Dear Sir/Madam,

Due to the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the Regulation), on May 25, 2018, pursuant to Article 13 paragraphs 1 and 2 of the Regulation, we hereby inform you of the following in connection with the processing of your personal data:

The controller of your data is SoNa Sp. z o.o. with its registered office in Koziegłówki, ul. Myszkowska 25, 42-350 Koziegłowy. You can contact the controller by email: rodo@sona.pl, by phone at +48 34 314 24 35, or in writing to the address indicated above. Your personal data will be processed for the following purposes:

A) if you are an employee of a Data Controller’s Business Partner,

for the purpose of executing contracts concluded between the Data Controller and the Business Partner pursuant to Article 6 paragraph 1 letter b of the Regulation,

B) if you are a Data Controller’s Business Partner, for the following purposes:

for the purpose of executing contracts concluded with you pursuant to Article 6 paragraph 1 letter b of the Regulation,

for the purpose of fulfilling the legal obligations incumbent on SONA Sp. z o.o. under applicable law, including accounting and tax regulations – the legal basis for processing is Article 6 paragraph 1 letter c of the Regulation,

for the purpose of pursuing the legitimate interests of SONA Sp. involving the possible establishment, pursuit of claims, or defense against claims – the legal basis for processing is Article 6, paragraph 1, letter f.

Your personal data may be transferred to other entities, including:

IT service providers,

entities providing SONA Sp. z o.o. with services necessary to perform the contract concluded with you, such as forwarding, transport, customs, and legal services,

postal operators and/or couriers,

banks for payment processing,

as well as entities authorized by law.

Personal data will not be transferred to entities from third countries or international organizations.

Personal data will be processed and stored during the performance/duration of concluded contracts, as well as after their termination for the time and to the extent required by law, including accounting regulations.

We hereby inform you that you have the following rights related to the processing by SoNa Sp. z o.o. Personal data:

The right to request access to your personal data from the Controller;

The right to rectify your data;

The right to erase your data;

The right to restrict processing;

The right to data portability (if technically possible);

The right to object to data processing.

In addition, you have the right to lodge a complaint with a supervisory authority within the meaning of Article 4(21) of the Regulation if you believe that the processing of your personal data violates the provisions of this Regulation.

Your data will not be subject to profiling.

Providing your personal data is necessary for the performance of concluded agreements regarding communication, documentation, and organization of commercial transactions. Failure to provide the personal data required by SONA Sp. z o.o. will result in the inability to conclude and perform the agreement.

We hereby inform you that SoNa Sp. z o.o. makes every effort to ensure all means of physical, technical and organisational protection of personal data against accidental or deliberate destruction, accidental loss, alteration, unauthorised disclosure, use or access, in accordance with all applicable legal provisions.