GDPR

Administrator and Data Protection Officer 

The Administrator of your personal data is Alupol Packaging Spółka Akcyjna (43-109 Tychy, ul. Strefowa 4, phone: +48 32 324 57 00, e-mail: alupol@grupakety.com), hereinafter referred to as “Alupol.”

You can contact the Data Protection Officer at Alupol in matters concerning the protection of personal data via:

• E-mail: IOD_AP@grupakety.com,
• by letter to the following address: Alupol Packaging Spółka Akcyjna (43-109 Tychy, ul. Strefowa 4),
• by phone:  + 48 694 429 337.

Your rights 

In connection with the processing of your personal data, you have the following rights:

1. The right to access your personal data;
2. The right to rectify your data;
3. The right to delete your data;
4. The right to limit the processing of your personal data;
5. The right to transfer your data;
6. The right to object. You have the right to object to the processing of your data based on legitimate interests at any time. We will cease processing your data for these purposes unless we can demonstrate that we have compelling legitimate grounds in relation to the data that override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend any claims;
7. The right to withdraw consent. In the case of processing personal data based on your consents, you have the right to withdraw your consent at any time without giving any reason, and without affecting the legality of the processing carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease processing your data for the purpose covered by your prior consent. If you wish to withdraw your consent, please contact the Company directly using the contact details provided above.

If you wish to exercise your rights or obtain additional information, please contact us in writing or by telephone at the above-mentioned contact details of the Data Protection Officer.

If you consider that the processing of your personal data violates the provisions of GDPR you have the right to lodge a complaint to the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).

Purposes, legal basis for collection and duration of personal data processing

1.    If you are an Alupol Contractor (an individual, including a sole proprietor, or a partner in a civil partnership)

If you did not provide us with your personal data directly, the data was collected using public and publicly available sources, such as websites, public records.

The scope of processed data includes:

1. identification data (name and surname of the persons representing the Contractor, name of the business entity, NIP, REGON),
2. contact details (e-mail address, telephone number, fax number) and correspondence details (registered office address of the business entity, address for correspondence),
3. data regarding concluded contracts, financial data, bank account number,
4. in the case of natural persons not conducting business activity– also the address of residence,

We will process your personal data for the following purposes:

1. concluding an agreement with us or executing an order, including in connection with your participation in the process of collecting offers, as well as executing and monitoring the performance of the agreement/order that you have concluded with us (hereinafter jointly referred to as the Agreement) – for the period preceding the conclusion of the Agreement and for the period of performance of the Agreement (Article 6 paragraph 1 letter b of the GDPR – conclusion and performance of the Agreement);
2. archiving to the extent necessary to comply with legal obligations, in particular tax regulations, accounting regulations – for the period resulting from these regulations (legal basis Art. 6 sec. 1 letter c of the GDPR – performance of an obligation imposed by law);
3. possible establishment and pursuit of claims or defence against claims, including the transfer of rights to receivables – for the duration of theproceedings and the period of limitation of potential claims (legal basis Art. 6(1)(f) GDPR – implementation of the legitimate interest of the controller in the form of pursuing claims and defending against claims related to the Agreement);
4. verification of the Contractor’s credibility – i.e. implementation of the necessary activities in the form of risk assessment before concluding the Agreement, after its conclusion, during the performance of the Agreement. In pursuing this objective, we may additionally obtain your data from business information registers, business intelligence agencies and other publicly available information sources. The personal data referred to in the previous sentence will relate to the settlement of your obligations and your business activities (legal basis Art. 6 sec. 1 let. f GDPR– implementation of the legitimate interest of the controller), for the period necessary to make such an assessment;
5. preparing analyses of the results of our business activities for internal purposes – for a period not longer than that indicated in points b) and c) above (legal basis Art. 6 sec. 1 letter f) of the GDPR – implementation of the legitimate interest of the controller in the form of optimisation of the business operations).

2.    In case you are an employee or co-worker of Alupol Contractor

Your personal data have been made available to Alupol by your employer or the person (company) with whom you cooperate in connection with concluding an agreement with Alupol or executing an order, as well as in connection with the execution by Alupol’s Contractor of an agreement or order concluded with us (hereinafter referred to as the Agreement).

We will process the following categories of your personal data:

1. identifying data (e.g. name, surname),
2. contact details (e.g. e-mail address, telephone number, fax number),
3. data regarding: employment with an Alupol Contractor or cooperation with an Alupol Contractor (e.g. company name, position), profession or business activity and participation in a civil partnership, held authorisations necessary to perform the Agreement,

We will process your personal data for the following purposes:

1. conclusion and performance of the Contract with Alupol Contractor, in particular for purposes such as communication, performance of information obligations, interaction and other obligations under the Contract – for the period prior to the conclusion of the Contract and for the period of performance of the Contract (legal basis Article 6(1)(f) RODO – implementation of the legitimate interest of the administrator in the form of performance of the Agreement with the Contractor);
2. archiving to the extent necessary to comply with legal obligations, in particular tax regulations, accounting regulations – for the period resulting from these regulations (legal basis Art. 6 sec. 1 letter c of the GDPR – performance of an obligation imposed by law);
3. possible establishment and pursuit of claims or defence against claims, including the transfer of rights to receivables – for the duration of the proceedings and the period of limitation of potential claims (legal basis Art. 6(1)(f) of the Regulation – implementation of the legitimate interest of the controller in the form of pursuing claims and defending against claims related to the Agreement);
4. preparing analyses of the results of our business activities for internal purposes – for a period not longer than that indicated in points b) and c) above (legal basis Art. 6 sec. 1 letter f) of the GDPR – implementation of the legitimate interest of the controller in the form of optimisation of the business operations).

Data recipients

In certain situations, we may transfer your data as it is often necessary to perform the Agreement, or to comply with  obligations arising from legal provisions.

We may transfer your personal data to the following categories of recipients:

1. courier, transport or postal operators,
2. banks and payment institutions,
3. insurers,
4. trade intelligence agencies, business information offices and credit information offices,
5. purchasers of receivables,
6. law firms,
7. tax offices,
8. entities acting on our behalf, i.e., subcontractors co-operating with Alupol (e.g., entities operating ICT systems and providing IT services, entities providing us with consulting, advisory, auditing, legal, tax, accounting assistance, document archiving, debt collection),
9. entities that are part of the group of companies to which we belong (Grupa Kęty S.A. with its registered office in Kęty and companies controlled by it),
10. state entities and other bodies authorized under the law (including courts, prosecutors, bailiffs, regulatory and supervisory bodies),

to the extent necessary to achieve the purposes for which personal data are processed.

Other information

We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if such a need arises, we can do so, ensuring an adequate level of protection and applying appropriate legal provisions.

Providing personal data is a necessary condition for the execution of the Agreement or taking action before concluding the Agreement. If you do not provide your personal data, it will not be possible to execute the Agreement or take action before its conclusion.

Your personal data are not subject to automated decision-making, including profiling related to automated decision-making.

1. Alupol Packaging S.A. with its registered office in Tychy, ul. Strefowej 4, 43-109 Tychy, KRS 0000357912, phone:  +48 32 324 57 00, e-mail: alupol@grupakety.com;
2. Alupol Packaging Kęty Sp. z o.o. with its registered office in Kęty, ul. Kościuszki 111, 32-650 Kęty, KRS 0000331243, phone: +48 33 844 64 33, e-mail: alupol@grupakety.com;
3. Alupol Films Sp. z o.o. with its registered office in Oświęcim, ul. Gospodarczej 18, 32-600 Oświęcim, KRS 0000535820, phone:  +48 32 324 57 41, e-mail: alupolfilms@grupakety.com.

• E-mail: IOD_AP@grupakety.com,
• by letter to the following address: Alupol Packaging Spółka Akcyjna (43-109 Tychy, ul. Strefowa 4),
• by phone: + 48 694 429 337.

The substantive content of the arrangements concerning the joint control of your personal data is made available at the request of the data subject sent to the above-mentioned contact details of the Data Protection Officer.

1. ensuring and improving the work organization of the Joint Controllers as entities of the Flexible Packaging Segment of the Grupa Kęty S.A. Capital Group, reporting and analytical – for the time necessary to perform the tasks of the Joint Controllers or until the person whose personal data is processed objects (legal basis: Article 6, paragraph 1, letter f) of the GDPR – implementation of the legitimate interest of the joint controllers of personal data),
2. commercial – for the period preceding the conclusion of the contract/order (hereinafter referred to as the Agreement) and for the period of performance of the Agreement (legal basis: Art. 6 sec. 1 letter b of the GDPR – conclusion and performance of the Agreement),
3. marketing – until the data subject objects or withdraws consent (legal basis: Article 6, paragraph 1, letter f or letter a of the GDPR – implementation of the legitimate interest of the joint controllers of personal data or consent of the data subject).

