Privacy Policy

As part of our business activity we process, among others, personal data of natural persons who are:

1. customers and potential customers of the Company,
2. suppliers and potential suppliers of goods and services,
3. partners, employees, contractors, representatives, agents, proxies or persons representing customers and suppliers of goods and services (including commercial companies),
4. users of the contact form.

The Controller ensures that personal data are collected and processed only to the extent necessary to achieve the purpose for which they were collected.

Depending on the purpose and legal basis, the Company may process, among others, the scope of personal data indicated below:

1. identification data, including in particular: first and last name,
2. contact details, including in particular: address, telephone number, email address,
3. data collected and processed in connection with the assertion of rights and claims and the fulfilment of obligations incumbent on the Company,
4. data stored in video surveillance recordings,
5. data collected and processed for marketing purposes.

A) You are a customer or potential customer of the Company:

• PURPOSE: to take action before concluding an agreement at your request, LEGAL BASIS: Article 6(1)(b) of the GDPR, PERIOD OF PROCESSING: until a decision is taken on whether or not to conclude the agreement, no longer than three years from the date on which you take action to conclude the agreement;
• PURPOSE: execution of the agreement concluded with the Company, including handling of complaints, LEGAL BASIS: Article 6(1)(b) of the GDPR, PERIOD OF PROCESSING: period of execution of the agreement concluded with the Company, including the period of warranty obligations execution;
• PURPOSE: Determination, assertion of claims and defence against claims arising from the business activity, which constitutes a legitimate interest in the processing of data by the Company, LEGAL BASIS: Article 6(1)(f) of the GDPR, PERIOD OF PROCESSING: The period of limitation of claims under applicable law;
• PURPOSE: Bookkeeping and tax records, LEGAL BASIS: Article 6(1)(c) of the GDPR in conjunction with Article 74(2) of the Accounting Act and other special provisions, PERIOD OF PROCESSING: The period of keeping accounting and tax records resulting from legal regulations (as a rule, 5 years from the end of the calendar year in which e.g. an invoice was issued, termination of agreement took place);
• PURPOSE: Ensuring the security of persons and property by using video monitoring that records the image in the Company's headquarters, which constitutes a legitimate interest of data processing by the Company, LEGAL BASIS: Article 6(1)(f) of the GDPR; PERIOD OF PROCESSING: 3 months;
• PURPOSE: Direct marketing, which constitutes a legitimate interest, LEGAL BASIS: Article 6(1)(f) of the GDPR, PERIOD OF PROCESSING: Until you object to the processing of your personal data.

B) You are a supplier or potential supplier of goods or services to the Company:

• PURPOSE: to take action before concluding an agreement at your request, LEGAL BASIS: Article 6(1)(b) of the GDPR, PERIOD OF PROCESSING: until a decision is taken on whether or not to conclude the agreement, no longer than three years from the date on which you take action to conclude the agreement;
• PURPOSE: execution of the agreement concluded with the Company, including handling of complaints, LEGAL BASIS: Article 6(1)(b) of the GDPR, PERIOD OF PROCESSING: period of execution of the agreement concluded with the Company, including the period of warranty obligations execution;
• PURPOSE: Determination, assertion of claims and defence against claims arising from the business activity, which constitutes a legitimate interest in the processing of data by the Company, LEGAL BASIS: Article 6(1)(f) of the GDPR, PERIOD OF PROCESSING: The period of limitation of claims under applicable law;
• PURPOSE: Bookkeeping and tax records, LEGAL BASIS: Article 6(1)(c) of the GDPR in conjunction with Article 74(2) of the Accounting Act and other special provisions, PERIOD OF PROCESSING: The period of keeping accounting and tax records resulting from legal regulations (as a rule, 5 years from the end of the calendar year in which e.g. an invoice was issued, termination of agreement took place);
• PURPOSE: Ensuring the security of persons and property by using video monitoring that records the image in the Company's headquarters, which constitutes a legitimate interest of data processing by the Company, LEGAL BASIS: Article 6(1)(f) of the GDPR; PERIOD OF PROCESSING: 3 months;
• PURPOSE: to submit requests for quotation, which constitutes a legitimate interest of data processing by the Controller, LEGAL BASIS: Article 6(1)(f) of the GDPR, PERIOD OF PROCESSING: until you object to the processing of your personal data.

