Privacy Policy

Privacy Policy

According to Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, I was informed that:

Personal data administrator is „Malow” Sp. z o. o., ul. Wojska Polskiego 114 A, 16-400 Suwałki. Personal data administrator is not obliged to appoint Information Security Officer. The purpose of processing personal data is to respond to an enquiry. Basis for the processing of personal data is consent, freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. The recipients of personal data might be distributors cooperating with the administrator. The personal data will not be disclosed to recipients in third countries or international organizations. The personal data will be processed until withdrawal of consent.

The data subject has the right to access his or her personal data, to obtain rectification of inaccurate personal data, to obtain restriction of processing, to lodge a complaint to President of the Office For Personal Data Protection. Has the right to withdraw his or her consent at any time. Has the right to withdraw his or her consent in written form. Withdrawal from consent means that the administrator has no legal ground for the processing of the personal data and to offer its products. To obtain the erasure of the personal data or to be forgotten, to obtain restriction of processing, and to object to processing of the personal data. Decisions regarding the processing of personal data will not be automated, including profiling. The administrator does not intend to process the personal data for a purpose other than that for which the personal data were obtained. The provision of personal data is voluntary; however the data controller hereby informs you that the failure to provide any of the mandatory information will result in the company being unable to pursue commercial relationships with you.

Catalogue ordered by natural person

Na podstawie art. 13 According to Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, I was informed that:

Personal data administrator is „Malow” Sp. z o. o., ul. Wojska Polskiego 114 A, 16-400 Suwałki.. Personal data administrator is not obliged to appoint Information Security Officer. The purpose of processing personal data is to send a catalogue. Basis for the processing of personal data is consent, freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. There will be no recipients of personal data. The personal data will not be disclosed to recipients in third countries or international organizations. The personal data will be processed until withdrawal of consent.

The data subject has the right to access his or her personal data, to obtain rectification of inaccurate personal data, to obtain restriction of processing, to lodge a complaint to President of the Office For Personal Data Protection. Has the right to withdraw his or her consent at any time. The consent withdrawal shall be made in writing and sent to administrator’s correspondence address or by e-mail. Withdrawal from consent means that the administrator has no legal ground for the processing of the personal data and to send a catalogue. The data subject has the right to obtain the erasure of my personal data or to be forgotten, to obtain restriction of processing, and to object to processing of my personal data. Decisions regarding the processing of personal data will not be automated, including profiling. The administrator does not intend to process the personal data for a purpose other than that for which the personal data were obtained. The provision of personal data is voluntary; however the data controller hereby informs you that the failure to provide any of the mandatory information will result in the company being unable to pursue commercial relationships with you.

Wish to contact a distributor made by natural person

Personal data administrator is „Malow” Sp. z o. o., ul. Wojska Polskiego 114 A, 16-400 Suwałki. Personal data administrator is not obliged to appoint Information Security Officer. The purpose of processing personal data is to provide contact details of the nearest distributor. Basis for the processing of personal data is consent, freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. There will be no recipients of personal data. The personal data will not be disclosed to recipients in third countries or international organizations. The personal data will be processed until withdrawal of consent.

The data subject has the right to access his or her personal data, to obtain rectification of inaccurate personal data, to obtain restriction of processing, to lodge a complaint to President of the Office For Personal Data Protection. Has the right to withdraw his or her consent at any time. The consent withdrawal shall be made in writing and sent to administrator’s correspondence address or by e-mail. Withdrawal from consent means that the administrator has no legal ground for the processing of the personal data and to provide contact details of the nearest distributor. The data subject has the right to obtain the erasure of my personal data or to be forgotten, to obtain restriction of processing, and to object to processing of my personal data. Decisions regarding the processing of personal data will not be automated, including profiling. The administrator does not intend to process the personal data for a purpose other than that for which the personal data were obtained. The provision of personal data is voluntary; however the data controller hereby informs you that the failure to provide any of the mandatory information will result in the company being unable to pursue commercial relationships with you.

3D models library request made by natural person

Personal data administrator is „Malow” Sp. z o. o., ul. Wojska Polskiego 114 A, 16-400 Suwałki. Personal data administrator is not obliged to appoint Information Security Officer. The purpose of processing personal data is to provide 3D models library. Basis for the processing of personal data is consent, freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. There will be no recipients of personal data. The personal data will not be disclosed to recipients in third countries or international organizations. The personal data will be processed until withdrawal of consent.

