Privacy
policy

The controller of your personal data is PLUM Spółka z ograniczoną odpowiedzialnością, Tax Identification Number (NIP): 9661427390, National Business Registry Number (REGON): 050878784, National Court Register Number (KRS): 0000153696. The Controller’s registered office is located in Ignatki, Wspólna 19, 16-001 Kleosin, (hereinafter referred to as Plum Sp. z o.o. or Controller or Personal data controller).

You can contact Plum sp. z o.o.:

• by e-mail: plum@plum.pl
• by post: Wspólna 19, Ignatki, 16-001 Kleosin
• in person in our registered office.

Plum Sp. z o.o. collects and processes personal data to the extent necessary to achieve the purpose for which they were collected.
Depending on the purpose and legal basis for the collection and processing of personal data, Plum Sp. z o.o. may collect and process, among other things, the following data:

• basic identification data, including, but not limited to: first name, surname, company name, tax identification number (NIP), statistical identification number (REGON),
• contact details, including, but not limited to: address, telephone number, e-mail address,
• data for customer service, including, but not limited to: order number, invoice number, customer number,
• data contained in CVs and related documents, including those sent when applying via the website www.plum.pl,
• other data necessary to achieve the purposes for which they were collected.

The privacy policy distinguishes the following groups of persons whose data are processed by the Controller:

• Customers
• Potential customers
• Contractors/Suppliers
• Potential Contractors/Suppliers
• Persons designated as contacts in contracts concluded by Plum Sp. z o.o.
• Persons visiting the registered office of Plum Sp. z o.o.
• Job applicants
• Persons interested in internships/work placements
• Persons whose data are processed in connection with warranty repairs, complaints or servicing
• Representatives of customers/contractors
• Persons contacting the Controller, including those using contact forms
• Persons towards whom marketing activities are undertaken

Additionally, the Cookie Policy specifies the rules for collecting and using information about users of websites operated by the Controller, stored in cookies and system logs.

1. Information for Customers

If you have a contract with Plum Sp. z o.o. under which Plum Sp. z o.o. provides specific services to you, sells or delivers goods to you, Plum Sp. processes your data for the purpose, on the legal basis and for the period specified below

• Purpose: Conclusion and performance of a contract concluded with ADO or taking action prior to its conclusion at your request. Retention period of personal data: the period of negotiations, and in the case of conclusion of a contract, the duration of the contract, possibly also the warranty period. Legal basis for data processing: article 6(1)(b) of the GDPR;
• Purpose: Fulfilment by the Controller of its obligations under the law, in particular tax and accounting regulations. Retention period of personal data: the period required by the relevant legal provisions regarding the storage of accounting and tax documentation.
  Legal basis for data processing: article 6(1)(c) of the GDPR in conjunction with other specific provisions, including the Accounting Act;
• Purpose: Pursuing claims and defending against claims related to business activities, which constitutes a legitimate interest of the Controller. Retention period of personal data: the limitation period for claims under the law, including the Civil Code. Legal basis for data processing: article 6(1)(f) of the GDPR;

Purpose: Direct marketing activities for our own products and services, which constitutes a legitimate interest of the Controller. Retention period of personal data: until the end of cooperation with you or until you effectively object to the processing of data for the specified purpose, whichever occurs first. Legal basis for data processing:
article 6(1)(f) of the GDPR.

2. Information for Potential customers

If you are interested in Controller’s offer or Controller presents its offer to you, Controller
processes your data for the purpose, on the legal basis and for the period indicated below.

• Purpose: Responding to enquiries (interpreted as consent to data processing), preparing and presenting by Controller offers adjusted to your needs, which also
  constitutes a legitimate interest of the Controller. Retention period of personal data: the
  period necessary to conduct correspondence/negotiations related to the offer, but no longer than until the consent is withdrawn (in the case of data processing based on
  consent) or an effective objection is raised (in the case of data processing based on a legitimate interest). Legal basis for data processing: consent to data processing – article 6(1)(a) of the GDPR, expressed, for example, by submitting an enquiry, and the legitimate
  interest of the Controller – article 6(1)(f) of the GDPR;

Purpose: Pursuing claims and defending against claims arising from business activities, which constitutes a legitimate interest in data processing by the Controller. Retention period of personal data: the limitation period for claims under the law, including the Civil Code. Legal basis for data processing: article 6(1)(f) of the GDPR.

