Privacy policy

This Privacy Policy defines the principles of collecting, processing and using personal data provided by Users of the online store bialcon.pl, operated at www.bialcon.pl (hereinafter: "Website") by Bialcon S.A. with its registered office in Biała Podlaska (21-500) at ul. Celników Polskich 14 (hereinafter: "Online Store"), as part of their use of services provided electronically. The online store makes every effort to ensure respect for your privacy and protection of the personal information provided when using the Website and making purchases within the store and takes all necessary actions for this purpose. The online store, in accordance with legal requirements, has registered a set (sets) of personal data in the register maintained by the Inspector General for Personal Data Protection.

PERSONAL DATA PROTECTION

The administrator of your personal data responsible for the collection, processing and use of personal data is Bialcon S.A. with its registered office in Biała Podlaska (21-500 ul. Celników Polskich 14), entered into the register of entrepreneurs maintained by the District Court Lublin East in Lublin with its registered office in Świdnik, 6th Commercial Division of the National Court Register under the number: 0000377159, share capital: PLN 102.10.00, paid in full.

You can contact the data administrator by e-mail at [email protected] or in writing to the following address: Bialcon S.A. with its registered office in BIAŁA PODLASKA (21-500, ul. Celników Polskich 14)

As part of the services provided, handling the order fulfillment process, contact with the Administrator and all other forms of collecting personal data via the website www.bialcon.pl, the Administrator may process personal data such as: first and last name, telephone number, address and all basic data that the user provided during registration and creating a customer account such as: e-mail address, company name, NIP (in the case of entrepreneurs). Providing all data is voluntary, but it may be necessary for the implementation of the Sales Agreement. If the User agrees, Bialcon S.A. may also send him commercial information regarding the offer in a manner chosen by the User - by e-mail, SMS/MMS or telephone or other means of electronic communication. In such a case, the Administrator will use the User's data to send him commercial information in a manner chosen by him.

In accordance with the content of art. 16 – 21 GDPR, Users, in connection with the processing of their personal data, have the right to:

Access to their personal data, including the right to information about their personal data and to obtain a copy of their personal data, to withdraw their consent to the processing of personal data without giving a reason,
To rectify their personal data if it is incorrect and to supplement incomplete data,
To delete their personal data,
To limit the processing of their personal data,
To object to the processing of their personal data,
To transfer their data,
To lodge a complaint with the authority, i.e. a complaint to the President of the Personal Data Protection Office (in Poland) or another competent supervisory authority - in the event of unlawful processing of their personal data;
The right to withdraw their consent to the processing of personal data.

Users may exercise their rights under the GDPR by sending to the Administrator of the appropriate request to the e-mail address: [email protected] or in writing to the address: Bialcon S.A. with its registered office in BIAŁA PODLASKA (21-500, ul. Celników Polskich 14).

The request related to the personal data processed by the Administrator will be fulfilled no later than within one month of receiving the request.

If the request is too complicated or the Administrator receives a significant number of such requests at the same time - it will immediately inform about the postponement of the request fulfillment deadline by a maximum of 2 months.

If the User's request cannot be taken into account by the Administrator, the User will be informed within the above deadlines about the refusal and its reasons.

LEGAL BASIS FOR PERSONAL DATA PROCESSING

The provisions of the Website Privacy Policy are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"), the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws 2019.1781, consolidated text of 2019.09.19), the Act of 18 July 2002 on the provision of services by electronic means (Journal of Laws of 2002, No. 144, item 1204, as amended).

In order to ensure the security of the data entrusted to us, internal procedures and recommendations have been developed to prevent unauthorized persons from making the data available. Their performance is controlled and their compliance with the relevant legal acts is checked - the Personal Data Protection Act, the Act on the provision of services by electronic means, as well as all types of implementing acts and acts of Community law.

Personal Data are processed on the basis of the consent expressed by the User and in cases where the provisions of law authorize the Administrator to process personal data on the basis of the provisions of law or for the purpose of implementing the agreement concluded between the parties.

