INFORMATION CLAUSE NO. 1 ("GDPR ")
FOR CONTRACTORS, BUSINESS PARTNERS, SUPPLIERS, CUSTOMERS
 "DOBPLAST" SP. Z O.O.
conducting business as natural persons or partners in civil partnerships

Dear Sirs,
In accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (hereinafter GDPR), we kindly inform you that:
1. The administrator of your personal data is: "DOBPLAST" Spółka z ograniczoną odpowiedzialnością based in Osielsko 86-031 (hereinafter referred to as "Administrator"), 48 Szosa Gdańska Street, tel. 0048 500 720 700, e-mail: biuro@dobplast.pl.
2. We would like to inform you that the Administrator has not appointed a data protection officer.
3. We received personal data directly from you.
4. Your personal data will be processed in connection with the performance of the contract concluded with the Administrator for the following purposes:
    1) to take action before the conclusion of the contract;
    2) to establish entitlements to perform and execute the contract,
    3) to control the performance of the contract and its settlement,
    4) to confirm the authority of the persons designated for representation,
    5) maintaining business contacts and exchange of correspondence,
    6) related to the establishment, investigation or defense of possible claims, damages,
    7) reporting, reporting,
    8) handling and archiving of documentation;
    9) fulfill legal obligations imposed by law, including, but not limited to, tax law and accounting regulations.
    10) to establish the identity of you as a party to the contract, as a person authorized to perform the contract, receive goods, receipt.

5. The basis for processing personal data is:
   1) personal data are necessary to take action before the conclusion of the Agreement, its execution, to maintain business contact in connection with the execution of this Agreement, that is, for the purposes indicated in points 1) - 5) above (legal basis: Article 6(1)(b) GDPR);
    2) fulfillment of the Administrator's legal obligations under the law arising, in particular, from tax law, accounting regulations, i.e. for the purposes indicated in point 9 above (legal basis: Article 6(1)(c) GDPR);
    3) realization of the Administrator's legitimate interest in the conduct of its business, including reporting, handling and archiving of documentation, i.e. for the purposes indicated in items 7) and 8) above (legal basis: Article 6(1)(f) GDPR);
   4) realization of the Administrator's legitimate interest in connection with the establishment, investigation or defense against claims, i.e. for the purposes indicated in point 6) above (legal basis: Article 6(1)(f) GDPR);
   5) realization of the Administrator's legitimate interest in the scope related to establishing your identity as a party to a contract, as a person authorized to perform the contract, receive goods, etc. (legal basis: Article 6(1)(f) GDPR);
6. The scope of typical personal data received and processed may include contact data in the form of: name, surname, residential address, e-mail address, position or function held, telephone number, e-mail address, fax number, place of work, data on your profession, business, participation in a partnership, Social Security Number, Tax Identification Number..., and in the case of establishing the identity necessary for verification of you as the person collecting the goods, data may also be processed in the form of the identity card number of you as the driver/receiver of the goods and the registration number of the vehicle substituted for the collection of the goods.

7. Your data may be disclosed by the Administrator, and the recipients of your personal data may be:
    1) entities delivering correspondence;
    2) entities performing archiving and documentation destruction services;
    3) entities providing service and maintenance of equipment;
    4) entities providing IT services, including e-mail;
    5) subcontractors,
    6) external auditors, auditors, legal advisors, tax advisors;
    7) authorities and entities authorized to obtain personal data under applicable laws, such as courts, law enforcement agencies or state institutions.

   8. Your personal data will be processed for the period necessary for the purposes of processing indicated in Section 4:
    1) in terms of the performance of the contract, for the period until its completion, after which time the data will be processed for the period required by law or for the period necessary to assert and defend against claims;
    2) in terms of fulfilling legal obligations incumbent on the Administrator, the data will be processed for the period of fulfilling these legal obligations, and after this period for the period required by generally applicable law;
    3) in terms of fulfilling the legitimate interests of the Administrator, the data will be processed for a period no longer than until a positive resolution of an objection to the processing of personal data.

9. Provision of personal data is voluntary, but is necessary for the conclusion and performance of the contract with the Administrator.

10. We inform you of your right to:
    1) access your personal data and request a copy of them;
    2) rectify your personal data;
    3) request restriction of the processing of your data;
   4) erasure of your data, if no other purpose of processing is pursued and there are no prerequisites excluding the right, as indicated in Article 17(3) of the GDPR;
    5) object to the processing of personal data;
The rights may be exercised by contacting in writing or by e-mail (item 1 above).

11. We inform you that in matters relating to the processing of personal data, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.

INFORMATION CLAUSE NO. 2 ("GDPR ")
FOR EMPLOYEES, SERVICE PROVIDERS, REPRESENTATIVES AND PROXIES OF CONTRACTORS OF "DOBPLAST" SP. Z O.O. AND EMPLOYEES, SERVICE PROVIDERS, REPRESENTATIVES AND ATTORNEYS OF BUSINESS ENTITIES COOPERATING WITH CONTRACTORS OF "DOBPLAST" SP. Z O.O.

