT, legal, advisory, audit, debt collection, protection of persons and property, training, business trips, insurance,

to the extent that it is necessary to achieve the purposes for which the personal data is processed.
Other information
We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if the need arises, we can do so by providing an appropriate level of protection and applying the relevant legal provisions.

Providing your personal data to the extent resulting from the provisions of law is necessary for the Controller to achieve the objectives indicated above. Providing other data by you is voluntary.

Your personal data is not subject to automated decision-making, including profiling related to automated decision-making.

Controller and Data Protection Officer
The administrator of your personal data is Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street, tel. +48 32 324 57 41, e-mail: alupolfilms@grupakety.com), hereinafter referred to as „Alupol”.

You can contact the Data Protection Officer at Alupol in matters related to the protection of personal data via:

  • e-mail: IOD_AF@grupakety.com,
  • by post to the following address: Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street),
  • tel. at + 48 694 429 337.
Your rights
In connection with the processing of your personal data, you have the following rights:

  1. Right of access to personal data;
  2. Right to rectification;
  3. The right to erasure;
  4. The right to restrict the processing of your personal data;
  5. Right to data portability;
  6. Right to object. You have the right to object to the processing of your data on the basis of legitimate interest at any time. We will cease to process your data for these purposes, unless we are able to demonstrate that there are important legitimate grounds for us in relation to this data, which override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend claims, if any;
  7. Right to withdraw consent. In the case of processing personal data on the basis of consents, you have the right to withdraw your consent at any time without giving a reason, as well as without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease to process your data for the purpose covered by your consent. If you wish to withdraw your consent, please contact the Company directly at the above contact details.

If you want to exercise your rights or obtain additional information – please contact us in writing or by phone to the above-mentioned contact of the Data Protection Officer.

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
Purposes, legal bases for collecting and duration of processing of personal data
The data will be processed for the purpose of:

  1. to conclude and perform the cooperation agreement and to take the necessary actions before its conclusion – pursuant to Article 6(1)(b) of the GDPR, for the duration of the agreement and after its termination for the period of required access to this information, resulting from the pension, disability and tax regulations, but not shorter than 5 years or from the regulations on the organization of internships and apprenticeships,
  2. fulfilment of legal obligations incumbent on the Controller in connection with the employment of contractors, in particular on the basis of the provisions of the Civil Code, including those governing the keeping of documentation by the Principal, accounting and tax documentation as well as occupational health and safety – pursuant to Article 6(1)(c) of the GDPR*, for the periods specified in these regulations or the fulfilment of these obligations by the Controller,
  3. ensuring the safety of employees, property protection and production control, as well as maintaining the secrecy of information, the disclosure of which could expose the employer to damage – by means of video surveillance, pursuant to Article 222 of the Labour Code, for a period not longer than up to 4 weeks from the date of recording, except for situations in which the image recordings constitute evidence in proceedings conducted on the basis of the law or the employer has become aware of it,  that they may constitute evidence in the proceedings, this period is extended until the final conclusion of the proceedings,
  4. implementation of the legitimate interests of the Administrator – pursuant to Article 6(1)(f) of the GDPR*, including:
    • pursuing claims, conducting court and debt collection proceedings, for the duration of proceedings and the period of limitation of claims regulated by law,
    • administrative purposes, including personnel management and statistics, for the duration of the cooperation,
  5. perform other activities specified in the consent to the processing of data – if it has been given by you – on the basis of Article 6(1)(a) and/or Article 9(2)(a) of the GDPR*, which you can withdraw at any time without affecting the processing of personal data before its withdrawal, and your data will be processed only until its withdrawal.
Data recipients
The recipients of the data may be:

  1. institutions authorized by law, in particular entities authorized to receive data on the basis of relevant provisions of law (e.g. the Social Insurance Institution, the Tax Office, the National Health Fund and judicial or other authorities, including bailiffs and the police),
  2. entities that process your personal data on behalf of the Administrator on the basis of a personal data processing agreement, e.g. IT, legal, advisory, audit, debt collection, protection of persons and property, training, business trips, insurance,

to the extent that it is necessary to achieve the purposes for which the personal data is processed.
Other information 
We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if the need arises, we can do so by providing an appropriate level of protection and applying the relevant legal provisions.

