Home/GDPR

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), we inform you about the rules for processing your personal data.

1. Data controller

The data controller is TWINMAX Sp. z o.o., registered at ul. Suwalska 36A/11, 03-252 Warsaw, Poland, Tax ID (NIP) 5242929920, REGON 520619754, KRS 0000936861.

Contact: biuro@twinmax.pl, phone +48 731 503 678.

2. Purposes and legal grounds for processing

Purpose of processing	Legal basis
Preparing a quote, responding to an enquiry	Art. 6(1)(b) GDPR
Concluding and performing a sales contract	Art. 6(1)(b) GDPR
Issuing invoices, accounting obligations	Art. 6(1)(c) GDPR
Direct marketing of our own products	Art. 6(1)(f) GDPR
Establishing, pursuing or defending claims	Art. 6(1)(f) GDPR

3. Data retention period

We retain data for the duration of the cooperation, and after it ends — for the period required by tax and accounting law (standard 5 years) or until claims arising from the contract become time-barred.

4. Data recipients

Data may be shared with entities processing it on behalf of the Controller — courier and freight companies (for delivery), the accounting office, and hosting and IT service providers — under data processing agreements concluded with them.

5. Your rights

In connection with the processing of personal data, you have the following rights:

• the right of access to your data,
• the right to rectification of inaccurate or incomplete data,
• the right to erasure of data ("the right to be forgotten"),
• the right to restriction of processing,
• the right to data portability of data,
• the right to object to the processing of data based on legitimate interest, including direct marketing,
• the right to withdraw consent at any time, if processing is based on it.

To exercise the above rights, contact us at biuro@twinmax.pl.

6. Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland — if you believe that the processing of your data violates GDPR provisions.

7. Voluntary provision of data

Providing personal data is voluntary, but necessary to prepare a quote, and to conclude and perform a contract. Failure to provide data may make it impossible to process an enquiry or order.

8. Automated decision-making

We do not use automated decision-making, including profiling, that produces legal effects for data subjects.