C) You are a partner, employee, contractor, representative, agent, proxy or other person acting on behalf of a customer, potential customer, supplier or potential supplier of the Company:

• PURPOSE: taking action before concluding an agreement at the request of the entity you represent, which constitutes a legitimate interest in the processing of data by the Company, LEGAL BASIS: Article 6(1)(f) of the GDPR, PERIOD OF PROCESSING: until a decision is made on the conclusion or refusal to conclude the agreement, no longer than three years from the date on which you take action to conclude the agreement;
• PURPOSE: execution of the agreement concluded by the Company with the entity on behalf of which you are acting, including execution of warranty obligations, which constitutes a legitimate interest of data processing by the Company, LEGAL BASIS: Article 6(1)(f) of the GDPR, PERIOD OF PROCESSING: The duration of the agreement during which you act as a representative of the customer/supplier of goods or services;
• PURPOSE: determination, assertion of claims and defence against claims arising from the business activity, which constitutes a legitimate interest in the processing of data by the Company, LEGAL BASIS: Article 6(1)(f) of the GDPR, PERIOD OF PROCESSING: The period of limitation of claims under applicable law;
• PURPOSE: to keep accounting books and tax records, if your data were provided in an agreement or other documents related to the Company's performance of its obligations under the law, in particular tax and accounting regulations, LEGAL BASIS: Article 6(1)(c) of the GDPR in connection with Article 74(2) of the Accounting Act and other special regulations, PERIOD OF PROCESSING: The period of keeping accounting and tax records resulting from legal regulations (as a rule, 5 years from the end of the calendar year in which e.g. an invoice was issued, termination of agreement took place);
• PURPOSE: ensuring the security of persons and property by using video monitoring that records the image in the Company's headquarters, which constitutes a legitimate interest of data processing by the Company, LEGAL BASIS: Article 6(1)(f) of the GDPR; PERIOD OF PROCESSING: 3 months;
• PURPOSE: to submit requests for quotation and carry out marketing activities, which constitutes a legitimate interest of data processing by the Controller, LEGAL BASIS: Article 6(1)(f) of the GDPR, PERIOD OF PROCESSING: until you object to the processing of your personal data.

D) You are the contact form user:

• PURPOSE: to handle a request made via the contact form, LEGAL BASIS: 6(1)(a) of the GDPR; PERIOD OF PROCESSING: period necessary to answer the request and to continue correspondence, if any;
• PURPOSE: determination, assertion of claims and defence against claims arising from the business activity, which constitutes a legitimate interest in the processing of data by the Company, LEGAL BASIS: Article 6(1)(f) of the GDPR, PERIOD OF PROCESSING: period of limitation of claims under the law.

• CUSTOMERS AND POTENTIAL CUSTOMERS:
  The data are obtained directly from you or an authorised person or from publicly available sources (in particular KRS (National Court Register) and CEIDG (Central Registration and Information on Business)). Where personal data are collected from publicly available sources, the Company collects the following personal data: name, surname, company name, address, telephone number, email address, job title.
• SUPPLIERS AND POTENTIAL SUPPLIERS OF GOODS AND SERVICES:
  The data are obtained directly from you or an authorised person or from publicly available sources (in particular KRS (National Court Register) and CEIDG (Central Registration and Information on Business)). Where personal data are collected from publicly available sources, the Company collects the following personal data: name, surname, company name, address, telephone number, email address, job title.
• REPRESENTATIVES OF CUSTOMERS/SUPPLIERS OF GOODS AND SERVICES, CONTACT PERSONS:

The data are obtained from the entity on whose behalf you are acting or directly from you or from publicly available sources. Where personal data are provided by the entity on behalf of which you are acting or obtained from publicly available sources, the Company collects the following data concerning you: name, surname, telephone number, email address, job title.

• USERS OF THE CONTACT FORM:
  The data are collected directly from you via the contact form or as part of a subsequent exchange of correspondence.

Personal data processed in the framework of our services may be made available to:

• our employees and associates who may have access to your data in connection with their duties;
• if it is justified due to our cooperation (e.g. for the purpose of executing an agreement between us and you), also to other Companies belonging to the Controller's capital group, which are: AIUT Inc. Century Drive, Suite 23, Greenville, SC 29607, USA, Aiut GmbH, Römerstraße 24, 84130, Dingolfing, Deutschland, AIUT Romania S.R.L. Strada Pieții 19, Sebeș 515800, Romania, AIUT Technologies LLP, Gala no 112, Millennium Plaza, Kurla Andheri Road, Sakinaka, 400072 Mumbai, India, Shenyang AIUT Automation Co., Ltd. 1-17-E1, No. 26-1, Huahai Road, Economic & Technical Development Zone, SHENYANG, Liaoning Province, P.R. China;
• entities to which the Company has entrusted the processing of personal data, including:
  • our technical and organizational service providers, in particular: IT service providers, IT system providers, forwarding and transport companies and security services providers,
  • other entities or bodies to the extent and under the conditions set out by the law.

Your personal data may also be transferred to third countries, i.e. countries outside the European Union and the European Economic Area, if it is required by the implementation of a trade agreement to which you or the entity which you represent is a party.

