Dear Sir/Madam,

In reference to our previous cooperation and in connection with the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, commonly known as the "General Regulation" or "GDPR," we kindly inform you that the company EURO INWEST - BIS sp. z o.o., located at Józefa Pukowca Street 17, 40-847 Katowice (hereinafter referred to as the "Company"), processes the personal data of you, your employees, and customers, obtained from you as part of our contract, as well as information about personal data obtained from public and generally accessible sources (including the Internet).

Since these information may include data that, under the GDPR, are considered personal data, below we present you with all relevant information regarding the processing of personal data of you and your employees, in accordance with the obligations imposed on administrators by the GDPR:

ADMINISTRATOR

The administrator of your personal data is the company "EURO INWEST - BIS Sp. z o.o." with its registered office at Józefa Pukowca Street 17, 40-847 Katowice, entered in the Register of Entrepreneurs maintained by the District Court of Katowice-East in Katowice, 8th Commercial Division of the National Court Register, under KRS No. 0000295608, NIP: 6321944914, REGON: 240793115, with a share capital of 200,000 PLN.

If you have any questions or concerns, you can contact the Administrator in writing, via traditional mail to the address: Józefa Pukowca Street 17, 40-847 Katowice, or via email at: biuro@mylocker.online. The Administrator is the entity that decides on the purposes and methods of processing data and informs you about it.

PURPOSES AND LEGAL BASES OF PROCESSING

1. Your personal data are processed based on and for the purpose of fulfilling our contract and in connection with its execution. In this regard, we will issue and store the contract and invoices and accounting documents, including email correspondence, and respond to any complaints, inquiries, and issues you may have - pursuant to Article 6(1)(b) of the GDPR;
2. Additional personal data provided to us beyond what is necessary to fulfill our contract are processed based on your consent and also in connection with the contract's execution – solely for the purpose specified in the consent provided by the Client – pursuant to Article 6(1)(a) of the GDPR. You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawal of consent will not affect the lawfulness of processing carried out based on consent before its withdrawal. You can withdraw consent in any manner by informing the Administrator.
3. Your personal data are also processed in compliance with legal requirements, such as tax laws – pursuant to Article 6(1)(c) of the GDPR;
4. Your personal data will also be processed for the purpose of entering into a new contract, in all cases where you express interest in our offer and request information on our products or services – pursuant to Article 6(1)(b) of the GDPR;
5. Your personal data are processed based on the necessity of processing for purposes arising from the legitimate interests of the Administrator, such as determining and pursuing claims or defending against them, for archival purposes (evidence) to secure information in case of legal necessity, debt collection, conducting legal and mediation proceedings, and storing data to ensure accountability (i.e., to demonstrate compliance with GDPR obligations), as well as ensuring the security of individuals (especially Clients and employees) and property – this includes monitoring of our company's premises and buildings, as well as recording conversations for evidence purposes – pursuant to Article 6(1)(f) of the GDPR;

SPECIAL CATEGORIES OF DATA – SENSITIVE DATA

The Company does not process special categories of personal data (so-called sensitive data) or personal data relating to criminal convictions and offenses or related security measures.

RECIPIENTS OF PERSONAL DATA

The recipients of your personal data are only persons authorized by us within the scope of their official duties and entities providing services to us necessary to fulfill the contract concluded with you, such as:

• accounting services,
• legal services,
• IT and technical support services,
• postal and courier services,
• banks for the purpose of processing payments and making settlements between us.

These companies process data solely in accordance with our instructions and cannot use them without our knowledge and consent.

TRANSFER OF DATA TO THIRD COUNTRIES AND INTERNATIONAL ORGANIZATIONS

Your personal data will not be transferred to recipients in third countries, i.e., outside the European Economic Area, or to international organizations.

DATA RETENTION PERIOD

1. Your personal data obtained for the purpose of entering into a new contract are processed for the duration of the contract negotiations and until the end of the calendar year following the year of the last contact regarding the contract.
2. Your personal data obtained in connection with the contract concluded between us will be processed for the duration necessary to fulfill the contract with our company – no less than until its termination. Furthermore, after the contract ends, the data will be processed for the duration necessary to fulfill the Company's legitimate interests, including the end of the limitation period for potential claims, the duration of legal or administrative proceedings, and the fulfillment of legal obligations, in particular tax and accounting regulations.
3. Your personal data obtained on the basis of consent are processed for the period for which consent was granted, and in any case, until its withdrawal.
4. Your basic contact details are stored for the purpose of direct marketing of our products and services until you object to their processing for this purpose or withdraw your consent.

INFORMATION ABOUT YOUR RIGHTS

In connection with the processing of your personal data, you have the right to:

• Request access to your personal data from the Administrator,
• Request the rectification of your personal data from the Administrator,
• Request the deletion of your personal data from the Administrator,
• Request the restriction of processing of your personal data from the Administrator,
• Object to the processing of your personal data,
• Data portability,
• Lodge a complaint with the supervisory authority, the Inspector General for the Protection of Personal Data, or another supervisory authority competent to consider the complaint at the time of submission.

You may exercise the above rights by contacting us via email at biuro@mylocker.online or in writing via traditional mail at the address: Józefa Pukowca Street 17, 40-847 Katowice.

INFORMATION ABOUT THE REQUIREMENT/VOLUNTARY NATURE OF PROVIDING DATA

Providing your personal data is not a statutory or contractual requirement – it is voluntary. However, it is necessary to enter into and perform the contract. Without it, we will not be able to conclude a contract with you.

PROFILING

We inform you that we will not make any automated decisions based on your personal data, including profiling.

The Administrator makes every effort to ensure that all physical, technical, and organizational measures are in place to protect personal data from accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use, or access, in accordance with all applicable regulations.

Your personal data are processed electronically and manually, in accordance with the methods and procedures related to the purposes of processing, as indicated in the PURPOSES AND LEGAL BASES OF PROCESSING section above.

Best regards,
The Management Board of EURO INWEST - BIS sp. z o.o.