The Administrator exercises special diligence to protect the interests of data subjects, and in particular ensures that the data collected by him are:

processed in accordance with the law, reliably and in a transparent manner for the data subject;
collected for specific, explicit and legally justified purposes and not further processed in a manner inconsistent with these purposes;
adequate, relevant and limited to what is necessary for the purposes for which they are processed; - correct and, if necessary, updated;
kept in a form which permits identification of the data subject for no longer than is necessary for the purposes for which the data is processed;
processed in a manner which ensures appropriate security of the Personal Data, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organisational measures.

As indicated in the introduction, aware of how important the privacy of Customers is, the Administrator protects not only the persons visiting the Online Store or using the Application, but also the Customers who have provided the Administrator with their Personal Data using other communication channels, i.e.: the website https://www.facebook.com and all other websites marked or co-marked with the Facebook brand (including subdomains, international versions, widgets and versions for mobile phones), the principles of operation of which are based on the regulations made available in particular at https://www.facebook.com/legal/terms, provided by Facebook Inc. or Facebook Ireland Limited (hereinafter also: "Facebook Service"), including through the Facebook Lead Ads function aimed at direct marketing of the Administrator's own products or services. The principles of protection and use of Personal Data by the Facebook Service are available, for example, on the website: https://www.facebook.com/policy.php. The Administrator has no influence on the content of the legal regulations of the Facebook Service, including those concerning Personal Data. b. applications enabling the Administrator to conduct advertising campaigns on the Facebook Service, including contests.

PURPOSES OF USING PERSONAL DATA

Personal data provided by Users are processed by the Administrator for the purposes of:

Creating and maintaining a Customer Account for the purpose of placing orders, without the need to fill out forms every time, accessing purchase history, managing your consents on the website,
Concluding and implementing a Sales or Reservation Agreement, or taking action at the request of a future Customer before its conclusion (personal data are necessary for us to complete the order and perform the concluded agreement - in particular, confirming its placement and reserving or sending the selected product, as well as, if necessary, contacting the ordering party in this matter),
Handling Customer inquiries,
Marketing,
Implementing the legitimate interests of the Administrator, i.e.:
- handling complaints and protection against claims and determining and pursuing possible claims
- technical purposes and in order to ensure the security of the seller's IT system and its management,
- for archival and statistical purposes
Conducting competitions, in particular selecting competition winners and issuing prizes;
Presenting advertisements, offers or promotions (discounts) regarding the products or services of the Administrator and its partners intended for all recipients, in particular for the purpose of implementing the Newsletter agreement;
Assessing and analysing the activity and information about the Customer, including as part of the automated processing of Personal Data (profiling), in order to present general advertisements, offers or promotions (discounts) regarding the products or services of the Administrator and its partners, in a manner tailored to the interests of a given Customer (however, without significantly affecting their decisions), in particular for the purpose of implementing the Newsletter agreement, and market and statistical analyses;
Fulfilment of legal obligations arising from the regulations, e.g. tax and accounting, especially in the case of agreements paid.

In the case of an adult Client, with his additional consent, Personal Data may also be processed for the purpose of presenting, creating, granting and implementing dedicated advertisements, offers or promotions (discounts) for a given Client regarding the products or services of the Administrator and its partners, tailored to his preferences to the highest possible extent (profiling), as a result of automated decision-making, which may cause him legal effects or in a similar way significantly affect it, e.g. by providing only such a person with a short-term discount on a specific product that they have recently viewed in our store (this option is not available to persons who are not of legal age or who are of legal age but have not given their consent to such action).

Personal data are provided to the Administrator by Users voluntarily. If the User has not given their consent to the processing of data, then they cannot place an order, create an account (register on the website) and cannot send a message via the contact form.

RECIPIENTS OF PERSONAL DATA

Users' personal data are made available to the Seller's associates who are authorized to process Users' personal data and to external entities to the extent necessary.

