Privacy Policy
Definitions
- Controller (We) – BSK Core Sp. z o.o., Plac Konesera 9, 03-736 Warszawa, NIP: 1133203642, REGON: 544895211, KRS: 0001244904.
- Personal data – any information relating to an identified or identifiable natural person who can be identified by one or more specific factors determining their physical, physiological, genetic, mental, economic, cultural or social identity, including the device IP address, location data, an online identifier and information collected through cookies and other similar technology.
- Policy – this Privacy Policy.
- GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC.
- Website – the website operated by us at bskcore.pl.
- User (You) – any natural person visiting the Website or using one or more services or functionalities described in the Policy.
Data processing in connection with use of the Website
In connection with your use of the Website, we collect your data to the extent necessary to provide the individual services offered, as well as information about your activity on the Website. The detailed rules and purposes for processing personal data collected while you use the Website are described below.
Purposes and legal bases for processing data on the Website
Use of the Website
We process the personal data of all persons using the Website (including an IP address or other identifiers and information collected through cookies or other similar technologies) who are not registered Users (i.e. persons who do not have a profile on the Website) for the following purposes:
- to provide electronic services consisting in making content collected on the Website available to Users – the legal basis for processing is then that processing is necessary for the performance of a contract (Article 6(1)(b) GDPR);
- for analytical and statistical purposes – the legal basis for processing is then our legitimate interest (Article 6(1)(f) GDPR), consisting in analysing Users’ activity and preferences in order to improve the functionalities used and the services provided;
- to establish and pursue possible claims or defend against them – the legal basis for processing is our legitimate interest (Article 6(1)(f) GDPR), consisting in protecting our rights;
- for marketing purposes (ours and those of our partners), in particular in connection with presenting behavioural advertising – the rules for processing personal data for marketing purposes are described in the “MARKETING” section.
Your activity on the Website, including your personal data, is recorded in system logs. The information collected in the logs is processed primarily for purposes connected with providing services. We also process it for technical and administrative purposes, to ensure the security of the IT system and manage that system, as well as for analytical and statistical purposes – in this respect, the legal basis for processing is our legitimate interest (Article 6(1)(f) GDPR).
Use of paid services on the Website
If you place an order (for the purchase of goods or a service) on the Website, we will process your personal data for the following purposes:
- to fulfil the order placed – the legal basis for processing is that processing is necessary for the performance of a contract (Article 6(1)(b) GDPR); for data provided optionally, the legal basis for processing is consent (Article 6(1)(a) GDPR);
- to fulfil statutory obligations imposed on us, arising in particular from tax and accounting regulations – the legal basis for processing is a legal obligation (Article 6(1)(c) GDPR);
- for analytical and statistical purposes – the legal basis for processing is our legitimate interest (Article 6(1)(f) GDPR), consisting in analysing your activity on the Website and your purchasing preferences in order to improve the functionalities used;
- to establish and pursue possible claims or defend against them – the legal basis for processing is our legitimate interest (Article 6(1)(f) GDPR), consisting in protecting our rights;
Contact forms
On the Website, we provide the option of contacting us using electronic contact forms. Using a form requires you to provide the personal data necessary for us to contact you and answer the question asked. You may also provide other data in the form to make it easier for us to contact you or handle the enquiry. Providing data marked as mandatory is required in order to receive and handle the enquiry; if it is not provided, we will not be able to handle your question. Providing the remaining data is voluntary.
The personal data you send us using the contact form is processed:
- to identify you as the sender and handle your enquiry submitted through the available form – the legal basis for processing is that processing is necessary for the performance of a service contract (Article 6(1)(b) GDPR);
- for analytical and statistical purposes – the legal basis for processing is our legitimate interest (Article 6(1)(f) GDPR), consisting in compiling statistics on enquiries submitted by Users through the Website in order to improve its functionality.
Marketing
We process your personal data in order to carry out marketing activities, which may consist in:
- displaying marketing content that is not tailored to your preferences (contextual advertising);
- displaying marketing content corresponding to your interests (behavioural advertising);
- sending email notifications about interesting offers or content which, in some cases, contain commercial information (newsletter service);
- carrying out other activities related to the direct marketing of goods and services (sending commercial information electronically and telemarketing activities).
To carry out marketing activities, in some cases we use profiling (if you consent to this). This means that, through automated data processing, we evaluate selected factors relating to natural persons in order to analyse their behaviour or make a forecast for the future.
Direct marketing
We may also use your personal data so that we can send you marketing content through various channels, i.e. by email, MMS/SMS or telephone. We carry out such activities only where you have consented to them, and you may withdraw that consent at any time.
Social media
We process your personal data when you visit our social media profiles (Facebook, YouTube, Instagram, LinkedIn). This data is processed solely in connection with operating the profile, including to inform you about our activities and promote various events, services and products. The legal basis for processing personal data for this purpose is our legitimate interest (Article 6(1)(f) GDPR), consisting in promoting our own brand.
