We hereby inform you about the type, scope and purpose of processing personal data on our website in accordance with the General Data Protection Regulation (GDPR). With regard to personal data and/or their processing, we refer to art. 4 of the GDPR. Personal data is all data that has a personal relationship with the user, e.g. name, address, email address or user behavior.
In accordance with art. 4 of the GDPR:
The administrator of your personal data is BRAND DISTRIBUTION Sp. z o.o. with its registered office in Białystok, at ul. St. Rocha 8, 15-879 Białystok entered into the Register of Entrepreneurs of the National Court Register by the District Court in Białystok, 12th Commercial Division of the National Court Register under KRS number: 0000628774, NIP: 5213748788, REGON: 365465202 together with the co-administrators. List of joint controllers:
- BRAND DISTRIBUTION COMPANY spółka z ograniczoną odpowiedzialnością spółka komandytowo-akcyjna z siedzibą w Białymstoku, przy ul. Św. Rocha 8, 15-879 Białystok, wpisaną do Rejestru Przedsiębiorców Krajowego Rejestru Sądowego przez Sąd Rejonowy w Białymstoku, XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod nr KRS: 0000452016, NIP: 9662088056, REGON: 200766380,
- BRAND DISTRIBUTION COMPANY Spółka z ograniczoną odpowiedzialnością z siedzibą w Warszawie, przy Al. Niepodległości 18, 02-653 Warszawa, wpisaną do Rejestru Przedsiębiorców Krajowego Rejestru Sądowego przez Sąd Rejonowy dla m.st. Warszawy w Warszawie, XIII Wydział Gospodarczy Krajowego Rejestru Sądowego pod nr KRS: 0000667304, NIP: 5213770931, REGON: 366744671,
- BRAND DISTRIBUTION COMPANY II Spółka z ograniczoną odpowiedzialnością spółka komandytowo-akcyjną z siedzibą w Warszawie, przy Al. Niepodległości 18, 02-653 Warszawa, wpisaną do Rejestru Przedsiębiorców Krajowego Rejestru Sądowego przez Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod nr KRS: 0000481031, NIP: 5423233783, REGON: 200813033,
- BRAND DISTRIBUTION INTERNATIONAL Spółka z ograniczoną odpowiedzialnością z siedzibą w Warszawie, przy Al. Niepodległości 18, 02-653 Warszawa, wpisaną do Rejestru Przedsiębiorców Krajowego Rejestru Sądowego przez Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod nr KRS: 0000480983, NIP: 5423233671, REGON: 200813027,
- BRAND DISTRIBUTION EUROPE Spółka z ograniczoną odpowiedzialnością z siedzibą w Warszawie, przy Al. Niepodległości 18, 02-653 Warszawa, wpisaną do Rejestru Przedsiębiorców Krajowego Rejestru Sądowego przez Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod nr KRS: 0000631199, NIP: 5423259038, REGON: 365117452,
- STAR SIRIUS Spółka z ograniczoną odpowiedzialnością z siedzibą w Warszawie, przy Al. Niepodległości 18, 02-653 Warszawa, wpisaną do Rejestru Przedsiębiorców Krajowego Rejestru Krajowego przez Sąd Rejonowy dla m.st. Warszawy w Warszawie, XIII Wydział Gospodarczy Krajowego Rejestru Sądowego pod nr KRS: 0000359119, NIP: 7010241499, REGON: 142450523,
- IREX Spółka z ograniczoną odpowiedzialnością spółka komandytową z siedzibą w Białymstoku, przy ul. Bitwy Białostockiej 7, 15-102 Białystok, wpisaną do Rejestru Przedsiębiorców Krajowego Rejestru Sądowego przez Sąd Rejonowy w Białymstoku, XII Wydział Gospodarczy Krajowego Rejestru Krajowego pod nr KRS: 0000411387, NIP: 5423223997, REGON: 200677877.
Contact regarding personal data:
If you have any questions regarding personal data or exercising your privacy rights, please contact the Personal Data Protection Inspector by email at email@example.com or at Aleja Niepodległości 18, 02-653 Warsaw.
Data processing as part of our company’s core business
We process your personal data provided to us as part of existing contractual and pre-contractual relationships between us.
The scope, nature, purpose and necessity of processing depend on the respective basic contractual relationship. For this purpose, we store and process your data in the computer systems we use. The data we process includes all data provided by you to use the contractual or pre-contractual services required to process your request or the contract concluded between us.
