**Information Clause on the Processing of Personal Data by ThermoCrea Sp. z o.o.**
**General Information**
ThermoCrea Sp. z o.o. (“Controller”), with its registered office in Cracow, located at al. Powstania Warszawskiego 15, 31-539 Cracow, registered in the Register of Entrepreneurs of the National Court Register under KRS number 0001026740, holding NIP: 1182258979, processes your personal data in accordance with the provisions of the General Data Protection Regulation (Regulation (EU) 2016/679) (“RODO”).
**Contact Information**
For matters related to the processing of personal data, you can contact the Controller via:
– Email: [Controller’s email address]
– Postal mail: Address mentioned above.
**Purpose and Scope of Data Processing**
The Controller processes your personal data for the following purposes:
1. **Marketing of Services and Products**:
– Conducting direct marketing of the Controller’s own services and products, as well as those of its partners, based on Article 6(1)(f) RODO.
2. **Contract Execution**:
– Performing a contract or taking steps at the request of the data subject prior to entering into a contract, particularly responding to inquiries for presenting commercial offers of the Controller’s or its partners’ services and products, based on Article 6(1)(b) RODO.
**Data Categories Processed**
For the above purposes, the following categories of personal data are processed:
– First and last name
– Company name (if applicable)
– Registered office of the company
– Email address
– Telephone number
Providing the above data is voluntary but necessary for achieving the designated purpose.
**Data Recipients**
Personal data may be shared with:
– The Controller’s partners, such as InTech Pazarlama Ithalat Ihracat San. Tic. Ltd. Şti. in Manisa, Turkey.
– Entities subcontracted by the Controller for activities requiring data processing, only in justified cases and based on applicable laws.
**Data Retention Period**
Personal data will be retained for:
– Marketing purposes for a maximum period of 3 years.
– Contract-related processing for the duration of the contract and an additional 3 years starting from the beginning of the year following the contract’s expiration. Data will also be deleted upon your objection.
**Data Protection Measures**
The Controller will implement all possible technical and organizational measures to ensure full protection of the processed data, protecting against unauthorized access, public disclosure, loss, destruction, unauthorized modification, and processing violations.
**Your Rights**
You have the right to:
1. Access, rectify, restrict processing, and delete your data as specified in Article 17 of RODO.
2. Object to the processing of your personal data based on Article 6(1)(f) RODO.
3. Lodge a complaint with a supervisory authority, which in Poland is the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw).
**International Data Transfers**
Personal data may be transferred to third countries outside the European Economic Area, with guarantees for the widest possible protection, including specific safeguards.
**Automated Decision-Making**
Your personal data will not be subject to automated decision-making, including profiling, as referred to in Article 22(1) and (4) of RODO.