3. Information for Contractors/Suppliers

If you have concluded a contract with the Controller on the basis of which:
– you provide specific services to the Controller or sell/deliver specific goods to the Controller,
– you take action prior to concluding the contract,
then the Controller processes your data for the purpose, on the legal basis and for the period indicated below.

• Purpose: Conclusion and performance of a contract for the provision of services or sale/delivery of goods, or taking steps prior to entering into a contract for the provision of services or sale/delivery of goods. Retention period of personal data: duration of the contract. Legal basis for data processing: article 6(1)(b) of the GDPR;
• Purpose: Fulfilment by the Controller of its obligations under the law, in particular tax and accounting regulations. Retention period of personal data: the period required by the relevant provisions of law regarding the storage of accounting and tax documentation.
  Legal basis for data processing: article 6(1)(c) of the GDPR in conjunction with other specific provisions, including the Accounting Act;
• Purpose: Pursuing claims and defending against claims related to business activities, which constitutes the legitimate interest of the Controller. Retention period of personal data: the limitation period for claims specified in the provisions of law, including the Civil Code. Legal basis for data processing: article 6(1)(f) of the GDPR;
• Purpose: Storage for possible future use of your offer, which constitutes a legitimate interest of the Controller. Retention period of personal data: until the purpose is fulfilled or until an effective objection to the processing of data for the specified purpose is lodged,
  whichever occurs first. Legal basis for data processing: article 6(1)(f) of the GDPR.

4. Information for Potential Contractors/Suppliers
If you submit your offer to the Controller, the Controller will process your data for the purpose, on the legal basis and for the period specified below.

• Purpose: To present offer (which is interpreted as consent to data processing) for the Controller and to review the offer (which is the Controller’s legitimate interest).
  Retention period of personal data: the period necessary to conduct correspondence/discussions related to the offer presented to the Controller, but no longer than until the consent is withdrawn (in the case of data processing based on consent) or an effective objection is raised (in the case of data processing based on a legitimate interest). Legal basis for data processing: article 6(1)(a) or 6(1)(f) of the
  GDPR;

Purpose: Pursuit of the legitimate interests of the Controller, which is to pursue claims and defend against claims related to its business activities. Retention period of personal data: the period necessary to pursue claims and defend against claims, taking into account the limitation periods specified in generally applicable laws, including the Civil Code. Legal basis for data processing: Article 6(1)(f) of the GDPR.

5. Information for persons designated as contacts in agreements to which Plum Sp. z o.o. is a party.

• Purpose: contact regarding matters covered by the concluded agreement, exchange of enquiries and responses, mutual information sharing between the parties to the agreement, reporting of any irregularities. Retention period of personal data: the period
  of performance of the agreement, the Retention period of accounting and bookkeeping documentation required by law, and until the expiry of the limitation period for claims in accordance with the Civil Code. Legal basis for data processing: article 6(1)(f) of the GDPR – the legitimate interest of the Controller, which is contact or investigation and defence against claims.

6. Information for visitors to the PLUM Sp. z o.o. registered office.
If you visit the Controller’s headquarters in person (Wspólna 19, Ignatki), the Controller may process your personal data (name, surname, image, vehicle registration number) as
part of its records of persons and vehicles entering and leaving the premises and the installed video surveillance system, for the purpose, on the legal basis and for the period
indicated below.