1. courier, transport or postal operators,
2. banks and payment institutions,
3. insurers,
4. trade intelligence agencies, business information offices and credit information offices,
5. purchasers of receivables,
6. law firms,
7. tax offices,
8. entities acting on our behalf, i.e., subcontractors co-operating with Alupol (e.g., entities operating ICT systems and providing IT services, entities providing us with consulting, advisory, auditing, legal, tax, accounting assistance, document archiving, debt collection),
9. entities that are part of the group of companies to which we belong (Grupa Kęty S.A. with its registered office in Kęty and companies controlled by it),
10. state entities and other bodies authorized under the law (including courts, prosecutors, bailiffs, regulatory and supervisory bodies),

to the extent necessary to achieve the purposes for which personal data are processed.

1. The right to access your personal data,
2. The right to rectify your data,
3. The right to delete your data,
4. The right to limit the processing of your personal data,
5. The right to transfer your data,
6. The right to object. You have the right to object to the processing of your data based on legitimate interests at any time. We will cease processing your data for these purposes unless we can demonstrate that we have compelling legitimate grounds in relation to the data that override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend any,
7. The right to withdraw consent. In the case of processing personal data based on your consents, you have the right to withdraw your consent at any time without giving any reason, and without affecting the legality of the processing carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease processing your data for the purpose covered by your prior consent. If you wish to withdraw your consent, please contact the Joint Administrator to whom the consent was granted directly using the contact details provided above.

If you wish to exercise your rights or obtain additional information, please contact us in writing or by telephone at the above-mentioned contact details of the Data Protection Officer.

If you consider that the processing of your personal data violates the provisions of GDPR you have the right to lodge a complaint to the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).

Providing personal data is a necessary condition for taking action before concluding an Agreement with us.

If you do not provide your personal data, it will not be possible to execute the Agreement or take action before its conclusion.

Your personal data are not subject to automated decision-making, including profiling related to automated decision-making.

Administrator and Data Protection Officer 

The Administrator of your personal data is Alupol Packaging Spółka Akcyjna (43-109 Tychy, ul. Strefowa 4, phone:  +48 32 324 57 00, e-mail: alupol@grupakety.com), hereinafter referred to as „Alupol”.

You can contact the Data Protection Officer at Alupol in matters concerning the protection of personal data via:

• E-mail: IOD_AP@grupakety.com,
• by letter to the following address: Alupol Packaging Spółka Akcyjna (43-109 Tychy, ul. Strefowa 4),
• by phone: + 48 694 429 337.

Your rights

In connection with the processing of your personal data, you have the following rights:

1. The right to access your personal data;
2. The right to rectify your data;
3. The right to delete your data;
4. The right to limit the processing of your personal data;
5. The right to transfer your data;
6. The right to object. You have the right to object to the processing of your data based on legitimate interests at any time. We will cease processing your data for these purposes unless we can demonstrate that we have compelling legitimate grounds in relation to the data that override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend any claims;
7. The right to withdraw consent. In the case of processing personal data based on your consents, you have the right to withdraw your consent at any time without giving any reason, and without affecting the legality of the processing carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease processing your data for the purpose covered by your prior consent. If you wish to withdraw your consent, please contact the Company directly using the contact details provided above.

If you wish to exercise your rights or obtain additional information, please contact us in writing or by telephone at the above-mentioned contact details of the Data Protection Officer.

If you consider that the processing of your personal data violates the provisions of GDPR you have the right to lodge a complaint to the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).

Purposes, legal basis for collection and duration of personal data processing

The data will be processed for the following purposes:

1. performing activities related to the concluded employment contract and activities preceding its conclusion, pursuant to Article 6 paragraph 1 letter b) of the GDPR*, for the period of employment, as well as for a period of 10 years, calculated from the end of the calendar year in which the employment relationship was terminated or expired, unless separate regulations provide for a longer period for storing employee records,
2. fulfilling the legal obligations incumbent on the Controller, including in particular under the provisions of labour law in connection with the employment of employees – pursuant to art. 6 sec. 1 letter c) and art. 9 sec. 2 letter h) of the GDPR*, for the period of employment, as well as for a period of 10 years, calculated from the end of the calendar year in which the employment relationship was terminated or expired, unless separate provisions provide for a longer period for storing employee records,
3. ensuring employee safety, property protection and production control, as well as maintaining the confidentiality of information, the disclosure of which could expose the employer to damage – through video monitoring, pursuant to Article 222 of the Labour Code, for a period not longer than 4 weeks from the date of recording, except for situations in which the image recordings will constitute evidence in proceedings conducted pursuant to law or the employer has become aware that they may constitute evidence in the proceedings, this period is extended until the final conclusion of the proceedings,
4. implementation of the legitimate interests of the Administrator – pursuant to Article 6 paragraph 1 letter f) of the GDPR*, including:
   • pursuing claims, conducting litigation and debt collection proceedings, for the duration of the proceedings and the limitation period for claims regulated by law,
   • internal administrative purposes, including personnel management and statistics, for the duration of your employment,
5. performing other activities specified in the consent to data processing – if granted by you – on the basis of Article 6 paragraph 1 letter a) and/or Article 9 paragraph 2 letter a) of the GDPR*, which you may withdraw at any time without affecting the processing of personal data before its withdrawal, and your data will be processed only until its withdrawal.

