PRIVACY POLICY of BBHOME SP. Z OO SP. K.
- PRINCIPLES OF PERSONAL DATA PROTECTION -
In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council
of 27 April 2016 on the protection of individuals with regard to the processing of personal data
and on the free movement of such data, and repealing Directive 95/46 / EC (General
on data protection, hereinafter referred to as "GDPR"), we would like to inform you about the rules of processing your personal data and about your rights related to it.
In this Privacy Policy, users can find all important information regarding our use of the personal data of our customers and users, regardless of the channel or medium (online or in person) used to interact with us and offered by BBHome sp. Z oo sp.k.
BBHome sp. Z oo sp.k. it will regularly review this Privacy Policy and if it is necessary due to, among others. to new legal regulations, it will update it accordingly.
-
WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA?
The administrator of your personal data is BBHome limited liability company limited partnership with headquarters at ul. Nasienna 9, 02-241 Warsaw, entered into the register of entrepreneurs of the National Court Register under the number 0000596176, NIP: 9512404053, e-mail address: rodo@bbhome.pl (hereinafter: "Administrator");
-
FOR WHAT PURPOSE, ON WHICH BASIS AND FOR WHICH PERIOD THE ADMINISTRATOR PROCESSES YOUR PERSONAL DATA?
-
The administrator collects and processes personal data to the extent that it is necessary
to achieve the purpose for which they were collected. -
The administrator processes your data for the following purpose, on the indicated basis and for the specified period:
PURPOSE OF PROCESSING YOUR DATA |
LEGAL BASIS FOR DATA PROCESSING |
PERIOD OF PROCESSING YOUR DATA |
|
The provision of art. 6 sec. 1 lit. b GDPR |
We will process your data for as long as you maintain the status of a registered user (i.e. until you decide to deregister) |
|
The provision of art. 6 sec. 1 lit. b GDPR The provision of art. 6 sec. 1 lit. f GDPR The provision of art. 6 sec. 1 lit. c GDPR When you contact us, especially for event management purposes We believe we have legitimate interest to handle requests and inquiries formulated by you through various available means of contact. In our understanding, the processing of this data is beneficial for you because of the possibility of providing appropriate service and the possibility of answering your questions. If your question concerns the exercise of the rights that we inform about below or a complaint about our products or services, what entitles us to process your data is our requirement to comply with our legal obligations. |
We will process your data for the time needed to manage the purchase of products or services purchased by you, including possible returns, complaints or complaints related to a specific product or service. In the case of a submitted inquiry - for the duration of the related correspondence exchange |
|
The provision of art. 6 sec. 1 lit. c GDPR |
The period of storage of these data until the obligations arising from their storage expire |
This type of data processing involves an analysis of the user's or customer profile to determine what his preferences are, and thus what products and services best suit his / her style, in order to send him relevant information (e.g. based on history purchases and user browsing preferences - ie, depending on the products they click on), we will suggest products that we believe may be of interest to you, and if you are a registered user, we will also provide you with a "cart recovery" feature. |
The provision of art. 6 sec. 1 lit. a and f GDPR consent given or legitimate interest in data processing by the Administrator (in the case of direct marketing) The legal basis for processing your data for marketing purposes is yours agreement In order to be able to offer you information tailored to your individual preferences, we believe that we have a legitimate interest to create your profile based on the information we have (such as your browsing preferences, likes or shopping history) and based on the personal data or language provided to us. The processing of this data is, in our opinion, beneficial for you as well, as it allows you to improve your experience and to access information in accordance with your preferences. |
The period necessary to achieve the goal, but no longer than until you object to the processing of personal data for this purpose or if you have given marketing consent - until this consent is withdrawn You can unsubscribe at any time for free |
|
The provision of art. 6 sec. 1 lit. c GDPR in connection with art. 221 Of the Labor Code, Art. - data processing is also necessary to conclude a contract - the basis for processing is therefore the provision of Art. 6 sec. 1 lit. b GDPR, and in the scope of data not required by law or extending the period of data processing - the basis for processing is your consent, i.e. the provision of art. 6 sec. 1 lit. a GDPR |
The period necessary to complete the ongoing recruitment process or longer if you have consented to it (then for the period indicated |
|
The provision of art. 6 sec. 1 lit. f GDPR legitimate interest in data processing by the Administrator |
The limitation period for claims resulting from legal provisions; |
|
The provision of art. 6 sec. 1 lit. c GDPR in connection with the provision of art. 74 sec. 2 of the Accounting Act, as well as other specific provisions in the field of accounting |
The period of storage of accounting and tax documentation resulting from legal provisions |
In addition to the fact that we will process your data for the time strictly necessary to achieve the appropriate purpose, we will then store it properly saved and protected for such a period of time as liability for their processing could arise, in accordance with the regulations in force at any time. After any actions are time-barred, we will proceed, depending on each case, to delete your personal data.
