GDPR

The controller of your personal data will be LongLife S.A., with its registered office in Warsaw at ul. Bobrowiecka 8 (hereinafter "We"). You can contact us in the following ways:

• by post to: ul. Bobrowiecka 8, 00-728 Warszawa,
• through the contact form at www.longlife.pl.

To safeguard your data, we have appointed a data protection officer. The data protection officer is a person you can contact on all matters relating to our processing of your personal data and to the exercise of your rights connected with that processing. You can contact the officer in the following ways:

• by post to: Inspektor Ochrony Danych LongLife S.A., ul. Bobrowiecka 8, 00-728 Warszawa
• by email: iod@longlife.pl,

If you complete our contact form or send us an enquiry in another form, your data will be processed in order to handle your enquiry (for example, to answer the question you have asked or to arrange the contact you have requested).

For this purpose we will process your personal data on the basis of Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the "GDPR"), that is, on the basis of our legitimate interest in responding to the content submitted through the form.

If you have given the relevant consents to receiving marketing content from us through specific communication channels, we will process your personal data for the purpose of direct marketing of our products and services. As part of our marketing activities we will, for example, send you information about products or promotions, or carry out marketing research. We will also carry out profiling for marketing purposes. We will conduct these activities on the basis of your consent, pursuant to Article 6(1)(a) of the GDPR.

We may carry out profiling on the basis of your personal data. This means that we may automatically evaluate certain personal factors relating to you that affect our marketing objectives, in order to better understand your needs regarding the products and services we offer. On the basis of such an evaluation we will be able to send you information better matched to your preferences (including, among other things, the choice of topics of the content and materials we send). For profiling we may use your: first name, surname, age, gender, language, date of birth, town or city, type of product purchased, and the source from which the data was obtained. In addition, when profiling we may take into account statistical data on behaviour on websites and in mobile applications, as well as preferences expressed in our services or applications.

We will retain your data until you withdraw your consent to the processing of personal data, where the processing is based on such consent.

Personal data processed in connection with handling your enquiry will be retained for as long as is necessary to process it, and thereafter for as long as is necessary to establish, defend and protect against any claims.

Your data may be disclosed to entities authorised under the law, as well as to entities acting on our behalf, for example IT service providers or marketing agencies.

In connection with our use of services provided by other suppliers, your data may be transferred outside the European Union. In such a case, however, the transfer will take place on the basis of standard data protection clauses adopted by the European Commission, or on the basis of a relevant European Commission decision stating that a third country ensures a level of data protection adequate to that guaranteed by the GDPR.

You have:

To exercise the rights listed above, please contact us or our data protection officer (the contact details are given above).

• the right to withdraw consent,
• the right to object to the processing of personal data for marketing purposes,
• the right to access your personal data and to obtain a copy of it,
• the right to request rectification of your personal data,
• the right to request erasure of your personal data,
• the right to request restriction of the processing of your personal data,
• the right to data portability, that is, the right to receive your personal data from us in a structured, commonly used, machine-readable format.