Privacy Policy

Privacy Policy for Customers od ENEA Trading sp. z o.o.

Pursuant to Article 13(1) and (2) of the General Data Protection Regulation of April 27, 2016. (hereinafter: GDPR), we inform you that the controller of your personal data is ENEA Trading Sp. z o.o. with its registered office in Świerże Górne, 26-900 Kozienice 1 (hereinafter: Administrator). In all matters related to the protection and processing of personal data, you can contact the Data Protection Officer of ENEA Trading sp. z o.o. by email: etr.iod@enea.pl.

The Customer has the following rights:

• access to the content of their data - within the limits of art. 15 GDPR,
• their rectification - within the limits of art. 16 GDPR,
• their removal - within the limits of art. 17 GDPR,
• restrictions on their processing - within the limits of art. 18 GDPR,
• data transfer - within the limits of art. 20 GDPR,
• the right to object (in the case of processing under Article 6(1)(f) GDPR - within the limits of Article 21.

Execution of the above-mentioned rights may take place by submitting claims to the Data Protection Inspector to the following e-mail address: etr.iod@enea.pl. At the same time, we would like to inform you that you have the right to lodge a complaint to the President of the Office for Personal Data Protection if you consider that the processing of personal data concerning you violates the law.

The Administrator may disclose your personal data to entities authorized by law. The Administrator may entrust the processing of your personal data to ENEA Group entities, suppliers of services or products acting on its behalf, in particular to entities providing the Administrator with design, IT, accounting, courier, maintenance, agency, document destruction services. In accordance with the contracts of entrustment of personal data processing concluded with these entities, the Administrator requires from such entities, in accordance with the law, a high degree of privacy protection and security of personal data processed by these entities on behalf of the Administrator. Your personal data will not be transferred to countries outside the European Economic Area. Your personal data will not be subject to automated decision-making, including profiling related to automated decision-making.

Purpose, basis and period of processing of personal data

With respect to persons with whom the Company has entered into contracts for the acquisition of a product/provision of a service:

Your personal data will be processed for the purpose of performing the contract (acquiring the product or providing the service) on the basis of Article 6(1)(b) and (c) of the GDPR. Your provision of personal data is voluntary, but necessary for the performance of the contract. Your personal data will be stored for a period resulting from under generally applicable laws, e.g. tax laws, and for the duration of the contract, and thereafter for the duration of the warranty or guarantee and the period necessary to assert claims.