In fulfillment of the information obligation arising from Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), we hereby inform you that:

The Controller (Administrator) of your personal data is: WALTER HERZ Spółka z ograniczoną odpowiedzialnością with its registered office at: ul. Chłodna 51, 00-867 Warsaw, Poland, Tax ID (NIP): 5272684601, National Business Registry Number (REGON): 146346389, entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under KRS number 0000944423.

You may contact the Controller via traditional mail at ul. Chłodna 51, 00-867 Warsaw, Poland, or via e-mail at office@walterherz.com.

Your data will be processed for the following purposes:

• a) As necessary for the performance of a contract to which you are a party, based on Art. 6(1)(b) GDPR;
• b) As necessary to conclude a contract based on your interest in our offer, based on Art. 6(1)(b) GDPR;
• c) For the possible establishment, exercise, or defense of legal claims, as the realization of our legitimate interest, based on Art. 6(1)(f) GDPR;
• d) To offer you products and services as part of our legitimate interest in direct marketing;
• e) For cooperation with you regarding the provision of services by you;
• f) For automated profiling.

We may transfer your data to:

• a) Persons authorized by us – our employees and associates who must have access to the data to perform their duties;
• b) Processors – entities to whom we delegate activities requiring data processing;
• c) Other recipients – e.g., couriers, insurers, law firms, debt collection companies, and entities that may request data transfer based on applicable legal regulations.

Data Retention Period: We will process your data for the period during which a complaint or lawsuit may be filed, as well as for the period during which we are legally obliged to process data under statutory law. Data processed for the purposes of direct marketing of our products and services will be processed until you object to their processing for this purpose.

Your Rights: You have the right to access your data and receive a copy thereof, the right to data portability, the right to object to data processing, the right to rectify (correct) your data, the right to erase your data (the "right to be forgotten"), the right to restrict data processing, and the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO).