Information Clause Regarding the Processing of Personal Data

1. The administrator of your personal data is Kobi Light, a limited liability company based in Rzeszów, address: ul. Boya Żeleńskiego 2, 35-105 Rzeszów, registered in the register of entrepreneurs by the District Court, 12th Commercial Division in Rzeszów, under the KRS number 0001016732, with a share capital of PLN 100,000 (fully paid), NIP 8133499669, REGON 180227103, BDO registration number 000003217 (hereinafter referred to as: the Administrator). You can contact the Administrator by mail at street Boya Żeleńskiego 2, 35-105 Rzeszów, or by email: sekretariat@kobi.pl.
2. Your personal data provided to the Administrator may be processed for the following purposes:
   A) Execution of the contract(s) you have entered into with the Administrator,
   B)Taking actions at your request prior to entering into a contract,
   C) Pursuing the legitimate interests of the Administrator (e.g., making claims, defending against claims, conducting direct marketing of the Administrator’s services, proposing business cooperation),
   D) Communicating with you.
3. The legal basis for processing your personal data is:
   • Article 6(1)(a) [when the Administrator processes personal data based on your voluntary consent],
   • Article 6(1)(b) [when the Administrator processes personal data necessary for the execution of the contract between you and the Administrator or for actions taken at your request before entering into a contract],
   • Article 6(1)(c) [when the Administrator processes personal data to fulfill a legal obligation],
   • Article 6(1)(f) [when the Administrator processes personal data for the purposes of pursuing its legitimate interests],
   as per Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).
4. The recipients of your personal data may include:
   • Public administrative bodies (especially tax offices, financial control authorities),
   • The Police,
   • The Prosecutor’s Office,
   • Courts,
   • Bodies authorized to audit the Administrator’s activities,
   • Banks and credit unions,
   • Entities providing legal services to the Administrator (legal advisors or lawyers),
   • The Administrator’s auditors,
   • Postal operators (Polish Post, courier companies),
   • Transport or shipping companies,
   • Hosting service providers.
   Personal data will be transferred to appropriate recipients only when necessary, legally justified, and to the extent required in each case.
5. Your personal data will be stored by the Administrator:
   a) Until you withdraw your consent – when the Administrator processes data based on Article 6(1)(a) of the GDPR,
   b) For the period necessary to execute the contract you have entered into with the Administrator and for no longer than three months from the end of the year in which one of the following occurs: – the expiration of your claims against the Administrator, – the expiration of the Administrator’s claims against you, – the expiration of the Administrator’s tax obligations – whichever occurs later,
   c) Until you object to the processing of your data, unless the Administrator is still entitled to process the data despite the objection – until the Administrator’s right to process the data expires, but no longer than the period specified in section 5(b) above.
6. You have the right to request from the Administrator access to your personal data, its rectification, deletion, limitation of processing, and the right to data portability.
7. If your data is processed based on your consent (Article 6(1)(a) of the GDPR), you have the right to withdraw your consent at any time, in any form (especially in writing, by email, or in another documentary form). Withdrawal of consent does not affect the legality of the data processing before the withdrawal.
8. You have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office.
9. Providing your personal data may be voluntary or mandatory. Providing data is necessary to enter into or execute contracts with the Administrator and to maintain contact with you. If the data is not provided, it will not be possible to enter into or execute a contract or maintain contact with you. Providing data for marketing purposes, offering you contracts, or business cooperation proposals by the Administrator is voluntary. In case of non-provision of such data: the contract may not be concluded, and the Administrator may not be able to contact you or present business offers.
10. For further detailed information regarding the processing of personal data, you can contact the Administrator.

If your data is processed based on Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data by the Administrator on this basis.