The data subject has the right to access his or her personal data, to obtain rectification of inaccurate personal data, to obtain restriction of processing, to lodge a complaint to President of the Office For Personal Data Protection. Has the right to withdraw his or her consent at any time. The consent withdrawal shall be made in writing and sent to administrator’s correspondence address or by e-mail. Withdrawal from consent means that the administrator has no legal ground for the processing of the personal data and to provide 3D models library. The data subject has the right to obtain the erasure of my personal data or to be forgotten, to obtain restriction of processing, and to object to processing of his of her personal data. Decisions regarding the processing of personal data will not be automated, including profiling. The administrator does not intend to process the personal data for a purpose other than that for which the personal data were obtained. The provision of personal data is voluntary; however the data controller hereby informs you that the failure to provide any of the mandatory information will result in the company being unable to pursue commercial relationships with you.

Complaint made by natural person

Personal data administrator is „Malow” Sp. z o. o., ul. Wojska Polskiego 114 A, 16-400 Suwałki. Personal data administrator is not obliged to appoint Information Security Officer. The purpose of processing personal data is to deal with a complaint. Lawful basis for the processing of personal data pursued by the administrator is legitimate interest of the data subject. The recipients of personal data might be distributors, service companies and suppliers cooperating with the administrator. The personal data will not be disclosed to recipients in third countries or international organizations. The personal data will be processed for the time necessary to deal with a complaint on the basis of article 442 of the Civil Code.

The data subject has the right to access his or her personal data, to obtain rectification of inaccurate personal data, to obtain restriction of processing, to lodge a complaint to President of the Office For Personal Data Protection. Has the right to withdraw his or her consent at any time. The consent withdrawal shall be made in writing and sent to administrator’s correspondence address or by e-mail. Withdrawal from consent means that the administrator has no legal ground for the processing of the personal data and to deal with a complaint. The data subject has the right to obtain the erasure of his or her personal data or to be forgotten, to obtain restriction of processing, and to object to processing of my personal data. Decisions regarding the processing of personal data will not be automated, including profiling. The administrator does not intend to process the personal data for a purpose other than that for which the personal data were obtained. The provision of personal data is voluntary; however the data controller hereby informs you that the failure to provide any of the mandatory information will result in the company being unable to pursue commercial relationships with you.

Order placed by natural person

Personal data administrator is „Malow” Sp. z o. o., ul. Wojska Polskiego 114 A, 16-400 Suwałki. Personal data administrator is not obliged to appoint Information Security Officer. The purpose of processing personal data is to process an order. Taking an order is a contract and is a basis for the processing of personal data. The recipients of personal might be distributors cooperating with the administrator. The personal data will not be disclosed to recipients in third countries or international organizations. The personal data will be processed for 5 years and 3 months from the end of financial year.

The data subject has the right to access his or her personal data, to obtain rectification of inaccurate personal data, to obtain restriction of processing, to lodge a complaint to President of the Office For Personal Data Protection. Decisions regarding the processing of personal data will not be automated, including profiling. The administrator does not intend to process the personal data for a purpose other than that for which the personal data were obtained. The provision of personal data is voluntary; however the data controller hereby informs you that the failure to provide any of the mandatory information will result in the company being unable to pursue commercial relationships with you.

Information duty towards candidate for a job

Submitting an application by e-mail is considered as a clear action confirming that a candidate for a job allows for the processing of his or her personal data, provided by him or her voluntarily and not resulting from the law.

Personal data administrator is „Malow” Sp. z o. o., ul. Wojska Polskiego 114 A, 16-400 Suwałki. Personal data administrator is not obliged to appoint Information Security Officer. The purpose of processing personal data is to conduct recruitment process for a position. Basis for the processing are: the Act of 26 June 1974 – Labour Code, the Act of 27 August 1997 on vocational and social rehabilitation and employment of disabled people, the Regulation of the Minister of Labour and Social Policy of 28 May 1996 on the scope of maintaining by employers documentation related with employment and keeping employee’s personal files and consent, freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. The personal data of a candidate for a job will not be disclosed to any recipients. The personal data will not be disclosed to recipients in third countries or international organizations. The personal data will be processed for 4 months from the date of conclusion of recruitment process or, if the consent was express for future recruitment processes, until withdrawal of consent. Decisions regarding the processing of personal data will not be automated, including profiling. The administrator does not intend to process the personal data for a purpose other than that for which the personal data were obtained. The provision of personal data is voluntary; however the data controller hereby informs you that the failure to provide any of the mandatory information will result in the company being unable to pursue recruitment process with the data subject.

