PRIVACY AND COOKIES POLICY

You have the right, among other things, to access your data, correct it, as well as request its deletion. Furthermore, you have the right to object to the processing of your personal data or request the restriction of its processing.

Providing the required personal data is voluntary, but it is a condition for us to provide specific services to you (e.g., maintaining an account, sending a newsletter) or performing a contract. We do not make individual decisions towards you based solely on automated processing (profiling) that would produce legal effects or similarly significantly affect your situation.

Our domain has an SSL certificate, ensuring that your data is encrypted.

Below you will find all the most important issues related to the processing of personal data on our website.

Who is the administrator of the website and personal data?

The administrator of the website and personal data is Artur Rosa, conducting business activity under the name Benetech Poland Artur Rosa, with its registered office in Kalisz at ul. Wrocławska no. 35-37, entered into the Central Register and Information on Economic Activity (CEIDG), NIP: 6182090117, REGON: 366662341.

Contact details: e-mail address: biuro@benetech-poland.pl, tel. no. +48 725 652 680.

What is the legal basis for processing personal data?

Personal data is collected and processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (GDPR). The processing of personal data is also regulated by the national Act of May 10, 2018, on the protection of personal data (consolidated text: Journal of Laws of 2019, item 1781).

What data do we process?

Depending on the purpose and the user's preferences, we may process data such as: name and surname, address, e-mail address, date of birth, telephone number, bank account number, IP address, and in the case of entrepreneurs, also the NIP number and business address. Furthermore, we may process other personal data sent to us in correspondence. For analytical purposes, we may also process data regarding the source of entry to the Store, the operating system and web browser used to browse the Store, data regarding viewed products, time spent on the site, abandoned carts, orders placed, activity in response to the newsletter, the user's age range, gender, approximate location, and interests (based on network activity).

The above data are provided to us as a result of actions such as:

• use of the contact form,

• sending correspondence directly to our e-mail address,

• providing us with data during a telephone conversation,

• registering an account in the Store,

• placing an order in the Store,

• subscribing to the newsletter,

• adding a product review (if such an option is provided)

• collection of other analytical data by the Store's software or the tools listed in this Privacy Policy.

For what purposes do we process your data?

We process data to the extent relevant to the operation of our store and store it for the period permitted by law. We process data provided by users while using the store.

• Conclusion and execution of the contract – based on Art. 6 sec. 1 lit. b) of the GDPR, i.e., when processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.

• Creation and maintenance of an account - based on Art. 6 sec. 1 lit. b) of the GDPR, i.e., when processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.

• Ensuring contact with us via the contact form, e-mail, telephone call - based on Art. 6 sec. 1 lit. b) of the GDPR, i.e., when processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.

• Adding reviews and their verification - based on: Art. 6 sec. 1 lit. a of the GDPR – i.e., when the data subject has given consent to the processing of their personal data for one or more specific purposes,

• Direct marketing based on: Art. 6 sec. 1 lit. a of the GDPR – i.e., when the data subject has given consent to the processing of their personal data for one or more specific purposes or based on Art. 6 sec. 1 lit. f) of the GDPR, i.e., when processing is necessary for the purposes of the legitimate interests pursued by the administrator or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

• Sending the newsletter and operating loyalty programs - based on Art. 6 sec. 1 lit. a) of the GDPR, i.e., when the data subject has given consent to the processing of their personal data for one or more specific purposes.

• Fulfilling legal obligations, establishing and pursuing claims – based on Art. 6 sec. 1 lit. c) of the GDPR, i.e., when processing is necessary for compliance with a legal obligation to which the administrator is subject, and based on Art. 6 sec. 1 lit. f) of the GDPR, i.e., when processing is necessary for the purposes of the legitimate interests pursued by the administrator or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

• Analytical and statistical activities - Art. 6 sec. 1 lit. f) of the GDPR, i.e., when processing is necessary for the purposes of the legitimate interests pursued by the administrator or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

To whom do we transfer personal data?