Providing data is voluntary, but failure to provide them results in the inability to cooperate with the Administrator.

Your personal data is not subject to automated decision-making, including profiling related to automated decision-making.
Controller and Data Protection Officer
The administrator of your personal data is Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street, tel. +48 32 324 57 41, e-mail: alupolfilms@grupakety.com), hereinafter referred to as „Alupol”.

You can contact the Data Protection Officer at Alupol in matters related to the protection of personal data via:

  • e-mail: IOD_AF@grupakety.com,
  • by post to the following address: Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street),
  • tel. at + 48 694 429 337.
Your rights
In connection with the processing of your personal data, you have the following rights:

  1. Right of access to personal data;
  2. Right to rectification;
  3. The right to erasure;
  4. The right to restrict the processing of your personal data;
  5. Right to data portability;
  6. Right to object. You have the right to object to the processing of your data on the basis of legitimate interest at any time. We will cease to process your data for these purposes, unless we are able to demonstrate that there are important legitimate grounds for us in relation to this data, which override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend claims, if any;
  7. Right to withdraw consent. In the case of processing personal data on the basis of consents, you have the right to withdraw your consent at any time without giving a reason, as well as without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease to process your data for the purpose covered by your consent. If you wish to withdraw your consent, please contact the Company directly at the above contact details.

If you want to exercise your rights or obtain additional information – please contact us in writing or by phone to the above-mentioned contact of the Data Protection Officer.

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
Purposes, legal bases for collecting and duration of processing of personal data
The data will be processed for the purpose of:

  1. to conclude and perform the cooperation agreement and to take the necessary actions before its conclusion – pursuant to Article 6(1)(b) of the GDPR, for the duration of the agreement and after its termination for the period of required access to this information, resulting from the pension, disability and tax regulations, but not shorter than 5 years or from the regulations on the organization of internships and apprenticeships,
  2. fulfilment of legal obligations incumbent on the Controller in connection with the employment of contractors, in particular on the basis of the provisions of the Civil Code, including those governing the keeping of documentation by the Principal, accounting and tax documentation as well as occupational health and safety – pursuant to Article 6(1)(c) of the GDPR*, for the periods specified in these regulations or the fulfilment of these obligations by the Controller,
  3. ensuring the safety of employees, property protection and production control, as well as maintaining the secrecy of information, the disclosure of which could expose the employer to damage – by means of video surveillance, pursuant to Article 222 of the Labour Code, for a period not longer than up to 4 weeks from the date of recording, except for situations in which the image recordings constitute evidence in proceedings conducted on the basis of the law or the employer has become aware of it,  that they may constitute evidence in the proceedings, this period is extended until the final conclusion of the proceedings,
  4. implementation of the legitimate interests of the Administrator – pursuant to Article 6(1)(f) of the GDPR*, including:
    • pursuing claims, conducting court and debt collection proceedings, for the duration of proceedings and the period of limitation of claims regulated by law,
    • administrative purposes, including personnel management and statistics, for the duration of the cooperation,
  5. perform other activities specified in the consent to the processing of data – if it has been given by you – on the basis of Article 6(1)(a) and/or Article 9(2)(a) of the GDPR*, which you can withdraw at any time without affecting the processing of personal data before its withdrawal, and your data will be processed only until its withdrawal.
Data recipients
The recipients of the data may be:

  1. institutions authorized by law, in particular entities authorized to receive data on the basis of relevant provisions of law (e.g. the Social Insurance Institution, the Tax Office, the National Health Fund and judicial or other authorities, including bailiffs and the police),
  2. entities that process your personal data on behalf of the Administrator on the basis of a personal data processing agreement, e.g. IT, legal, advisory, audit, debt collection, protection of persons and property, training, business trips, insurance,

to the extent that it is necessary to achieve the purposes for which the personal data is processed.
Other information 
We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if the need arises, we can do so by providing an appropriate level of protection and applying the relevant legal provisions.

Providing data is voluntary, but failure to provide them results in the inability to cooperate with the Administrator.

Your personal data is not subject to automated decision-making, including profiling related to automated decision-making.

