GDPR Notice

GDPR Notice Warsaw, 24 May 2018 Dear Customers, Megadisc Jacek Leśniewski, with its registered office in Warsaw, ul. Długa 44/50, 00-241 Warszawa (the "Controller"), in connection with the entry into force on 25 May 2018 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the "GDPR"), hereby informs you that it may process your data as a personal data controller where there is an appropriate legal basis for doing so. Accordingly, the Controller informs you that: 1. Your personal data may be processed for purposes necessary for: (I) the performance of a contract to which you are a party, or (II) taking steps at your request prior to entering into a contract, or (III) compliance with a legal obligation to which the Controller is subject, or (IV) purposes arising from the legitimate interests pursued by the Controller, and also (V) on the basis of your consent - for purposes consistent with the consent given; In particular, if you are: 1.1. a customer of the online shop www.megadisc.pl (hereinafter: the "E-Shop"), we process your data for purposes related to transactions made through the E-Shop and for purposes arising from the legitimate interests pursued by the Controller; 1.2. a subscriber to the newsletter sent out by the Controller (hereinafter: the "Newsletter"), we process your data for purposes related to subscribing to and sending the Newsletter; 1.3. an enquirer contacting the customer service office (hereinafter: "Customer Service"), we process your data for the purpose of contacting you about the matters you raised with Customer Service, including in particular those related to transactions made through the E-Shop, or for the purpose of taking steps at your request prior to entering into a contract, or for purposes arising from the legitimate interests pursued by the Controller. 2. the data provided may be processed on the basis of Article 6(1)(a), (b), (c) and (f) of the GDPR; 3. Personal data may be stored for the period necessary to achieve the purposes indicated above. Where data is processed on the basis of your consent, personal data will be stored until the consent is withdrawn; In particular, if you are: 3.1. a customer of the E-Shop - personal data will be stored for the period necessary to carry out transactions in the E-Shop and to handle complaints, and for as long as you hold an account in the E-Shop, but no longer than 3 years from the closure of the account in the E-Shop. If you make a transaction without creating an account in the E-Shop, the data is stored for 3 years from the date of the transaction; 3.2. a subscriber to the Newsletter - personal data will be stored for the duration of the Newsletter subscription, until you withdraw your consent to the subscription; 3.3. an enquirer contacting Customer Service - personal data will be stored for the period necessary for correspondence with you through Customer Service. If the law requires your personal data to be deleted earlier or stored for longer, the Controller will comply with that legal obligation. 4. you have the right to request from the Controller access to your personal data, its rectification, erasure or restriction of processing; 5. you have the right to withdraw your consent to the processing of personal data at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal; 6. you have the right to lodge a complaint with GIODO (Inspector General for Personal Data Protection) (and, from the date the new authority is established, with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)) if you consider that the processing of your personal data infringes the law; 7. the personal data has been obtained from you (the personal data comes from the data subject); 8. providing data is voluntary; for the purposes specified in detail in the relevant terms and conditions in force at the Controller, providing data may be necessary to carry out certain transactions or activities; 9. Your data may be processed in the form of analytical profiling in accordance with the Privacy Policy; however, this does not produce any legal effects for you. Binding decisions will not be automated; 10. From 25 May 2018, the contact details of the personal data Controller are as follows: megadisc@megadisc.pl