ZPS Sp. z o.o. - Zakład Pojazdów Szynowych

ZPS SP. z o.o. ul. Górczewska 228D, lok U2, 01- 460 Warsaw, entered into the register of the District Court of the Capital City of Warsaw, XIII Commercial Division of the National Court Register under KRS 0000022942, REGON 011115186, NIP 526-10-27-928, with a share capital of PLN 50,000.00, fulfilling the obligations resulting from the applicable provisions of law on the protection of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as GDPR), would like to provide you with information on the processing and protection of your personal data.

The information contained in the Privacy Policy will help you understand what personal data is collected and processed by ZPS Sp. z o.o., for what purpose they are used and what rights you have in connection with the protection of personal data.

We invite you to read the information below.

WHO COLLECTS AND PROCESSES YOUR PERSONAL DATA, I.E. WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA?

ZPS Sp. z o.o. Górczewska 228D, lok U2, 01-460 Warsaw (hereinafter referred to as ZPS or PDA – personal data administrator).

HOW CAN YOU CONTACT ZPS?

You can contact us:

by email: stargard@mtrzps.com.pl
by phone: +48 91 822 80 54
by post: ZPS Sp. z o.o. Ul. Pierwszej brygady 35, 73-110 Stargard

WHEN AND WHAT PERSONAL DATA DO WE COLLECT AND PROCESS?

ZPS collects and processes personal data in connection with:

Selling products and services;
Marketing activities;
Established business relationships and performance of concluded contracts;
Employment of employees and associates.

WHAT PERSONAL DATA DO WE COLLECT AND PROCESS?

ZPS collects and processes personal data to the extent necessary to achieve the purpose for which they were collected.

Depending on the purpose and legal basis for collecting and processing personal data, we may collect and process in the following data:

Identification data, including, but not limited to: name, surname, PESEL number, date of birth;
Contact information, including but not limited to: address, telephone number, email address;
Other data, the scope of which is justified by the purpose for which they are collected and processed.

FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA AND HOW LONG IS IT STORED?

1. If you are our customers or suppliers:

Purpose of data processing	Legal basis for data processing	Period of storage/processing of personal data
Implementation of the contract or taking the requested action before the conclusion of the contract	Article 6(1)(b) of the GDPR	Period necessary to execute the contract (service delivery)
Pursuing claims and defending against claims related to business activity, which is the legitimate interest of data processing by PDA	Article 6(1)(f) of the GDPR	Limitation period for claims resulting from the provisions of law
Bookkeeping and tax documentation	Article 6(1)(c) of the GDPR in conjunction with Article 74(2) of the Accounting Act and other specific provisions	Period of storage of accounting and tax documentation resulting from the provisions of law
Ensuring the safety of people and property with the use of video monitoring recording the image in the plant in Stargard and in manufactured and used vehicles, which is a legitimate interest of data processing by PDA	Article 6(1)(f) of the GDPR	1 month

If you act as a representative of our contractor, including as a contact person, a person authorized to perform certain actions on behalf of the contractor, a person subject to training or participation in technical acceptance:

Purpose of data processing	Legal basis for data processing	Period of storage/processing of personal data
Preparation and implementation of the contract concluded by ZPS with the entity on whose behalf you act, which is the legitimate legal interest of PDC	Article 6(1)(f) of the GDPR	Term of the contract for which you act as a representative of the contractor/customer of ZPS
Pursuing claims and defending against claims related to business activity, which is the legitimate interest of data processing by PDA	Article 6(1)(f) of the GDPR	Limitation period for claims resulting from the provisions of law
Keeping accounting books and tax documentation, if your data were provided in the contract or other documents related to the performance of obligations by PDC resulting from the provisions of law, in particular tax and accounting regulation	Article 6(1)(c) of the GDPR in conjunction with Article 74(2) of the Accounting Act and other specific provisions	Retention period for accounting and tax documentation resulting from the provisions of law
Ensuring the safety of people and property with the use of video monitoring recording the image in the plant in Stargard and in manufactured and used vehicles, which is a legitimate interest of data processing by PDA	Article 6(1)(f) of the GDPR	1 month

3. If you are our potential contractors and you turn to ZPS with a proposal to conclude an agreement.

Purpose of data processing	Legal basis for data processing	Period of storage/processing of personal data
Taking pre-contractual action at your request.	Article 6(1)(b) of the GDPR	until the decision on the conclusion of the contract is made
Ensuring the safety of people and property with the use of video monitoring recording the image in the plant in Stargard and in manufactured and used vehicles, which is a legitimate interest of data processing by PDA	Article 6(1)(f) of the GDPR	1 month

IS IT NECESSARY FOR YOU TO PROVIDE YOUR DATA?

Counterparties and potential counterparties	Providing the data necessary to submit an offer, and then sign and perform the contract, is a condition for concluding the contract. Refusal to provide them will result in the inability to submit an offer and conclude a contract.
Counterparty representatives, contact persons	If you provide personal data directly to PDA, providing them is voluntary, but necessary for PDA to perform the contract for the benefit of the entity on behalf of which you act. If you do not provide data, the performance of the contract may be difficult.
Potential counterparties	If you provide data directly to the PDA, their provision is voluntary, but necessary to take actions aimed at establishing commercial relations, including making an offer and concluding a contract.