Controller and Data Protection Officer
The administrator of your personal data is Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street, tel. +48 32 324 57 41, e-mail: alupolfilms@grupakety.com), hereinafter referred to as „Alupol”.

You can contact the Data Protection Officer at Alupol in matters related to the protection of personal data via:

  • e-mail: IOD_AF@grupakety.com,
  • by post to the following address: Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street),
  • tel. at + 48 694 429 337.
Your rights
In connection with the processing of your personal data, you have the following rights:

  1. Right of access to personal data;
  2. Right to rectification;
  3. The right to erasure;
  4. The right to restrict the processing of your personal data;
  5. Right to data portability;
  6. Right to object. You have the right to object to the processing of your data on the basis of legitimate interest at any time. We will cease to process your data for these purposes, unless we are able to demonstrate that there are important legitimate grounds for us in relation to this data, which override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend claims, if any;
  7. Right to withdraw consent. In the case of processing personal data on the basis of consents, you have the right to withdraw your consent at any time without giving a reason, as well as without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease to process your data for the purpose covered by your consent. If you wish to withdraw your consent, please contact the Company directly at the above contact details.

If you want to exercise your rights or obtain additional information – please contact us in writing or by phone to the above-mentioned contact of the Data Protection Officer.

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
Purposes, legal bases for collecting and duration of processing of personal data
Your personal data to the extent indicated in the provisions of the labour law1 will be processed in order to conduct the current recruitment procedure2, while other data, including contact details, will be processed on the basis of consent3, which may be revoked at any time.

Your personal data will also be processed in subsequent recruitments if you give your consent4, which can be revoked at any time.

If the documents contain data referred to in Article 9(1) of the GDPR, your consent to the processing of the data will be required5, which may be revoked at any time.

Your data collected in the current recruitment process will be stored until the end of the recruitment process, and in the case of consent to the use of personal data for the purposes of future recruitment, the data will be used for a period of up to 12 months.

1 Article 221 of the Act of 26 June 1974 on the Labour Code (Journal of Laws of 2018, item 917, as amended);

2 Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Parliament and of the Council of 27 April 2016). UE L 119 of 04.05.2016, p. 1, as amended. (hereinafter: GDPR);

3 Article 6(1)(a) of the GDPR;

4 Article 6(1)(a) of the GDPR;

5 Article 9(2)(a) of the GDPR.
Data recipients
The recipients of your personal data may be providers of: job advertisement publication services, recruitment management systems, IT services such as hosting, IT systems and HR services.
Other information
We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if the need arises, we can do so by providing an appropriate level of protection and applying the relevant legal provisions.

Providing your personal data to the extent resulting from Article 221 of the Labour Code is necessary to participate in the recruitment procedure. Providing other data by you is voluntary.

Your personal data is not subject to automated decision-making, including profiling related to automated decision-making.
Controller and Data Protection Officer
The administrator of your personal data is Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street, tel. +48 32 324 57 41, e-mail: alupolfilms@grupakety.com), hereinafter referred to as „Alupol”.

You can contact the Data Protection Officer at Alupol in matters related to the protection of personal data via:

  • e-mail: IOD_AF@grupakety.com,
  • by post to the following address: Alupol Films Sp. z o.o. (32-600 Oświęcim, 18 Gospodarcza Street),
  • tel. at + 48 694 429 337.
Your rights
In connection with the processing of your personal data, you have the following rights:

  1. Right of access to personal data;
  2. Right to rectification;
  3. The right to erasure;
  4. The right to restrict the processing of your personal data;
  5. Right to data portability;
  6. Right to object. You have the right to object to the processing of your data on the basis of legitimate interest at any time. We will cease to process your data for these purposes, unless we are able to demonstrate that there are important legitimate grounds for us in relation to this data, which override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend claims, if any;
  7. Right to withdraw consent. In the case of processing personal data on the basis of consents, you have the right to withdraw your consent at any time without giving a reason, as well as without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease to process your data for the purpose covered by your consent. If you wish to withdraw your consent, please contact the Company directly at the above contact details.

If you want to exercise your rights or obtain additional information – please contact us in writing or by phone to the above-mentioned contact of the Data Protection Officer.