• Purpose: to ensure access control to the Controller locations. Retention period of personal data: until the expiry of the limitation period for claims. Legal basis for data processing: article 6(1)(f) of the GDPR, where the Controller ‘s legitimate interest is to ensure access control.
• Purpose: to ensure the safety of employees or the protection of property or production control or the confidentiality of information. Retention period of personal data: not exceeding 3 months from the date of recording, unless the image recordings constitute
  evidence in proceedings conducted under the law or the Controller has become aware that they may constitute evidence in proceedings, in which case the period is extended until the proceedings are legally concluded. Legal basis for data processing: article 6(1)(f)
  of the GDPR, where the Controller’s legitimate interest is to ensure the safety of persons and property.

7. Information for candidates in recruitment processes

If you participate in recruitment processes conducted by the Controller and send the Controller your CV and related documents, the Controller may process your personal
data for the purpose, on the legal basis and for the period indicated below.

• Purpose: Conducting ongoing recruitment, contacting candidates, maintaining andarchiving documentation. Retention period of personal data: until the end of the current recruitment process announced by PLUM sp. z o.o. Legal basis for data processing: article 6(1)(a) of the GDPR (candidate’s consent), article 6(1)(b) of the GDPR (necessity to take action prior to entering into a contract), article 221 § 1 of the Labour Code.
• Purpose: conducting recruitment in the future, remaining in the candidate database. Retention period of personal data: until consent is withdrawn, no longer than 2 years.
  Legal basis for data processing: article 6(1)(a) of the GDPR (candidate’s consent).
• Purpose: Spontaneous application via the website www.plum.pl. Retention period of personal data: until consent is withdrawn, no longer than 2 years. Legal basis for data processing: article 6(1)(a) of the GDPR (candidate’s consent).

8. Information for persons interested in internships

• Purpose: Applying for an internship via the website www.plum.pl or sending an application for an internship, CV and related documents to the Controller. Retention
  period of personal data: until consent is withdrawn, no longer than 2 years or until the end of the contract and the archiving period or the limitation period for claims. Legal
  basis for data processing: article 6(1)(a) of the GDPR (consent of the candidate), article 6(1)(b) of the GDPR (necessity to take action prior to entering into a contract, then to enter into and perform the contract), article 6(1)(c) of the GDPR (obligation of the controller in relation to archiving).

9. Information for persons whose data are processed in connection with a warranty, complaint or service repair order
If the Controller:

• processes a warranty, complaint or service repair order on your behalf,
• processes a warranty, complaint or service repair order on behalf of the entity you represent or act for,
• is considering a warranty, complaint or service repair order on behalf of an entity performing activities or services for you that require the Controller to process your data then the Controller processes your data for the purpose, on the legal basis and for the period indicated below.
• Purpose: Consideration and execution of warranty, complaint or service repair orders, which constitutes the performance of the concluded contract, as well as the legitimate interest of the Controller. Retention period of personal data: the period of consideration and execution of the warranty or service repair order, or no longer than until an effective objection is lodged. Legal basis for data processing: article 6(1)(b) of the GDPR (applies to persons whose data is processed under a contract concluded with the Controller), and/or article 6(1)(f) of the GDPR (applies to persons acting on behalf of the entity
  submitting the order or persons for whom the person submitting the order performs service activities);
• Purpose: Fulfilment by the ADO of its obligations under the law, in particular tax and accounting regulations. Retention period of personal data: the period required by
  relevant legal provisions regarding the storage of accounting and tax documentation.
  Legal basis for data processing: article 6(1)(c) of the GDPR in conjunction with other
  specific provisions, including the Accounting Act;
• Purpose: Pursuing claims and defending against claims arising from business activities, which constitutes a legitimate interest in data processing by the Controller. Retention period of personal data: the limitation period for claims under the law, including the Civil
  Code. Legal basis for data processing: article 6(1)(f) of the GDPR;
• Purpose: Recording telephone reports of faults in order to facilitate remote customer support, based on information about previous repairs. Retention period of personal
  data: the period necessary to achieve the purpose for which the personal data was collected, no longer than until an effective objection to data processing is lodged. Legal basis for data processing: article 6(1)(f) of the GDPR;
• Purpose: Direct marketing activities for own products and services, which constitutes a legitimate interest of the Controller, sending commercial information by electronic
  means with consent. Retention period of personal data: until the end of cooperation with the data subject, withdrawal of consent or until an effective objection to data processing for the specified purpose is lodged, whichever occurs first. Legal basis for data processing: article 6(1)(f) of the GDPR, article 6(1)(a) of the GDPR.

10. Information intended for representatives of customers/contractors/potential customers or contractors/entities submitting orders

If you are a representative of a customer/contractor/potential customer or contractor/entity placing an order, e.g. you act as a designated contact person or a person authorised to perform specific activities on behalf of the above-mentioned
entities, including activities resulting from a contract concluded by the customer/contractor with the Controller, then the Controller processes your data for the purpose, on the legal basis and for the period indicated below.

Offering stage:

• Purpose: Presentation by the Controller of its offer to the entity on behalf of or for which you act, or reviewing the offer of the entity on behalf of or for which you act, which also constitutes a legitimate interest of the Controller. Retention period of personal data: the period necessary to conduct correspondence/discussions related to the offer, but no longer than until the consent is withdrawn (in the case of data processing based on consent) or an effective objection is raised (in the case of data processing based on a legitimate interest). Legal basis for data processing: article 6(1)(a) and (f) of the GDPR.

Contract stage:

• Purpose: Performance of a contract concluded by the Controller with the entity on whose behalf or for whose benefit you act, or taking action prior to its conclusion at the request of the aforementioned entity, which constitutes a legitimate interest of the Controller or the entity on whose behalf you act. Retention period of personal data: the term of the agreement during which you act on behalf of or for the benefit of the entity that
  has concluded an agreement with the Controller. Legal basis for data processing: article 6(1)(f) of the GDPR;
• Purpose: Fulfilment by the Controller of its obligations under the law, in particular tax and accounting regulations. Retention period of personal data: the period required by the relevant legal provisions regarding the storage of accounting and tax documentation. Legal basis for data processing: article 6(1)(c) of the GDPR in conjunction with other specific provisions, including the Accounting Act;
• Purpose: Pursuing claims and defending against claims arising from business activities, which constitutes a legitimate interest in data processing by the Controller. Retention period of personal data: the limitation period for claims under the law, including the Civil Code. Legal basis for data processing: article 6(1)(f) of the GDPR;
• Purpose: Direct marketing of own products and services, which constitutes a legitimate interest of the Controller. Retention period of personal data: until the end of cooperation with the data subject or until an effective objection to the processing of data for the
  specified purpose is lodged, whichever occurs first. Legal basis for data processing: article 6(1)(f) of the GDPR.

11. Information for persons contacting the Controller by telephone, e-mail or contact forms available on the Controller websites

If you contact the Controller or persons acting on behalf of the Controller by telephone, e-mail or contact forms available on the Controller’s websites, the Controller will process
your data for the purpose, on the legal basis and for the period indicated below.

• Purpose: Contact in connection with an enquiry/request submitted by telephone, e-mail or contact form. Retention period of personal data: the period necessary to
  conduct correspondence/conversations related to the enquiry/request, but no longer than until the withdrawal of consent or the submission of an effective objection to the processing of data for this purpose, or the period necessary to perform activities related to the performance of the contract or to a request prior to the conclusion of the contract. Legal basis for data processing: article 6(1)(a) of the GDPR (consent), article 6(1)(b) of the
  GDPR (contract) or article 6(1)(f) of the GDPR (legitimate interest);
• Purpose: Pursuing claims and defending against claims arising from business activities, which constitutes a legitimate interest in data processing by the Controller. Retention period of personal data: the period necessary to pursue claims and defend against claims, taking into account the limitation periods specified in generally applicable laws, including the Civil Code. Legal basis for data processing: article 6(1)(f) of the GDPR.

