This document provides information on how Germec (“we”, “our”, “us”) processes personal data in accordance with the General Data Protection Regulation (GDPR).
Data Controller Information
The data controller responsible for processing your personal data is:
Germec Europe Sp. z o.o.
Poland HQ
Al. Jerozolimskie 200A, 02-486 Warszawa, Polska
Email: info@germec.eu
Phone: +48 22 667 60 67
Türkiye HQ
İ.O.S.B. Dolapdere Sanayi Sitesi 19. Ada No:32 İkitelli/İSTANBUL/TÜRKİYE
Email: info@germec.eu
Phone: +90 212 671 41 50
A Data Protection Officer (DPO) can be contacted at info@germec.eu with the subject line “DPO”.
Categories of Data Collected
We may collect and process the following categories of personal data:
- Name, surname, email address, phone number
- Business details including address, VAT/tax number
- Role and job title
- Contractual information
Source of Data
Your data may be:
- Provided directly by you
- Provided by your employer or principal
- Collected from publicly accessible registers (e.g., CEIDG, KRS)
Legal Basis and Purposes of Processing
Your personal data may be processed for the following purposes:
a) For Contractors (Natural Persons):
- To conclude and perform contracts (Article 6(1)(b) GDPR)
- To fulfil legal obligations (Article 6(1)(c) GDPR)
- For legitimate business interests such as communication, administration, and legal defense (Article 6(1)(f) GDPR)
- For marketing purposes, upon obtaining explicit consent (Article 6(1)(a) GDPR)
b) For Representatives of Contractors:
- To verify identity and represent a contracting party (Article 6(1)(b) and 6(1)(f) GDPR)
- For internal business administration and legal purposes (Article 6(1)(f) GDPR)
- To meet legal obligations including tax/accounting (Article 6(1)(c) GDPR)
c) For Contact Persons Assigned by Contractors:
- For communication and coordination during contract execution (Article 6(1)(f) GDPR)
Retention Period
Personal data will be retained:
- For as long as necessary to fulfill the contract
- As required by law (e.g., tax/accounting)
- Until the expiration of the applicable statute of limitations
Data Transfers Outside the EEA
We may transfer your personal data to recipients located outside the European Economic Area (EEA). Such transfers are based on:
- Adequacy decisions issued by the European Commission
- Standard contractual clauses approved by the European Commission
Data Sharing
Your data may be shared with:
- IT and hosting service providers
- Legal, tax, consulting, and auditing partners
- Courier and logistics services
- Banks and payment providers
- Government authorities, upon legal obligation
Your Rights
You have the following rights under GDPR:
- Right to access your data
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to data portability
- Right to restrict processing
- Right to object to processing (in case of legitimate interest-based processing)
- Right to lodge a complaint with a supervisory authority
To exercise your rights or for more information, please contact:
info@germec.eu
