The information clause is the fulfillment of the information obligation resulting from art. 13 of the Regulation of the European Parliament and of the Council (EU) No. 2016/679 of April 27, 2016. on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L119 of 4 May 2016), hereinafter referred to as GDPR.
The rules described below apply from May 25, 2018.

I. Data administrator: Merces s.c. company.

II. Contact with the data administrator: Merces s.c. to the e-mail address: office@merces.pro, or in writing to the following address: Brzozówka, ul.Spacerowa 60 33-140 Lisia Góra, with the note "Personal data".

III. Purpose of data processing: a. performance of the contract, b. fulfillment of a legal obligation (e.g. issuing an invoice), c. other purposes, confirmed by consent.

IV. Legal basis for data processing: a. conclusion and performance of the contract and taking action at the party's request before concluding the contract (Article 6(1b) of the GDPR), b. fulfillment of the legal obligation (Article 6(1c) of the GDPR), c. granting consent (Article 6(1a) of the GDPR), d. legitimate interest - promoting the offer of Merces s.c. (Article 6(1f) of the GDPR).

V. Categories of processed data: a. contact details: name and surname, e-mail and correspondence address, telephone number, job position, b. identification data: company name, NIP, REGON, nick, login,

VI. Method of data collection: a. contact forms on the website www.merces.pl and the profile on the Allegro.pl portal, b. publicly available Internet sources, c. concluding agreements, contracts and commercial transactions.

VII. Data storage period: a. In the case of data processed on the basis of consent - until its withdrawal, b. for the duration of the contract, c. after the end of the contract for the purposes of: pursuing claims, performing obligations under the law, statistical and archiving. d. in other cases - until the business purpose ceases

VIII. The Administrator does not perform: a. profiling within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of Europe (GDPR), b. transferring data outside the European Economic Area.
IX. Rights related to the processed data: a. the right to access data (Article 15 of the GDPR) b. the right to rectify data (Article 16 of the GDPR) c. the right to delete data (Article 17 of the GDPR) d. the right to limit data processing ( right to transfer data (Article 20 of the GDPR) f. right to object (Article 21 of the GDPR) g. right to withdraw consent (Article 7 of the GDPR)

X. The Data Administrator has the right to lodge a complaint with the President of the Office for Personal Data Protection in the event of a violation of the law.