12. Information for persons subject to marketing activities
If you are a person subject to marketing activities by the Controller, the Controller processes your data for the purpose, on the legal basis and for the period indicated below.

• Purpose: Conducting marketing activities related to the operations of Plum sp. z o.o., including establishing business relationships, sending offers, information about goods, services, promotions, including offers and information adjusted to the recipient’s needs
  – within the scope of the legitimate interest of the Controller, which is the marketing of products and services, or your consent. Retention period of personal data: the period necessary to achieve the purpose, but no longer than until you object to the processing of
  personal data for this purpose or, if you have given your marketing consent, until you withdraw your consent. Legal basis for data processing: article 6(1)(f) of the GDPR and/or article 6(1)(a) of the GDPR, article 398 of the Electronic Communications Law.
• Purpose: Conducting marketing activities involving profiling (creating preference profiles) aimed at adapting the services offered by the Controller to your needs, which
  constitutes the Controller ‘s legitimate interest in continuously improving the quality of its services. Retention period of personal data: the period necessary to achieve the purpose, but no longer than until you object to the processing of personal data for this purpose. Legal basis for data processing: Article 6(1)(f) of the GDPR.

In most cases, the Controller obtains your personal data directly from you. In certain situations, the Controller may obtain your data:
– from the entity on behalf of or for which you act (this applies in particular to employees/associates of the Controller’s contractors/customers); the data provided most often include your first name, surname, job title, e-mail address and telephone number;
– from the entity from which you purchased a device with built-in PLUM products or which provides maintenance services to you – the data provided include: first name, surname, address, telephone number, email address;
– from the party to the contract concluded with Plum Sp. z o.o. for contact in matters related to the performance of the contract – the data transferred include: first name, surname, address, telephone number, email address;
– from publicly available sources (e.g. websites, Central Register and Information on Business Activity); in such cases, the Controller collects and processes personal data in the form of first name, surname, company name and address, telephone number, email address, job title, tax identification number

• Customers/potential customers
  Providing your data is voluntary, but it is necessary for the Controller to present an offer,process your enquiry, and conclude and perform a contract. Refusal to provide data may result in the Controller being unable to present an offer, conclude a contract, and perform it.
• Contractors, suppliers/potential contractors, suppliers
  Providing your data is voluntary, but it is necessary for the Controller to present offers and conclude and perform a contract. Refusal to provide data may result in the Controller being unable to review the offer and conclude and perform the contract.
• Persons indicated as contacts in contracts concluded by Plum Sp. z o.o. Providing your data is voluntary, but it is necessary to maintain contact in matters relating
  to contracts to which Plum Sp. z o.o. is a party.
• Persons visiting the registered office of Plum Sp. z o.o.
  Providing your data is voluntary, but it is necessary to visit the Controller’s headquarters. Refusal to provide data may result in the inability to visit the Controller’s headquarters for security reasons.
• Recruitment candidates
  Providing your data is voluntary, but it is necessary to participate in the recruitment process and future recruitment processes conducted by the Controller. Refusal to provide data may result in the Controller being unable to review your application and conduct subsequent stages of recruitment or recruitment in the future.
• Persons interested in internships
  Providing your data is voluntary, but it is necessary to apply for an internship and possibly conclude a contract later. Refusal to provide data may result in the inability to consider your application and organise an internship by the Controller.
• Persons whose data is processed in connection with a warranty repair, complaint or service order
  If you provide your data directly to the Controller, it is voluntary, but necessary for the order to be considered. Refusal to provide your data (if necessary) will result in the order not being considered.
• Representatives of a contractor/customer/potential customer or contractor
  If you provide personal data directly to the Controller, it is voluntary, but necessary for the Controller to present an offer, reviewing the offer, and perform a contract on behalf of the entity you represent. Failure to provide such data will make it impossible or difficult to perform these activities.
• Persons contacting the Controller by telephone, e-mail or contact form
  Providing the data necessary to respond to your request/question is a prerequisite for receiving a response. Failure to provide the data will result in the inability to respond to your request/question.
• Persons to whom marketing activities are directed
  Providing your data is voluntary, but necessary in order to provide you with commercial and marketing information about the Controller’s activities. Refusal to provide data will result in the inability to provide you with commercial and marketing information

