+48 61 839 24 75

GDPR Privacy Notice

Dear Sir or Madam,

This is to inform of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”), which came into effect on 25 May 2018. The GDPR will be applicable in all the member states of the European Union and its purpose is to standardise personal data processing principles across this area.

With this in mind, we want to give you an overview of how our firm, Prespack Jacek Karoński of Poznań, ul. Św. Wawrzyńca 34 (hereinafter, the “Controller”), will process your personal data and of the rights you will have in connection with it. This way we want to make sure you have the relevant knowledge and can continue to use our services comfortably.

Your personal data will be processed so that the Controller can submit its offers to you, conduct negotiations and conclude and perform a contract pursuant to (1) Article 6(1)(b) GDPR, (2) Article 6(1)(c) GDPR where this is necessary for compliance with a legal obligation to which the Controller is subject, and (3) pursuant to Article 6(1)(f) where the processing is necessary for the purposes of the legitimate interests pursued by the Controller, including to secure any documentation necessary for the defence or exercise of legal claims or other actions carried out in the course of our business. Your data will also be processed based on your consent where you agree to those data being processed for marketing purposes. Recipients of your data will include entities that process data on behalf of the Controller. Furthermore, you have the right to request access to your personal data, to have those data rectified or erased or their processing restricted, the right to object against processing, as well as the right to data portability.

Details of data processing arrangements for our customers and potential customers

1. Data controller 

The Controller of your personal data is Prespack Jacek Karoński of Poznań. The Controller’s tax identification number (NIP) is 972-073-06-42 and its statistical identification code (REGON) is 634164713.

You can contact us:

– by sending us a letter addressed to ul. Sadowa 38, 60-185 Skórzewo;

– by sending us an e-mail to This email address is being protected from spambots. You need JavaScript enabled to view it.;

– by calling us at +48 61 839 24 75.

2. We will process your data for the following purposes:

To prepare our offers for you; to make arrangements when contracting for sale of our products; to verify your identity when concluding a contract; to conduct negotiations leading to a contract and to perform a contract, which includes compliance with a number of our legal obligations, such as a duty to retain accounting documents that contain your data; and to exercise our legitimate claims should you be remiss in your contractual duties. If you consent to it, we will also process your data for marketing purposes in order to promote our products.

3. Your personal data will be processed on the following legal basis:

  • Article 6(1)(b) GDPR – We will process your personal data to perform a contract or in order to take steps prior to entering into it, including to prepare our offer for you and to conclude and perform our contract.
  • Article 6(1)(a) GDPR – This is where you give us your consent to our marketing activities. For this reason, please sign a consent form attached to this information. Your consent is voluntary and you may withdraw it at any time.
  • Article 6(1)(c) GDPR – Your data need to be collected so that we can issue accounting documents in respect of a contract made with you as an individual and to store those data in accordance with law.
  • Article 6(1)(f) GDPR – This is to allow us to pursue our legitimate interests if we need to exercise our claims.

4. Period for which your personal data will be stored

We will store your personal data:

  1. until our negotiations are completed, if we fail to come to an agreement on our contract;
  2. until non-performance claims are prescribed and throughout the claim limitation period, if we sign a contract. Any accounting documents that contain your personal data will be stored for five years after the end of an accounting year in which we issued our VAT invoice for the services rendered.

5. Data recipients

The recipients of your data may be any of the following:

  1. suppliers that we contract for data processing services, i.e.:
  2. IT service providers;
  3. our accounting service providers;
  4. postal and courier service providers;
  5. transportation providers;
  6. our providers of debt collection and legal services;
  7. legal counsel and advocates that we work with.

These entities and individuals process data under a contract with us and only pursuant to our instructions, and they are bound by the obligation of confidentiality.

6. Your rights in connection with data processing and automated decision-making

You have the following rights relating to the processing of personal data:

  1. the right to withdraw your consent to data processing;
  2. the right of access to personal data;
  3. the right to request rectification and to have your personal data completed. You may request that we rectify your data (if they are incorrect) and complete them (if they are incomplete) (Article 16 GDPR);
  4. the right to request restriction of data processing where any of the following applied:
    • you contest the accuracy of your personal data. In such a case, we will restrict our use of your personal data for the time needed for us to verify their accuracy, but no longer than for seven days;
    • the processing of your data is unlawful and instead of their erasure you request the restriction of their use;
    • your personal data are no longer needed in view of the purposes for which we collected or used them, but you require those data for the establishment, exercise or defence of legal claims;
    • you have objected to the use of your data. In such a case, we will restrict their processing pending the verification whether, in view of your particular situation, the protection of your interests, rights and freedoms overrides the interests that we pursue in processing your personal data (Article 18 GDPR);
  5. the right to request erasure of your personal data (‘right to be forgotten’, Article 17 GDPR). You have the right to request erasure of all or some of your personal data if:
    • you have withdrawn your consent, to the extent your data were processed based on it and there is no other legal ground for the processing;
    • your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
    • your personal data have been processed unlawfully;
  6. the right to object to processing of your personal data;
  7. the right to data portability – that is to say, the right to receive your personal data from us in a structured, commonly used and machine-readable format. You may transmit those data to another controller or request us to have them transmitted to another controller. However, we will do the latter only where technically feasible. Your right to data portability only applies to those data that we process under a contract with you or based on your consent.

In order to exercise any of these rights, please contact us by using our contact data in point 1 above.

The right to withdraw consent

To the extent your data are processed based on your consent, you have the right to withdraw it at any time. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. You may easily withdraw your consent by sending us a withdrawal of consent notice to our correspondence address above or to our e-mail address at This email address is being protected from spambots. You need JavaScript enabled to view it..

The right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a supervisory authority in charge of personal data protection, which is the President of the Polish Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).