1. PERSONAL DATA AND DATA SUBJECT
Personal Data is generally categorized as either “ordinary personal data” or “sensitive personal data”. Sensitive personal data is always confidential and includes racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic and biometric data, health, and sexual orientation. Ordinary personal data is partly confidential, includes information related to criminal offences and national identification numbers, information regarding a person's salary, pension, debt, application material, etc., and all other types of ordinary personal data, including name, customer number, (business) contact information such as email and telephone number, photos, IP-address, and other usage information collected via cookies.
2. PRINCIPLES OF PERSONAL DATA PROTECTION
All4Robots complies with the following principles in order to ensure the protection of personal data in accordance with GDPR:
Purpose limitation - All4Robots may only collect and process personal data, including sensitive data (if any) for specified, explicit and legitimate purposes relevant for the business of All4Robots.
Lawfulness, fairness, and transparency personal data must be processed lawfully, fairly, and in a transparent manner in relation to the data subject. Where legally required, All4Robots will inform the individual about the purpose for processing their personal data, their rights to have their personal data rectified, deleted or blocked, and the identity of the company responsible for the collection and processing of their personal data.
Data minimization All4Robots may only collect and process personal data adequate, relevant and limited to what is necessary in relation to purposes for which they are processed.
Accuracy to ensure that personal data processes are accurate, All4Robots must make sure that personal data is reviewed and updated in regular intervals, where appropriate.
Storage limitation personal data must only be stored for the length of time required to fulfil the purpose, or as prescribed by the law.
Integrity and confidentiality when processing personal data, it is important that such personal data is safeguarded by adequate security measures to minimize risks, such as loss of data, unauthorized access, destruction, and accidental disclosure.
Cross border transfer of data specific rules apply when All4Robots transfers personal data from the EU/EEA to third countries or international organizations as discussed further in the data transfer section below.
Accountability to ensure that personal data processing is performed in accordance with GDPR, All4Robots has implemented appropriate technical and organizational measures which are reviewed and updated as necessary.
3. OWNER AND DATA CONTROLLER
Fatia Group Sp. z o.o.
Kwiatkowskiego Street 4
52-326 Wrocław, Poland
4. THE TYPES OF AND PURPOSE FOR THE COLLECTION OF PERSONAL DATA
Visitors. All4Robots collects and processes personal data of visitors including name, title (if applicable) and contact details for security reasons and registers such information in the visitor log prior to granting visitors access to the All4Robots premises.
All4Robots website users. For marketing, advertising, and analytics purposes, and also for contacting the website users, managing contacts and sending messages, remarketing and behavioral targeting, All4Robots collects by itself or through third parties personal data of website users, which may include: cookies, usage data, name, contact details, and company information, if applicable.
For operation and maintenance purposes, All4Robots and any third-party service providers may collect files that record a user’s interaction with the website (“System logs”). Such personal data is obtained through consent by the website users in case of usage data, and collected automatically on the All4Robots´ website.
Users are responsible for any third-party personal data obtained, published or shared through the website and confirm that they have the third party's consent to provide such personal data to All4Robots.
Marketing. All4Robots collects and processes personal data (including name and contact details) about current and new customers, business partners, suppliers, including third-party service providers, distributors, leads and individuals, website users and on individuals who have signed up for All4Robots’ newsletters or other electronical marketing materials, as well as in some cases for the following purposes: analytics, contacting, managing contacts and sending messages, remarketing and behavioral targeting, advertising, and exhibitions.
Such personal data is collected and processed under the marketing consent. All4Robots obtains valid consent through an online form. The marketing department and other involved departments must ensure that marketing consent is obtained before collecting and processing such personal data.
All4Robots may use third parties as a service provider to send out marketing information on its behalf but only in accordance with applicable legal requirements.
For any further questions related to marketing information, please contact the marketing department at email@example.com
Contracts, purchase orders, and other transactional agreements. In connection with its sales and purchase transactions, All4Robots collects and processes personal data, including the name, contact details, delivery details, correspondence, and payment details necessary for conducting business and to comply with export compliance regulations and other legal due diligence obligations.
Accounting and Finance. All4Robots collects personal data for accounting and financial purposes in accordance with applicable requirements. This information is provided to accounting by other internal departments or received directly from the individuals/companies, employees, and includes information such as name, address, company name, registration number, payment details and bank details, delivery address and other mandatory information.
Legal action. In case of a dispute, All4Robots may retain personal information necessary for its legitimate interest to ensure that All4Robots can properly bring or defend legal claims in court or during the stages leading to possible legal action. All4Robots may need to share this information with third parties such as insurance and/or legal advisers and All4Robots may also be required to reveal personal data upon request of public authorities.
Consent & withdrawal of consent. To the extent that our processing activities is based on your consent, you will have the right to withdraw your consent at any time. If you withdraw your consent, we will cease to process your personal data, unless and to the extent that continued processing is permitted or required according to the applicable personal data legislation or other applicable law. If you withdraw your consent, it will not affect the lawfulness of processing conducted prior to the withdrawal.
Where personal data is processed for a public interest, in the exercise of an official authority vested in All4Robots or for the purpose of the legitimate interests pursued by All4Robots, an individual may object to such processing by providing a ground related to the individual’s particular situation to justify the objection. However, if personal data is processed for direct marketing purposes, an individual can object to such processing at any time without providing any justification by contacting - firstname.lastname@example.org.
5. PLACE AND DATA TRANSFER
The personal data is processed at the All4Robots’ operating offices and in any other places where the parties involved in the processing are located. Specific rules apply when All4Robots transfer personal data from the EU/EEA to third countries or international organizations. When transferring personal data to third countries or
international organizations, All4Robots is obligated to establish appropriate safeguards prior to the transfer, which in practice are established by entering the European Commission’s standard contractual clauses.
6. RETENTION PERIOD
Personal data collected by All4Robots shall be processed and stored for as long as required by the purpose for which the personal data has been collected. All4Robots may be allowed to retain personal data for a longer period if All4Robots has obtained valid consent to the processing activity as long as such consent is not withdrawn. Furthermore, All4Robots may be obliged to retain the personal data for a longer period, whenever required to do so for the performance of a legal obligation or to establish, exercise or defend a legal claim.
Once the retention period expires, personal data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be accommodated after expiration of the retention period.
7. DATA SECURITY AND DATA BREACH
All4Robots takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of personal data. The data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In order to protect your personal data, we continuously assess the risks that may be associated with our processing of your personal data. In particular, we pay attention to protecting your personal data against discrimination, identity theft, financial loss, loss of reputation and data confidentiality. To avoid loss of personal data, we continuously backup our systems, and we make use of encryption or other security measures where necessary.
In the event of a data breach that involves high risk to your rights, we will notify you of the breach as soon as possible under the given circumstances. “A personal data breach” means a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data. In short, there will be a personal data breach whenever any personal data is lost, destroyed, corrupted, disclosed without proper authorization, or if the data is made unavailable.