Depending on the specific case, access to your personal data may be granted to:

• the Controller’s employees/associates authorised to process personal data on behalf of the Controller;
• entities entrusted by the Controller with the processing of personal data, including:
• technical and organisational service providers (in particular ICT and maintenance service providers, IT system providers);
• entities providing postal and courier services;
• providers of legal advisory and financial services, including in the case of pursuing claims related to the business activity conducted by Plum Sp. z o.o. and defending against such claims;
• other entities/persons/authorities within the scope and on the terms specified by law

with the proviso that the transfer/disclosure of your data to the above-mentioned entities is carried out in accordance with applicable law and in compliance with the rules related to their security. Your personal data will not be transferred to other entities for commercial purposes without your consent.

Any transfers of personal data to third countries may be dictated by the need for ADO to use new technologies in the conduct of its business (e.g. ERP systems) or to establish and implement cooperation with foreign contractors. Personal data may be transferred to third countries if justified by organisational reasons (e.g. cloud services, contacts with foreign contractors) on the basis of consent, legitimate interest or relevant agreements
containing mandatory contractual clauses in this regard. We take special care to ensure the security of data processed in this way.

Plum Sp. z o.o. makes every effort to respect the rights of data subjects guaranteed by the provisions of the GDPR and specific regulations. In connection with the processing of
personal data by Plum Sp. z o.o., unless restricted by specific regulations, you may be entitled, depending on the specific case, to:

• the right to information about the processing of personal data (articles 12-14 of the GDPR);
• the right to access your personal data (article 15 of the GDPR);
• the right to rectify your personal data (article 16 of the GDPR);
• the right to request the erasure of data in the cases specified in article 17(1), subject to the exceptions specified in article 17(3) of the GDPR and specific provisions;
• the right to request the restriction of data processing in the cases specified in article 18 of the GDPR;
• the right to data portability in the cases specified in article 20 of the GDPR;
• the right to withdraw consent: if the Controller processes your personal data on the basis of consent, you may withdraw it at any time without affecting the validity of the processing that was carried out on the basis of consent before its withdrawal (article 7 of the GDPR);
• the right to object to data processing may apply if the basis for data processing by the Controller is article 6(1)(f) of the GDPR – the legitimate interest of the controller (article 21 of the GDPR):
• you also have the right to lodge a complaint with the supervisory authority responsible for personal data protection (the President of the Personal Data Protection
  Office in Warsaw) if Plum Sp. z o.o. violates the provisions on personal data protection when processing your personal data.

If you wish to exercise any of these rights, Plum Sp. z o.o. can be contacted:

• by e-mail: plum@plum.pl
• by post: Wspólna 19, Ignatki, 16-001 Kleosin.

No automated decisions (decisions without human involvement) will be made regarding your personal data.

The security of personal data processed in various processes carried out by Plum Sp. z o.o. is one of our priorities. Plum Sp. z o.o. takes the utmost care to comply with the requirements set out in law and applies appropriate technical and organisational measures to ensure that your personal data is secure, including protecting personal data against unauthorised access, loss or destruction. In order to ensure the security of your personal data, Plum Sp. z o.o. has implemented appropriate personal, organisational, technical (IT) and physical security measures.

This version of the Privacy Policy is effective from 29th September,  2025  Plum Sp. z o.o. reserves the right to make changes to the Privacy Policy.

PLUM Sp. z o.o., with its registered office in Ignatki, has a Facebook profile to promote its services. Users can communicate and post content in the comments on the PLUM Sp. z o.o. profile, including content containing personal data. PLUM Sp. z o.o. is not responsible for the content posted
by profile users, nor do we have any influence on how users’ personal data is processed by Facebook. For more information on the purpose and scope of data processing by Facebook, please refer to Facebook’s privacy policy.