WHERE DO WE GET YOUR DATA FROM?

Counterparties and potential counterparties	The data is collected directly from you before the conclusion of the contract or during its process.
Counterparty representatives, contact persons	The data is obtained from the entity on behalf of which you are acting or directly from you. If personal data is provided by the entity on behalf of which you act, PDA collects your data: name, surname, telephone number, e-mail address, job position.
Potential counterparties	The data is obtained directly from you or from publicly available sources. Where personal data is collected from publicly available sources, ADP collects your personal data: name, surname, company name, telephone number, email address, job title.

TO WHOM MAY WE TRANSFER YOUR PERSONAL DATA?

Your personal data may be accessed by:

Employees and associates of PDA authorized to process your personal data at the request of PDA;
Entities to which PDA entrusted the processing of personal data, including:

Technical and organisational service providers;
Providers of legal and advisory services, including in the case of pursuing claims related to the conducted business activity and defending against claims;
Other entities, persons or bodies – to the extent and on the terms specified by law;

with the provision that the disclosure of your data to the above-mentioned entities is carried out in accordance with the applicable law and in compliance with full rules related to their security.

WILL YOUR DATA BE TRANSFERRED TO COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA (TO COUNTRIES OTHER THAN THE EUROPEAN UNION COUNTRIES, ICELAND, NORWAY AND LIECHTENSTEIN)?

PDA may transfer your personal data to countries outside the European Economic Area (hereinafter referred to as Third Countries) and international organizations, which is related to the scope of ZPS's activities and cooperation with various entities. ZPS ensures that the data will be transferred to countries for which the European Commission has issued decisions on their compliance with an adequate level of personal data protection and/or in compliance with all legal requirements, including on the basis of an appropriate agreement containing data protection clauses adopted by the European Commission, ensuring an appropriate way to secure the transferred personal data.

WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH THE PROCESSING OF DATA BY ZPS?

In connection with the processing of your personal data by ZPS, you are entitled to:

The right to access your personal data (Article 15 of the GDPR);
The right to rectification of your personal data (Article 16 of the GDPR);
The right to request the deletion of data in the cases specified in Article 17(1), taking into account the exceptions set out in Article 17(3) of the GDPR;
The right to request the restriction of data processing in the cases specified in Article 18 of the GDPR;
The right to data portability in the cases specified in the provisions of Article 20 of the GDPR.

If you want to exercise any of these rights, ZPS allows you to contact:

by email: stargard@mtrzps.com.pl
by post: ZPS Sp. z o.o. ul. Pierwszej Brygady 35, 73-110 Stargard

You also have the right to lodge a complaint with the supervisory authority dealing with the protection of personal data in the event that ZPS violates the provisions on the protection of personal data when processing your personal data.

RIGHT TO WITHDRAW CONSENT TO THE PROCESSING OF PERSONAL DATA

If PDA processes your personal data on the basis of consent, you have the right to withdraw your consent at any time, without affecting the validity of the processing that was carried out on the basis of consent before its withdrawal.

You can withdraw your consent:

by email: stargard@mtrzps.com.pl
by post: ZPS Sp. z o.o. ul. Pierwszej Brygady 35, 73-110 Stargard

WILL AUTOMATED DECISIONS (DECISIONS WITHOUT HUMAN INTERVENTION) BE MADE WITH RESPECT TO YOUR DATA?

No automated decisions will be made with respect to your personal data (decisions without human involvement), including your data will not be subject to automated profiling.

RIGHT TO OBJECT

In addition, ZPS informs that for reasons related to your particular situation, you have the right to object to the processing of your personal data, if the basis for data processing by PDA is:

The necessity of processing for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller (Article 6(1)(e) of the GDPR),
Legitimate interest of the PDC (Article 6(1)(f) of the GDPR).

After filing an objection, ZPS will not be able to process personal data based on the above-mentioned grounds for processing, unless it demonstrates the existence of important, legitimate grounds for data processing, overriding the interests, rights and freedoms of the data subject, or grounds for establishing, pursuing and defending claims.

If ZPS processes your data for direct marketing purposes, you have the right to object to the processing of your data by ZPS for direct marketing purposes, including profiling.

SECURITY OF PERSONAL DATA

ZPS uses appropriate technical and organizational measures to ensure that your personal data is safe, including securing personal data against unauthorized access, loss or destruction. In order to ensure the security of your personal data, ZPS has implemented appropriate personal, organizational, technical (IT) and physical safeguards.

ZPS Sp. z o.o. ul. Górczewska 228 D lok. U2 01-460 Warszawa warszawa@mtrzps.com.pl		Zakład Produkcyjny: ul. Pierwszej Brygady 35 73-110 Stargard stargard@mtrzps.com.pl
Telefon kontaktowy: +48 91 822 80 54
NIP: 5261027928	Regon: 011115186	KRS: 0000022942	BDO: 000015701

CERTIFICATES