Cookies and similar technology
Cookies are small text files installed on your device when you browse the Website. Cookies collect information that makes it easier to use the website – for example, by remembering your visits to the Website and the actions you take. We may use the following types of cookies within the Website:
“Service” cookies
We use so-called service cookies primarily to provide you with services electronically and improve the quality of those services. Accordingly, we and other entities providing analytical and statistical services to us use cookies by storing information or accessing information already stored on your telecommunications terminal equipment (computer, phone, tablet, etc.). Cookies used for this purpose include:
- cookies containing data entered by you (session identifier) for the duration of the session (user input cookies);
- authentication cookies used for services requiring authentication for the duration of the session (authentication cookies);
- cookies used to ensure security, for example to detect authentication abuse (user-centric security cookies);
- session cookies of multimedia players (e.g. Flash player cookies) for the duration of the session (multimedia player session cookies);
- persistent cookies used to personalise the User interface for the duration of the session or slightly longer (user interface customisation cookies);
- cookies used to monitor website traffic, i.e. for data analytics, including Google Analytics cookies (these files are used by Google to analyse how you use the Website and to create statistics and reports on how the Website functions). Google does not use the collected data to identify the User or combine this information in a way that would enable identification. Detailed information on the scope and rules for collecting data in connection with this service is available at: https://www.google.com/intl/pl/policies/privacy/partners.
“Marketing” cookies
We and our trusted partners also use cookies for marketing purposes, including in connection with directing behavioural advertising to you. For this purpose, we and our trusted partners store information or access information already stored on your telecommunications terminal equipment (computer, phone, tablet, etc.). The use of cookies and personal data collected through them for marketing purposes, in particular to promote the services and goods of third parties, requires your consent, which may be withdrawn at any time.
Managing cookies
If you do not want to receive cookies, you can change your browser settings. Please note that disabling cookies necessary for authentication, security and maintaining user preferences may make it more difficult to use the Website.
To manage cookie settings, select the web browser you use from the list below and follow the instructions:
- Edge
- Internet Explorer
- Chrome
- Safari
- Firefox
- Opera
- Mobile devices: Android, Safari (iOS), Windows Phone
Relevant marketing techniques
The purpose and scope of data collection and its further processing and use by service providers, as well as the possibility of contact and the User’s rights in this regard, are described in the service providers’ privacy policies.
We may use remarketing techniques that make it possible to tailor advertising messages to your behaviour on the Website, which may create the impression that your personal data is being used for tracking; however, in practice, we do not provide any of your personal data to advertising operators. The technological condition for such activities is that cookies are enabled.
We may use a solution that examines user behaviour by creating heat maps and recording behaviour on the Website. This information is anonymised before it is sent to the service operator, so the operator does not know which natural person it concerns. In particular, entered passwords and other personal data are not recorded.
Personal data processing period
The period for which we process your data depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the service or order fulfilment, until you withdraw your consent or submit an effective objection to data processing (where the legal basis for processing is our legitimate interest).
The data processing period may be extended where processing is necessary to establish and pursue possible claims or defend against them, and after that time only where and to the extent required by law.
After the processing period has expired, your data is irreversibly deleted or anonymised.
Your rights
Because we process your personal data, you have the following rights:
- right to information about personal data processing – on this basis, at your request, we will provide you with information about data processing, including primarily the purposes and legal bases for processing, the scope of the data held, the entities to which it is disclosed and the planned date of data deletion;
- right to obtain a copy of the data – on this basis, at your request, we will provide you with a copy of the processed data relating to the person making the request;
- right to rectification – at your request, we are obliged to correct any inconsistencies or errors in the personal data being processed and supplement it if it is incomplete;
- right to erasure – on this basis, you may request the deletion of data whose processing is no longer necessary for any of the purposes for which it was collected;
- right to restriction of processing – on this basis, at your request, we will cease performing operations on your personal data – except for operations to which you have consented – and will store it in accordance with the adopted retention rules or until the reasons for restricting data processing cease to apply;
- right to data portability – on this basis, to the extent that your data is processed in connection with a concluded contract or consent given, we will provide you with the data you supplied in a computer-readable format. You may also request that we send this data to another entity, provided that we have the appropriate technical capabilities;
- right to object to data processing for marketing purposes – you may object to the processing of personal data for marketing purposes at any time without having to justify the objection;
- right to object to other purposes of data processing – you may object at any time to the processing of personal data based on our legitimate interest (e.g. for analytical or statistical purposes or for reasons related to the protection of property); an objection in this respect should include reasons;
- right to withdraw consent – if data is processed on the basis of your consent, you have the right to withdraw it at any time, but this does not affect the lawfulness of processing carried out before consent was withdrawn;
- right to lodge a complaint – if you consider that the way in which we process your personal data infringes the GDPR or other personal data protection laws, you may lodge a complaint with the President of the Personal Data Protection Office.
Data recipients
Because we want to provide you with the best possible services, we will disclose your personal data to our trusted partners, including in particular providers responsible for operating IT systems, entities such as banks and payment operators, entities providing accounting services, couriers (in connection with order fulfilment), marketing agencies (within the scope of marketing services) and our affiliated entities.
Your personal data will be made available to other entities for their own purposes, including marketing purposes, only if you consent to this.
Transfers of data outside the EEA
The level of personal data protection outside the European Economic Area (EEA) may differ from that provided by European law. For this reason, we will transfer your personal data outside the EEA only where necessary and with an adequate level of protection ensured. You will be notified each time.
Personal data security
Please be aware that we take all steps to ensure that your personal data is processed by us securely – in particular, to ensure that only authorised persons have access to your data and only to the extent necessary for the tasks they perform.
We take all necessary measures to ensure that our subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process your personal data on our behalf.
Contact details
For any matters referred to in this Policy, in particular those related to the processing of your personal data, you can contact us via:
- email: kontakt@bskcore.pl