(1) Ambro Logistics shall be responsible for securing the Customer's personal data in accordance with the requirements of the Act on the Protection of Personal Data of 29.08.1997 Coll. 1997 No. 133 item 883 and the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (RODO).

(2) The Administrator of the personal data of individuals using the carriage services is Ambro Logistics Sp. z o. o. with its registered office in Przykona, ul. Przemysłowa 18, 62-731 Przykona, KRS: 0000343163, hereinafter referred to as the Administrator. The Administrator carries out personal data processing operations.

(3) In all matters related to the processing of personal data by the Administrator, please contact the e-mail address for contact indicated on the Ambro Logistics website.

(4) The Administrator shall apply the measures necessary for the protection of the processed personal data, in particular provides appropriate technical and organizational measures to ensure the security of the personal data provided, in particular to prevent access to them by third parties or their processing in violation of the law, preventing loss of data, their damage or destruction.

(5) Personal data shall be processed in order to:
a. The performance of the service/order i.e. on the basis of Article 6(1)(b) of the RODO according to which the processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject prior to entering into a contract. The personal data will be processed for the duration of the contract/service and for the time necessary after its completion.
b. Customer satisfaction surveys carried out as part of the process of controlling and maintaining the high quality of the Ambro Logistics Services, to which the Customer agrees each time he uses the service.
c. Completion of the complaint process on the basis of Article 6(1)(c) of the RODO, according to which the processing is necessary for the fulfilment of a legal obligation incumbent on the Administrator. The personal data will be processed for the period of fulfilment of the legal obligation and a possible further period of use of the services offered by the Administrator.
d. Pursuing our claims on the basis of Article 6(1)(f) RODO i.e. the Administrator's legitimate interest in pursuing our claims and defending our rights, and Article 9(2)(f) RODO i.e. the processing is necessary to pursue the claim. Personal data will be processed for the duration of the claim.
e. Fulfilment of tax obligations on the basis of Article 6(1)(c) RODO (processing is necessary for the fulfilment of a legal obligation incumbent on the Administrator) in conjunction with Article 74(2) of the Accounting Act. Personal data will be processed for the period necessary to fulfil the tax obligation. We process all data processed for accounting purposes and for tax reasons for 5 years calculated from the end of the calendar year in which the tax obligation arose.
f. Where consent has been obtained - for marketing purposes on the basis of Article 6(1)(a) RODO (the data subject has consented to the processing of their personal data for one or more specified purposes. The data will be processed for the duration of the marketing action.

(6) Persons providing their personal data have the right to request from the Administrator:
 a. access to their personal data,
 b. rectification of their personal data
 c. have their personal data erased (a request for erasure will result in the immediate removal of personal data from our database),
 d. restriction of the processing of your personal data,
 e. lodge a complaint with a supervisory authority,
 f. data portability,
 g. withdraw consent to the processing of personal data at any time. Withdrawal of consent will not affect the lawfulness of processing carried out on the basis of consent before its withdrawal, however it will prevent us from providing our services,
h. object to the processing of personal data - where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority entrusted to the Administrator and where the processing is necessary for purposes arising from the legitimate interests pursued by the Administrator or by a third party, including in the case of profiling. The Controller shall no longer be allowed to process such personal data unless the Controller demonstrates the existence of compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or grounds for the establishment, exercise or defence of claims.

(7) In order to exercise the above rights, you must contact the Controller by e-mail at the e-mail address indicated on the Ambro Logistics website.

(8) the personal data provided may only be communicated to:
a. To the relevant state authorities at their request and on the basis of the applicable legal provisions.
b. To cooperating entities for the purpose and to the extent necessary for the performance of the service. The Administrator is responsible for the consequences of the actions of third parties (in particular drivers, couriers, fitters) with whom he cooperates and to whom he entrusts the execution of the contract in whole or in part.

(9)The personal data provided to Ambro Logistics are not subject to automated decision-making, including profiling.

(10) The provision of personal data is voluntary, but without it the performance of the service will not be possible.