Dear Sirs,
Pursuant to Article 14 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter GDPR), we kindly inform you that:
1. The administrator of your personal data is: "DOBPLAST" Spółka z ograniczoną odpowiedzialnością based in Osielsko 86-031 (hereinafter referred to as "Administrator"), 48 Szosa Gdańska Street, tel. 0048 500 720 700, e-mail: biuro@dobplast.pl.

2. We would like to inform you that the Administrator has not appointed a data protection officer.

3. We received personal data from:
    1) from your employer/supplier (in the case of employees of the Administrator's contractor) or.
    2) from a contractor (supplier/customer/contractor) of the Administrator whom you represent or with whom you cooperate,
    3) from an entity working with a contractor of the Administrator whom you represent or with whom you are an employee or service provider.
We may have also received the data directly from the subject who is not a party to the contract with the Administrator or obtained from publicly available sources.

    4. Your personal data will be processed in connection with the performance of a contract to which the Administrator is a party concluded with your employer/service provider or an entity with which your employer/service provider cooperates or a company of which you are a representative or attorney for the following purposes:
    1) to take action before entering into a contract;
    2) to determine your entitlement to perform and execute the contract,
    3) to control the performance of the contract and its settlement,
    4) confirming the authority of the persons designated for representation,
    5) maintaining business contacts and exchange of correspondence,
    6) related to the establishment, investigation or defense of possible claims, damages,
    7) to fulfill legal obligations imposed by law, including but not limited to tax law and accounting regulations.
    8) to establish your identity as a person authorized to enter into or perform a contract or receive goods, receipt,
    9) reporting, reporting,
    10) handling and archiving of documentation.

5. The basis for processing personal data is:
    1) the legitimate interest of the Administrator (legal basis: Article 6(1)(f) of the GDPR), consisting of the necessity of processing such data for the realization of the purposes specified in sec. 4 subsections 1) - 6) above.
2) fulfillment of legal obligations (legal basis: Article 6(1)(c) of the GDPR) incumbent on the Administrator under the provisions of law, among others, tax law and accounting regulations - in the case of the purpose indicated in point 4(7) above;
    3) realization of the Administrator's legitimate interest in the conduct of its business activities, including reporting, handling and archiving of documentation, i.e. for the purposes indicated in items 7) and 8) above (legal basis: Article 6(1)(f) GDPR);
    4) realization of the Administrator's legitimate interest in the scope related to establishing the identity of the person authorized to perform it, receipt of goods, receipt (legal basis: Article 6(1)(f) GDPR);
    5) realization of the Administrator's legitimate interest in the conduct of its business, including reporting, handling and archiving of documentation, i.e. for the purposes indicated in 9) and 10) above (legal basis: Article 6(1)(f) GDPR);

6. The scope of personal data received and processed may include contact data in the form of: name, surname, home address, e-mail address, position or function held, telephone number, e-mail address, fax number, place of work, data on your profession, business activity, participation in a partnership, employment with a contractor / subcontractor, PESEL No., NIP No.; and in the case of establishing the identity necessary for the verification of the person collecting the goods, data may also be processed in the form of the identity card number of the driver/person who receipts the collection of the goods and the registration number of the vehicle substituted for the collection of the goods.

7. Your data may be disclosed by the Administrator, and the recipients of your personal data may be:
    1) entities delivering correspondence;
    2) entities performing archiving and documentation destruction services;
    3) entities providing service and maintenance of equipment;
    4) entities providing IT services, including e-mail;
    5) subcontractors,
    6) external auditors, auditors, legal advisors, tax advisors;
    7) authorities and entities authorized to obtain personal data under applicable laws, such as courts, law enforcement agencies or state institutions.

8. Your personal data will be processed for the period necessary for the purposes of processing indicated in point 4:
    1) in terms of fulfilling legal obligations incumbent on the Administrator, the data will be processed for the period of fulfilling these legal obligations, and after this period for the period resulting from the provisions of generally applicable law;
    2) in terms of fulfilling the legitimate interests of the Administrator, the data will be processed for a period no longer than until a positive resolution of an objection to the processing of personal data.
    3) with regard to the performance of the contract, for the period until its completion, after which time the data will be processed for the period required by law or for the period necessary to assert and defend against claims.

9. We inform you of your right to:
    1) access your personal data and request a copy of it;
    2) rectify your personal data;
    3) request restriction of processing of your data;
    4) erasure of your data, if no other purpose of processing is pursued and there are no grounds excluding the right, as indicated in Article 17(3) of the GDPR;
    5) object to the processing of personal data;
The rights can be exercised by contacting us in writing or by e-mail (point 1 above).

10. we inform you that in matters concerning the processing of personal data, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.