Adatvédelmi irányelvek

 

  1. General information

The operator of the bogateco.eu Store is Bogateco sp. z o.o., with its registered office in Rzeszów at ul. Klementyny Hoffmanowej 19, 35-016 Rzeszów, Poland, entered into the Register of Entrepreneurs of the National Court Register (KRS) under number 0000709214, NIP (Tax ID): 5170385668, REGON: 368976240.

The Store collects information about users and their behaviour in the following ways:

  • Through information voluntarily entered in forms.
  • By storing cookie files on end devices.
  • By collecting web server logs through the hosting operator – Ideo Sp. z o.o. (hosting.ideo.pl).
  1. Information on the processing of personal data (GDPR)

In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, “GDPR”), we inform you that:

Data controller

The controller of your personal data is Bogateco sp. z o.o., with its registered office in Rzeszów, ul. Klementyny Hoffmanowej 19, 35-016 Rzeszów, Poland, KRS: 0000709214, NIP: 5170385668, REGON: 368976240.

In all matters relating to the processing of personal data, you may contact the Controller:

  • in writing, at the registered address indicated above,
  • by e-mail: kontakt@bogateco.eu

Purposes and legal bases of processing

Your personal data are processed for the following purposes and on the following legal bases:

  • fulfilment of an order and conclusion and performance of a sales contract – pursuant to Article 6(1)(b) GDPR (processing necessary for the performance of a contract);
  • compliance with legal obligations of the Controller, in particular tax and accounting obligations (e.g. issuing and storing invoices) – pursuant to Article 6(1)(c) GDPR;
  • handling requests, enquiries and complaints submitted via forms or e-mail – pursuant to Article 6(1)(b) and (f) GDPR;
  • pursuing or defending against claims, constituting the Controller’s legitimate interest – pursuant to Article 6(1)(f) GDPR;
  • direct marketing of the Controller’s own products and services, including statistical analysis and profiling to present tailored content – pursuant to Article 6(1)(f) GDPR;
  • marketing activities beyond the above, including sending a newsletter and the use of cookies for analytical and marketing purposes – on the basis of consent, i.e. Article 6(1)(a) GDPR.

Recipients of data

The recipients of your personal data may be entities cooperating with the Controller in the implementation of the purposes indicated above, in particular:

  • the provider of hosting and e-mail services,
  • entities providing IT and website maintenance services,
  • courier companies and postal operators (to the extent necessary to deliver the order),
  • electronic payment operators,
  • accounting offices and law firms,
  • providers of analytical and advertising tools (e.g. Google).

Data may also be made available to public authorities entitled to receive them under applicable law.

Transfer of data outside the European Economic Area

Where tools of providers based outside the European Economic Area are used (e.g. analytical or advertising services), data may be transferred outside the EEA. Such a transfer takes place only to entities ensuring an adequate level of protection, in particular on the basis of a European Commission adequacy decision or standard contractual clauses.

Data retention period

Your personal data are stored for the period:

  • necessary to fulfil the order and for the period resulting from legal provisions (including tax law – as a rule 5 years counting from the end of the calendar year in which the tax payment deadline expired);
  • until the limitation of any claims – with respect to data processed on the basis of a legitimate interest;
  • until an objection is raised or consent is withdrawn – with respect to data processed on the basis of consent or for marketing purposes.

Rights of the data subject

In connection with the processing of personal data, you have the right to:

  • access your data and obtain a copy of it,
  • rectify (correct) your data,
  • erase your data (“the right to be forgotten”),
  • restrict the processing of your data,
  • data portability,
  • object to the processing of your data,
  • withdraw consent at any time – without affecting the lawfulness of processing carried out before its withdrawal (where processing is based on consent),
  • lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland. You may also lodge a complaint with the supervisory authority competent for your place of residence.

Voluntary nature of providing data

Providing personal data is voluntary; however, to the extent necessary to conclude and perform the contract (e.g. fulfilment of an order, issuing an invoice), it is a condition for concluding the contract. Failure to provide the required data will make it impossible to fulfil the order. To the remaining extent (e.g. marketing, newsletter), providing data is entirely voluntary.

Profiling

Your data may be processed in an automated manner, including in the form of profiling, in order to tailor the content and offers presented. Such profiling does not produce legal effects concerning you, nor does it significantly affect you in a similar way.

  1. Information in forms

The Store collects information provided voluntarily by the user.

The Store may additionally record information about connection parameters (time stamp, IP address).

Data in the form is not shared with third parties other than with the user’s consent.

Data provided in the form is processed for the purpose resulting from the function of the specific form, e.g. to process a service request or a commercial contact.

Data provided in forms may be transferred to entities technically performing certain services – to the extent necessary to perform a given service.

  1. Information on cookies

The Store uses cookies.

Cookies are IT data, in particular text files, stored on the end device of the Store’s User and intended for use of the Store’s websites. Cookies usually contain the name of the website they come from, their storage time on the end device, and a unique number.

The entity placing cookies on the User’s end device and accessing them is the Store operator.

Cookies are used for the following purposes:

  • creating statistics that help understand how Store Users use the websites, which makes it possible to improve their structure and content;
  • maintaining the Store User’s session (after logging in), thanks to which the User does not have to re-enter their login and password on each subpage of the Store;
  • determining the user’s profile in order to display tailored materials in advertising networks, in particular the Google network.

The Store uses two main types of cookies: “session” cookies and “persistent” cookies. “Session” cookies are temporary files stored on the User’s end device until logging out, leaving the website, or switching off the software (web browser). “Persistent” cookies are stored on the User’s end device for the time specified in the cookie parameters or until deleted by the User.

Web browsing software (web browser) usually allows cookies to be stored on the User’s end device by default.

Service Users may change these settings. The web browser allows cookies to be deleted. It is also possible to automatically block cookies. Detailed information on this subject can be found in the help or documentation of the web browser.

Restrictions on the use of cookies may affect some of the functionalities available on the Service’s websites.

Cookies placed on the User’s end device may also be used by advertisers and partners cooperating with the Service operator.

  1. Server logs

Information about certain user behaviour is logged at the server level. This data is used solely for the purpose of administering the website and to ensure the most efficient operation of the hosting services provided.

The resources viewed are identified by URLs. In addition, the following may be recorded:

  • the time the request arrived,
  • the time the response was sent,
  • the client station name – identified by the HTTP protocol,
  • information about errors that occurred during the HTTP transaction,
  • the URL of the page previously visited by the user (referer link) – where access to the Service occurred via a link,
  • information about the user’s browser,
  • information about the IP address.

The above data is not associated with specific persons browsing the pages.

The above data is used only for the purposes of server administration.

  1. Sharing of data

Data is made available to external entities only within the limits permitted by law.

Data enabling the identification of a natural person is made available only with that person’s consent.

The operator may be obliged to provide information collected by the Service to authorised bodies on the basis of lawful requests, to the extent resulting from the request.

  1. Managing cookies – how to give and withdraw consent in practice?

If the user does not want to receive cookies, they can change their browser settings. We note that disabling cookies necessary for authentication, security, or maintaining user preferences may hinder, and in extreme cases may prevent, the use of websites.