In caring for the confidentiality and transparency of personal data processing, and in accordance with fair information practices and applicable personal data protection regulations, we inform you that the data controller of users’ personal data is KARNATECH Andrzej Karnat, with its registered office at ul. Mireckiego 21, 37-450 Stalowa Wola, NIP: 8651004517, REGON: 830216476 (hereinafter “KARNATECH”).

Data is collected from the person entering data into the system or the form on the website.

We use the data solely to enable the user to contact an employee of the Data Controller via the contact form on the website.

Depending on the matter or content of the correspondence, the data may be used in the process of handling the individual and the legitimate interest of the Data Controller.

We may process data including email address, date, time, username or identifier, phone numbers, type of inquiry and its content with attachment, as well as any further information related to the correspondence.

We may process your personal data because you have given us consent by choosing to contact our employees via the contact form on the website (in accordance with Art. 6(1)(a) GDPR). Please be advised that this consent may be withdrawn at any time, however this will not affect the lawfulness of processing based on consent given before its withdrawal.

We may process the personal data submitted to us because it is necessary for the performance of a contract or to take steps necessary to conclude a contract (in accordance with Art. 6(1)(b) GDPR).

We may process your personal data for the purpose of establishing, exercising or defending claims, or in the context of the administration of justice by courts (in accordance with Art. 9(2)(f) GDPR). Data may also be used for purposes arising from legitimate interests pursued by us or by a third party in accordance with Art. 6(1)(f) GDPR. Legitimate interests focus mainly on planning service delivery, internal management and reporting, and analysis and development of business and quality processes.

If the collection and use of data is based on our legitimate interest, you have the right to object to the processing. In such a case, we will stop further processing of your relevant personal data unless we demonstrate the existence of important legitimate grounds for their processing.

We may disclose your personal data to:

Partner entities, where disclosure is necessary for the proper operation of the entity or the performance of a contract,

Other entities in the event a new entity is created or the organization is taken over by another entity, if the controller is involved in a merger, sale or transfer of part or all of its business,

Other entities where the entity is required to do so, for example pursuant to an applicable court order or legal provisions,

Service providers who process data solely on the instructions of the data controller and are contractually obliged to protect the data entrusted to them.