The purpose of this statement is to familiarize and reassure all our customers, suppliers, employees and other cooperating natural persons with the principles and rules that our company follows in the protection of personal data in accordance with the Regulation of the European Parliament and the Council (EU) No. 2016/679 of 27. 4. 2016 (hereinafter referred to as "GDPR"). This GDPR regulation entered into force on 25/05/2018.
Link source
According to Article 4(7) of the GDPR, Sunbelt Mechatronics administers personal data with a registered office at 1949 NE 164th Street N Miami Beach, FL 33162, United States.
(hereinafter: "administrator").
...
Personal Data Manager
Sunbelt Mechatronics [insert registered office address] email: [insert email address] Phone: [insert phone number]
...
The legal reason for processing personal data is to fulfill the contract between you and the controller pursuant to Article 6(1)(b) GDPR (hereinafter referred to as "Performance of the Contract").
...
We only process personal data in salaries and personnel administration, including sensitive personal data. We have secured explicit consent following GDPR principles for personal data such as employee photos for presentation on the company website.
We process the personal data of individuals mainly in the following areas:
Bookkeeping
Payroll and personnel administration
Business administration
Company website
...
The administrator stores personal data for the period necessary to fulfill rights and obligations arising from the contractual relationship and to pursue claims arising from these relationships (for 15 years from the termination of the contractual relationship).
After the retention period expires, the administrator will delete the personal data.
...
The recipients of personal data include:
The website operation service provider, [insert service provider name and details if applicable]
Delivery service providers (for proper contract performance)
Legal, accounting, and IT service providers (to ensure compliance with legal obligations)
The administrator does not intend to transfer personal data to a third country, international organization, or parties other than those mentioned above.
...
You have the right to:
Access your data
Update, correct, or change your data
Restrict the processing of your data
Object to the processing of your data
File a complaint with the Office for Personal Data Protection if you believe your data protection rights have been violated.
...
The administrator has taken all appropriate technical and organizational measures to secure personal data, including passwords, antivirus software, backups, and data storage access restrictions.
The administrator further declares that only authorized personnel have access to personal data.
...
By submitting an order via the designated email address, you confirm that you are familiar with and accept these personal data protection terms.
The administrator reserves the right to modify these terms. Any new version will be published on the company website.