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
Purposes, legal bases for collecting and duration of processing of personal data
Your personal data to the extent indicated in the provisions of the labour law1 will be processed in order to conduct the current recruitment procedure2, while other data, including contact details, will be processed on the basis of consent3, which may be revoked at any time.

Your personal data will also be processed in subsequent recruitments if you give your consent4, which can be revoked at any time.

If the documents contain data referred to in Article 9(1) of the GDPR, your consent to the processing of the data will be required5, which may be revoked at any time.

Your data collected in the current recruitment process will be stored until the end of the recruitment process, and in the case of consent to the use of personal data for the purposes of future recruitment, the data will be used for a period of up to 12 months.

1 Article 221 of the Act of 26 June 1974 on the Labour Code (Journal of Laws of 2018, item 917, as amended);

2 Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Parliament and of the Council of 27 April 2016). UE L 119 of 04.05.2016, p. 1, as amended. (hereinafter: GDPR);

3 Article 6(1)(a) of the GDPR;

4 Article 6(1)(a) of the GDPR;

5 Article 9(2)(a) of the GDPR.
Data recipients
The recipients of your personal data may be providers of: job advertisement publication services, recruitment management systems, IT services such as hosting, IT systems and HR services.
Other information
We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if the need arises, we can do so by providing an appropriate level of protection and applying the relevant legal provisions.

Providing your personal data to the extent resulting from Article 221 of the Labour Code is necessary to participate in the recruitment procedure. Providing other data by you is voluntary.

Your personal data is not subject to automated decision-making, including profiling related to automated decision-making.

Driver providing transport services for Alupol Films Sp. z o.o., pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR“), we provide information on data processing:

[Administrator] The data administrator is Alupol Films Sp. z o.o. (hereinafter referred to as “Alupol”), 18 Gospodarcza Street, 32-600 Oświęcim, tel. +48 32 324 57 41, e-mail: alupolfilms@grupakety.com.

[Inspector] If you have any questions regarding the processing of personal data, in particular in order to exercise your rights, please contact the Data Protection Officer, Mr. Tomasz Cygan, e-mail: IOD_AF@grupakety.com, tel. 694 429 337 or by post to Alupol.

[Purpose] Alupol processes the collected data for the purpose of:

  • organization of administrative and operational work of Alupol related to transport and logistics,
  • to ensure the protection of property, to keep secret information, the disclosure of which could expose Alupol to damage,
  • possible determination, investigation and defence against claims that may arise in connection with the transport services provided,
  • Proof of identity as drivers who drop off or pick up goods.

The condition for entering and moving around the premises of the plant is to present to the Alupol Security a document containing the data of the person moving around the premises (ID card / passport / residence card or, in the absence of these documents: driving license) and record in the records of data, m.in. in the scope of: name, surname, company, number of the document containing personal data.

[Legal basis] The legal basis for the processing of personal data is Article 6(1)(f) of the GDPR.

[Categories and source of data] In addition to the data we obtained directly from you, we may have collected personal data from your employer/service provider. The scope of processed data is: name and surname, telephone number, identity document number, employer’s designation, image from CCTV cameras, number of the vehicle you were driving.

[Recipients] The recipients of the data may be entities and persons acting on behalf of Alupol (m.in. in the field of property protection, IT, legal, advisory and insurance services) and entities authorized to process data under the law (e.g. courts, tax authorities, police).

[Transfer of personal data to a third country] We do not intend to transfer your data to the so-called third countries (i.e. outside the European Economic Area).

[Storage period] The data will be stored until the legitimate interests of Alupol constituting the basis for this processing are fulfilled or until you object to such processing. Video surveillance recordings will be stored for a period not longer than 4 weeks. This period is extended until the final conclusion of the proceedings when the recordings constitute evidence in proceedings conducted on the basis of the law or we have become aware that they may constitute evidence in the proceedings.

[Rights] You have the right to access your personal data, to rectify, delete or limit the processing and the right to object to the processing. In order to exercise the above-mentioned rights, you can contact the Alupol Data Protection Officer. You also have the right to lodge a complaint with the supervisory authority – the President of the Office for Personal Data Protection.

[Providing data] Providing your personal data is voluntary, however, refusal to provide data will result in the inability to enter the area of Alupol.

[Automated decision-making] Personal data will not be subject to automated decision-making, including profiling.