THE INFORMATION ON THE PROCESSING OF PERSONAL DATA RECEIVED BY TORUŃSKIE ZAKŁADY MATERIAŁÓW OPATRUNKOWYCH S.A IN CONNECTION WITH THE CONCLUSION OR PERFORMANCE OF THE CONTRACT

(of the persons who are party to the contract, the persons representing the contractual party, persons indicated to the contract in connection with the performance of the contract, etc.)

Toruńskie Zakłady Materiałów Opatrunkowych S.A. with its registered office in Toruń informs:

• Personal data is processed in accordance with the applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR.
• The controller of personal data is Toruńskie Zakłady Materiałów Opatrunkowych S.A. with its registered office in Toruń, at ul. Żółkiewskiego 20/26, 87-100 Toruń, and co-controllers of personal data are entities belonging to TZMO Group, listed on the website www.tzmo-global.com/RODO. Whenever further reference is made to the controller, it shall also mean co-controllers.
• The controller processes personal data in order to execute rights and obligations resulting from the contract concluded with Toruńskie Zakłady Materiałów Opatrunkowych S.A. (hereinafter referred to as the Contract), including those related to the conclusion or performance of the Contract, and to maintain contacts in connection with the performance of the Contract.
• The controller processes personal data of the following persons:
  • a person who is a party to the Contract - pursuant to Article 6(1)(b) of the GDPR, i.e. processing is necessary for the performance of the Contract and pursuant to Article 6(1)(c) of the GDPR, i.e. processing is necessary for the fulfilment of the legal obligation imposed on the Controller (e.g. related to the conclusion or performance of the Contract, tax, accounting, reporting and social security and health insurance obligations);
  • a person who is not a party to the Contract - pursuant to Article 6(1)(f) of GDPR, i.e. processing is necessary for the purposes resulting from legitimate interests pursued by the controller (maintaining contacts for the purpose of performing the Contract).

• The controller processes the following categories of personal data: name and surname, function, telephone number, e-mail address. In case of a person who is a party to the Contract, also: address of residence or business activity and identification numbers (e.g. NIP, REGON) and other data provided by this person.  
• The source of the personal data is the information provided to the controller by a party to the Contract in connection with the conclusion or performance of the Contract, or publicly available sources containing information on legal persons and natural persons conducting business activity (in particular the National Court Register and the Central Register and Information on Business Activity).
• The recipients of personal data are persons employed by the controller (under an employment contract or other contract) and trusted entities cooperating with the controller in connection with the performance of the Contract.
• The controller does not intend to transfer the personal data to a third country or to international organisations.
• The personal data shall be stored until the controller fulfils the rights and obligations resulting from the Contract (e.g. related to the conclusion and performance of the Contract, tax, accounting, reporting and social security and health insurance obligations).
• The person the data relates to has the right to demand from the controller access to his personal data and, in the cases specified by the GDR, to rectify, erase, transfer or limit the processing.
• The person the data relates to has the right to lodge a complaint with the President of the Personal Data Protection Office if he/she believes that the processing of personal data concerning him/her violates the provisions of the GDPR.
• Providing personal data is not a statutory or contractual requirement and is voluntary; however, the consequence of not providing data may be to prevent or hinder the conclusion or performance of the Contract.
• In connection with the processing of personal data there is no automated decision making, including profiling.
• In matters concerning the processing of personal data and the exercise of rights related to the processing of personal data, the data protection officer may be contacted; address: Toruńskie Zakłady Materiałów Opatrunkowych S.A., Żółkiewskiego 20/26, 87-100 Toruń; e-mail address: iod@tzmo.com.pl.