Privacy Policy

Based on Article 13 of the EU General Data Protection Regulation (GDPR), we would like to inform you that:

The controller of your personal data is TOOLE spółka z ograniczoną odpowiedzialnością spółka komandytowa, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Łódź–Śródmieście in Łódź, 20th Commercial Division of the National Court Register under number 0000517415, with its registered office in Łódź, postal code 91-357 Łódź, ul. Liściasta 17, NIP: 728-729-85-08, REGON: 101815965, e-mail: biuro@toole.pl; pawel.filarczyk@toole.pl.

The Controller has not appointed a Data Protection Officer.

Personal data will be processed for the following purposes:

a) concluding and performing the contract entered into between you and the Controller — under Article 6(1)(b) GDPR;
b) fulfilling the Controller’s statutory obligations, in particular accounting and tax obligations — under Article 6(1)(c) GDPR;
c) maintaining contact and exchanging information, which constitutes the Controller’s legitimate interest — under Article 6(1)(f) GDPR;
d) establishing, asserting, or defending against potential claims, which constitutes the Controller’s legitimate interest — under Article 6(1)(f) GDPR.

Recipients of your personal data may include entities supporting the Controller’s operations, such as suppliers and providers of maintenance services for software used by the Controller, courier and postal service providers, transport companies, law firms, banks processing payments, as well as the Controller’s contractors and potential contractors.

Personal data will be stored for the duration of the contract, and after its termination, until the expiry of limitation periods for any claims that may arise in connection with the performance of the contract, or until the expiry of limitation periods arising from tax regulations — whichever occurs later.

The Controller does not intend to transfer personal data to third countries outside the EEA or to international organizations.

The Controller does not use automated decision-making, including profiling.

Providing your personal data is voluntary but necessary to conclude a contract with the Controller. Providing data required for fulfilling the Controller’s legal obligations is mandatory under applicable law.

You have the right to:

a) access your personal data and have it rectified;
b) request the deletion or restriction of processing of your personal data;
c) data portability, where processing is based on Article 6(1)(b) GDPR;
d) object, on grounds relating to your particular situation, to the processing of your data where processing is based on Article 6(1)(f) GDPR.

If we infringe data protection regulations while processing your personal data, you have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).