• CUSTOMERS AND SUPPLIERS:
  The provision of personal data is voluntary, but a refusal to provide them will result in the inability to perform the agreement.
• POTENTIAL CUSTOMERS AND SUPPLIERS:
  Providing personal data is voluntary, but necessary to take action to establish business relations.
• REPRESENTATIVES OF CUSTOMERS/SUPPLIERS OF GOODS AND SERVICES, CONTACT PERSONS:
  If you provide your personal data directly to the Company (including its representative), your provision of such data is voluntary, but it is necessary for us to perform the agreement for the entity on whose behalf you are acting, including, in particular, to maintain contact with you in connection with the performance of the agreement concluded with the entity you are representing. In case of failure to provide data, the execution of the agreement may be difficult or impossible.
• USERS OF THE CONTACT FORM:
  The provision of personal data is voluntary, however, failure to provide them may make it impossible to complete the request made via the contact form.

No automated decisions (decisions without human intervention) will be made about your personal data, including your data will not be subject to automated profiling.

The Company enables you to exercise the following rights:

• right of access to data content - you are entitled to access your personal data and obtain their copy. The first copy of personal data is free of charge. Furthermore, you have the right to be informed, in particular, about the purpose of the processing, the categories of data processed, information about the recipients, the planned duration of your data storage and your rights,
• right of rectification of data - if your data that we process are incorrect, you have the right to request its rectification without delay. Furthermore, if the data in our possession are incomplete, you have the right to request their completion,
• right to request transfer of personal data - if we process your data by automated means on the basis of an agreement or consent, you have the right to request us to provide you with the personal data supplied to us in a structured, commonly used machine-readable format, and to provide those data to another controller,
• right of data deletion (right to be forgotten) - you have the right to delete your personal data in case one of the following circumstances occurs:
  • if your data are no longer necessary for the purposes for which they were collected or otherwise processed (i.e. the legal grounds for processing them have expired),
  • you have lodged an objection pursuant to Article 21(1) of the GDPR (justified by a specific situation) to the processing and the Company has no overriding legitimate grounds for processing or you have lodged an objection pursuant to Article 21(2) of the GDPR (withdrawal of consent for direct marketing),
  • personal data were processed illegally,
  • personal data must be deleted in order to comply with a legal obligation under Union or Member State law to which the Company is subject.

However, this right does not apply to data to the extent that they are necessary to assert, establish or defend our claims or to fulfil our legal obligation to process or store them under applicable law.

• right of restriction on data processing - you have this right in the following cases:
  • if you question the correctness of your personal data - for a period of time allowing the controller to check the correctness of the data,
  • the processing is unlawful and at the same time you object to the deletion of personal data,
  • the Company no longer needs your personal data, but you do need them to establish, pursue or defend claims,
  • You have lodged an objection pursuant to Article 21(1) of the GDPR only until it is determined whether the Company's legitimate grounds prevail over those of your objection.

Despite the exercise of the aforementioned right, we may process your data in the event of determining, asserting or defending any claims to which we are entitled,

• withdraw of consent to the processing of the personal data to which the consent applied - at any time you have the right to withdraw your consent to the processing of your personal data if the processing of certain personal data was based on consent. Withdrawal of consent will not affect the lawfulness of the processing we have carried out on the basis of your consent prior to its withdrawal,
• objecting to the processing of your personal data for direct marketing purposes (Article 21(2) of the GDPR) - you may object to the processing of your personal data for direct marketing purposes any time. In the event of the aforementioned objection, the Company will not be able to process your data for the aforementioned purpose,
• objecting to the processing of your personal data (Article 21(1) of the GDPR) - you can object to our processing of your personal data at any time for reasons relating to your particular situation if we are processing the data on the basis of our legitimate interest. Upon objection, we will not be able to process your personal data on the aforementioned grounds unless we can demonstrate that there are valid, legitimate grounds for processing overriding your interests, rights and freedoms or grounds for establishing, asserting and defending claims,
• lodging a complaint with the supervisory authority - if you believe that we are processing your personal data unlawfully, you have the right to lodge a complaint to the national supervisory authority, which is currently the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

We would also like to inform you that before exercising the above-mentioned rights, we are obliged to identify the person making the request as the subject of the personal data covered by the request.

The Company applies appropriate technical and organizational measures to ensure the security of your personal data, including protecting your personal data against unauthorized access, loss or destruction. In order to ensure the security of your personal data, the Company has implemented appropriate personal, organizational, technical (IT) and physical safeguards.

We are entitled to change this Privacy Policy. The change will be communicated to you by posting on our website or in the manner customary by the Company in its dealings with customers and service providers, including in particular by email.