INFORMATION OBLIGATION UNDER ART. 13 OF THE GDPR

Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to
the processing of personal data and on the free movement of such data and to the repealing of Directive 95/46/EC (General Data Protection Regulation – GDPR) (Official Journal of the EU L 2016 No. 119, p.1), I inform you that:

The administrator of the Personal Data is JANIS Sp. z o. o. 93-469 Łódź, Lublinek 7, e-mail address: janis@janis.pl  (further as „ADO”).

Personal data shall be processed in accordance with Article 6(1)(a-f) of the GDPR to the following extent: in connection with the performance of own or commissioned tasks defined by law, necessary to protect the vital interests of an individual, to establish contact, to implement a contract between parties or to take action prior to the conclusion of a contract; there may also be cases in which the subject will be asked to consent to the processing of personal data for a specific purpose and scope.

Personal data shall not be communicated to other entities, with the exception of the entities authorised to process them by law and the entities supporting JANIS in fulfilling our rights and obligations and in providing services, including those providing assistance and technical support for the IT systems in which the data are processed.

Personal data shall be stored only for the period necessary to fulfil the purpose for which they have been collected or for the period indicated by the applicable law. Once the purpose for which the data were collected has been fulfilled, the data may only be stored for archival purposes.

The subjects, the data of which are or may be processed, shall have appropriate rights including:

• under Article 15 of the GDPR, the right of access to their personal data,
• under Article 16 of the GDPR, the right to rectification of their personal data,
• under Article 17 of the GDPR, the right to erasure, except as provided for in paragraph 3 (b), (c), (d) or (e) of that provision,
• under Article 18 of the GDPR, the right to request the administrator to restrict the processing of personal data, subject to the cases referred to in Article 18(2) of the GDPR,
• under Article 20 of the GDPR, the right to transfer of their personal data,
• under Article 21 of the GDPR, the right to object to the processing of personal data, except for those collected on the basis of Article 6(1)(c) RODO.

If a given subject considers that the processing of their data violates the provisions on personal data protection, it shall have the right to lodge
a complaint to the supervisory authority, which is the President of the Office for Personal Data Protection, with its seat in Warsaw, at No. 2, The Stawki Street, 00-193 Warsaw.
The disclosure of personal data may be (a) statutory, (b) contractual, (c) a condition required by a contract, which the subject shall be obliged to provide.

If there is a statutory obligation and the subject does not provide its data, we shall not be able to fulfil the statutory obligation, which may result in the consequences defined by the applicable law.

If there is a statutory obligation and the subject does not provide its data, we shall not be able
to implement such a contract.

If the provision of such data is a condition for the conclusion of a contract and the subject does not provide its data, we shall not be able to conclude such a contract.

Personal data of subjects (entities) may be processed by automated means, but this shall not lead to automated decision-making, including profiling.

Personal data shall not be transferred to third countries.