In accordance with the obligation under Article 13 paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU.L.2016.119.1) (hereinafter referred to as the "GDPR"), we hereby inform you that:

1. Economic cooperation with our contractors requires us to process a number of personal data, including identifying information such as:

1) individuals running a sole proprietorship;

2) partners, statutory representatives, attorneys, representatives and employees of our contractors;

3) other persons whose data we process for the purpose of issuing or processing invoices.

2. The controller of the transferred personal data will be IFS Polska spółka z ograniczoną odpowiedzialnością, with its registered office in Łaszczów (Company's address: ul. Aleksandra Łaszcza 21; 22-650 Łaszczów), entered by the District Court Lublin-Wschód in Lublin with its registered office in Świdnik, 6th Commercial Division of the National Court Register into the register of entrepreneurs of the National Court Register under number 000354053, Tax Identification Number (NIP): 9212010025, National Business Registry Number (REGON): 060606635 (hereinafter referred to as the "Company" or "We").

3. In matters concerning personal data protection, you can contact us by e-mail: rodo@ifspolska.pl or by traditional mail to the following address: IFS Polska sp. z o.o., ul. Aleksandra Łaszcza 21; 22-650 Łaszczów.

4. The personal data of contractors will be processed for the purpose of:

1) conclusion and performance of a contract to which the contractor is a party, which finds its legal basis in Article 6(1)(b) of the GDPR;

2) fulfilling the legal obligations incumbent on the Company, resulting from, among others, tax and accounting regulations, such as the need to issue accounting documents, make tax and accounting settlements, maintain and archive tax and accounting documentation,

which finds its legal basis in Article 6(1)(c) of the GDPR;

3) pursuing our legitimate interests, such as:

a) contact with contractors, including maintaining internal registers of contractors for contact purposes;

b) possible determination and pursuit of claims or defense against them, including conducting court proceedings and debt collection;

c) archiving data and documents containing personal data for evidentiary purposes;

d) marketing of own products or services and providing commercial information;

e) creating reports, surveys, and analyses of the results of our business activities for internal purposes for the period indicated in letters a, b, c and d.

which finds its legal basis in Article 6(1)(f) of the GDPR.

5. Personal data of contractors’ employees and/or collaborators that we will process and the purpose of their processing:

1) identification data (e.g. name, surname, position, required authorizations)

2) contact details (e-mail address, telephone number)

3) data will be processed for the purpose of pursuing our legitimate interests, such as:

a) conclusion and performance of a contract to which the contractor is a party, which finds its legal basis in Article 6(1)(b) of the GDPR;

b) contact with contractors, including maintaining internal registers of contractors for contact purposes;

c) ewentualne ustalanie i dochodzenie claims or defense against them, including conducting court proceedings and debt collection;

d) archiving data and documents containing personal data for evidentiary purposes;

e) marketing of own products or services and providing commercial information;

f)  creating reports, surveys, and analyses of the results of our business activities for internal purposes for the period indicated in letters a, b, c and d.

which finds its legal basis in Article 6(1)(f) of the GDPR.

The personal data of the contractor's employees and/or collaborators have been provided (made available) by the employer or company with which you cooperate in connection with concluding a contract with us, in the process of collecting offers or in any other manner of concluding contracts or selecting contractors, as well as the contractor's performance (including as a subcontractor) of the contract concluded with us.

6. Access to the transferred personal data will primarily be granted to our authorized employees. Furthermore, access, within a strictly defined scope, will be granted to entities authorized to receive your personal data under applicable law, as well as entities with which we cooperate in achieving the data processing purposes referred to in points 4 and 5. These entities will be entrusted with the provision of specific services, for example:

1) banks maintaining the Company's bank accounts;

2) A law firm providing legal services to the Company;

3) entities purchasing receivables and debt collection agencies;

4) IT and telecommunications system providers;

5) data hosting service providers;

6) courier or postal service providers;

7) freight forwarding and transport companies;

8) companies providing consulting or auditing services.

7. Personal data will not be transferred to any third country (i.e. a country outside the European Economic Area) or international organisation.

8. Personal data will be processed only for the period necessary to achieve the purposes for which it was collected. Therefore, personal data will be stored for the duration of the concluded contract and thereafter:

1) during the limitation periods for potential claims, as specified in legal provisions;

2) for the periods of archiving documents and data required by generally applicable law;

3) for periods in which it may be necessary to document the fulfillment of legal obligations regarding the protection of personal data during possible inspections by public authorities.

9. The data subject has the right to:

1) request access to your personal data;

2) request the rectification of personal data when the data is incorrect, as well as request the completion of data when the data is incomplete;

3)request the deletion of personal data, provided that there is a circumstance justifying such a request provided for in the provisions of law (i.e. in Article 17 of the GDPR);

4) request to limit the processing of personal data, in cases provided for by law (i.e. Article 18 of the GDPR);

5) object to the processing of personal data due to the specific situation of the data subject, in cases where we process the data to pursue our legitimate interests;

6) pdata transfer;

7) withdrawal of consent to the processing of personal data;

8)objection to the processing of personal data;

10. If personal data are processed based on consent, the individual who provided such consent has the right to withdraw it at any time. However, this will not affect the lawfulness of processing based on consent before its withdrawal.

11. The data subject also has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (ul. Stawki 2; 00-193 Warsaw).

12. When establishing business relationships, providing us with personal data is not a statutory requirement, but is most often necessary to establish cooperation and conclude a contract. Failure to provide certain personal data may result in the inability to conclude a contract. However, sometimes legal regulations will require you to provide us with specific personal data, for example, for accounting or tax purposes.

13. We will not process the personal data you provide in a way that would result in automated decision-making, including profiling. This means that we do not use IT systems that collect information about specific individuals and then automatically make decisions that could have legal consequences for them or significantly impact them in a similar way.