Information Obligation
(under Article 13 of GDPR)

Please read the following information carefully to learn how we process your personal data in our company.

Legal Basis: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

Keep in mind that providing your personal data is voluntary, but it is a condition for concluding a contract and results from legal provisions, including tax law. If you do not agree to provide your data, we may refuse to enter into a contract or seek potential claims.

Who is the controller of your personal data?
SH Investments sp. z o.o., Huta Janowska 6, 95-200 Pabianice, Poland, NIP: 7312067928 REGON: 385821796, we are the controller of your personal data.

How can I contact you regarding my personal data protection?
For any matters concerning your data protection and exercising your rights regarding their protection, you can contact us at rodo@shinvestments.pl or in writing to our company address.

What data do we process?
We will process the following categories of your data. Providing this data is necessary to conclude and perform the contract:

• Identification data: first name, last name, contact phone number
• Date of birth
• Email address
• Information about your web browser
• Residence data
• Identification data of your company, including VAT number
• Delivery address

What are the purposes and legal bases for processing?
In accordance with our processing activities, we process your data for:

• Presenting our offer based on your consent or inquiry (Article 6(1)(a) GDPR);
• Concluding a service sales contract based on your interest in our offer (Article 6(1)(b) GDPR);
• Performing contract terms, including complaint handling and after-sales service (Article 6(1)(b) GDPR);
• Analytical purposes, such as selecting an appropriate offer based on your needs;
• Optimising our services based on your feedback (Article 6(1)(f) GDPR);
• Direct marketing, including analysis of past marketing campaigns;
• Potential establishment, pursuit, or defence of claims, which is our legitimate interest (Article 6(1)(f) GDPR).

Who do we share your data with?
We only share your personal data with our subcontractors, that is, entities we work with. Your data is processed solely within the scope agreed with us. Our subcontractors include accounting firms, law offices, IT companies, debt collection agencies, and training companies.

How long do we retain your data?

1. Data obtained for presenting an offer and concluding a sales contract will be deleted at the end of the calendar year following the year we received your last inquiry.
2. Data obtained in connection with concluding and performing a contract will be processed until the end of the limitation period for claims resulting from the contract and the end of the period defined by law governing the retention of personal data, such as tax law.

To which third countries or international organisations are data transferred?
We may transfer personal data to servers located outside the user’s country of residence or to related entities or third parties located in other countries, including countries within the EEA (European Economic Area), for processing personal data on our behalf in accordance with our Privacy Policy and applicable laws, customs, and regulations regarding data protection.

What are your rights?
With regard to the processing of your personal data, you have the following rights:

• The right to access your data
• The right to receive a copy of your data
• The right to restrict data processing

You can request to restrict the processing of your personal data at any time if:

• Your data is incorrect
• We have no right to process your data
• We no longer need to process your data
• Or if you have objected, you can request a restriction on processing your data.
• The right to rectify your data
• The right to delete your data

If you believe we have no right to process your personal data, you may request that we delete it at any time.

• The right to object to data processing for marketing purposes
• The right to object in a particular situation

In legally justified cases, you have the right to object to the processing of your data.

• The right to data portability

You have the right to:

• Receive your data in a commonly used format
• Instruct us to directly transfer your data to another entity.
• The right to lodge a complaint with a supervisory authority

If you find that your data is being processed unlawfully, you can file a complaint with the President of the Personal Data Protection Office or another relevant supervisory authority.

• The right to withdraw consent to the processing of personal data

You can withdraw your consent to the processing of your personal data at any time. Withdrawal of consent will not affect the lawfulness of processing based on your consent before its withdrawal.