• Pl
  • En
  • De
  • Ru
  • Fr

Privacy policy

PRIVACY POLICY

We hereby inform you about the type, scope and purpose of processing personal data on our website in accordance with the General Data Protection Regulation (GDPR). With regard to personal data and/or their processing, we refer to art. 4 of the GDPR. Personal data is all data that has a personal relationship with the user, e.g. name, address, email address or user behavior.

 

In accordance with art. 4 of the GDPR:

The administrator of your personal data are entities from the BRAND DISTRIBUTION GROUP. Correspondence address: 18 Niepodległości Avenue, 02-653 Warsaw.

Learn about all our entities and contact rodo@bdgroup.eu

 

Data processing as part of our company’s core business

We process your personal data provided to us as part of existing contractual and pre-contractual relationships between us.

The scope, nature, purpose and necessity of processing depend on the respective basic contractual relationship. For this purpose, we store and process your data in the computer systems we use. The data we process includes all data provided by you to use the contractual or pre-contractual services required to process your request or the contract concluded between us.

 

In particular, the following data may be taken into consideration:

  • Name and address
  • Email address and phone number
  • Order details
  • Data for payment transactions

Processing is limited to the data that are necessary and useful in responding to requests and/or for the performance of the contract. The transfer of personal data to third parties only takes place when it is necessary for the purposes of providing the service or in the context of the organization of our business in order to process financial accounting and comply with legal obligations. In this case, only data that is necessary to perform the contract or perform financial accounting, as well as to comply with legal obligations, will only be provided to external service providers. We process it in accordance with your instructions or administrative provisions. Legal basis: Processing of personal data as well as transferring them to third parties takes place in accordance with art. 6 clause 1 lit. b) of the GDPR and serves as the performance of the contract between you and us. Otherwise, we transfer data to third parties only if there is a legal obligation, art. 6 clause 1 lit. c) of the GDPR or if there is a legitimate interest, art. 6 clause 1 lit. f) of the GDPR.

This is the case, for example, when it is necessary to pursue our claims. Deletion: deletion of data takes place as soon as the data is no longer required to fulfill the contractual or legal care obligations, as well as to fulfill any guarantees and comparable obligations. This does not affect your statutory retention obligations.

Data transmission to third countries

The adoption of the European General Data Protection Regulation (GDPR) has created a uniform basis for data protection in Europe. Therefore, your data will be processed mainly by the companies requested by the GDPR.

If the processing is carried out through the services of third parties outside the European Union or the European Economic Area, they must meet the special requirements set out in Article 44 and of the GDPR. This means that the processing takes place on the basis of special guarantees, such as an officially recognized level of data protection in the EU or compliance with officially recognized special contractual obligations, known as ‘standard contractual conditions’. In American companies, submission to the Privacy Shield, the EU-US data protection agreement, meets these requirements.

We use services to ensure our online presence of Internet service provider, whose server includes the website (hosting) and which makes our website available on the Internet. The Internet service provider processes contact details, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Legal basis: the Internet service provider processes the above mentioned data on our behalf, art. 28 of the GDPR. Data processing takes place on the basis of our legitimate interest when we make our internet offer available efficiently and securely, art. 6 clause 1 lit. f) of the GDPR.

If you use our website for informational purposes only, our Internet service provider will only collect personal data that the browser you use sends to your server. These are the following data:

  • IP address
  • date and time of access to our website
  • time zone difference in relation to Greenwich Mean Time (GMT)
  • access status (HTTP status)
  • amount of data
  • access system internet service provider
  • type of browser and its version
  • operating system
  • website thanks to which you are on our website
  • pages or subpages that you visit on our website.

Storage of this data along with other personal data does not take place.

The above data is stored as log files on the servers of our Internet service provider. This is necessary to be able to display the website on the used device, as well as ensure stability and security. We have a legitimate interest in data processing for the above purposes.

Legal basis: Data processing takes place on the basis of our legitimate interest when we make our internet offer available efficiently and securely, art. 6 clause 1 lit. f) of the GDPR. Duration: the above data regarding the provision of our website will be stored until consent to processing is withdrawn.

Cookies

Our site uses cookies. Cookies are small text files consisting of a sequence of digits and letters that are stored on the device.

Cookies do not carry viruses or launch programs. They are primarily used to share information between the device you are using and our website to make our website more user-friendly and more effective. The distinction should be made between temporary cookies and persistent cookies. Temporary cookies include in particular session cookies.

  • Session cookies: We use “cookies” to recognize multiple use of the offer by the same user (for example, if you log in to set your login status). When you visit our website again, these cookies provide information to automatically recognize you. The information obtained in this way serves to optimize our offers and facilitate access to our website.

If you close your browser or log out, session cookies will be deleted.

  • Persistent cookies: they are automatically deleted after a specified period, which may vary depending on the cookie. In your browser’s security settings, you can delete cookies at any time.
  • Third party cookies (third party cookies):

You can configure your browser settings to meet your needs, e.g. reject acceptance of third party cookies or all cookies. However, we would like to point out that you may not be able to use all of the features on this website. Read more about these cookies in the respective third party privacy policies.

Cookies are used to make our website more user-friendly. Some elements of our website require identification of the browser even after the website will stop being loaded.

In particular, these cookies may contain information about language settings or login details.

In addition, we use cookies on our website that enable analysis of your visit to our website. These cookies may in particular contain information about the search terms, the frequency of page views or the use of the functions of the website. These cookies allow us to understand how often and how the website and its functions are used. They are used to improve the quality and user-friendliness of our website, especially the content and functions. Thanks to this, we can constantly optimize our offer. The collected data will be pseudonymized by technical measures. Therefore, the assignment of data to you is not possible. The data will not be stored together with other personal data that concerns you.

We have a legitimate interest in data processing for the above purposes. The legal basis for this is Article 6 para. 1 para. 1 lit. f of the GDPR.

Because cookies are stored on your computer, you as a user also have full control over the use of cookies. You can use your browser’s security settings to determine if cookies are even stored. For example, you cannot accept cookies immediately or you can delete cookies only each time you close your browser.

For detailed information, refer to the browser manufacturer’s instructions or at www.aboutcookies.org or www.allaboutcookies.org

Contradiction and “opt-out”: If cookies are disabled on our website, you may not be able to fully use all of the website’s features.

 

Message validity/cancellation

We delete or block your personal data as soon as the storage purpose is achieved, unless further storage is required for evidence purposes or is contrary to legal storage requirements.

Any further storage will only take place if required by national or European legislations. Blocking or deleting data in this case, if the retention period provided for in the relevant provisions has expired, unless we need your data to perform the contract concluded between us or if it is necessary to assert or defend legal claims.

 

Information about the contact options that we provide

As long as you contact us via email, social media, telephone, fax, mail, our contact form or otherwise, and provide us with personal data such as name, phone number or email address or other information about yourself or your request, this data will be stored and processed for your request in our website. Legal basis: If you submit the application via our contact form, the legal basis for processing your data is Art. 6 clause 1 lit. a of the GDPR. If you submit the application in the context of contractual or pre-contractual relations, the legal basis for the processing of your data is Art. 6 clause 1 lit. b. of the GDPR. If your request does not fall into any of the above categories, our legitimate interest in the processing of your data is the appropriate response to your request, in your favor, art. 6 clause 1 lit. f of the GDPR. Deletion:

The personal data we collect will be deleted if it is no longer needed. We check the requirement every 2 years. You can also cancel the data processing at any time.

 

Existence of automated decision making

We do not use automatic decision making or profiling.

 

Contact via contact form/e-mail/mail

By contacting us via the contact form, email or mail, your data will be processed to process the contact request.

The legal basis for data processing is the consent of the user – Art. 6 of the GDPR.

The legal basis for the processing of data as part of a contact request or e-mail, letter or fax is Art. 6 of the GDPR. The responsible person has a legitimate interest in the processing and storage of data in order to be able to respond to user inquiries, protect evidence for reasons related to liability and,

if necessary, comply with statutory requirements for the storage of business letters. If the contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 of the GDPR.

We may store your data and contact requests in our customer relationship management system (“CRM System”) or a comparable system.

Deletion: Data will be deleted as soon as it is no longer needed for collection. In the case of personal data from the input form of the contact form and data sent by email, this occurs after the conversation with you.

The conversation ends when it can be concluded from the circumstances that the issue has been finally resolved. We remove requests from users who have an account or contract with us two years after the contract is terminated. In the case of a legal obligation to archive, deletion takes place after its expiration.

Withdrawal: you have the right to withdraw your consent to the processing of personal data at any time in accordance with Art.6 of the GDPR. If you contact us via email, you can object to the storage of personal data at any time.

 

Your rights under the GDPR

According to the GDPR, you have the following rights that you can claim at any time from entities of the BRAND DISTRIBUTION GROUP. Your rights under this privacy policy are as below:

Right to information: pursuant to Art. 15 of the GDPR, you can ask for confirmation if and what personal data we process. In addition, you can provide us with free information about the purposes of processing, the category of personal data, the category of recipients to whom your data has been revealed or the planned storage period, the right to rectify, delete, limit processing or the right to object, the right to appeal and the origin of their data if they have not been collected from us. You also have the right to know if your personal data has been transferred to a third country or international organization. If so, you have the right to be informed of the relevant guarantees related to the transfer.

