GDPR Information Clause for Contractors Whose Data Has Been Obtained Directly

1. The Data Controller of personal data is the company from the EXTREGO group. Companies of the EXTREGO group include: a. EXTREGO Sp. z o.o., located in Świlcza (Świlcza 146E 36-072 Świlcza KRS: 0001001810 REGON: 380202918 NIP: 8133781093). b. Extrego Express Sp. z o.o., located in Świlcza (Świlcza 146E 36-072 Świlcza KRS: 0000801724 NIP: 5170401462 REGON: 384252735). Contact details of Joint Controllers: email: contact@extrego.com. The content of the arrangements between Joint Controllers can be found at: https://www.extrego.com/uzgodnienie-pomiedzy-wspoladministratorami.
2. We inform you that EXTREGO Sp. z o. o. has appointed a Data Protection Officer – Mr. Łukasz Ważny. You can contact the Data Protection Officer via email rodo@extrego.com or in writing at the Data Controller’s address (Świlcza 146E 36-072 Świlcza).
3. Joint Controllers have decided to establish a joint contact point with which you can contact regarding matters related to the protection of personal data through the contact form located at https://www.extrego.com/kontakt by sending an email to rodo@extrego.com or in writing at the address of the Joint Controllers (Świlcza 146E 36-072 Świlcza).
4. Personal data will be processed for the purposes of:

1. executing the contract or taking actions at the request of the person the contract concerns based on Article 6(1)(b) GDPR and possible defense against claims or their assertion based on Article 6(1)(f) GDPR;
2. accounting and tax settlements based on Article 6(1)(c) GDPR;
3. based on Article 6(1)(a) GDPR – for purposes resulting from the consent given for the processing of personal data in cases where they are processed on this basis.

1. Providing personal data in terms of identification, contact, and billing data is necessary to conclude and perform the service contract. Failure to provide these data will prevent the conclusion of the contract and the performance of the service. Provision of other data is voluntary but failing to provide it will prevent contact and sending offers.
2. Personal data will be processed for a period of 6 years from the date of contract performance, with exceptions regarding data processed on the basis of given consent, which will be processed until the consent is withdrawn or the purpose of processing ceases.
3. The recipients of personal data are persons authorized by the data controller, entities authorized under the law, and external entities within signed contracts, particularly: server and email hosting providers, external payroll and accounting services, and external entities providing payroll and accounting software, entities providing TMS transport management software, and entities providing services supporting the performance of freight and transport services.
4. We inform you of the right to:

1. access your data, their rectification, restriction of processing, and to data deletion;
2. transfer personal data to another controller if technically feasible, and the right to receive a copy of the data in a structured format, which can only be used when processing is done in an automated manner;
3. withdraw consent for data processing, which does not affect the lawfulness of the processing carried out before the withdrawal of consent;
4. lodge a complaint with the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw, kancelaria@uodo.gov.pl;
5. object to the processing of personal data in case of possible defense against claims or their assertion.

You may exercise these rights (except for the right to lodge a complaint with the Office for Personal Data Protection) by contacting any of the Joint Controllers or by making a request through the joint contact point established by the Joint Controllers as indicated in point 3 of this information clause.

1. Personal data will not be subject to automated decision-making or profiling.

Information Clause for Contractors Whose Data Has Been Obtained Directly and Whose Data Will Be Transferred to Switzerland or the United Kingdom Based on Articles 12 and 13 of the Regulation of the European Parliament and of the Council (EU) 2016/679, we inform you that:

• Data processing details remain consistent with the above section.

Information Clause for Contractors Whose Data Has Been Obtained Directly and Whose Data Will Be Transferred to Russia, North Macedonia, Ukraine, Turkey, Serbia, Morocco, or Bosnia and Herzegovina

• Specific precautions are taken due to the absence of an adequate level of data protection in these countries, including the use of standard contractual clauses for data protection. Recipients of the data in these third countries include the sender, the recipient of the shipment, or the carrier performing the transport order.