Information clause

In accordance with Article 13(1)−(2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal EU L 119, p. 1), hereinafter referred to as "GDPR", we inform that:

1. The controller of your data is AMW Rewita Sp. z o.o. with its registered office in Warsaw at Zielone Zacisze 11B, Warsaw (03-294), registered in the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under number 0000394569 (hereinafter referred to as the "Controller").
2. The Controller has appointed a Data Protection Officer and a Deputy Data Protection Officer, whom you can contact on all matters related to personal data processing via email: iod@rewita.pl or by sending a written request to the Controller’s correspondence address.
3. The Controller processes your personal data for the following purposes and legal bases:
   a) for sending newsletters based on your voluntary consent – legal basis: Article 6(1)(a) GDPR, i.e., processing of personal data based on the consent of the data subject,
   b) for marketing purposes related to presenting special offers and messages from the Controller – legal basis: Article 6(1)(f) GDPR, i.e., the legitimate interest of the Controller, which is the marketing of services.
4. The Controller will process your personal data:
   a) until the withdrawal of consent,
   b) as part of the Controller’s legitimate interests, data will be processed until the positive consideration of your objection to data processing,
   c) in case the Controller reasonably suspects the need to pursue or defend claims or prove property rights, data will be stored for the period necessary until the limitation period of claims expires or during the court proceedings, including the enforcement period of the judgment or the duration of copyrights under the Act on Copyright and Related Rights, if applicable.
5. The Controller may disclose your personal data to other recipients solely based on legal provisions within their entitlements, or related to the necessity to fulfil a legal obligation or exercise a right based on the law. The Controller may also disclose your personal data to entities acting on behalf of the Controller based on a data processing agreement. These may include IT system providers, e-mail service providers, and other entities through which the Controller processes personal data.
6. In connection with the processing of personal data, you have the following rights:
   a) the right to withdraw consent at any time. We inform you that withdrawal of consent does not affect the lawfulness of processing carried out based on consent before its withdrawal,
   b) the right to access your data and receive a copy thereof,
   c) the right to rectify (correct) your data,
   d) the right to delete data,
   e) the right to restrict the processing of data,
   f) the right to object to the processing of data,
   g) the right to data portability.
7. Automated decision-making, including profiling as referred to in Article 13(2)(f) GDPR, will not be carried out based on your personal data.
8. Providing your personal data is voluntary but necessary for sending the newsletter.