Privacy Policy

2.1. Personal data of contractors (customers, recipients, suppliers, contractors, subcontractors) of BOLIX SA and their representatives

• Personal data of contractors and their representatives are obtained directly from the data subject, but may also be made available to the controller by his or her employer or the entity he or she represents.
• Personal data may also come from other sources in accordance with the law, for example:
  1. from company websites;
  2. from banks (bank account numbers from which payments were made to Bolix SA);
  3. from public sources, including KRS and CEIDG registers;
  4. economic information offices;
  5. insurance companies.
• Personal data collected by the administrator may be used for the following purposes:
  1. taking action before concluding a contract;
  2. performance of concluded contracts;
  3. performance of the legal obligations incumbent on the administrator, including those related to tax, social and health insurance obligations;
  4. arising from the legitimate interests of the administrator, including:
     1. ensuring contact in current matters arising from the activities conducted by the administrator;
     2. providing answers to questions or issues addressed to the administrator;

• building and maintaining relationships with the administrator’s contractors by sending information about the administrator’s activities, offers or other content informing about the possibility of cooperation with the administrator;

1. searching for new clients;
2. searching for new suppliers, contractors and subcontractors;
3. offering your goods, services and products;

• maintaining the high reputation of Bolix products by ensuring their correct use;
• consideration of complaints and claims;

1. detecting and preventing abuse;
2. ensuring the security of persons, property and information, including by conducting various forms of monitoring;
3. establishing, pursuing and defending claims;

• creating reports, analyses and statistics for internal purposes;
• within the capital group to which the administrator belongs, for reporting and reporting purposes.

• Providing personal data is voluntary in most cases, but necessary to achieve the purpose for which it is collected. In some cases, the obligation to provide personal data may result from legal regulations.
• Personal data may also be processed based on the consent of the data subject for the purpose specified in the consent.
• Personal data will be stored for the period resulting from the purpose for which they were collected, and then for the period after which claims arising from that purpose expire and for the period for which legal provisions require the storage of data.
• Personal data may be disclosed to the following recipients:
  1. entities operating ICT systems or providing ICT tools;
  2. entities providing advisory, consulting, auditing, legal, tax, HR and payroll assistance services;
  3. subcontractors or other cooperating entities, if this is necessary to achieve the purpose of data processing, including the performance of contracts;
  4. entities conducting payment activities (banks, payment institutions);
  5. entities providing physical protection of facilities belonging to the administrator;
  6. entities conducting postal, courier or transport activities;
  7. economic information offices;
  8. insurance companies providing trade credit insurance;
  9. entities associated with the administrator within the capital group, when fulfilling reporting obligations;
  10. other persons, entities and bodies acting under the law.
• Personal data may be transferred outside the European Economic Area based on appropriate safeguards, such as standard data protection clauses adopted by the European Commission.