-
WHICH OF YOUR PERSONAL DATA DOES THE ADMINISTRATOR PROCESS?
Depending on the indicated purpose and the legal basis for collecting and processing personal data, as well
depending on the product, service or function that you want to use each time, we will need different data, which generally, depending on the situation, include the following information:
-
-
taxes identifying, including: name, surname, PESEL number, NIP number, date of birth;
-
taxes contactincluding, but not limited to: delivery address, telephone number, e-mail address, social network ID / nickname;
-
information financial and transactional (e.g. payment or credit card details, information on purchases, orders, returns, etc.);
-
data on connections, geolocation and web browsing data
-
information commercial (e.g. whether the user is subscribed to our Newsletter),
-
other data collected and processed for the conclusion and performance of contractsand related
rights with them, including but not limited to bank account numbers; -
data relating to your likes and preferences;
-
data on cookies;
-
Please note that if we ask you for personal data in order to grant access to any
of our functions or services, some of the boxes will be marked as mandatory, because they are data that we need to provide this service or to give you access to a specific function.
-
HOW DOES THE ADMINISTRATOR OBTAIN YOUR PERSONAL DATA?
As a rule, most of your personal data is provided to us by yourself. We can also receive your data from intermediary services when placing an order, auction services (which you use when placing an order
order with us).
-
WHAT ARE YOUR RIGHTS IN CONNECTION WITH US PROCESSING OF YOUR PERSONAL DATA?
You have the right to access your data, rectify it, request its removal, the right to obtain a copy of the data, the right to limit processing, the right to transfer data, as well as the right to object to the processing, withdraw consent at any time without affecting the lawfulness of the processing of which was made on the basis of consent prior to its withdrawal - where the processing takes place on the basis of art. 6 sec. 1 lit. a GDPR, i.e. on the basis of your consent, as well as the right to submit a complaint to the supervisory body (i.e. the President of the Office for Personal Data Protection), if your data is processed contrary to legal requirements.
If you would like to exercise your rights, please contact us as detailed in Item 6 below.
TYPE OF LAW |
EXPLANATION OF THE LAW |
THE RIGHT TO INFORMATION ON THE PROCESSING OF PERSONAL DATA |
The administrator provides - to the data subject, We remind you that if you are a registered user, you also have access to this information in the tab regarding your personal data. |
RIGHT TO OBTAIN DATA COPIES
|
The administrator provides - to the data subject, |
RIGHT TO CORRECT
|
The administrator is obliged to remove any possible inconsistencies or errors in the processed data and to supplement them if they are incomplete; Please note that if you are a registered user, you can also go to your personal data tab in your user account to change or update your personal data. In any case, please note that by actively sharing your personal information with us by any means, you represent that it is true and accurate, and that you undertake to notify us of any change in such information. Any loss or damage caused to the Administrator or any third party as a result of providing incorrect, untrue or incomplete information in the registration forms will remain your sole responsibility. Please note that you generally only need to provide us with your personal data and not with third parties. |
RIGHT TO DELETE DATA
|
the data subject may request the deletion of data the processing of which is no longer necessary to achieve any of the purposes for which it was collected or in the absence of a basis for data processing; |
RIGHT TO RESTRICTION OF PROCESSING
|
the data subject may request the Administrator to limit the processing of personal data of the data subject to their storage or performance of activities agreed with the data subject, if, in the opinion of the data subject, the Administrator has incorrect data or processes it unreasonably; |
RIGHT TO DATA TRANSFER
|
to the extent that the data is processed (i) in connection with the concluded contract or (ii) the consent given, the Administrator issues the data to the data subject |
THE RIGHT OF OBJECT TO DATA PROCESSING FOR DIRECT MARKETING |
the data subject may at any time object to the processing of data for the purpose of direct marketing. The data subject has no obligation to justify such objection. |
RIGHT OF OBJECTION TO OTHER PURPOSES OF DATA PROCESSING, TAKING INTO ACCOUNT SPECIFIC SITUATION
|
the data subject may at any time object to the processing of data based on the legitimate interest of the Administrator for a purpose other than marketing. The user should justify such an objection by indicating the specific situation of the data subject, who in the opinion of this person justifies the cessation of the processing subject to objection by the Administrator. |
RIGHT TO WITHDRAW CONSENT
|
in the event that personal data are processed on the basis of the consent expressed by the data subject, he may withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of the processing performed on the basis of consent. |
RIGHT TO COMPLAINT
|
where the processing is considered to take place |
-
HOW CAN YOU EXECUTE YOUR RIGHTS IN RELATION TO THE PROCESSING OF YOUR PERSONAL DATA BY US?
