Information on personal data

Who is the controller of my personal data?	The administrator of your personal data is Nicesoft Sp. z o.o., based at 1C Samuela Bogumiła Lindego Street, 30-148 Kraków, NIP: 9442258102, REGON: 369166795, KRS: 0000712060.
Who can I contact regarding the processing of my personal data?	We have put at your disposal Data Protection Officer (DPO): email: biuro@nicesoft.pl
What is the extent of my personal processing?	As part of the use of our services, we process data that enables us to correct delivery arrangements (name, address) and contact of the courier with the recipient of the order (telephone number). In addition, in the case of a request for a VAT invoice, we also process your company name, registered office and tax identification number.
What rights do I have?	As your data controller, we provide you with full the right to access the content of your data. You can also rectify, delete or restrict their processing. You can also make use of carry-over rights your data or the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. You also have right to lodge a complaint to the data protection supervisory authority if you consider that the processing of your personal data violates the RODO.
What is the purpose and duration of the processing of my personal data?	As a trader, we process your data in order to ensure the correct processing of your order by which we mean:
	Purpose of processing	Processing period	Legal basis
	Implementation of the contract involving the manufacture and supply of dietary catering.	Until performance	Art. 6(1)(B) RODO
	Contact confirming the order; contact on payments, contact on the modification of the contract; contact on a customer complaint application.	Until performance	Art. 6(1)(B) and (F) RODO as the so-called legitimate interest of the controller, which is the efficient order and delivery management
	Contact for order quality assessment.	Within 30 days of performance	Art. 6(1)(B) and (F) RODO as the so-called legitimate interest of the controller, which is to obtain information on the evaluation of the completed contract in order to improve service quality.
	Bookkeeping in connection with which we also have tax obligations - for example, we bill for the services we provide, which may involve processing your personal data.	5 years from the end of the calendar year in which the tax obligation arose	Article 6(1)(C) of the RODO in conjunction with Article 74(2) of the Accounting Act of 29 September 1994
	Establishing, pursuing or defending against claims related to the performance of the contract.	Until the statute of limitations for claims relating to the performance of the contract or claims relating to the processing of personal data, or until you object.	Art. 6(1)(B) and (F) RODO as the so-called legitimate interest of the controller, to establish, assert or defend against claims relating to the performance of a contract or the processing of personal data
	We may also process your personal data for marketing purposes if you have given your free and informed consent, by which we mean:
	Sending information on promotions, service discounts and new products on offer administrator by means of electronic communication in the form of SMS and email.	Until withdrawal of free and informed consent	Art. 6(1)(A) RODO
	Participation in the loyalty programme under which points are accrued for every PLN 1 paid in payment for the performance of the contract.	Until withdrawal of free and informed consent	Art. 6(1)(A) RODO
Is my data processed in any other way?	One of the ways we process personal data is so-called profiling. It relies on the fact that we can create profiles of our customers' preferences based on information about you and adapt our services and the content you receive from us based on these profiles. We assure you that we do not process your data in a fully automatic manner without human intervention.
To whom is my personal data transferred?	In order to ensure proper organisation of our work, we use the services of external suppliers among others. courier company, We also entrust the processing of your personal data to a number of companies, such as dietetic catering management software, accountancy offices or law firms, to whom we entrust the processing of your personal data under our contracts.
Is my data transferred outside the European Union?	We can outsource specific services and tasks to selected service providers based outside the European Economic Area, in particular IT service providers. In such cases, the data is transferred to a third country on the basis of a decision of the European Commission finding an adequate level of protection, and in the absence of such a finding, appropriate safeguards are applied in accordance with legal requirements to create an adequate level of data protection - these include, in particular, the EU standard contractual clauses.
Is it my responsibility to provide data?	The use of our services is voluntary, however, failure to provide them will prevent us from performing the contract and will result in a refusal to perform it.
Definitions and abbreviations	RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC