Processing of personal data

INFORMATION CLAUSE ON THE PROCESSING OF PERSONAL DATA

In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: GDPR), we provide the following information on the principles of processing your personal data and on your rights in relation thereto.

Data controller

Your personal data controller is: Sigma Stretch Film of Europe Sp. z o.o., ul. Przemysłowa 4, 05-480 Karczew, Poland.

Contact details of the data controller

You can contact us about your personal data, as follows:

in writing - to the address: Sigma Stretch Film of Europe Sp. z o.o., Przemysłowa 4, 05-480 Karczew, Poland
by e-mail at: dpo@sigmaplastics.eu

Purposes and legal basis for processing your personal data

Your personal data provided in the content of the registration form and the request, i.e. your name, surname, e-mail address, address, telephone number, NIP or EU VAT in the case of natural persons conducting business activity, is processed in accordance with the generally applicable law in order to service your account on the https://sigmastretchfilm.eu service platform (hereinafter referred to as the "Platform"), to handle a request or inquiry made using the Platform and, if you agree to it separately, to handle the newsletter function, as well as for other marketing purposes. Your personal data is processed on the basis of Article 6(1)(f) of the GDPR, i.e. for the purposes resulting from legitimate interests pursued by the Data Controller or by a third party (consisting in registering your account on the Service Platform, receiving your request via the Service Platform, subjecting it to verification and analysis and responding to your request, on the basis of Article 6(1)(b) of the GDPR (in order to take action at the request of the data subject before concluding a contract) and, if you consent to the processing of your personal data for another purpose, on the basis of your consent, i.e. Article 6(1)(a) of the GDPR.

Obligation to provide data

The provision of personal data is voluntary, but necessary in order to submit and process a request or inquiry.

Information on the recipients of your personal data

In connection with the processing of your personal data for the purposes indicated in sec. III, your personal data may be disclosed to:

entities related to Sigma with a legitimate interest in the processing of personal data within the capital group,
website providers, technical service providers, developing and maintaining Sigma information systems, including the Service Platform.

These entities process the data on the basis of an agreement with Sigma and only in accordance with the Sigma order.

Data retention period

We will retain your personal data for as long as we need it for the purposes for which it is processed. Your personal data will be processed for the duration of the existence of your account on the Platform or the handling of your request, whichever is later.

Rights of the data subject

You have the following rights under the current legislation:

No.	Authorisation	Description
1.	Right of access	You can obtain information related to the processing of your personal data and a copy of such personal data.
2.	Right of amendment	If you believe that your personal data is inaccurate or incomplete, you may request that your personal data be amended accordingly.
3.	Right of removal	You may request that your personal data be deleted to the extent permitted by law.
4.	Right of restriction	You may request that the processing of your personal data be restricted.
5.	Right of objection	You may object to the processing of your personal data for reasons related to your situation.
6.	Right of consent withdrawal	You can withdraw your consent to the processing of your personal data at any time.
7.	Right of transfer	You have the right to transfer your personal data, i.e. to receive your personal data from your personal data controller, in a structured, commonly used machine-readable format. You may send such data to another data controller.
8.	Right of complaint	You have the right to lodge a complaint with the supervisory authority competent for personal data protection, i.e. the Polish supervisory authority (President of the Office for Personal Data Protection) or the supervisory authority of another Member State of the European Union, competent for the data subject's habitual residence, or place of work, or for the place of the alleged breach.

In order to exercise the above rights, please contact Sigma using the contact details specified in point II above (Contact details).