INFORMATION CLAUSE of Puma Polska Sp. z o. o.

Pursuant to Article 13 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter "GDPR"), we would like to inform you that:

  1. The Controller of your personal data is Puma Polska Spółka z ograniczoną odpowiedzialnością with its registered office at 14 Burakowska Street, 01-066 Warsaw.
  2. In matters related to the protection of personal data, including in order to exercise your rights, contact with the Controller is possible via e-mail address: dane-osobowe.pl@puma.com, by phone at +48 (22) 233 04 40 or in writing to the above address.
  3. Your personal data is processed by the Controller:

a. on the basis of Article 6(1)(f) of GDPR – for the purposes of:

  • conducting communications and correspondence,
  • possible establishment, investigation, defense against claims.

Processing for the aforementioned purposes is aimed at realizing the legitimate interests of the Controller consisting of maintaining relations with the senders and recipients of e-mail correspondence, conducting ongoing communication within the Controller's activities, as well as establishing, investigating and defending against claims.

b. on the basis of Article 6(1)(b) of GDPR – in order to take action before concluding a contract, as well as for the purpose of executing the concluded contract

c. on the basis of Article 6(1)(c) of GDPR – for the purpose of fulfilling the Controller's legal obligations, the source of which are, in particular, the relevant tax regulations and the provisions following from the Accounting Act

  1. Personal data will be processed for the time necessary to achieve the above-mentioned purposes, i.e. they will be stored until the correspondence is completed or for the duration of the contract to which the correspondence relates, and after that time, in accordance with the purpose of processing, for the period required by law, including tax law and the Accounting Act, the period of limitation of possible claims or the investigation or defense before a given court or authority.
  2. Your personal data may be transferred to our IT, archiving and document destruction service providers, entities providing consulting, financial, accounting, auditing, courier services, law firms and public authorities authorized by law. As part of the Controller's legitimate purpose, for internal administrative purposes, the Controller may share personal data with PUMA group companies outside Poland, in particular PUMA Czech Republic s.r.o., Austria PUMA Dassler GmbH and PUMA SE.
  3. Your personal data will not be transferred outside the EEA or to an international organization.
  4. You have the right to object to processing based on the legitimate interest of the Controller. We will stop processing your data for these purposes unless we can demonstrate that there are compelling legitimate grounds for the Controller to do so that override your interests, rights and freedoms, or the data are necessary for us to possibly establish, assert or defend claims.

  5. You also have the right to request from the Controller:

    a) access to the content of your data, rectification, restriction of processing, data portability, and data erasure,

    b) lodge a complaint to the supervisory authority in case the data processing is performed in violation of the GDPR (in Poland, the supervisory authority is the President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw).

  6. In connection with the processing of your personal data, you shall not be subject to decisions that are based solely on automated processing, including profiling.
  7. Provision of data is voluntary, but necessary to fulfill the purposes of communication with us or to take steps to conclude or perform a contract. For the implementation of public law obligations, providing data is mandatory.