1. Who is responsible for your data
Brand Distribution Poland Sp. z o.o., a Brand Distribution Group company with its registered office at ul. św. Rocha 8, 15-879 Białystok, Poland, is responsible for the personal data described in this policy when you use bdgroup.eu (the Website). In data-protection language, this company is the controller.
Privacy contact: contact@bdgroup.eu
2. When this policy applies
This policy explains how we handle personal data when you visit the Website, contact us, request a quote, discuss your brand, request a visit, download a catalogue, subscribe to email updates or apply for a role through a Website form. It does not cover third-party websites we link to; please read their own privacy information before you give them personal data.
3. The data we collect
Enquiries and commercial contact. When you send an enquiry we collect what you enter in the form: your name, work email address, company, phone number with its country calling code, target market, product category, the type of enquiry, brand or product information and your message.
Visit requests. When you request a visit we collect the location, preferred date and time, your name, company, phone number, email address, the number of visitors and the purpose of the visit.
Catalogue downloads. When you download a catalogue we collect your name, work email address, company and phone number, and which catalogue you downloaded.
Email updates. If you ask to receive email updates, we process your email address and the record of your request.
Job applications. If you apply through the Website, we process the details you provide: your contact details, CV, any link you share and your message, together with your choice about keeping the application on file.
Technical and cookie data. We process the technical information needed to operate and protect the Website, such as device and browser information, IP address and request logs. Optional analytics (Vercel Web Analytics and, where enabled, Google Analytics 4) runs only if you accept analytics in our cookie controls. Section 8 lists every cookie and similar technology we use.
4. Why we use your data and the legal basis
- To read, route and respond to an enquiry or visit request, and to take the steps you ask for before a commercial relationship begins — our legitimate interest in answering you, and pre-contractual steps at your request.
- To know which companies our catalogues reach — our legitimate interest in understanding who uses our catalogues. We do not use these details for newsletters.
- To manage an existing commercial relationship — performance of a contract.
- To send email updates — your consent, which you can withdraw at any time.
- To run, secure and improve the Website — our legitimate interest; optional analytics only with your consent.
- To meet legal, accounting, regulatory and record-keeping obligations — legal obligation.
- To consider a job application — steps at your request before any employment contract, and your consent where you ask us to keep the application on file.
Giving us personal data is voluntary. Fields marked as required are needed to handle your request: without them we cannot answer an enquiry, arrange a visit, send a catalogue or consider an application. We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.
5. Who receives your data
We disclose personal data only to recipients who need it for the purposes above:
- the provider that hosts the Website and, if you accept analytics, counts page views without cookies (Vercel Inc.);
- the provider that processes form submissions and delivers them to us by email (Web3Forms);
- Adobe (Adobe Systems Software Ireland Limited / Adobe Inc.), which serves the Website’s typeface on the English and Spanish pages: your browser downloads the font files from Adobe’s servers, which receive your IP address to deliver them. Adobe states that it does not store the IP address or use cookies to serve fonts;
- Google (Google Ireland Limited / Google LLC) for analytics, only if you have accepted analytics cookies;
- our email and IT providers;
- professional advisers, regulators and public authorities where disclosure is required or permitted by law;
- a company in the Brand Distribution Group where that is necessary to handle your request.
We do not sell personal data.
6. International transfers
Some of the providers above process data outside the European Economic Area, including in the United States. Where that happens we rely on the safeguards required by EU law, such as an adequacy decision (for example the EU–U.S. Data Privacy Framework, for providers certified under it) or the European Commission’s standard contractual clauses. You can ask us for details of the safeguards that apply.
7. How long we keep data
We keep personal data only for as long as needed for the purpose it was collected for, including legal, accounting and security requirements, and then delete or anonymise it.
- Enquiries, catalogue downloads and visit requests: up to 24 months from your last contact.
- Job applications: 12 months, or until you ask us to delete them.
- Email updates: until you unsubscribe; we keep a record of the unsubscribe so we do not contact you again.
- Technical logs: for the short period needed to secure the Website.
- Analytics data, if enabled: for the retention period set in the analytics tool.
8. Cookies and similar technologies
Cookies and similar technologies, such as your browser’s local and session storage, let a website keep information on your device. We use only those listed below. Strictly necessary items work without consent because the Website, or a feature you use, cannot work without them; analytics runs only with your consent.
- cookie-consent: browser local storage, set by us, kept for 12 months, after which we ask again. Strictly necessary: remembers your cookie choice and when you made it, so we do not ask on every page.
- theme-preference: browser local storage, set by us, kept until you change the setting or clear your browser data. Strictly necessary, as a setting you choose: remembers the light or dark theme, and only once you pick one.
- bdg-catalogue-lead: browser session storage, set by us, deleted when you close your browser. Strictly necessary, as part of a feature you use: keeps the details you entered in the catalogue form, so a second download in the same visit needs no retyping.
- Vercel Web Analytics (provider: Vercel): no cookies, and nothing is stored on your device. Analytics, only with your consent: your browser reports each page view (the page address, the referring page, your browser, operating system and device type, and an approximate location derived from your IP address) to our hosting provider, which recognises a visit by a hash of the request that it discards after 24 hours.
- _ga, _ga_<ID>: cookies from Google Analytics 4 (provider: Google), stored on our domain, kept for 13 months. Analytics, only with your consent: they tell visitors and visits apart so that we can produce statistics about how the Website is used.
Font delivery by Adobe (see section 5) uses no cookies.
You can change or withdraw your choice at any time with Cookie settings in the footer of every page; withdrawing consent stops analytics straight away and deletes its cookies. You can also block or delete cookies and site data in your browser settings; if you block strictly necessary items, parts of the Website may not work as intended.
9. Your rights
Depending on applicable law, you may ask us to confirm whether we process your personal data and give you access to it; correct inaccurate or incomplete data; erase data in certain circumstances; restrict or object to processing in certain circumstances; provide data you gave us in a portable format; and withdraw consent at any time where we rely on consent — withdrawal does not affect processing that was lawful before it.
Right to object. Where we rely on our legitimate interests (see section 4), you can object at any time on grounds relating to your particular situation. We will then stop, unless we have compelling legitimate grounds or need the data to establish, exercise or defend legal claims.
To make a request, write to contact@bdgroup.eu. We may need to confirm your identity before acting. You also have the right to complain to a supervisory authority; in Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw).
10. Children
The Website is intended for business audiences. We do not knowingly collect personal data from children through the Website.
11. Changes to this policy
We may update this policy when our processing, the Website or the law changes. The date at the top tells you when it was last updated. Where a change is material we will give any notice the law requires.
12. Contact
Brand Distribution Poland Sp. z o.o.
ul. św. Rocha 8, 15-879 Białystok, Poland
Entered in the register of entrepreneurs of the National Court Register (KRS) under no. 0000565818, kept by the District Court in Białystok, 12th Commercial Division of the National Court Register
NIP (tax ID) 7010494473 · REGON 361974780 · Share capital PLN 5,000.00
contact@bdgroup.eu