1. Administrator of the personal data
   The administrator of your personal data is „LuxuryStairs LTD”, with the registered office in 4 Myers Road, SG19 2RG Potton, Company number: 10772694, VAT Number: 271048518, e-mail address: metalwork@luxurystairs.co.uk, telephone number: 07999 069 034.
2. Inspector of data protection
   The inspector of data protection appointed by the Administrator holds an office at the registered office of the Administrator, at the following address: LuxuryStairs LTD, 4 Myers Road, SG19 2RG Potton, e-mail address: metalwork@luxurystairs.co.uk, telephone number: 07999 069 034.
3. Purposes of processing of personal data Processing of your personal data may take place for the following purposes:
   a) The purpose of processing: All activities related to preparation, conclusion, proper implementation and termination of contracts.
   The period of processing: Until the end of the contract, and after this time, for other purposes related to the contract, such as the period of securing possible claims.
   The legal basis: The Regulation, Article 6, section 1, item b).
   b) The purpose of processing: All activities related to preparation, conclusion, proper implementation and termination of contracts which you are not a party to.
   The period of processing: Until the end of the contract, and after this time, for other purposes related to the contract, such as the period of securing possible claims.
   The legal basis: The Regulation, Article 6, section 1, item f).
   c) The purpose of processing: Implementation of activities carried out on the basis of granted consents, such as: informing about the Administrator and its business activities, marketing implemented via electronic channels and telephone, preparing and sending ordered commercial offers, responses to messages sent via the Administrator’s website.
   The period of processing: Until the consents are withdrawn.
   The legal basis: The Regulation, Article 6, section 1, item a). With reference to the situation of paragraph 3, items a-b, providing personal data is voluntary, however, necessary to achieve the indicated purposes.
4. Sources of obtaining personal data
   We process your personal data obtained directly from you (e.g. the data provided on the forms), as well as obtained from other sources available to the public, such as the National Court Register (KRS), Central Business Register and Information Service (CEIDG) and the National Business Registry (REGON) database.
5. Recipients of personal data
   The recipients of your personal data may include:
   a) Public authorities or entities authorized to request access or receive the personal data on the basis of legal provisions,
   b) Entities entrusted by the Administrator to the processing of the personal data based on the concluded agreements, e.g. accounting offices, law firms, providers of courier services, providers of IT services and other services that process the data on behalf of the Administrator,
   c) Entities in relation to which you have agreed to share and process your personal data. The administrator will not transfer your personal data to a third country or an international organization.
6. Period of storing the data
   Your personal data will be stored for the period of cooperation with you or the Entity you represent. After expiry of this period, during the period of limitation of claims related to this cooperation, or for the period necessary to fulfil the obligations imposed by generally applicable laws. Your personal data processed on the basis of the consent will be stored for the period of its validity, i.e. until it is withdrawn. After expiry of this period, for a period necessary to perform duties imposed by generally applicable laws.
7. Rights
   You have the right to:
   a) Request access to the personal data concerning you,
   b) Request correction of the personal data concerning you,
   c) Request to remove or limit processing of the personal data concerning you,
   d) Object to processing of the personal data concerning you,
   e) Request to transfer the personal data concerning you,
   f) File a complaint to the Supervisory Body (the President of the Office for Personal Data Protection, formerly the Inspector General for the Protection of Personal Data) The detailed scope of your rights as a person to whom the personal data relate falls within Chapter III of the GDPR.
8. Automated decision making
   Your personal data will be processed in an automated or semi-automated manner. However, they will not be used to make decisions that rely solely on the automated processing, including profiling.
9. Changes in the policy
   The Administrator reserves the right to change this policy and update it.