We are committed to ensuring the security of your personal data. We make every effort to process the data in conformity with the highest standards. This information clause explains the method and purpose of processing of your personal data and your rights.

Who is the controller of your personal data?

The controller of personal data for the purposes of this Policy is:

WAMECH P.S.A. (stock company) with registered office in Kraków, REGON Statistical Number: 356347541, NIP Taxpayer Identification Number: 6790026622, at ul. Torowa 3, 30-435 Kraków, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division, entry no. in the NCR: 0000113651

street address:

WAMECH Producent Wózków Przemysłowych Piotr i Albina Wąsik Spółka Jawna, ul. Torowa 3,

30-435 Kraków, Poland.

email: ochronadanych@wamech.pl

telephone: +48123550011

Why do we process your personal data?

We process personal data to establish and maintain business contacts, when purchasing and selling products and services, developing and expanding business relationships, cooperating with our partners and carrying out other typical business processes in our firm.

What personal data do we process?

We may process the following categories of personal data obtained directly from you or from third parties as part of business contacts, depending on specific circumstances and cases:

• full name
• telephone number
• email address
• function performed or position occupied
• business name and address of your employer or affiliate organization
• instant messenger account name
• workplace address or street address
• business name, address and statistical number of a sole trader

What is the legal basis for the processing of personal data?

We process personal data pursuing our legitimate interests for the purposes of data processing indicated above.

How long will we process your personal data?

We will process your personal data as long, as the processing is necessary for us to achieve our business objectives and pursue our interests.

Do we process your data by automated means (including profiling)?

We do not use automated means (including profiling) to process personal data.

Where do we keep your personal data?

Your personal data will be kept in the member states of the European Economic Area (”EEA”). However, certain services we use may require that the data be transferred and processed outside the EEA. Each transfer of personal data will be consistent with legislation in force and will include appropriate legal safeguards (standard contractual clauses ensuring personal data protection as adopted by the European Commission).

Who receives your personal data?

Service providers and business partners

We provide personal data to our business partners and providers of services that support us in achieving our business objectives. We may also make available personal data to our providers of: accounting, HR and payroll, marketing, IT, financial, legal, consulting and other services necessary to manage our enterprise. The organizations and entities that process personal data as part of services provided to us are required to protect the data and respect your rights established by the applicable laws.

Affiliated entities

We may provide personal data to entities affiliated with us by personal, capital or other ties. Selected or complete personal data may be transferred to other entities as part of mergers, business combinations, takeovers, restructuring of our business, establishing and conducting of joint ventures with other entities and separation or disposal of our enterprise in part or in whole.

Legal obligations and security

We may transfer personal data to competent administrative authorities, institutions and other authorised entities in Poland and abroad, if the applicable laws impose on us the obligation to transfer the data, and if we are requested by them under a procedure established by the law. We may also process personal data, if the processing is necessary to establish and protect our rights our put forward our claims.

What rights can you exercise?

You enjoy a number of rights as a data subject. You can obtain additional information, e.g. what is the extent of your rights and how to exercise them, using our email address: ochronadanych@wamech.pl

The right of access to data

You have the right to request from us information as to whether your personal data are being processed, and (among others) to what extent, for what purposes and by what means, with whom do we share the data we keep and what is the source of your data. You may send a request using the contact email address given above or using other means of your choice.

The right to data portability

You have the right to receive your personal data that you have provided to us, in a structured, commonly used and machine-readable format and the right to request that those data be transmitted to another entity or organization.

The right to rectify data

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you, and (taking into account the purposes of the processing) the right to have incomplete personal data completed, including by means of providing a supplementary statement.

The right to erase data

You have the right to obtain from us the erasure of personal data concerning you without undue delay, when: (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, (ii) you withdraw consent on which the processing is based, and we have no other legal ground for the processing, (iii) you object to the processing and there are no overriding legitimate grounds for the processing, (iv) the personal data have been unlawfully processed, (v) the personal data have to be erased for compliance with a legal obligation. However, exceptional, legitimate cases may exist that will prevent us from complying with your request.

The right to restriction of processing

You have the right to obtain from us restriction of processing: (i) if the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data, (ii) if the processing is unlawful and you oppose the erasure of the data, (iii) if we no longer need the personal data for the purposes of the processing, but they are required for the establishment, exercise or defence of legal claims, (iv) if you have objected to processing, pending the verification whether we have legitimate interests in the processing that override those of you, thus enabling us to ignore your objection.

The right to withdraw your consent

If the processing of your personal data is based on your consent, you have the right to withdraw (cancel) the consent at any time. This will not affect the lawfulness of processing of your personal data based on your consent before its withdrawal.

The right to object

You have the right to object, at any time, to the processing of your personal data (including profiling) for purposes based on legitimate interests of our firm, as the data controller, or of a third party. Further processing of your data is allowed only if there are valid, legitimate, overriding grounds for the processing of your personal data or certain data are required for putting forward legal claims or for the establishment or defence of rights.

The right to object to direct marketing

You may object at any time to the processing of your personal data for the purposes of direct marketing (including profiling) as far as we process your personal data for direct marketing purposes. If you object, your personal data will not be used for those purposes.

How can you exercise your rights?

Legislation in force does not define any specific format or method of communication required to exercise your rights. However, we attach great importance to the effective exercise of your rights, and consequently we have established a dedicated communication channel, by electronic mail, used to handle inquiries, reports and requests relating to the exercise of those rights: ochronadanych@wamech.pl

The right to lodge complaints with the supervisory authority

If we process your personal data unlawfully in your opinion, you may contact us at any time, and also lodge a complaint with the supervisory authority (the President of the Office for Personal Data Protection).

Changes to the rules for personal data protection

We will inform you without undue delay about all changes to the rules for personal data processing.