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), we hereby inform you that:

1. The controller of your personal data is PLUM Spółka z ograniczoną odpowiedzialnością, Tax Identification Number (NIP): 9661427390, National Business Registry Number
Facebook klauzula informacyjna_pl, en wyd. 1 z 2025-09-15
(REGON): 050878784, National Court Register Number (KRS): 0000153696. The Controller’s registered office is located in Ignatki, at Wspólna 19, 16-001 Kleosin. You can contact the Controller by e-mail at: plum@plum.pl, by post at the address of the registered office, or in person.
2. Your personal data provided on your Facebook profile is processed for the purpose of electronic communication with Facebook users and sending information promoting the
Controller’s activities.
3. By posting content on the Controller’s Facebook profile, you give consent to the processing of your personal data (article 6(1)(a) of the GDPR); the operation of the channel is related to the Controller’s activities and constitutes a legitimate legal interest
of the Controller (article 6(1)(f) of the GDPR). The basis for processing personal data may also be consent pursuant to article 398 of the Electronic Communications Law.
4. Access to the data may be granted to other Facebook users, authorised employees and associates of the Controller, service providers, entities processing data on behalf of the
Controller, as well as other entities/authorities on the basis of legal provisions.
5. Personal data will not be transferred by the Controller to a third country, but access to the data may be in accordance with Facebook’s terms and conditions.
6. Personal data will be processed:
a) until consent to data processing is withdrawn, which must be communicated to the Controller (plum@plum.pl),
b) for the period during which the Controller uses Facebook as a promotional channel,
c) for the period of limitation of claims specified in the provisions of law – in order to pursue claims and defend against possible claims related to the Controller’s activities,
which constitutes the Controller’s legitimate legal interest,
d) for periods in accordance with Facebook’s terms and conditions.
7. You may have the right to request access to your personal data and the right to rectify it (subject to Facebook’s terms and conditions). You may have the right to request their
removal from the Controller ‘s resources (subject to Facebook’s terms and conditions). In cases specified by law, you have the right to request the restriction of data processing, the right to transfer data, and the right to object to data processing.
8. You have the right to lodge a complaint with the Personal Data Protection Office.
9. Providing your personal data is voluntary.
10. Personal data will not be used for automated decision-making.

PLUM Sp. z o.o., with its registered office in Ignatki, has a LinkedIn profile to promote its services. Users can communicate and post content in the comments on the PLUM Sp. z o.o. profile, including content containing personal data. PLUM Sp. z o.o. is not responsible for the content posted
by profile users, nor do we have any influence on how users’ personal data is processed by LinkedIn.
For more information on the purpose and scope of data processing by LinkedIn, please refer to LinkedIn’s privacy policy (https://pl.linkedin.com/legal/privacy-policy?trk=d_org_guest_company_overview_footer-privacy-policy).
Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), we hereby inform you that:

