MAIN TERMS OF THE JOINT CONTROLLERSHIP AGREEMENT

We hereby inform that an agreement on joint controllership of personal data has been concluded between:

1. Electropoli Poland Sp. z o.o., ul. Grażyńskiego 141, 43-300 Bielsko-Biała, Poland, Company identification number: 330126145, VAT number: PL 547 187 52 49
2. Electropoli France, Single-member limited liability company (SARL unipersonnelle), Registered office: 4-5 avenue Saint Martin, 50540 Isigny-le-Buat, France, Registered with the Trade and Companies Register of Coutances under number: 420 454 175, VAT number: FR 48 420 454 175
3. Electro-Recherche, Limited liability company (SARL), Registered office: 4-5 avenue Saint Martin, 50540 Isigny-le-Buat, France, Registered with the Trade and Companies Register of Coutances under number: 380 861 617, VAT number: FR 38 380 861 617
4. Electropoli SAS, Simplified joint-stock company (SAS), Registered office: 4-5 rue Saint Martin, 50540 Isigny-le-Buat, France, Registered with the Trade and Companies Register of Coutances under number: 389 207 077, VAT number: FR 39 389 207 077, APE code: 7010Z
5. Electropoli Czech Republic s.r.o., Registered office: Budovatelů 482, 53843 Třemošnice, Czech Republic, Company identification number: 620 63 685, VAT number: CZ 62063685

A Joint Controllership Agreement for the processing of personal data has been concluded for the purpose of operating a shared global website www.electropoli.com, coordinated sales of Electropoli Group products, and joint recruitment processes.

The Companies jointly declare that each of them may have access, on a need-to-know basis and in accordance with the principle of data minimization, to the data collected for the purposes of:

1. verification of persons visiting the website electropoli.com (the scope of data is indicated in the Privacy Policy) and ensuring the cybersecurity of the said website;
2. servicing potential customers (including first names, last names, registration details, e-mail addresses, telephone/fax numbers, and logins) of a given Company, processed in connection with global sales, after-sales services, or the distribution/shipment of Electropoli Group products;
3. recruitment processes for global positions or directly for a specific Company within the Group (details are available in the Privacy Policy for Recruitment Processes).

At the same time, the Group informs that, in accordance with Recital 37 of the GDPR, Electropoli SAS is the entity exercising control over the other companies within the Electropoli Group.

Furthermore, taking into account Recital 48 of the GDPR, controllers that are part of a group of undertakings (within the meaning of Article 4(19) GDPR) have a legitimate interest in transmitting personal data within the group of undertakings for internal administrative purposes, including the processing of personal data of customers or employees.

In order to properly carry out the processing of personal data referred to above, each Company undertakes to:

1. a) comply with the principles of personal data processing: lawfulness, transparency, accuracy, data minimization, storage limitation, and ensuring confidentiality and integrity, in particular with respect to Article 5 GDPR;
2. b) ensure that personal data shared with other Companies have been obtained lawfully on the basis of a legal basis specified in Articles 5, 6 and/or 9 GDPR;
3. c) fulfil information obligations towards data subjects, including informing them about the sharing of data with other Companies and obtaining appropriate consents, in particular for marketing activities;
4. d) respect and implement the rights of data subjects with regard to the personal data for which the specific Company acts as controller, as set out in Articles 12–22 GDPR;
5. e) ensure proper security of personal data shared and obtained under this agreement, in particular by limiting access to such data to authorized persons only;
6. f) grant access rights to personal data only to employees who have committed to maintaining confidentiality;
7. g) delete personal data whose processing period has expired and for which the given Company acts as controller;
8. h) comply with other obligations arising from personal data protection regulations.

Any requests arising from personal data protection regulations concerning data collected through the service subscription form should be addressed to the Company corresponding to your place of residence or to Electropoli SAS.

Important: Contact details for exercising your rights are available in the Privacy Policy under the section GENERAL PROVISIONS.