Candidate for a job has the right to access his or her personal data, to obtain rectification of inaccurate personal data, to obtain restriction of processing, to lodge a complaint to supervisory authority. In relation to the processing of the personal data for which the data subject expressed his or her consent, the data subject has the right to withdraw his or her consent without affecting the lawfulness of the processing, which was made on the basis of expressed consent before its withdrawal, to obtain the erasure of his or her personal data, transfer of data processed in automated manner and right to be forgotten. The consent withdrawal shall be made in writing and sent to administrator’s correspondence address or by e-mail, if the application was submitted by e-mail. Withdrawal of the consent will result in the company being unable to process other personal data than resulting for the law.

Information duty towards employee

Personal data administrator is „Malow” Sp. z o. o., ul. Wojska Polskiego 114 A, 16-400 Suwałki. Personal data administrator is not obliged to appoint Information Security Officer. The purpose of processing personal data is implementation of rights and obligations resulting from employment relationship. Basis for the processing are: the Act of 26 June 1974 – Labour Code, the Act of 13 May 2016 on counteracting threats of sexual offenses, the Act of 27 August 1997 on vocational and social rehabilitation and employment of disabled people, the Regulation of the Minister of Labour and Social Policy of 28 May 1996 on the scope of maintaining by employers documentation related with employment and keeping employee’s personal files, the Act of 26 July 1991 on tax on natural person, the Act of 13 October 1998 on the social insurance system, the Regulation of the Minister of Economy and Labour of 16 September 2004 on the sample of protocol for determining the circumstances and causes of an accident at work, the Act of 4 March 1994 on the company social benefits fund and the consent of the data subject. Employee’s personal data will be disclosed to entities to which the employee’s personal data should be made available under the law (Tax Office, Social Insurance Institution, Bailiff, Courts, National Labour Inspectorate), banks and other entities at employee’s request. The personal data will not be disclosed to recipients in third countries or international organizations. The personal data will be processed and stored for 50 years from the date of termination of employment contract (in accordance with the Regulation of the Minister of Labour and Social Policy of 28 May 1996 on the scope of maintaining by employers documentation related with employment and keeping employee’s personal files). The personal data of an employee will be processed on the basis of expressed consent until withdrawal of the consent, erasure request or request to be forgotten, no longer than the personal data are removed. Decisions regarding the processing of personal data will not be automated, including profiling. The administrator does not intend to process the personal data for a purpose other than that for which the personal data were obtained. The provision of the personal data is voluntary; however the data controller hereby informs you that the failure to provide any of the mandatory information will result in the company being unable to pursue employment relationships with the data subject.

Employee has the right to access his or her personal data, to obtain rectification of inaccurate personal data, to obtain restriction of processing, to lodge a complaint to supervisory authority. In relation to the processing of the personal data for which the data subject expressed his or her consent, the data subject has the right to withdraw his or her consent without affecting the lawfulness of the processing, which was made on the basis of expressed consent before its withdrawal, to obtain the erasure of his or her personal data, transfer of data processed in automated manner and right to be forgotten. The consent withdrawal shall be made in writing and sent to administrator’s correspondence address or by e-mail, if the personal data was submitted by e-mail. Withdrawal of the consent will result in the company being unable to process other personal data than resulting for the law.

Information duty towards person with whom the civil contract/specific-task contract has been concluded

Personal data administrator is „Malow” Sp. z o. o., ul. Wojska Polskiego 114 A, 16-400 Suwałki. Personal data administrator is not obliged to appoint Information Security Officer. The purpose of processing personal data is fulfilment of agreement concluded with the administrator. Basis for the processing is conclusion of an agreement. The personal data will be disclosed to entities to which the employee’s personal data should be made available under the law (Tax Office, Social Insurance Institution, Bailiff, Courts, National Labour Inspectorate) and banks. My personal data will not be disclosed to recipients in third countries or international organizations. My personal data will be processed and stored for 5 years and 3 months from the end of financial year. Decisions regarding the processing of personal data will not be automated, including profiling. The administrator does not intend to process the personal data for a purpose other than that for which the personal data were obtained. The provision of personal data is voluntary; however the data administrator hereby informs you that the failure to provide any of the mandatory information will result in the company being unable to conclude an agreement.

The data subject has the right to access his or her personal data, to obtain rectification of inaccurate personal data, to obtain restriction of processing, to lodge a complaint to supervisory authority.