Dear Sirs,

In accordance with the Regulation (EU) No.2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR").

To fulfil the obligation imposed upon Coats Polska Spółka z o.o., we provide you with the following information.

I. Who controls your personal data?

The controller of your personal data is Coats Polska Spółka z ograniczoną odpowiedzialnością, with its registered office in Łódź, 94-104, at Nowe Sady 2 (hereinafter referred to as Coats).

We wish to inform you that any explicit written consent given by you to the processing of your personal data and any marketing consent (if applicable) remains effective.

II. Where do we have your data from?

1. Directly from you.

2. From public sources, e.g. National Court Register, Central Business Register and Information Service, and other similar sources.

III. What personal data do we process?

1. Contact details: name and surname, address, telephone number, email address.

2. Data required under law for identification for the purposes of concluding a contract, performing a service or issuing an invoice.

IV. What we will use your personal data for?

The main goal of personal data processing is to make it possible to accept an order for the purchase of goods (including creditworthiness assessment) and to conclude and duly perform a sale or purchase agreement.

A part of personal data is collected and made available (processed) in order for us to comply with our legal obligations, including obligations under accounting, antimoney laundering and counter-terrorism financing or fiscal regulations.

The data controller does not provide for the use of profiling mechanism.

V. On what basis will we process your data?

1. The necessity to perform your contract or to take steps prior to entering into a contract or contract with Coats Group companies (Article. 6(1)(b) of the GDPR)

2. The necessity to comply with legal obligations (Article 6(1)(c) of the GDPR)

3. The legitimate interest of Coats (Article 6(1)(f) of the GDPR)

4. Consent (Article 6(1)(a) of the GDPR)

VI. Can you withdraw your consent?

The customer has the right to withdraw their consent to the processing of their personal data at any time without prejudice to the lawfulness of the processing conducted on the basis of the consent before its withdrawal. This right does not apply to a situation where Coats is authorised to data processing for the purpose of performing a contract or other legal obligations (reporting, public law obligations, etc.) or on any basis other than the Customer's consent. The Customer provides their personal data voluntarily; if data are processed on the basis of applicable regulations or the performance of Coat's legitimate interests, a refusal to provide personal data may make it impossible to conclude or continue to perform a contract.

VII. What rights do you have?

You have the right to demand that Coats provide you with access to your personal data, and the right to rectify and delete your personal data, limit the processing of your personal data and to have your data transferred to another data controller. In the case of data processing for marketing purposes, you may raise an objection.

You also have the right to lodge a complaint with a supervisory authority (Personal Data Protection Office) if data processing violates your rights.

VIII. Who may receive your data?

In order to achieve the goals of data processing indicated above, your personal data may be made available under data processing contracts concluded by your consent or under applicable regulations to the following entities:

1) Coats Group companies. A list of companies may be obtained through odo.pl@coats.com).

2) Brokers, insurers, their agents and reinsurers to the extent necessary to insure the goods you have purchased, if required.

3) Entities providing services to Coats, e.g. transport companies, advisors, auditors, IT service providers.

4) Entities providing financial or IT services at Coats's order that are based in third countries, in accordance with the Standard Contractual Clauses.

5) Other authorized entities to the extent provided for by law.

IX. How long will we store your personal data?

Personal data will be stored throughout the term of the contract and thereafter for a period necessary to perform obligations under law (e.g. the Accounting Act or the Anti-Money Laundering and Counter- Terrorism Financing Act) and for a period necessary to satisfy our claims as a party to the contract, but not longer than for the claim limitation period.

The period may be extended until the moment the other party raises the defense of limitation or due to the possibility of reselling the debt to an entity specialising in claim recovery, but not longer than for the claim limitation period.

Data provided under your consent will be processed until you withdraw your consent.

X. Whom may you contact?

Coats has appointed a Data Protection Specialist who may be contacted under the following address: Data Protection Specialist, Coats Polska Spółka z o.o., 94-104 Łódź, ul. Nowe Sady 2, e-mail: odo.pl@coats.com

As the controller of your personal data, Coats protects them by exercising due care and applying adequate procedures and protective measures in accordance with binding regulations.

At the same time, we request you to provide this information to your employees, associates, or other persons whose data you have provided to Coats (e.g for communication purposes) in connection with the conclusion or performance of the contract.

Coats Polska Spółka z o.o.
Personal Data Controller
Łódź, 2022-10-28