(1)    The administrator of the personal data is DAPS Polska sp. z o.o.

(2)    Submitted personal data will be processed for the purpose of providing services, handling requests and responding to requests;

(3)    Categories of personal data include, but are not limited to, first and last name, telephone number, e-mail address, address, data dedicated to the process/service/project;

(4)    Your personal data may be transferred to entities that process personal data on behalf of the administrator: IT service providers;

(5)    Your personal data will be kept for the duration of the administrator's legitimate interest,  unless you object to the processing;

(6)    Your data will be managed by mother company Duerkopp Adler GmbH ;

(7)    You have the right of access to the content of your data and the right to rectification, erasure, restriction of processing, the right to data portability, the right to object, the right to withdraw consent at any time without     affecting the legality of the processing performed on the basis of consent before its withdrawal;

(8)    You have the right to lodge a complaint to the supervisory authority in charge of personal data protection, which is the President of the Office for Personal Data Protection, when you consider that the processing of your personal     data violates the provisions of the Act of May 10, 2018 on Personal Data Protection (consolidated text, Journal of Laws of 2018, item 1000) or the provisions of Regulation (EU) 2016/679 of the European Parliament and of the     Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR) of April 27, 2016. (Official Journal of the EU.L No. 119, p. 1);

(9)    The data provided by you will not be subject to automated decision-making and profiling;

(10)    The data comes from data subjects;

(11)    Your provision of personal data is voluntary;

(12)    The legal basis for the processing of personal data is:
    a.    Article 6(1)(a) of the GDPR - consent of the data subject, where voluntary consent is given,
    b.    Article 6(1)(b) GDPR - necessity to perform a contract or to take action at the request of the data subject prior to entering into a contract,
    c.    Article 6(1)(c) GDPR - legal obligation incumbent on the controller,
    d.    Article 6(1)(f) GDPR - legitimate interests of the controller, e.g. handling inquiries, direct marketing, ensuring the security of the service.

(13)    If the basis for the processing of personal data is the legitimate interest of the controller (Article 6(1)(f) GDPR), it consists in:
    a.    responding to inquiries sent via the contact form,
    b.    analyzing user activity in order to improve the operation of the website,
    c.    realization of direct marketing of the administrator's products and services.