GDPR clause

Personal data processing clause

In accordance with Article 13 paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter "GDPR"), we inform you that:

Personal data administrator
The Controller of your personal data is Baseelektric Artur Idasiak, ul. Leszczyńskiego 4/29, 50-078 Wrocław, Regon: 387702759, Tax Identification Number: 8952003168. Contact with the Controller is possible at the following e-mail address: modernwallartcompany@gmail.com .

Purposes and basis of data processing
Your personal data will be processed for the purpose of:
• conclusion and implementation of the Sales Agreement (Article 6, paragraph 1, letter b of the GDPR),
• receiving and considering complaints (Article 6, paragraph 1, letter b of the GDPR),
• fulfillment of legal obligations incumbent on the Controller, such as tax and accounting obligations (Article 6, paragraph 1, letter c of the GDPR),
• pursuing claims and defending against claims (Article 6(1)(f) of the GDPR).

Recipients of personal data
Your personal data may be transferred:
• entities providing transport and courier services to deliver the ordered goods,
• entities handling electronic payments and card payments,
• IT and hosting service providers,
• entities authorized under the law.

Data storage period
Your personal data will be stored for the period of:
• execution of the Sales Agreement and for the period required by law (e.g. tax regulations),
• until the limitation period for claims arising from the Sales Agreement expires,
• in the case of data processing based on consent – ​​until its withdrawal.

Data subject rights
You have the right to:
• access to your personal data and receive a copy thereof,
• rectify (correct) your data,
• deletion of personal data, restriction of data processing,
• object to the processing of personal data,
• data transfer,
• filing a complaint to the President of the Personal Data Protection Office,
• withdraw consent to the processing of personal data if the processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Transfer of data to third countries
As part of the use of tools supporting ongoing operations, such as Google or Facebook, personal data may be transferred outside the European Economic Area (EEA). The Administrator applies appropriate safeguards related to data transfer, in accordance with applicable law.

Profiling and automated decision-making
Your personal data will not be used for automated decision-making, including profiling, that would produce legal effects for you or similarly significantly affect your situation.

Voluntary provision of data
Providing personal data is voluntary, but necessary for the conclusion and performance of the Sales Agreement. Failure to provide data may prevent the conclusion and performance of the Agreement.