General Data Protection Regulation – Information about the processing of personal data

Dear Sir or Madam,

According to Art. 13 sec. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament
and of the Council of 27/04/2016 on the protection of individuals with regard to the processing of
personal data and on the free movement of such data, and repealing Directive 95/46/EC (General
Data Protection Regulation) (Journal of Laws EU.L. of 2016 No. 119, p. 1, as amended, hereinafter
referred as GDPR) and on the basis of the provisions of the Act on the Protection of Personal Data
of May 10, 2018 (Journal of Laws of 2018, item 1000, as amended), we would like to inform you
about the following:
Personal data administrator
The administrator of your personal data is PEMAL SA with its registered office in Nowy
Dwór Gdański (82-100), at ul. Mickiewicza 1-7, entered into the Register of Entrepreneurs of the
National Court Register kept by the District Court Gdańsk-Północ, 7th Commercial Division of the
National Court Register under number 0000203066, with VAT number 5791006360, (hereinafter
referred to as: Administrator). You may contact the Administrator as follows:

  • by mail to the following address: 82-100 Nowy Dwór Gd., ul. Mickiewicza 1-7
  • by email:

Processing purposes and legal basis for processing

  • The administrator will process your personal data for the purpose of performing the contract.
  • The legal basis for processing your personal data is Art. 6 sec. 1 lit. a-b of the GDPR,
    namely voluntarily expressed consent to data processing or the necessity of data processing
    in order to perform the contract.

The period of personal data storage

  • We will store your personal data for the period necessary to perform the contract and the
    limitation period for claims under this contract.

Data recipients

  • We will transfer your personal data to suppliers to whom we outsource services related to
    the processing of personal data, e.g. IT service providers. Such entities process data based
    on a contract with us and only in accordance with our instructions.

Rights associated with the processing of your personal data
You are entitled to the following rights related to the processing of personal data:

  • the right to withdraw consent to data processing,
  • right of access to personal data,
  • the right to request the correction of personal data,
  • the right to request removal of personal data,
  • the right to request limitation of personal data processing,
  • right to object to the processing of data,
  • the right to transfer personal data, i.e. the right to receive personal data from us in a
    structured, commonly used machine-readable IT format. You will be able to send this data to
    another data administrator or request that the Administrator send your data to another
    administrator. However, the Administrator will do so only if such a transfer is technically
    possible. The right to transfer personal data applies only to the data that the Administrator
    processes on the basis of an agreement with you or on the basis of consent. To exercise the
    above rights, please contact the Administrator or our representative (contact details in points
    1 and 2 above).
  • The right to withdraw consent, i.e. to the extent that your data is processed on the basis of
    your consent, you have the right to withdraw your consent to the processing of data at any
    time. Withdrawal of consent does not affect the lawfulness of processing based on your
    consent before its withdrawal. Consent can be withdrawn by sending a statement of
    withdrawal of consent to the correspondence address or e-mail address, The right to lodge a
    complaint to the authority, i.e. you also have the right to lodge a complaint to the
    supervisory authority dealing with the protection of personal data, i.e. the President of the
    Office for Personal Data Protection.

Personal Data Administrator PEMAL SA