Data recipients

The recipients of your personal data may be:

1. institutions authorised by law, in particular entities authorised to receive data under relevant legal provisions (e.g. Polish Social Insurance Institution, Tax Office, National Health Fund and judicial or other authorities, including bailiffs and the police, financial institution managing PPK),
2. entities that process your personal data on behalf of the Administrator on the basis of a concluded personal data processing agreement, e.g. IT, legal, advisory, audit, debt collection, personal and property protection, training, business travel, insurance,

to the extent necessary to achieve the purposes for which personal data are processed.

Other information

We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if such a need arises, we can do so, ensuring an adequate level of protection and applying appropriate legal provisions.

Providing your personal data to the extent required by law is necessary for the Administrator to achieve the above-mentioned purposes. Providing other data by you is voluntary.

Your personal data are not subject to automated decision-making, including profiling related to automated decision-making.

Administrator and Data Protection Officer 

The Administrator of your personal data is Alupol Packaging Spółka Akcyjna (43-109 Tychy, ul. Strefowa 4, phone: +48 32 324 57 00, e-mail: alupol@grupakety.com), hereinafter referred to as „Alupol”.

You can contact the Data Protection Officer at Alupol in matters concerning the protection of personal data via:

• e-mail: IOD_AP@grupakety.com,
• by letter to the following address: Alupol Packaging Spółka Akcyjna (43-109 Tychy, ul. Strefowa 4),
• by phone: + 48 694 429 337.

Your rights 

In connection with the processing of your personal data, you have the following rights:

1. The right to access your personal data;
2. The right to rectify your data;
3. The right to delete your data;
4. The right to limit the processing of your personal data;
5. The right to transfer your data;
6. The right to object. You have the right to object to the processing of your data based on legitimate interests at any time. We will cease processing your data for these purposes unless we can demonstrate that we have compelling legitimate grounds in relation to the data that override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend any claims;
7. The right to withdraw consent. In the case of processing personal data based on your consents, you have the right to withdraw your consent at any time without giving any reason, and without affecting the legality of the processing carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease processing your data for the purpose covered by your prior consent. If you wish to withdraw your consent, please contact the Company directly using the contact details provided above.

If you wish to exercise your rights or obtain additional information, please contact us in writing or by telephone at the above-mentioned contact details of the Data Protection Officer.

If you consider that the processing of your personal data violates the provisions of GDPR you have the right to lodge a complaint to the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).

Purposes, legal basis for collection and duration of personal data processing

The data will be processed for purpose of: 

1. concluding and performing a cooperation agreement and/or taking the necessary actions prior to concluding it – pursuant to Article 6 paragraph 1 letter b) of the GDPR, for its duration and after its termination for the period of required access to this information resulting from pension, disability and tax regulations, but not shorter than 5 years, or for the period resulting from the regulations on the organisation of internships and apprenticeships,
2. fulfilling the legal obligations incumbent on the Controller in connection with the employment of contractors, in particular under the provisions of the Civil Code, including those governing the maintenance of accounting, tax and occupational health and safety records by the principal – pursuant to Art. 6 sec. 1 letter c) of the GDPR* for the periods indicated in these provisions or the periods of the fulfillment of these obligations by the Controller,
3. ensuring employee safety, property protection and production control, as well as maintaining the confidentiality of information, the disclosure of which could expose the employer to damage – through video monitoring, pursuant to Article 222 of the Labour Code, for a period not longer than 4 weeks from the date of recording, except for situations in which the image recordings will constitute evidence in proceedings conducted pursuant to law or the employer has become aware that they may constitute evidence in the proceedings, this period is extended until the final conclusion of the proceedings,
4. implementation of the legitimate interests of the Administrator – pursuant to Article 6 paragraph 1 letter f) of the GDPR*, including:
   • pursuing claims, conducting litigation and debt collection proceedings, for the duration of the proceedings and the limitation period for claims regulated by law,
   • internal administrative purposes, including personnel management and statistics, for the duration of co-operation,
5. performing other activities specified in the consent to data processing – if granted by you– on the basis of Article 6 paragraph 1 letter a) and/or Article 9 paragraph 2 letter a) of the GDPR*, which you may withdraw at any time without affecting the processing of personal data before its withdrawal, and your data will be processed only until its withdrawal.

