Document version: 2026-08-20·Wersja polska (wiążąca)

Information obligation for contractors

In fulfilment of the obligation arising from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter "GDPR"), we ask you to read the information below.

1. Controller of personal data

The controller of your personal data is Wiktor Mertka, conducting business under the name Mervision Wiktor Mertka, Rotmanka (Poland), ul. Bajki 15a/13, 83-010 Rotmanka, NIP (Tax ID): 6040272133; REGON: 545305973 (hereinafter: the "Controller").

Contact with the Controller regarding the processing of personal data is possible by post at the correspondence address indicated above or by e-mail at: contact@inspectrabim.com.

2. Purposes of processing and legal bases

The Controller will process your data for the following purposes:

if you are a party to this agreement, your personal data will be processed for the purpose of concluding and performing that agreement (legal basis: Article 6(1)(b) GDPR). Providing this personal data is voluntary but necessary in order to conclude the agreement. Failure to provide the data will result in it being impossible to conclude and perform the agreement;
if you are a person representing a party to the agreement, named in the introductory part of the agreement, your data will be processed for the purpose of establishing and verifying the authority to represent the entity (legal basis: Article 6(1)(f) GDPR);
if you are a person designated for contact in connection with the performance of the agreement and/or making day-to-day arrangements in connection with the cooperation between the Parties to the agreement, your data will be processed for the purpose of the proper performance of the agreement, ensuring day-to-day contact and maintaining cooperation between the Parties to the agreement (legal basis for processing – Article 6(1)(f) GDPR);
fulfilment of obligations arising from generally applicable laws, such as, for example, retaining documentation relating to the performance of the agreement in connection with tax law or accounting regulations (legal basis: Article 6(1)(c) GDPR). Providing this personal data is voluntary but necessary in order to conclude the agreement. Failure to provide the data will result in it being impossible to conclude and perform the agreement;
for the purpose of any establishment, pursuit or defence of claims arising from the business activity conducted by the Controller (legal basis: Article 6(1)(f) GDPR).

3. Categories of personal data

The Controller will process your personal data solely to a strictly defined, necessary extent, appropriate to the purposes specified above. The Controller will not collect or process any excessive data beyond the data necessary to establish the proper authority to represent a Party to the agreement and/or business contact data required for the proper performance of the agreement and day-to-day communication.

4. Data retention period

Your personal data will be retained for the period of performance of the agreement between the Controller and you or the Party with which the Controller concluded the agreement. As regards data processed on the basis of Article 6(1)(c) GDPR, they will be processed for the period arising from generally applicable laws.

In addition, your personal data may be processed for the period of pursuing any claims between the parties to the concluded agreement.

5. Rights of data subjects

You have the right of access to your data and the right to: rectification, restriction of processing, the right to object and the right to request erasure of the data. Detailed rules for exercising the above rights are set out in Articles 15–21 GDPR.

6. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office.

7. Recipients of the data

The recipients of your personal data may be the Controller's employees and associates.

Your personal data may be disclosed to entities authorised on the basis of legal provisions, for example to inspection and supervisory authorities.

Your personal data may also be disclosed to processors in connection with the performance of agreements concluded by the Controller, under which the processing of personal data has been entrusted to them, including, for example, IT service providers and firms providing legal services.

Your personal data will not be transferred to third countries or international organisations that do not protect them adequately. Should such a transfer become necessary, the Controller will exercise the utmost care in their protection and safeguarding, including acting in accordance with Chapter V of the GDPR.

8. Source of the data

Where the data have not been obtained directly from you, your personal data have been provided to the Controller by the other party to the agreement in connection with the performance of that agreement or – as regards identification data connected with the business activity conducted (if applicable) – may have been obtained from publicly available registers and in another manner compliant with the law.

9. Automated processing of personal data and profiling

Your data will not be processed in an automated manner, including profiling.

Binding version. The Polish language version of this document is the binding one. This English version is a translation provided for the reader's convenience. In the event of any discrepancy between the Polish and the English version, the Polish version prevails.