Privacy Policy

Information Clause for Visitors of the Website www.calmomix.com

I. PERSONAL DATA CONTROLLER
The Controller of your personal data (hereinafter referred to as the “Controller”) is Greenvit Sp. z o.o., with its registered office in Lomza, at Akademicka 45, 18-400 Lomza, Poland, registered in the National Court Register (KRS) under number 0000362038, NIP: 7231619950, REGON: 200378382.

II. CONTACT DETAILS OF THE PERSONAL DATA CONTROLLER
For matters related to the processing of personal data by the Controller, you may contact us in the following ways:

• By email: info@greenvit.pl
• By phone: +48 85 733 60 54
• By mail: Greenvit Sp. z o.o., Akademicka 45, 18-400 Lomza, Poland

III. DATA PROTECTION OFFICER
The Controller has appointed a Data Protection Officer – Mr. Zbigniew Majewski, who can be contacted via email: iod@greenvit.pl

IV. PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
Your personal data are processed for the following purposes:

1. Handling correspondence and inquiries sent via the contact form.
   Legal basis: Article 6(1)(f) GDPR – legitimate interest pursued by the Controller or a third party.
2. Execution of contracts with contractors.
   Legal basis: Article 6(1)(f) GDPR – legitimate interest; and Article 6(1)(b) GDPR – necessary for performance of a contract or to take steps prior to entering into a contract (for individuals).
3. Fulfillment of legal obligations imposed on the Controller (e.g. issuing and storing invoices and accounting documents, data provision to authorized entities and public authorities).
   Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation.
4. Establishment, exercise, or defense of legal claims.
   Legal basis: Article 6(1)(f) GDPR – legitimate interest.
5. Marketing of services provided by the Controller.
   Legal basis: Article 6(1)(a) GDPR – consent of the data subject.

V. DATA RECIPIENTS
Data may be accessed by individuals working for or cooperating with the Controller to provide services on your behalf, including support of the www.calmomix.com website, IT services, website and email hosting providers, authorized Controller personnel, courier companies, telecommunications and postal operators.

VI. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
Due to the use of MICROSOFT 365 software (Microsoft Corporation – covered by the DATA PRIVACY FRAMEWORK PROGRAM), the Controller may transfer your personal data to the United States and other third countries, under the terms specified in Microsoft’s privacy policy:
https://www.microsoft.com/pl-pl/trust-center/privacy

VII. PERSONAL DATA RETENTION PERIOD

1. For the duration necessary to respond to submitted inquiries; thereafter, data will be retained until the expiration of potential claims (3 years from the end of correspondence).
2. For the duration of contracts and following their termination, for full settlement of the contractual relationship, including until the expiry of limitation periods (3 years from contract termination), and for tax settlement purposes – for 5 years from the end of the tax year.
3. Until consent for marketing activities is withdrawn.

VIII. RIGHTS OF THE DATA SUBJECT
You have the right to:

1. Access your personal data and receive a copy thereof;
2. Rectify inaccurate personal data;
3. Erase or restrict the processing of personal data if they are no longer necessary for the purposes for which they were collected or processed unlawfully;
4. Lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe the processing of your data violates the law.

IX. RIGHT TO OBJECT TO DATA PROCESSING
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on the Controller’s legitimate interest. After an objection is submitted, the Controller shall no longer process the data for such purposes unless it demonstrates compelling legitimate grounds overriding your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

X. DATA PROCESSING BASED ON CONSENT
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

XI. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
You have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO) – if you believe that the processing of your personal data by the Controller infringes applicable law.

XII. INFORMATION ON AUTOMATED DECISION-MAKING
Your personal data will not be processed by automated means, including profiling. This means that no decisions affecting you legally or similarly significantly will be based solely on automated processing.