Data recipients

The recipients of your personal data may be: 

1. institutions authorised by law, in particular entities authorised to receive data under relevant legal provisions (e.g. Polish Social Insurance Institution, Tax Office, National Health Fund and judicial or other authorities, including bailiffs and the police),
2. entities that process your personal data on behalf of the Administrator on the basis of a concluded personal data processing agreement, e.g. IT, legal, advisory, audit, debt collection, personal and property protection, training, business travel, insurance,

to the extent necessary to achieve the purposes for which personal data are processed.

Other information

We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if such a need arises, we can do so, ensuring an adequate level of protection and applying appropriate legal provisions.

Providing these data is voluntary, but failure to provide them will result in the inability to cooperate with the Administrator.

Your personal data are not subject to automated decision-making, including profiling related to automated decision-making.

Administrator and Data Protection Officer

The Administrator of your personal data is Alupol Packaging Spółka Akcyjna (43-109 Tychy, ul. Strefowa 4, phone:  +48 32 324 57 00, e-mail: alupol@grupakety.com), hereinafter referred to as „Alupol”.

You can contact the Data Protection Officer at Alupol in matters concerning the protection of personal data via:

• e-mail: IOD_AP@grupakety.com,
• by letter to the following address: Alupol Packaging Spółka Akcyjna (43-109 Tychy, ul. Strefowa 4),
• by phone: + 48 694 429 337.

Your rights

In connection with the processing of your personal data, you have the following rights:

1. The right to access your personal data;
2. The right to rectify your data;
3. The right to delete your data;
4. The right to limit the processing of your personal data;
5. The right to transfer your data;
6. The right to object. You have the right to object to the processing of your data based on legitimate interests at any time. We will cease processing your data for these purposes unless we can demonstrate that we have compelling legitimate grounds in relation to the data that override your interests, rights and freedoms, or the data is necessary for us to establish, pursue or defend any claims;
7. The right to withdraw consent. In the case of processing personal data based on your consents, you have the right to withdraw your consent at any time without giving any reason, and without affecting the legality of the processing carried out on the basis of consent before its withdrawal. If you exercise this right, we will cease processing your data for the purpose covered by your prior consent. If you wish to withdraw your consent, please contact the Company directly using the contact details provided above.

If you wish to exercise your rights or obtain additional information, please contact us in writing or by telephone at the above-mentioned contact details of the Data Protection Officer.

If you consider that the processing of your personal data violates the provisions of GDPR you have the right to lodge a complaint to the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).

Purposes, legal basis for collection and duration of personal data processing

Your personal data, to the extent specified in the provisions of labour law¹ will be processed for the purpose of conducting the current recruitment procedure², while other data, including contact details, will be processed based on consent³, which may be withdrawn at any time.

Your personal data will also be processed in subsequent recruitment processes if you give your consent⁴, which may be withdrawn at any time.

If the documents contain data referred to in Article 9 paragraph 1 of the GDPR, your consent to their processing will be necessary⁵, which may be withdrawn at any time.

Your data collected in the current recruitment process will be stored until the end of the recruitment process, and in the case of consent to the use of personal data for future recruitment purposes, the data will be used for a period of up to 12 months.

¹ Art. 221 of the Act of 26 June 1974 – the Labour Code (Journal of Laws of 2018, item 917, as amended);

²Art. 6 paragraph 1 letter b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, 4.5.2016, p. 1, as amended) (hereinafter referred to as: GDPR);

³ Art. 6 par. 1 letter a) of GDPR;

⁴ Art. 6 par. 1 letter a) of GDPR;

⁵Art. 9 par. 2 letter a) of GDPR

Data recipients

The recipients of your personal data may be providers of: job advertisement publication services, recruitment management systems, IT services such as hosting, IT systems and HR services.

Other information

We do not intend to transfer your data to so-called third countries (i.e. outside the European Economic Area). However, if such a need arises, we can do so, ensuring an adequate level of protection and applying appropriate legal provisions.

Providing your personal data within the scope resulting from Article 221 of the Labour Code is necessary to participate in the recruitment process. Providing other data by you is voluntary.

Your personal data are not subject to automated decision-making, including profiling related to automated decision-making.