Dear Madam/Dear Sir,

In relation to the beginning of enforcement on 25 May 2018 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), the company operating under the business name Interfiber Sp. z o.o., with its registered office in Klembów, informs you that, as of 25 May 2018, you will have the rights listed below, concerning the processing of your personal data by Interfiber Sp. z o.o.At the same time, under Article 13 of the GDPR, we inform you that the information and rules related to the processing of your personal data by the Company shall be applicable as of 25 May 2018.

1. The Administrator of your personal data, such as full name, email address, telephone number, workplace (job title) and other similar information, is the company operating under the business name Interfiber Sp. z o.o., with its registered office in Klembów at ul. Wołomińska 15, 05-205 Klembów, entered in the Register of Entrepreneurs by the District Court for the Capital City of Warsaw, 13th Commercial Division of the National Court Register, under the KRS No. 0000303490 (hereinafter referred to as the “Company”).
2. With respect to matters related to the processing of personal data, the Company can be contacted by email at gdpr@interfiber.com, phone No. +48 22 648 25 09
3. Your personal data will be processed:
   a.) to provide electronic services and conduct business and economic operations between the Company and you or between the Company and the entity you represent—the legal basis of the processing of personal data is Article 6, paragraph 1, letters b and f of the GDPR;
   b.) to deliver marketing content to you by the Company in a manner to which you consented—the legal basis of the processing of personal data is the Company’s legitimate interest (Article 6, paragraph 1, letter f of the GDPR); the Company’s legitimate interest consists of delivering marketing content to you during the term of the provision of services by email and additionally in a manner to which you consented;
   c.) for the purposes of meeting the Company’s legal obligations under commonly applicable provisions of law, including tax law and accounting law—the legal basis of the processing of personal data is Article 6, paragraph 1, letter c of the GDPR;
   d.) for analytical and statistical purposes—the legal basis of the processing of personal data is the Company’s legitimate interest (Article 6, paragraph 1, letter f of the GDPR); the Company’s legitimate interest is conducting the analysis of results of its business operation(s);
   e.) for the purpose of executing the Company’s legitimate interest consisting in the potential identification or pursuit of claims or defence against claims—the legal basis of the processing of personal data is the Company’s legitimate interest (Article 6, paragraph 1, letter f of the GDPR).
4. Recipients of your personal data can include:
   a.) providers of IT systems and services;
   b.) entities providing accounting, service quality, debt recovery, legal, analytical or marketing services to the Company;
   c.) post operators and couriers;
   d.) operators of electronic payment systems and banks with respect to execution of payments;
   e.) bodies authorized to receive your personal data under the provisions of law.
5. The Administrator obtained your personal data by receiving your email sent to one of our e-mail addresses or by obtaining it from publicly available websites.
6. The Company can transfer your personal data to third countries (including the US), inter alia in relation to:
   a.) activities on social media and the use of plug-ins or other tools originating on these services (including Facebook, Twitter, Google+);
   b.) the use of analytical tools used for anonymized tracking of user behaviour, in particular such tools as Google Analytics, Gemius Traffic, Chartbeat.
7. Your personal data will be processed in electronic and paper forms: (i) in case of personal data processed to conclude and execute sales agreements or other concluded agreements—throughout the period required to perform all obligations under the sales agreements or other concluded agreements; (ii) in case of personal data processed to provide electronic services to you—throughout the period of provision of electronic services to you; (iii) in case of personal data processed to deliver marketing content to you by the Company—until you file an objection to the processing of personal data in this respect; (iv) in the case mentioned in item 3, letter d above—throughout the period of provision of electronic services to you; (b) in the case mentioned in item 3, letter e above—until the claim limitation period. After this period, personal data will be processed solely in the scope and for the time required by the provisions of law, including the provisions on accounting.
8. Your personal data will not be subject to profiling.
9. Each consent can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing performed before its withdrawal. For the purposes of proof, the Company requests that consents be withdrawn in writing (by a letter sent to Wołomińska 15, 05-205 Klembów) or electronically by email at gdpr@interfiber.com
10. You have the right to access, rectify or erase your personal data, restrict its processing and lodge a complaint with a personal data protection supervisory authority.
    You have the right to data portability, including the right to receive the data and submit it to another controller, or to request, where technically possible, a transfer of this data directly to another administrator.
11. We protect personal data from unauthorized third-party access by technical means Access to the application containing personal data is restricted only to authorized persons and solely to the extent necessary, while access to the systems is granted using a unique identifier and protected by a password.
12. Provision of personal data is voluntary but necessary to provide electronic services to you and conduct business and economic operations between the Company and you or between the Company and the entity you represent. If you do not provide the personal data required by the Company, the Company will be unable to provide electronic services to you or conclude sales agreements or other agreements with you.

Jacek Bednarek
President of the Management Board
Interfier Sp. z o.o.