-
you can submit an application regarding the exercise of your rights:
-
via e-mail: rodo@bbhome.pl
-
by letter: BBHome limited liability company limited partnership, ul. Nasienna 9, 02-241 Warsaw, with the annotation "GDPR".
-
If the Administrator is not able to identify the person submitting the application - he will contact you
for additional information. -
You can submit the application in person or through an attorney-in-fact (due to data security, the Administrator encourages you to use a power of attorney certified by a notary public or an authorized professional attorney (attorney / legal advisor).
-
The reply to the application should be given within one month of its receipt.
If it is necessary to extend this period, the Administrator will inform you about the reasons for the delay. -
The answer is provided via traditional mail, unless the application was submitted by e-mail or an e-mail response was requested.
-
IS THE PROVISION OF YOUR PERSONAL DATA OBLIGATORY?
-
In some cases, providing personal data in the scope specified by us will be required and obligatory by us to enable the provision of services. This primarily applies to the execution of orders, other contracts or actions taken by us before concluding the contract, and other activities that require us to process your personal data in order to implement your right or request. This means that, as a rule, providing your data in the above scope is voluntary, however, failure to do so will result in the Administrator's inability to perform the above actions.
-
In other cases, especially regarding various types of marketing activities conducted by us, the provision of personal data or the processing of personal data provided for this purpose is voluntary, which means that refusal to provide it does not prevent the use of our services. You have the right to revoke the marketing consent given to the Administrator at any time by sending information about the revocation of consent to the address rodo@bbhome.pl or by traditional mail to the above address BBHome sp. z oo sp.k.
-
WHO WILL HAVE ACCESS TO YOUR DATA?
-
first of all, access to your personal data will be granted to persons operating within the Administrator's structures, i.e. members of the management body, our employees and associates, i.e. persons who have been authorized to process personal data in connection with the exercise of the rights granted to them and assigned tasks,
- On our websites, third parties place information in the form of cookies (so-called cookies) and other similar technologies on your end device (e.g. computer, smartphone) and gain access to them. They are our trusted partners with whom we constantly cooperate to adapt advertising on our and their websites to your needs and interests, as well as the services that we and our trusted partners provide. Entities from the Wirtualna Polska capital group are such a trusted partner. Detailed information on the processing of your data by Virtual Poland can be found in Wirtualna Polska's privacy policy. The partners who process your data in various ranges are also Google, PayU, Przelewy24, Stripe, Hotjar, which process your data for statistical and payment processing purposes (PayU, Przelewy24, Stripe).
- Your data will also be made available to our subcontractors, such as: shipping companies, companies executing payment orders and other entities with whom we cooperate in order to implement relationships that bind us with you, such as entities providing services to the Administrator, in particular: IT, accounting and financial, auditing, courier, legal, telecommunications, repair services under the guarantee or warranty, as well as - to the extent necessary - technology service providers, suppliers and partners
in the provision of logistics, transport and delivery services, providers of customer service-related services, suppliers and partners in the provision of services related to marketing and advertising, as well as subcontractors with the help of which the Administrator performs tasks as part of his business; -
Your data may also be made available to any entities authorized by the right to process personal data in connection with our activities (tax authorities, banks, etc.).
-
The administrator will not transfer your personal data to countries outside the European Economic Area and international organizations.
-
WILL WE HAVE A PROFILING / AUTOMATED DECISION-MAKING FOR YOU?
The administrator will not apply automated decision-making to you, however, he draws up your profile based on the information held (such as preferences regarding browsing websites, preferences or purchase history) and based on the personal data provided to him. The administrator does not make any decisions causing legal effects, including does not use any price modifications when profiling the offer in this way.