enfrplISO 9001:2015 ISO 13485 SA 8000
enfrplISO 9001:2015 ISO 13485 SA 8000

GDPR

On the grounds of the provisions of the European Parliament and Council
Regulation (EU) 2016/679, dated April 27th 2016, on the protection of individuals with regard to the processing of personal data and of the free flow of such data and repealing the directive 95/46/WE, we hereby inform that:

The Personal Data Controller is:
„FAB-STYLE SP. Z O. O. based at PORCELANOWA 2F, 49-130 TULOWICE.

Contact data: telephone number +48 774033100

Processing data outside the EEA
Personal Data will not be transferred outside the European Economic
Area, hereinafter “the EEA”.

Personal data is shared with outside service providers, whose services are provided to Fab-style sp. z o.o., e.g. IT services providers. The Appointed Recipients of Data have limited access to the Personal Data in the scope and on the grounds necessary to provide services.
We inform that at any stage of the processing the persons to whom the data pertains have the following rights with regards to our processing of their data:

the right to access the data and information on the purpose and scope of processing
the right to amend the data, limit their processing and transfer it
the right to delete the data (“the right to be forgotten”) and object to
the processing of personal data, on the condition that no legal grounds
for processing, which grounds prevail over your interests, rights and freedom, apply
the right to revoke consent, where revoking the consent will not affect
the legality of the processing completed based on the consent before the consent was revoked
the right to file an objection regarding personal data protection terms & conditions to a supervisory authority (National Data Protection Authority, www.uodo.gov.pl)

The rights of persons whose data is processed:
Category: the recipients of marketing and commercial content
Category: Clients, providers and their employees and subcontractors
Category: candidates for employment and cooperation
Category: Employees
The recipients of marketing and commercial content

Purpose of processing:
Transferring commercial content and other information on the activity of Fab-Style Sp. z o.o.
Grounds for processing:
undisputed and voluntary consent granted by the person to whom the data pertains
(GDPR, art. 6 p 1 a);
processing is necessary for the purposes resulting from legally grounded
best interests realised by the Controller (GDPR, art. 6 p 1 f);
Categories of data:
name and surname, employer, position, e-mail address;
Processing period:
we shall process personal data from the moment of providing consent until this consent is revoked or until the given person demands realisation of any of their rights limiting or obliging us to cease the processing of the personal data;
Source of the collected personal data:
Directly from the person to whom the data pertains
Clients, providers and their employees and subcontractors

Purpose of processing:
realisation of the subject of a contract concluded between the Controller and the person to whom the data pertains, realisation of the requests of the person, to whom the data pertains,
expressed before signing a contract,

providing and realising guarantees applicable to the subject of a contract,
protection of the best interest of the person, to whom the data
pertains, and the Controller, if any claims with regards to a realised
contract occur,
commercial relations with regards to any future potential contracts/orders,
guaranteeing the Personal Data Controller’s compliance with all
applicable financial, accounting and tax provisions;
Grounds for processing:
a contract concluded with a person, to whom the data pertains, or a need to take action at the request of that person before signing a contract (GDPR, art. 6 p. 1 b),
the Controller’s responsibilities resulting for valid provisions of the law, including accounting law (GDPR, art. 6 p. 1 c),
processing is necessary to protect vital interest of the person, to whom
the data pertains (GDPR, art. 6 p. 1 d),
processing is necessary for the purposes resulting from legally grounded best interest realised by the Controller (GDPR, art. 6 p. 1 f),
We process the personal data of employees and contractors of our partners on the grounds of being entrusted with the data by their
Controllers for the purposes of realisation of the purposes specified above (GDPR, art. 28);
Categories of data:
Individuals managing economic activity: name and surname, name, address and register data, NIP and REGON of the company, position or role in the organisation and contact data;
Processing period:
We process personal data until our guarantees expire or until the responsibilities resulting from applicable provisions of the law expire (the longer period is applicable);
Source of the collected personal data:
Directly from the person to whom the data pertains
Candidates for employment and cooperation

Purpose of processing:
Recruitment of candidates for a given position;
Grounds for processing:
processing is necessary to take action on the request of the person, to whom the data pertains (a candidate) before signing a contract with that
person (GDPR, art. 6 p. 1 b),
processing is necessary to realise the Controller’s legal obligations (Art. 22 of the Labour Code and §1 of the regulation of the Minister of Labour and Social Policy dated May 28th, 1996 on the scope of management of documentation by employers in matters regarding employment and the manner of managing employee’s personal documentation (GDPR, art. 6 p. 1 c),
the person to whom the data pertains agreed to processing their personal data for one or more of the specified purposes. (RODO, art. 6 p. 1 a, and in valid cases the GDPR, art. 9, p. 1 a);
Categories of data:
It is necessary to provide personal data in the scope resulting from art. 221 of the Labour Code in order to be included in the proceedings and recruitment. Other data is provided on a voluntary basis (e.g. contact data and other data provided by the candidate in application documents or during proceedings or recruitment);
Processing period:
We process the personal data:
until the recruitment is completed
Source of the collected personal data
directly from the person to whom the data pertains.
Employees