1. The controller of your personal data is PLUM Spółka z ograniczoną odpowiedzialnością, Tax Identification Number (NIP): 9661427390, National Business Registry Number
LinkedIn klauzula informacyjna_pl, en wyd. 1 z 2025-09-15
(REGON): 050878784, National Court Register Number (KRS): 0000153696. The Controller’s registered office is located in Ignatki, at Wspólna 19, 16-001 Kleosin. You can contact the Controller by e-mail at: plum@plum.pl, by post at the address of the registered office, or in person.
2. Your personal data provided on your LinkedIn profile is processed for the purpose of electronic communication with LinkedIn users and sending information promoting the Controller’s activities.
3. By posting content on the Controller’s LinkedIn profile, you give consent to the processing of your personal data (article 6(1)(a) of the GDPR); the operation of the channel is related to the Controller’s activities and constitutes a legitimate legal interest
of the Controller (article 6(1)(f) of the GDPR). The basis for processing personal data may also be consent pursuant to article 398 of the Electronic Communications Law.
4. Access to the data may be granted to other LinkedIn users, authorised employees and associates of the Controller, service providers, entities processing data on behalf of the Controller, as well as other entities/authorities on the basis of legal provisions.
5. Personal data will not be transferred by the Controller to a third country, but access to the data may be in accordance with LinkedIn’s terms and conditions.
6. Personal data will be processed:
a) until consent to data processing is withdrawn, which must be communicated to the Controller (plum@plum.pl),
b) for the period during which the Controller uses LinkedIn as a promotional channel,
c) for the period of limitation of claims specified in the provisions of law – in order to pursue claims and defend against possible claims related to the Controller’s activities,
which constitutes the Controller’s legitimate legal interest,
d) for periods in accordance with LinkedIn ‘s terms and conditions.
7. You may have the right to request access to your personal data and the right to rectify it (subject to LinkedIn’s terms and conditions). You may have the right to request their
removal from the Controller’s resources (subject to LinkedIn’s terms and conditions). In cases specified by law, you have the right to request the restriction of data processing, the right to transfer data, and the right to object to data processing.
8. You have the right to lodge a complaint with the Personal Data Protection Office.
9. Providing your personal data is voluntary.
10. Personal data will not be used for automated decision-making.

PLUM Sp. z o.o., with its registered office in Ignatki, has a YouTube channel to promote its services. Users can post content in the comments on the PLUM Sp. z o.o. channel, including content containing personal data. PLUM Sp. z o.o. is not responsible for the content posted by channel users, nor does it have any influence on how users’ personal data is processed by YouTube. For more information on the purpose and scope of data processing by YouTube, please refer to YouTube’s
privacy policy (https://www.youtube.com/intl/ALL_pl/howyoutubeworks/user-settings/privacy/).

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GeneralData Protection Regulation, GDPR), we hereby inform you that:

1. The controller of your personal data is PLUM Spółka z ograniczoną odpowiedzialnością, Tax Identification Number (NIP): 9661427390, National Business Registry Number
(REGON): 050878784, National Court Register Number (KRS): 0000153696. The Controller’s registered office is located in Ignatki, at Wspólna 19, 16-001 Kleosin. You can contact the Controller by e-mail at: plum@plum.pl, by post at the address of the registered office, or in person.
2. Your personal data provided on YouTube is processed for the purpose of running a YouTube channel promoting the Controller’s activities. YouTube klauzula informacyjna_pl, en wyd. 1 z 2025-09-15
3. By posting content on the Controller’s YouTube channel, you give consent to the processing of your personal data (article 6(1)(a) of the GDPR); the operation of the channel is related to the Controller’s activities and constitutes a legitimate legal interest
of the Controller (article 6(1)(f) of the GDPR).
4. Access to the data may be granted to other YouTube users, authorised employees and
associates of the Controller, service providers, entities processing data on behalf of the Controller, as well as other entities/authorities on the basis of legal provisions.
5. Personal data will not be transferred by the Controller to a third country, but access to the data may be in accordance with YouTube’s terms and conditions.
6. Personal data will be processed:
a) until consent to data processing is withdrawn, which must be communicated to the Controller (plum@plum.pl),
b) for the period during which the Controller uses YouTube as a promotional channel,
c) for the period of limitation of claims specified in the provisions of law – in order to pursue claims and defend against possible claims related to the Controller’s activities,
which constitutes the Controller’s legitimate legal interest,
d) for periods in accordance with YouTube’s terms and conditions.
7. You may have the right to request access to your personal data and the right to rectify it
(subject to YouTube’s terms and conditions). You may have the right to request their removal from the Controller ‘s resources (subject to YouTube’s terms and conditions). In
cases specified by law, you have the right to request the restriction of data processing, the right to transfer data, and the right to object to data processing.
8. You have the right to lodge a complaint with the Personal Data Protection Office.
9. Providing your personal data is voluntary.
10. Personal data will not be used for automated decision-making