1. The controller of personal data is INOILE Sp. z o.o., with its registered office in Gdańsk.
2. Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), as well as applicable legal provisions.
3. Personal data are processed in particular for the following purposes:
   a) conducting business communication,
   b) providing and settling logistics, transport, and consultancy services,
   c) fulfilling accounting and tax obligations,
   d) pursuing or safeguarding potential claims.
4. The legal basis for data processing is Article 6(1)(b), (c), and (f) of the GDPR.
5. Data may be transferred to entities cooperating with INOILE only to the extent necessary for the provision of services, for example carriers, subcontractors, and accounting firms.
6. Personal data are not transferred outside the European Economic Area unless this is necessary for the provision of a service and complies with the GDPR.
7. Data are retained for the duration of the cooperation and, after its completion, for the period required by law or until the limitation period for claims expires.
8. Data subjects have the right to access their data, rectify them, restrict processing, object to processing, and lodge a complaint with the President of the Personal Data Protection Office.
9. Providing personal data is voluntary; however, it is necessary for the performance of the cooperation.
10. INOILE applies appropriate technical and organisational measures to protect personal data.