We transfer personal data to other entities only to the extent that the data subject has consented to the processing of data, to the extent necessary for the performance of the contract, or to the extent resulting from the legitimate interests pursued by the administrator. These are entities cooperating with the store: hosting provider, provider of tools for sending the newsletter, provider of the CRM system and invoicing system, accounting office, courier and transport companies, IT company providing services to the Store, online payment operators, banks, providers of marketing tools and other subcontractors, as well as entities to whom we are obliged to transfer your data under applicable law. In the case of analytical and statistical data, which do not constitute personal data, they may be transferred to companies providing general analytics, statistics, and optimization services, including to the United States (e.g., Google LLC).

Is data transferred to third countries or international organizations?

Some data processing operations may involve transferring data to third countries or international organizations in connection with the use of tools that store personal data on servers located in third countries, especially the USA.

It should be noted, however, that the providers of these tools guarantee an adequate level of protection of personal data, in particular by participating in the Privacy Shield program or using standard contractual clauses. This applies in particular to Google Ireland Limited services.

What exactly are your rights in connection with the processing of your personal data?

You have the right to:

• request access to your personal data,

• request rectification of your personal data,

• object to the processing of personal data,

• request the deletion of your personal data,

• request the restriction of personal data processing,

• request the portability of personal data,

• obtain information about automated decision-making, including profiling, and about the safeguards used in connection with the transfer of this data outside the EU,

• obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of this data,

• obtain information about the rights entitled under the GDPR, about the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), about the planned data storage period or about the criteria for determining this period, about the source of this data,

• obtain a copy of your personal data.

If you wish to exercise any of the rights mentioned above, please inform us. We will immediately provide you with all information about the actions taken in connection with the submitted request.

You may withdraw your consent for the processing of your personal data at any time. For this purpose, please contact us.

Cookies Policy

Cookies are commonly occurring short text information that allows identifying the software used, tailoring content to user needs, and ensuring the correct operation of websites. They are saved on the device you use and contain the domain name, storage time, and a specific value. Cookies used in our store are safe and are divided into session and persistent cookies. Session cookies are stored only until the end of a given browser session. Persistent cookies are stored on the device until they are deleted. Using your web browser, you can change your preferences regarding cookies or delete them at any time (persistent cookies).

Basis for using cookies

We use some cookies to the extent necessary for the proper provision of services by electronic means; we use other cookies based on the consent granted.

The consent granted results from the settings of the web browser, other software used to manage cookies, or the settings of the cookie manager if made available on the site.

You can disable cookies as well as their individual types. We reserve, however, that in the case of disabling or restricting cookie support, you may lose access to some functionalities available on our site, for the operation of which consent to the use of specific cookies is necessary.

Entities whose cookies we use:

The Google Analytics tool provided by Google Ireland Limited (Registration Number: 368047 / VAT Number: IE6388047V), Gordon House, Barrow Street, Dublin 4, Ireland. Our actions regarding the use of these tools are based on our legitimate interest in marketing using commonly used tools. From our perspective, the data collected in connection with the use of these tools are not of a personal nature due to anonymization.

More information about the tools can be found in the Google Terms of Service and Privacy Policy.

Google Analytics

We use the Google Analytics tool for purposes related to analytics and statistics, which serve to improve the operation of our website.

Data collected in connection with the use of the tool are not of a personal nature due to anonymization and include the study of user traffic on the site (information about the operating system, browser, visited pages and subpages, time spent on the site and subpages, source of entry to the site).

Server logs

Visiting and using the site involves sending queries to the server, which are recorded in so-called server logs. These include, among others, information about the user's IP address, date and time of the query, browser, and operating system.

Server logs are recorded and stored on the server. However, they are not linked to specific people using the site and are not intended for identification – they serve only for administering the site, and their content is not disclosed to unauthorized persons.