Przedsiębiorstwo Handlowe „BRATPOL” Jerzy Bratkowski (hereinafter: P.H. BRATPOL), operating on the basis of ethical principles, respects the right to the protection of personal data of customers, employees and clients. Therefore, we want to present you the most important rules of protection of personal data applicable at P.H. BRATPOL.



Pursuant to Article 13 and Article 14 of the General Data Protection Regulation of 27 April 2016 (GDPR), we inform that your personal data is controlled by Przedsiębiorstwo Handlowe “BRATPOL” Jerzy Bratkowski with seat at ul. Jana z Kolna 24/26, 81-351 Gdynia.

Before commencing the operations of personal data processing, P.H. BRATPOL shall each time identify the purpose, the legal basis of the processing, and specify the data retention period. Your personal data are processed:

  • in order to perform an agreement that binds you with the Controller, or to perform operations necessary for its conclusion (Article 6 (1), point (b)),
  • due to legal requirements which must be adhered to by the Administrator (Article 6 (1) point (c)),
  • the processing is required for purposes resulting from legitimate interests pursued by the administrator (Article 6 (1) point (f)),
  • on the basis of your consent (Article 6 (1) point (a)).

Each time we do our best to inform you about  the purpose of processing personal data, legal basis for the processing, data retention period and all other information required by GDPR under the obligation to inform.

In case you have any questions or doubts as regards the scope of protection of your personal data, please contact us at the following email address:  [email protected] We will gladly provide you with more detailed information.




As part of its tasks, the Personal Data Controller cares about the protection of rights and freedoms of persons whose personal data are processed by P.H. BRATPOL. You can contact the Personal Data Controller on any matter relate to the protection of your personal data to the extent that such data are processed by the Controller.



You can send us your requests to exercise the rights you are entitled to. These rights focus especially on:

1)        Right of access to personal data,

2)        Right to rectification,

3)        Right to be forgotten and to erasure,

4)        Right to restrict the processing,

5)        Right to data portability,

6)        Right to object to further processing,

7)        Right to object to automated decision making, including profiling,

8)        Right to notify on personal data breach.



A request can be sent by mail, email, or submitted in person at the seat of the Company. We shall deal with your request forthwith. If your request is processed for longer than one month, you shall be notified about the date of response in a separate letter / notice. Such an extension can happen due to complexity of the request or the number of submitted requests.

If your request does not allow for unambiguous identification of sender or if it is unclear, within one month from the receipt we shall send you a request to complete the same.

If your request is submitted in electronic form, further communication shall be also conducted in that form, if possible. In other cases you will be notified about the way of addressing the request in a written form, by registered letter with acknowledgment of receipt.

The request shall be examined free of charge. However, if the request is unjustified or repeated often, the Controller may apply a reasonable charge including reasonable administrative costs connected with examining the request, communication and performing the requested operations, or may refuse to consider the request.



You can contact the data controller:

  • by electronic mail: [email protected],
  • in writing to the following address: Przedsiębiorstwo Handlowe „BRATPOL” Jerzy Bratkowski with seat at ul. Jana z Kolna 24/26, 81-351 Gdynia.



The personal data indicated in the above-mentioned request shall be processed for the purpose of examining the request. Their processing is required due to obligation of the Data Protection Controller to exercise the rights of data subjects indicated in the Regulation 2016/679 of the European Parliament and of the Council (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Your personal data shall be processed to verify your identity and examine the submitted request for exercise of rights. Your personal data shall be processed for a period necessary to examine the request and for a further period of 5 years, to protect from claims you are entitled to, or to pursue claims the Personal Data Controller is entitled to.


Your data can be also processed to:

  • perform the agreement concluded by the data subject, or undertake actions requested by the data subject, before concluding the agreement;
  • perform communication and information operations;
  • handle complaints;
  • provide security of the facilities at the disposal of P.H. BRATPOL, and are indispensable for purposes resulting from legitimate interests realized by the Controller (GDPR Article 6 (1) point (f)).


In the above cases, the data will be processed for the following periods, respectively:

  • The data will be erased immediately after completing the recruitment or in the event of employment – 50 years after the termination of the employment;
  • From termination of the agreement and 5 years after that period, for the purpose of securing any claims;
  • The consent validity period;
  • 2 years after the expiry of warranty or settling a complaint, registers for unlimited period of time;
  • a month.


Your personal data may be transferred to third parties under agreements for entrusting data processing signed with P.H. BRATPOL.

You have the right to access the contents of your data, the right to rectify, the right to erase, the right to restrict the processing, the right to portability and the right to object.

You also have the right to submit a complaint to the competent supervisory body for protection of personal data.

Your provision of personal data is voluntary, however, it is also a prerequisite to examine your request.