Purpose of processing:
Your personal data will be processed for the following purposes:
concluding, realisation and termination of an employment contract;
fulfilling the obligations resulting for the Labour Code and implementing rules, including managing and archiving personal documentation;
taking actions related to the obligations and responsibilities of the employee, non-compete clause, professional qualifications of the employee, including conducting trainings;
managing staff, employment planning and analyses, managing the items entrusted to the employee, payment and management of remuneration, assigning tasks, assessing the employee;
manage the results of work, taking actions related to potential employees’ liability, employees’
responsibility for damage inflicted to the employee, employees’ responsibility for the property entrusted to them, including establishing and pursuing potential claims;
fulfilling responsibilities resulting from the provisions on: social insurance, health insurance, taxes, accidents at work, company social benefit fund, accounting, national defence obligation, and other obligations resulting from applicable regulations;
organising and co-financing additional benefits for employees, members of their family and their partners (e.g. group life insurances health insurance, benefit system);
ensuring safety at the Company’s premises;
guaranteeing protection of information and maintaining professional secrecy;
financial, administrative and IT management, including creating and managing accounts in IT systems;
disclosing data to entities authorised to processing on the grounds of the provisions of law and entities, which need the data due to exercising specific rights based on the provisions of the labour code by an employee.
Grounds for processing:
necessity to conclude and realise an employment contract, including exercising rights and fulfilling responsibilities of an employer or an employee (art. 6 p. 1 b of the General Data Protection Regulation Dated April 27th, 2016, hereinafter called: “the GDPR”).
provisions of law – in the scope of responsibilities resulting from these provisions, including labour code, regulations on social insurance, health insurance, taxes, company social benefit fund, accounting, national defence obligation (art. 6 p. 1 c of the GDPR);
Controller’s legally grounded interest (art. 6 p. 1 f of the GDPR, that is e.g.:
– ensuring safety on the Company’s premises, where the interest constitutes ensuring safety;

– managing the development and human resources, including rising qualifications, where the interest constitutes improving the qualifications of the management staff and other employees;

Categories of data:
name and surname, sex, citizenship/nationality, residence and employment
data (address, city, voivodeship), country of residence, work telephone
number, number of ID issued by national/government authorities or
passport number, date of birth/age, information on dependants, family
state (information for the purposes of social insurance and payments
from the Company Social Benefits Fund) telephone number for emergency
situations, bank account number and data, data regarding remuneration, selected benefits, salary, payroll data, taxpayer number and data, data regarding deductions for the social security system, employee’s ID, contract and any amendments thereto, position, employment category, type of work, position, CV, education/diplomas, titles, date of employment, history of employment, information regarding work (such as years of experience), mode of work, working hours, vacations, marks, contract termination date, participation in pension program, date of joining pension program, pension contributions, medical certificates necessary to perform work, disability (to a degree necessary to fulfil the obligations according to valid provisions), pregnancy (in case of parental leave), and others in the scope allowed by the law, completing courses and other actions where the purpose is raising professional qualifications, information regarding materials, tools and equipment shared by the Company, disciplinary measures, membership in labour unions (potentially and in the scope required/allowed by the law),
Internet user ID, username, IP, IT access rights, IT register, working schedule sheet or attendance list.
Processing period:
Personal data shall be processed during the employment period, and subsequently for the period specified by the provisions of the labour code and other specific provisions, e.g. law on accounting, tax code, social insurance. In case of processing personal data on the grounds of an expressed consent, the Controller shall store the data until the consent is revoked. The company shall cease the processing of data collected based on its legally grounded interest if an objection against processing personal data in these purposes is filed.
Source of the collected personal data directly from the person to whom the data pertains In case of any feedback or doubts, we encourage you to contact us via the data provided above. In case of a need to exercise the rights, please contact: FRÉDÉRIC FERNAND COPPIN via e-mail: fred.coppin@fabstyle.pl or traditional mail to the following address: „FAB-STYLE SP. Z O. O. based at PORCELANOWA 2F, 49-130 TULOWICE with a note: “Personal data”