In connection with the provisions of Regulation 2016/679 of the European Parliament and of the Council of the European Union of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter “GDPR”), we are obliged to provide the following information regarding the processing of your personal data:

1. Personal data Controller – it is ATAL S.A. with its registered office in Cieszyn (hereinafter: “Controller”), address: 43-400 Cieszyn, ul. Stawowa 27, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Bielsko-Biała, VIII Commercial Division of the National Court Register (KRS) number: 0000262397, NIP (Tax ID): 548-248-72-78, REGON (National Business Register): 240415672, share capital: PLN 216,073,050.00, paid in full.
2. Data Protection Officer – in all matters relating to the processing of personal data and exercising your rights in connection with the processing of personal data, you can contact the designated Data Protection Officer available at e-mail address: [email protected] or in writing at: ATAL S.A., Cieszyn (43-400), ul. Stawowa 27, with the note “Personal data”.
3. Processing purposes and legal basis for processing – we process your personal data in order to establish contact and answer your question; the legal basis for processing your personal data is Art. 6(1)(a) GDPR, that is consent granted to personal data processing.
4. Right to withdraw consent to personal data processing – you have the right to withdraw consent to personal data processing at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal. You can withdraw your consent the same way it was given.
5. Period for which your data will be stored – your personal data will be stored until you withdraw your consent to personal data processing.
6. Data recipients – your personal data may be shared with, for example, IT service providers or technical service providers – whereas such entities process data on the basis of a contract concluded with the Controller and in accordance with our instructions.
7. Rights of the data subject – you have the right to request access to your personal data, to data rectification, erasure or restriction of processing.
8. Right to lodge a complaint – you also have the right to lodge a complaint with the supervisory authority, i.e., the President of the Office for Personal Data Protection, sent to: ul. Stawki 2, 00-193 Warsaw, if you believe that the processing of your personal data violates the GDPR.
9. Provision of personal data is voluntary but necessary to establish contact. The consequence of not providing personal data will be the inability to make contact.
10. Automated decision-making and profiling – your personal data will not be used for automated decision-making, including profiling as referred to in Art. 22 GDPR.