In particular, the following data may be taken into consideration:
- Name and address
- Email address and phone number
- Order details
- Data for payment transactions
Processing is limited to the data that are necessary and useful in responding to requests and/or for the performance of the contract. The transfer of personal data to third parties only takes place when it is necessary for the purposes of providing the service or in the context of the organization of our business in order to process financial accounting and comply with legal obligations. In this case, only data that is necessary to perform the contract or perform financial accounting, as well as to comply with legal obligations, will only be provided to external service providers. We process it in accordance with your instructions or administrative provisions. Legal basis: Processing of personal data as well as transferring them to third parties takes place in accordance with art. 6 clause 1 lit. b) of the GDPR and serves as the performance of the contract between you and us. Otherwise, we transfer data to third parties only if there is a legal obligation, art. 6 clause 1 lit. c) of the GDPR or if there is a legitimate interest, art. 6 clause 1 lit. f) of the GDPR.
This is the case, for example, when it is necessary to pursue our claims. Deletion: deletion of data takes place as soon as the data is no longer required to fulfill the contractual or legal care obligations, as well as to fulfill any guarantees and comparable obligations. This does not affect your statutory retention obligations.
Data transmission to third countries
The adoption of the European General Data Protection Regulation (GDPR) has created a uniform basis for data protection in Europe. Therefore, your data will be processed mainly by the companies requested by the GDPR.
If the processing is carried out through the services of third parties outside the European Union or the European Economic Area, they must meet the special requirements set out in Article 44 and of the GDPR. This means that the processing takes place on the basis of special guarantees, such as an officially recognized level of data protection in the EU or compliance with officially recognized special contractual obligations, known as ‘standard contractual conditions’. In American companies, submission to the Privacy Shield, the EU-US data protection agreement, meets these requirements.
We use services to ensure our online presence of Internet service provider, whose server includes the website (hosting) and which makes our website available on the Internet. The Internet service provider processes contact details, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Legal basis: the Internet service provider processes the above mentioned data on our behalf, art. 28 of the GDPR. Data processing takes place on the basis of our legitimate interest when we make our internet offer available efficiently and securely, art. 6 clause 1 lit. f) of the GDPR.
If you use our website for informational purposes only, our Internet service provider will only collect personal data that the browser you use sends to your server. These are the following data:
- IP address
- date and time of access to our website
- time zone difference in relation to Greenwich Mean Time (GMT)
- access status (HTTP status)
- amount of data
- access system internet service provider
- type of browser and its version
- operating system
- website thanks to which you are on our website
- pages or subpages that you visit on our website.
Storage of this data along with other personal data does not take place.
The above data is stored as log files on the servers of our Internet service provider. This is necessary to be able to display the website on the used device, as well as ensure stability and security. We have a legitimate interest in data processing for the above purposes.
Legal basis: Data processing takes place on the basis of our legitimate interest when we make our internet offer available efficiently and securely, art. 6 clause 1 lit. f) of the GDPR. Duration: the above data regarding the provision of our website will be stored until consent to processing is withdrawn.
Cookies do not carry viruses or launch programs. They are primarily used to share information between the device you are using and our website to make our website more user-friendly and more effective. The distinction should be made between temporary cookies and persistent cookies. Temporary cookies include in particular session cookies.
- Session cookies: We use “cookies” to recognize multiple use of the offer by the same user (for example, if you log in to set your login status). When you visit our website again, these cookies provide information to automatically recognize you. The information obtained in this way serves to optimize our offers and facilitate access to our website.
If you close your browser or log out, session cookies will be deleted.
- Persistent cookies: they are automatically deleted after a specified period, which may vary depending on the cookie. In your browser’s security settings, you can delete cookies at any time.
- Third party cookies (third party cookies):
You can configure your browser settings to meet your needs, e.g. reject acceptance of third party cookies or all cookies. However, we would like to point out that you may not be able to use all of the features on this website. Read more about these cookies in the respective third party privacy policies.
Cookies are used to make our website more user-friendly. Some elements of our website require identification of the browser even after the website will stop being loaded.
In particular, these cookies may contain information about language settings or login details.
We have a legitimate interest in data processing for the above purposes. The legal basis for this is Article 6 para. 1 para. 1 lit. f of the GDPR.
