PRIVACY POLICY

• They are necessary for us to fulfill a legal obligation,
• They are necessary for us for the purposes of legitimate interests,
• We obtained consent from data subjects.

We may process our customers' personal data, depending on the method of communication with us, the type of contract entered into and the entity entering into the cooperation, to the following extent:

• data obtained from Customers: name, telephone number, e-mail address, address of residence, Tax Identification Number, company data, bank account number.
• Automatically acquired data: the Internet Protocol (IP) address used to connect your computer to the Internet, information about
  your computer and connection, such as browser type and version, browser plug-in types and versions, operating system, cookies, Flash cookies (also known as Flash Local Shared Objects) session information, including page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse cursor movement), data about the device connecting to our wireless network, and methods used to browse the site.

Our customers' data are processed for the purposes of:

• Execution of the sales process of the products we offer,
• Enable you to contact us and learn more about our offer,
• Performance of the contract previously concluded with the customer,
• To enable the customer to use our website,
• Monitor activity on our website using cookies and other analytical tools,
• To provide product information in line with the interests and needs of our website visitors using profiling based on customer data held including cookies and analytical tools,
• Conducting research and statistical analysis for the functionality of the website and improving its operation,
• Debt collection, litigation, arbitration and mediation,
• Fulfillment of legal and regulatory requirements,
• Conduct market research, customer satisfaction surveys and quality control, direct marketing and promotions (based on approvals only).

The processing time of Customers' personal data depends on the purpose of processing and may be:

• In the case of processing under a contract, for the duration of the contract and the statute of limitations for any claims.
• In the case of consent given by the data subject until revoked.
• Data processed in pursuit of the legitimate interests of GTX Poland Sp. z o.o. Sp.k. for the duration of its duration.
• In the case of processing for direct marketing purposes, for the duration of the data subject's objection.
• Data processed as a result of legal obligations of GTX Poland Sp. z o.o. Sp.k. for a period of time resulting from relevant regulations.

The scope of processed data of Suppliers includes: name, e-mail address, telephone number, business address, Tax ID, bank account number, registration data.

We process our Suppliers' data for the following purposes:

• Familiarize yourself with the supplier's offer.
• Entering into a cooperation agreement.
• Communicate within the framework of mutual cooperation.
• Accounting service of our company.
• Fulfillment of legal and regulatory requirements.

The processing time of our suppliers' personal data, depending on the type of document, is:

• Bid data for a period of 60 days.
• Agreement for the duration of the term, and after the termination of the cooperation for the duration of the claims.
• Financial documents for a period of 5 calendar years, except when the data are necessary for control activities, are linked to another accounting period, are required to document any claims.

We process personal data of our Employees to the extent allowed by law: name(s) and surname, parents' names, date of birth, place of residence (mailing address), PESEL, NIP, education, course of previous employment, names and surnames and dates of birth of the Employee's children, if providing such data is necessary due to the Employee's exercise of special rights provided by labor law, image, bank account number.

We process our Employees' data for the following purposes:

• Fulfillment of legal and regulatory obligations.
• Ensure security on our company's premises.
• To provide access to the company's information systems.
• Time records that allow for the correct determination of the Employee's salary and other work-related benefits.

The duration of processing of personal data is governed by law and the duration of the contract with the Employee and is as follows:

• Personnel files for 50 years counting from the date of termination of employment.
• Payroll records for 50 years counting from the date of their production.
• Documents of employees employed under civil law contracts for the period of required access to this information, resulting from legal regulations (e.g., pension, pension, tax), not less than 5 years.
• In the case of consent by the Employee until revoked.
• Securing mobile devices against unauthorized access to data stored on them in case of loss.

When recruiting new Employees or accepting applications for employment with our company, we process Candidates' personal data.

The following range of personal data is in accordance with the law or has been voluntarily provided to us by the Candidate: first name(s) and last name, date of birth; place of residence (mailing address); education, previous employment history, e-mail address, telephone, image.

We process this data for the purpose of recruiting new Employees to our company.

We process data, depending on the consents given by the Candidate:

• For the duration of recruitment for the position specified in the advertisement.
• For the purpose of future recruitment for other positions until the data subject withdraws his/her consent, but no later than 12 months after the Candidate's application.

Due to legal requirements, we also process, in archival form, the personal data of our former Employees.

The scope of the data and the duration of its processing are consistent with those processed during employment.

We use the storage of this data to document the employment history for former Employees. And as documentary evidence in case of inspections by government offices (e.g., Social Security, US).

Data subjects have rights related to the protection of personal data, allowing:

• Obtaining information about the personal data being processed.
• Access to processed personal data.
• Correcting, that is, correcting any incomplete or inaccurate information that is processed.
• Deletion of personal data in legitimate cases i.e. right to be forgotten, deletion of data when there is no longer a legitimate reason to continue processing or consent is withdrawn.
• Data portability, that is, obtaining data and reusing it for another purpose and with another Administrator.
• Object to the processing of personal data if there is no legitimate reason.
• Protection against automated decision-making and profiling.

Questions related to our processing of personal data and the rights of data subjects in connection therewith may be obtained from the Data Protection Officer by contacting the e-mail address: iodo@gtx-group.com

As part of its activities, GTX Poland Sp. z o.o. Sp.k. cooperates with third-party vendors who support us with tasks necessary for the operation of the company. We may entrust personal data to external entities for this purpose - for example: employee portal, software maintenance, email, courier services, database management, payment processing, communication tool providers, IT system providers (accounting, CRM, ERP, SFA, car fleet maintenance), document shredding. When using third-party providers, only the personal data necessary for the service is disclosed. Suppliers of GTX Poland Sp. z o.o. Sp.k. are obliged to ensure an adequate level of data security and to meet the requirements of applicable law related to personal data protection. External service providers are bound by a confidentiality clause and may not use the entrusted personal data for purposes other than those specified in the contract with our company.

We assure you that we do not share personal data with third parties, except when we are required to do so by law, for example, by court order, to prevent fraud or other crimes, and based on the voluntary consent of the data subject.

We declare that we do not transfer personal data outside the European Economic Area.

We declare that the automatic data processing applied by us within the framework of the use of the services and tools provided by us and used by us to serve our Customers (including profiling) does not produce any legal effects towards the data subjects and does not significantly affect their situation.

If you do not want to receive cookies, you can change your browser settings. We stipulate that disabling cookies necessary for authentication processes, security, maintenance of user preferences may hinder, and in extreme cases may make it impossible to use the websites.

In order to manage your cookie settings, please configure the cookie options in the browser you are using accordingly. Cookies can also be deleted manually by clearing your browsing history in the browser menu.

All photos, graphics, texts, presentations and other legally protected goods posted on our websites and company materials are subject to copyright protection. Any copying, processing, modification and use of them without the permission of the copyright owner is prohibited. Any markings of products presented on our websites are registered trademarks, use of them without permission of authorized entities is prohibited.