Right to rectification: in accordance with Art. 16 of the GDPR, you can request the correction of incorrect, complete or incomplete personal data stored by us and your personal data.

Right to cancellation: pursuant to Art. 17 of the GDPR, you have the right to request the cancellation of your personal data stored by us, unless we need it to be processed for the following purposes: to fulfill a legal obligation, assert or defend legal claims, exercise the right to freedom of expression and information; or for public interest purposes referred to in art. 17 clause 3 lit. c) and d) of the GDPR.

Right to limitation: in accordance with Art. 18 of the GDPR, you have the right to request the limitation of the processing of your personal data, if the accuracy of the data is questioned by you for a period that allows us to verify the accuracy of your personal data, the processing of your data is unlawful, but you refuse to delete it instead, you request a limitation on their use. We no longer need your personal data for processing purposes, but you need this information to assert, exercise or defend your rights.

There has been presented an objection to the processing of your data in accordance with Art. 21 of the GDPR, but it is not yet certain whether the justified reasons, that you have justified despite the objection to further processing, outweigh your rights.

Right to information: if a user demand the right to rectify, cancel or limit data processing, we are obliged to all recipients who have been revealed personal data regarding the correction or deletion of data for which the Processing Notification has requested, unless this proves impossible or disproportionate. You have the right to be informed by us about these recipients.

Right to data transfer: pursuant to Art. 20 of the GDPR, you can request to receive the personal data you have provided to us in a structured, standard machine-readable format or to transfer it to another responsible person.

Right to cancellation: In accordance with Art. 77 of the GDPR, you have the right to make a complaint with the supervisory body. For this purpose, you can contact the supervisory body of your residence, work place or our company’s headquarters.

 

Withdrawal of consent

Pursuant to Art. 7 para. 3 of the GDPR, you have the right to withdraw your consent to the processing of your data at any time. The withdrawal you have declared does not change the legality of processing your personal data until further notice.

 

Right to objection:

You have the right, for reasons arising from your particular situation, to object to the processing of your personal data at any time which takes place on the basis of a balance of interests (Art. 6 para. 1 lit. f of the GDPR). This is especially important when data processing is not required to perform the contract. If you exercise your right to object, please explain why. We will no longer process your personal data, unless we can prove that valid legitimate reasons for data processing outweigh your interests and rights.

Notwithstanding the foregoing, you have the right to object to the processing of your personal data for advertising and data analysis purposes at any time.

Please direct your objection to the above mentioned contact address of the responsible person indicated on our website.

Presence on social media

We use social media profiles or fan pages to communicate with users who are associated and registered there, and to provide information about our products, offers and services. Providers from the USA are certified in accordance with the Privacy Shield and therefore they are required to comply with European data protection. When you use our profile on the appropriate network and access it, the appropriate privacy policies and conditions of use of the given network apply.

We process your information that you send to us via these networks to communicate with you and respond to those messages.

The legal basis for processing personal data is our legitimate interest in communicating with users and our external presentation for advertising in accordance with art. 6 clause 1 sentence 1 lit. f) of the GDPR. If you have agreed to the person responsible for the social network in the processing of your personal data, the legal basis is Art. 6 clause 1 para. 1 lit. a) and art. 7 of the GDPR.

The privacy policy, information options and options to rejection (withdrawal) of the relevant networks can be found here:

  • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) Privacy Policy: https://www.facebook.com/about/privacy/, Withdrawal: https: //www.facebook. com / settings? tab = ads I http://www.youronlinechoices.com

Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

  • Google+ (Google Ireland Limited, registration number: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) – Privacy policy: https://policies.google.com/privacy, Withdrawal: https://adssettings.google. com / authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
  • Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Privacy Policy: https://twitter.com/privacy, opt-out: https://twitter.com/personalization, Privacy Shield : https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
  • LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) – Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Cookie Policy and withdrawal: https: //www.linkedin. com / legal / cookie-policy, Privacy Shield of the LinkedIn Inc .: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
  • Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) – Privacy policy: help.instagram.com/519522125107875

 

Security measures

We also use the latest technical and organizational security measures to ensure compliance with data protection regulations and to protect data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties.

 

Update and change of the privacy policy

This privacy policy is currently in force since February 2021. Due to changes in legal or regulatory requirements, this Privacy Policy may need to be changed. We will inform you on our website of any change or update in our policy.