Privacy Policy

RUST Sp. z o.o., hereinafter referred to as RUST, with its registered office at ul. Rolna 13, Pludry 46-375, processes data:

In accordance with the applicable regulations on the protection of personal data, in particular the General Regulation, in order to ensure the proper protection of personal data, the data subject should first and foremost be provided with information regarding the processing of their personal data as specified in Articles 13 or 14 of the GDPR , depending on whether it was obtained directly from the data subject or from other sources.

Where did we get your data?
We obtained your data:

1. directly from you, collected during trade fairs in Poland and abroad
2. from an entity that has entered into a contract with RUST to provide services on your behalf,
3. from a partner/third party cooperating with RUST, who has made your personal data available on the basis of your consent,
4. from publicly available sources, e.g., the National Court Register, the Central Register and Information on Economic Activity, or other similar sources
5. from a website where you yourself have posted such data

Who is the controller of your data?

The controller of your data is RUST Sp. z o.o. with its registered office in Pludry, at ul. Rolna 13, 46-375 Pludry, NIP: 576 158 98 42, tel. 34 353 74 85, e-mail: sekretariat@rust.pl

What data do we process?
RUST processes the following categories of data:

1. contact details;
2. data required for identification for the purposes of concluding a contract, performing a service, and issuing an invoice
3. data needed to select the right marketing offer and services from RUST for you

What will we use your personal data for?
We will process your personal data for one or more of the following purposes:

1. to perform activities carried out at your request prior to entering into a contract (Article 6(1)(b) of the GDPR)
2. to conclude and perform the contract you have concluded with RUST (Article 6(1)(b) of the GDPR)
3. to perform a contract concluded with RUST on your behalf as a third party (Article 393 of the Civil Code), where another entity is a party to the contract (Article 6(1)(b) of the GDPR)
4. to fulfill a legal obligation incumbent on RUST, e.g., to issue an invoice or bill (pursuant to Article 6(1)(c) of the GDPR)

In addition, if you give your consent and only to the extent that you agree, we will process your data:

a) for marketing purposes carried out by the RUST brand, sending newsletters, offers tailored to your needs, news and information about the RUST brand,
b) for the marketing of third parties,
c) to share your personal data with businesses that RUST works with so that they can use it for marketing purposes.

Are you required to provide personal data?

To the extent that your data is processed for the purpose of performing a contract with RUST, providing your data is a condition for concluding that contract. Providing data is voluntary, but it is necessary for the conclusion and performance of the contract. If you do not provide your personal data, the contract will not be concluded. Providing the data necessary to issue an invoice is a statutory obligation and results from the Goods and Services Tax Act. In other respects, providing personal data is voluntary, is not a statutory or contractual requirement, and is not a condition for concluding a contract.

How to withdraw consent?
You can express all or some of your consents, or none at all.

You may withdraw any consent given to RUST in connection with the processing of personal data at any time without negative consequences. Simply send an email, call, or send a letter to the contact details provided above. You can express your wish to withdraw your consent in any way you like, the only condition is that we receive it. Withdrawing your consent does not affect the lawfulness of the processing of your data prior to its withdrawal, i.e., until you withdraw your consent, the processing of your data by RUST is lawful.
How to contact our data protection officer?
You can do so by calling 34 353 74 85 or by emailing admin_rodo@rust.pl.

On what basis will we process your personal data?
The basis for the processing of personal data is, depending on the activities performed:

1. conclusion and performance of a contract with RUST,
2. fulfilling a legal obligation incumbent on RUST (e.g., issuing an invoice),
3. the legitimate interest of RUST (direct marketing of its products and services or performance of a contract concluded with RUST on your behalf as a third party, where another entity is a party to the contract),
4. your consent.

When and to whom can we transfer your data, and to whom will we definitely not transfer it?
If you give your consent, we will share your personal data with businesses that RUST cooperates with (“RUST Partners”) so that they can use it for marketing purposes. We will only share your data with those RUST Partners that you agree to.

We may disclose your data to recipients in the form of companies that cooperate with us and perform tasks on our behalf and for our benefit. In such a case, an agreement is concluded with these entities to ensure the security of your data. Due to the fact that these entities change frequently, we are unable to provide a complete list of them. If you would like to know who we are currently working with, you can always ask us.
However, we will not transfer your personal data to a third country (outside the European Economic Area).

What can you do with the personal data you provide to us?
You have the right to request RUST to access your personal data, rectify it, delete it, or restrict its processing, and we can also transfer it to another data controller at your request. You may object to the processing of your data for the purpose of marketing RUST’s own products or services.

How long will we store your data?
Your personal data will be stored for as long as is necessary to perform the contract between you and RUST or a contract concluded by another entity on your behalf, and after that time for a period corresponding to the limitation period for claims that RUST may raise and that may be raised against RUST.
If your personal data is processed in order to fulfill a legal obligation incumbent on the controller, the personal data will be stored for the time necessary to fulfill this obligation.
We will process data on the basis of consent until you withdraw your consent.

If your personal data is processed on the basis of the controller’s legitimate interest, where the basis for such processing is the performance of a contract concluded with RUST on your behalf, the data will be processed until the legitimate interest underlying such processing is fulfilled.

If your personal data is processed on the basis of the legitimate interest of the controller, where the basis for such processing is the direct marketing of its products and services, your personal data will be processed until you object.

Where can you lodge a complaint about the processing of personal data by RUST?
Currently, such complaints can be addressed to the Inspector General for Personal Data Protection. However, we would like to point out that soon the competent supervisory authority in this matter may be the President of the Personal Data Protection Office.

How will we not process personal data?
Your personal data is not subject to automated processing (e.g., profiling) that produces legal effects concerning you or similarly significantly affects you; however, we use cookies and other systems that record traffic on our websites (profiling for marketing purposes).