We process the data of the following persons:

• Persons employed in or representing entities that are business partners of Aurepio-Kalij Sp. z o.o. ;
• Employees of Aurepio-Kalij Sp. z o.o.;
• Other stakeholders in any way connected with Aurepio-Kalij Sp. z o.o.;
• Users of the AUREPIO-Kalij.PL website (hereinafter referred to as the Website) who used the Contact Form and provided their personal data.

• Name and surname, company, business address, correspondence address;
• Numbers in certain official registers (e.g. NIP, REGON, PESEL, etc.);
• Contact details - e.g. e-mail address, telephone number;
• Position or functions performed by you within your organisation;
• Other data such as: bank account number, education, professional title, etc;
• Your data collected from publicly available sources, such as CEIDG and KRS registers.

In order to ensure the security of personal data entrusted to us, we have developed internal procedures and recommendations to prevent the disclosure of data to unauthorized persons. We control their implementation and constantly check their compliance with the relevant legal acts - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (general data protection regulation), the Act on personal data protection, the Act on the provision of electronic services, as well as all kinds of implementing acts to the laws and acts of the EC Community law and guidelines of the European Data Protection Board.

Only authorized employees of Aurepio-Kalij Sp. z o.o. and persons dealing with the Service have direct access to personal data of Service users. Authorized persons are obliged to keep this data in strict confidence and prevent access to them by unauthorized entities.

Your personal data will not be passed on to other entities except for the following:

• The data may be transferred to Aurepio Sp. z o.o. for processing;
• The data may be entrusted for processing to suppliers of IT services provided to Aurepio-Kalij Sp. z o.o.;
• Data may be transferred to public administration authorities at their request in accordance with applicable law.

We process your personal data for the following purposes:

• if necessary for the fulfilment of contractual obligations of the Company towards you or for the fulfilment of activities prior to the conclusion of the contract with you;
• if essential for the fulfilment of our legal obligations or those expressly prescribed by law;
• if necessary for the performance of the legally justified interests of the Company (art. 6 sec. 1 letter f) GDPR), such as: enabling the Company's representatives to contact you, preventing criminal activity, verification of clients in public registers, marketing and analytical purposes;
• Handling of messages sent to us via the contact form - each time with consent to the processing of personal data (pursuant to Article 6(1)(a) of the GDPR);

You have a right to:

• Requests for access to your personal data;
• Requests for rectification of your personal data;
• Request for deletion of your personal data or limitation of their processing;
• Object to the processing of your personal data;
• Request to restrict the processing of your personal data;
• Request the transfer of your personal data;
• You may also withdraw your consent to the processing of your personal data, which will not affect the lawfulness of the processing of your personal data by Aurepio-Kalij Sp. z o.o., which was carried out on the basis of consent prior to its withdrawal.

If you believe that we are processing your personal data in violation of the law, you have the right to lodge a complaint with the supervisory authority - the President of the Office for Personal Data Protection.

Your personal data will be stored for as long as Aurepio-Kalij Sp. z o.o. needs it for the purposes for which it was collected. Personal data will be stored until any of the following situations occur:

• until the withdrawal of consent to their processing,
• until the Administrator declares them out of date,
• until it expires
• until meeting the purpose for which they were collected,
• until expiration of any claims from the persons that the data refers to.