Information clause - registration

Information Clause on Personal Data Processing

1. The administrator of your personal data is Kobi Light Limited Liability Company headquartered in Rzeszów, ul. Boya-Żeleńskiego 2, 35-105 Rzeszów, registered in the Register of Entrepreneurs by the District Court in Rzeszów, XII Commercial Division of the National Court Register under KRS number 0001016732, with share capital of PLN 100,000 (fully paid), REGON 180227103, NIP 8133499669, and BDO registration number 000003217 (hereinafter referred to as the "Administrator").
   You can contact the Administrator by mail at ul. Boya-Żeleńskiego 2, 35-105 Rzeszów, or by email at sekretariat@kobi.pl.
2. Your personal data provided to the Administrator may be processed for the following purposes:
   • A) Execution of contracts or agreements entered into with the Administrator;
   • B) Performing actions upon your request prior to entering into a contract or agreement;
   • C) Pursuit of the Administrator’s legitimate interests (e.g., making claims, defending against claims, conducting direct marketing of the Administrator’s services, or proposing business cooperation);
   • D) Contacting you.
3. The legal basis for processing your personal data includes:
   • Article 6(1)(a) [if the Administrator processes your data based on your voluntary consent];
   • Article 6(1)(b) [if processing is necessary for the performance of a contract with the Administrator or for activities requested prior to entering into a contract];
   • Article 6(1)(c) [if processing is required to fulfill a legal obligation incumbent upon the Administrator];
   • Article 6(1)(f) [if processing is necessary for the purposes of the Administrator’s legitimate interests].
     This processing is conducted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation – GDPR).
4. Your personal data may be disclosed to:
   • Public administration bodies (e.g., tax offices, fiscal control authorities),
   • Police,
   • Prosecutor's offices,
   • Courts,
   • Authorities authorized to oversee the Administrator’s activities,
   • Banks and cooperative savings and credit unions,
   • Entities providing legal services to the Administrator (e.g., legal advisors or attorneys),
   • The Administrator’s auditors,
   • Postal operators (e.g., Poczta Polska S.A., courier companies),
   • Transport or freight companies,
   • Hosting service providers.
     Data will only be transferred to appropriate recipients when necessary, justified by legal provisions, and only to the extent appropriate to the specific situation.
5. Your personal data will be stored by the Administrator:
   • Until you withdraw your consent, if processing is based on Article 6(1)(a) GDPR;
   • For the duration necessary to perform the contract entered into with the Administrator, and for no longer than three months from the end of the year in which the later of the following events occurs:
     • Expiration of your claims against the Administrator,
     • Expiration of the Administrator’s claims against you,
     • Expiration of the Administrator’s tax obligations;
   • Until you object to data processing, unless the Administrator is still entitled to process the data despite your objection, for no longer than the period specified above.
6. You have the right to request access to your personal data, as well as to rectify, delete, or restrict its processing. You also have the right to data portability.
7. If your data is processed based on consent (Article 6(1)(a) GDPR), you have the right to withdraw that consent at any time, in any form (e.g., in writing, by email, or in another documented form). Withdrawal of consent does not affect the lawfulness of data processing carried out before the withdrawal.
8. You have the right to file a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office (PUODO).
9. Providing your personal data may be voluntary or mandatory.
   Providing data is necessary for entering into or performing contracts with the Administrator, as well as for maintaining contact with you. Failure to provide data may result in the inability to enter into or perform a contract or to maintain contact. Providing data for marketing purposes, offering contracts, or business cooperation is voluntary. If you do not provide the data, the contract may not be concluded, and the Administrator may not be able to contact you or make business proposals.
10. For further detailed information on personal data processing, you can contact the Administrator.

If your data is processed based on Article 6(1)(f) GDPR, you may object to the processing of your personal data by the Administrator on this basis.