The entity responsible for processing personal data The processing entity is the Association of Automotive Parts Distributors and Producers based in Warsaw (Warsaw – Wesoła, ul. Za Dębami 3, in short: “SDCM” or “administrator”, “Association”). Administrator pays attention to your privacy and the security and protection of personal data. Therefore, SDCM processes personal data in accordance with applicable law.

What is personal data processed for? SDCM processes personal data because it is necessary to achieve the objectives arising from the legitimate interests of the Association or when it is necessary to perform the contract (including pre-contractual activities). The legal basis is Article 6 paragraph 1 f) and Article 6 paragraph 1 b) of (EU) 2016/679 Regulation of the European Parliament and Council of 27 April 2016. the Journals of Laws EU L.2016.119.1 of 4 May 2016, applicable from 25 May 2018 (hereinafter referred to as GDPR). The legitimate interests of the SDCM arise from the constitutional right of association and are set out in detail in the Association’s statute.

Obtaining consent may be required to take specific actions Occasionally, SDCM may process personal data based on your consent – then we will request it explicitly and separately before processing. The administrator may process personal data obtained from you, but also from publicly available sources.

The scope of processed data Depending on the implemented purpose, SDCM may process your personal data in a proportionate scope (name, surname, address, e-mail address, telephone, place of work, profession or position, name of the company or office, tax identification number), and in the case of being in legal relationship (contract, belonging to an organization), the scope of processed data may be appropriately wider, so as to enable the performance of an obligation arising from legal provisions or a contract.

Who your personal data can be entrusted to or shared with? SDCM may transfer your personal data to other entities only to the extent necessary for the above mentioned purposes. In order to achieve the objectives, the administrator conducts activities and commissions the services to service providers. Depending on their character, it may be necessary to provide personal data. SDCM may entrust data to other entities, while maintaining the administrator’s function. Basically, the territory of SDCM’s operations is the Republic of Poland, but also other EEA (European Economic Area) countries. Exceptionally, there may also a need appear to transfer your personal data to a third country. Then SDCM will take appropriate measures, which may in particular be the use of standard contractual clauses approved by the EU Commission.

How long are the data processed? SDCM processes your personal data within the time necessary to implement the above purposes. In cases specified by law, as well as for legal protection and redress, the administrator may process personal data to the necessary extent and time, in particular resulting from statutory limitation periods for claims.

What rights do you have to ensure your data protection? The supervisory body, starting from May 25, 2018, is the President of the Office for Personal Data Protection and you have the right to lodge a complaint to him. According to the GDPR, you have the right, subject to meeting the relevant legal requirements, to:

  • Obtaining confirmation from SDCM whether personal data concerning you are being processed and in this case getting access to this personal data,
  • SDCM rectifying your incorrect personal data,
  • SDCM deleting personal data concerning you,
  • SDCM’s limitation of processing of your personal data,
  • Transferring data regarding personal data that you have actively provided and which are processed on the basis of your consent,
  • Object to processing your personal data based on your specific situation,

In order to exercise the rights, please contact the Association at the following e-mail: