GDPR Information Notice

1. Controller

The controller of your personal data is:

DELI GROUP CEE Sp. z o.o.
ul. Obrzeżna 5/XIP/1
02-691 Warsaw, Poland
KRS: 0000651616
NIP: 5213759183
REGON: 366073662

Email: delieurope.office@nbdeli.com

2. Who this notice applies to

This Notice applies in particular to:

• individual customers and contractors;
• suppliers and business partners;
• representatives, employees and collaborators of customers, contractors, suppliers and business partners;
• persons contacting us in connection with business cooperation.

3. Purposes and legal bases for processing

Your personal data may be processed for the following purposes:

a. To conclude and perform a contract
Where you are personally a party to the contract, the legal basis is Article 6(1)(b) GDPR.

b. To manage cooperation and communicate with representatives or employees of contracting entities
The legal basis is Article 6(1)(f) GDPR – our legitimate interest in properly managing business relationships and performing contracts.

c. To fulfil legal obligations, including accounting and tax obligations
The legal basis is Article 6(1)(c) GDPR.

d. To handle complaints, claims and requests connected with contracts or services
The legal basis may be Article 6(1)(b), 6(1)(c) or 6(1)(f) GDPR, depending on the circumstances.

e. To establish, exercise or defend legal claims
The legal basis is Article 6(1)(f) GDPR – our legitimate interest in protecting our rights.

f. To handle business correspondence and enquiries
The legal basis is Article 6(1)(f) GDPR – our legitimate interest in conducting business communication and responding to enquiries.

g. For direct marketing of our own products and services
The legal basis may be Article 6(1)(f) GDPR, where legitimate interest may constitute the legal basis for processing. Where separate consent is required for a particular communication channel under applicable law, such communication will only be carried out after the required consent has been obtained.

h. For internal analyses and business statistics
The legal basis is Article 6(1)(f) GDPR – our legitimate interest in analysing and improving our business activities.

4. Categories of personal data

Depending on the nature of the business relationship, we may process:

• name and surname;
• company name and position;
• business address;
• email address;
• telephone number;
• tax or business identification information where required;
• information relating to contracts, orders, cooperation or correspondence;
• payment and invoicing information;
• other personal data necessary for the relevant business relationship.

We process only personal data that is necessary for a specific and lawful purpose.

5. Source of personal data

If we did not obtain your personal data directly from you, it may have been obtained:

• from the organisation you represent or work for;
• from our customer, contractor, supplier or business partner;
• from publicly available business sources, such as company websites or public registers;
• from another person involved in the relevant business relationship.

6. Recipients of personal data

Your personal data may be disclosed, where necessary, to entities supporting us in the following areas:

• IT, hosting and technical support;
• accounting and tax services;
• legal and advisory services;
• logistics, delivery and courier services;
• banking and payment services;
• marketing and communication services;
• cloud, document-management and storage services.

Your personal data may also be disclosed to competent public authorities where required by applicable law.

7. Transfers outside the EEA

Some service providers may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, the transfer is carried out using mechanisms permitted under Chapter V GDPR, where required, including European Commission adequacy decisions or appropriate safeguards such as Standard Contractual Clauses.

8. Retention periods

Personal data is retained for the period necessary to manage the relevant business relationship and, after it ends, for periods required by applicable law or necessary to establish, exercise or defend legal claims.

In particular:

• accounting and tax documentation is retained for the period required by applicable accounting and tax legislation;
• data connected with contracts and business cooperation may be retained until the expiry of applicable limitation periods;
• data processed for direct marketing based on legitimate interests is processed until an effective objection is submitted or the purpose ceases to exist;
• data processed on the basis of consent is processed until consent is withdrawn or the purpose ceases to exist.

9. Your rights

Subject to the conditions set out in the GDPR, you may have the right to:

• access your personal data;
• rectify inaccurate personal data;
• request erasure of personal data;
• restrict processing;
• object to processing based on legitimate interests;
• data portability, where applicable;
• withdraw consent at any time where consent is the legal basis for processing.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

You also have the right to lodge a complaint with the competent supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

10. Obligation to provide personal data

Where personal data is required for the conclusion or performance of a contract or to fulfil a legal obligation, failure to provide the required data may make it impossible to conclude or perform the contract or carry out the relevant business activity.

In other cases, providing personal data is voluntary.

11. Automated decision-making

We do not make decisions concerning you based solely on automated processing that produce legal effects or similarly significantly affect you.

12. Changes to this Notice

We may update this GDPR Information Notice if our processing activities, business processes or applicable legal requirements change.

The current version is always available on the Website.