For detailed information, refer to the browser manufacturer’s instructions or at www.aboutcookies.org or www.allaboutcookies.org
Contradiction and “opt-out”: If cookies are disabled on our website, you may not be able to fully use all of the website’s features.
We delete or block your personal data as soon as the storage purpose is achieved, unless further storage is required for evidence purposes or is contrary to legal storage requirements.
Any further storage will only take place if required by national or European legislations. Blocking or deleting data in this case, if the retention period provided for in the relevant provisions has expired, unless we need your data to perform the contract concluded between us or if it is necessary to assert or defend legal claims.
Information about the contact options that we provide
As long as you contact us via email, social media, telephone, fax, mail, our contact form or otherwise, and provide us with personal data such as name, phone number or email address or other information about yourself or your request, this data will be stored and processed for your request in our website. Legal basis: If you submit the application via our contact form, the legal basis for processing your data is Art. 6 clause 1 lit. a of the GDPR. If you submit the application in the context of contractual or pre-contractual relations, the legal basis for the processing of your data is Art. 6 clause 1 lit. b. of the GDPR. If your request does not fall into any of the above categories, our legitimate interest in the processing of your data is the appropriate response to your request, in your favor, art. 6 clause 1 lit. f of the GDPR. Deletion:
The personal data we collect will be deleted if it is no longer needed. We check the requirement every 2 years. You can also cancel the data processing at any time.
Existence of automated decision making
We do not use automatic decision making or profiling.
Contact via contact form/e-mail/mail
By contacting us via the contact form, email or mail, your data will be processed to process the contact request.
The legal basis for data processing is the consent of the user – Art. 6 of the GDPR.
The legal basis for the processing of data as part of a contact request or e-mail, letter or fax is Art. 6 of the GDPR. The responsible person has a legitimate interest in the processing and storage of data in order to be able to respond to user inquiries, protect evidence for reasons related to liability and,
if necessary, comply with statutory requirements for the storage of business letters. If the contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 of the GDPR.
We may store your data and contact requests in our customer relationship management system (“CRM System”) or a comparable system.
Deletion: Data will be deleted as soon as it is no longer needed for collection. In the case of personal data from the input form of the contact form and data sent by email, this occurs after the conversation with you.
The conversation ends when it can be concluded from the circumstances that the issue has been finally resolved. We remove requests from users who have an account or contract with us two years after the contract is terminated. In the case of a legal obligation to archive, deletion takes place after its expiration.
Withdrawal: you have the right to withdraw your consent to the processing of personal data at any time in accordance with Art.6 of the GDPR. If you contact us via email, you can object to the storage of personal data at any time.
We regularly send newsletters to inform our customers and business partners as well as interested parties about our offers and related news. You can register to receive our newsletter on our website and give the consent to receive the newsletter as part of the registration proces for marketing purposes. If you sign up to our newsletter, you must provide an email address. Providing additional data, such as a greeting or name, is voluntary and will be used to contact you. We do not transfer the above mentioned data to third parties. Legal basis: The legal basis for data processing is Art. 6 clause 1 lit. of the GDPR, where the legitimate interest of the Data Administrator is data processing for marketing purposes. Deletion: The deletion of an email address occurs immediately after unsubscribing from our newsletter. Withdrawal: you can withdraw your consent to receive the newsletter at any time and unsubscribe from the newsletter.
Your rights under the GDPR
Right to information: pursuant to Art. 15 of the GDPR, you can ask for confirmation if and what personal data we process. In addition, you can provide us with free information about the purposes of processing, the category of personal data, the category of recipients to whom your data has been revealed or the planned storage period, the right to rectify, delete, limit processing or the right to object, the right to appeal and the origin of their data if they have not been collected from us. You also have the right to know if your personal data has been transferred to a third country or international organization. If so, you have the right to be informed of the relevant guarantees related to the transfer.
Right to rectification: in accordance with Art. 16 of the GDPR, you can request the correction of incorrect, complete or incomplete personal data stored by us and your personal data.
Right to cancellation: pursuant to Art. 17 of the GDPR, you have the right to request the cancellation of your personal data stored by us, unless we need it to be processed for the following purposes: to fulfill a legal obligation, assert or defend legal claims, exercise the right to freedom of expression and information; or for public interest purposes referred to in art. 17 clause 3 lit. c) and d) of the GDPR.
Right to limitation: in accordance with Art. 18 of the GDPR, you have the right to request the limitation of the processing of your personal data, if the accuracy of the data is questioned by you for a period that allows us to verify the accuracy of your personal data, the processing of your data is unlawful, but you refuse to delete it instead, you request a limitation on their use. We no longer need your personal data for processing purposes, but you need this information to assert, exercise or defend your rights.
There has been presented an objection to the processing of your data in accordance with Art. 21 of the GDPR, but it is not yet certain whether the justified reasons, that you have justified despite the objection to further processing, outweigh your rights.
Right to information: if a user demand the right to rectify, cancel or limit data processing, we are obliged to all recipients who have been revealed personal data regarding the correction or deletion of data for which the Processing Notification has requested, unless this proves impossible or disproportionate. You have the right to be informed by us about these recipients.
Right to data transfer: pursuant to Art. 20 of the GDPR, you can request to receive the personal data you have provided to us in a structured, standard machine-readable format or to transfer it to another responsible person.
Right to cancellation: In accordance with Art. 77 of the GDPR, you have the right to make a complaint with the supervisory body. For this purpose, you can contact the supervisory body of your residence, work place or our company’s headquarters.
Withdrawal of consent
Pursuant to Art. 7 para. 3 of the GDPR, you have the right to withdraw your consent to the processing of your data at any time. The withdrawal you have declared does not change the legality of processing your personal data until further notice.
Right to objection:
You have the right, for reasons arising from your particular situation, to object to the processing of your personal data at any time which takes place on the basis of a balance of interests (Art. 6 para. 1 lit. f of the GDPR). This is especially important when data processing is not required to perform the contract. If you exercise your right to object, please explain why. We will no longer process your personal data, unless we can prove that valid legitimate reasons for data processing outweigh your interests and rights.
Notwithstanding the foregoing, you have the right to object to the processing of your personal data for advertising and data analysis purposes at any time.
Please direct your objection to the above mentioned contact address of the responsible person indicated on our website.
Presence on social media
We use social media profiles or fan pages to communicate with users who are associated and registered there, and to provide information about our products, offers and services. Providers from the USA are certified in accordance with the Privacy Shield and therefore they are required to comply with European data protection. When you use our profile on the appropriate network and access it, the appropriate privacy policies and conditions of use of the given network apply.
We process your information that you send to us via these networks to communicate with you and respond to those messages.
The legal basis for processing personal data is our legitimate interest in communicating with users and our external presentation for advertising in accordance with art. 6 clause 1 sentence 1 lit. f) of the GDPR. If you have agreed to the person responsible for the social network in the processing of your personal data, the legal basis is Art. 6 clause 1 para. 1 lit. a) and art. 7 of the GDPR.
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Social media plugins
We use social media plugins on our website. We use the “double-click solution” – c’t action. When downloading our website, personal data will not be transferred to plug-in providers. Next to the logo or brand of the social network, there is a slider that allows you to activate the plug-in with one click. After activation, the social network provider receives information that you have access to our website and your personal data is transferred to the plug-in provider and stored there. These are third-party cookies. For some providers, such as Facebook and XING, their IP addresses will be anonymized as soon as they are downloaded.
The collected user data stores the plug-in provider as usage profiles. They are used for advertising, market research and/or website customization. This evaluation is carried out in particular (even for users who are not logged in) to display demand-oriented adverts and to inform other users of the social network about the user’s activities on our website. You have the right to object to the creation of these user profiles, but you should ask the right plug-in provider to exercise this right.
The legal basis for using plugins is our legitimate interest in improving and optimizing our website by increasing our awareness through social networks and the ability to interact with you and users through social networks in accordance with art. 6 clause 1 point 1 lit. f) of the GDPR.
We have no influence on the collected data and data processing operations. We are also not aware of the scope of data collection, the purpose of processing and storage periods. We also do not have any information to delete the collected data by the plug-in provider.
We refer to relevant privacy policies of social networks regarding the purpose and scope of data collection and processing. In addition, you will also find information about your rights and options to protect your personal data.
We also use the latest technical and organizational security measures to ensure compliance with data protection regulations and to protect data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties.
Our website has a redirection to our online store dedicated to entrepreneurs: www.bd24.pl. We invite you to take advantage of the offer. The administrator of your data at www.bd24.pl. is: Brand Distribution Sp. z o.o. ; St. Rocha 8 Street; 15-879 Bialystok ; Tax number 5213748788.