Users' personal data may be transferred by us, among others, to entities providing services to us, including:

Courier companies;
Hosting companies;
Companies dealing with payment systems;
Companies providing marketing services;
Law firms.

All these entities process data on the basis of an agreement concluded with the Administrator and guarantee the application of appropriate measures for the protection and security of personal data required by law.

WHAT DATA ARE PROCESSED?

The Administrator processes only the data that is provided by the User. To register on the sales website, the Administrator requires the User to provide: e-mail address, first name, last name, postal address, telephone number. The processing of this data is necessary to conclude a sales agreement, contact the User on their behalf and deliver the goods.

Personal data are processed:

In accordance with art. 6 sec. 1 lit. b) GDPR in order to conclude a contract, execute the order and provide the service,
Based on the legitimate interest of the administrator (art. 6 sec. 1 letter f) GDPR), i.e.:
- the possibility of presenting users with offers and commercial information regarding products from our offer (we can do this until you object to the processing of personal data for marketing purposes);
- in order to defend your rights in the event of any claims against us;
- for technical purposes and to ensure the security of our IT system and its management,
- for archival and statistical purposes.
Based on the consent of the person whose personal data concerns art. 6 sec. 1 letter a) GDPR granted by Users by sending e-mails;
In order to fulfill the legal obligations incumbent on the administrator art. 6 sec. 1 letter lit. c) GDPR, i.e., among others:
- issuing an invoice for Users, including the invoice in the accounting documentation;
- obligations under the warranty for product defects.

PERIOD OF STORING PERSONAL DATA

The data will be processed for as long as necessary to complete the order and provide the service, and then until the expiry of the limitation period for any claims. There is a legal obligation to store an invoice containing Customers' personal data for up to 5 years from the end of the tax year in which such tax obligation arose. The data will also be stored for the purpose of fulfilling the legal obligations incumbent on the Administrator (art. 6 sec. 1 c) GDPR), such as, among others, obligations under the warranty for defects - for the period of liability under the warranty and for the purpose of fulfilling our legally justified interests (art. 6 sec. 1 f) GDPR).

in order to conclude a contract, execute an order and provide a service based on art. 6 sec. 1 letter b) GDPR period of storing personal data: this is the time necessary to fulfill the sales contract or the contract for the provision of electronic services.
the possibility of presenting users with offers and commercial information regarding products from our offer based on art. 6 sec. 1 letter lit. f) GDPR, the period of personal data storage is: the time necessary for the data subject to withdraw consent.
in order to possibly defend your rights in the event of any claims against us, on the basis of art. 6 sec. 1 letter f) GDPR, the period of personal data storage is: the time of existence of the legally protected interest of the Administrator, until the limitation of claims.
for technical purposes and to ensure the security of our IT system and its management, on the basis of art. 6 sec. 1 letter f) GDPR, the period of personal data storage is: the time of existence of the legally protected interest of the Administrator, until the limitation of claims.
for archival and statistical purposes, on the basis of art. 6 sec. 1 letter f) GDPR, the period of personal data storage is: the time of existence of the legally protected interest of the Administrator, until the limitation of claims.
in order to contact the User on the basis of the consent granted by him, on the basis of art. 6 sec. 1 letter a) GDPR, the period of storing personal data is: the time of withdrawal of consent by the data subject.
issuing an invoice for Users, including the invoice in accounting documentation, based on art. 6 sec. 1 letter c) GDPR, the period of storing personal data is: the period required by law requiring the Administrator to store books or accounts (5 years, counted from the beginning of the year following the financial year to which the data relates.
obligations under the warranty for product defects, based on art. 6 sec. 1 letter c) GDPR, the period of storing personal data is: the time of existence of the legally protected interest of the Administrator, until the limitation of claims.

NEWSLETTER

On our website you can order a free newsletter. The newsletter informs about current offers, new products, special offers from the offer of Bialcon S.A. As part of this service, we collect and process additional information about whether you open the newsletter, whether and which links you click on and which topics interest you, where you access the newsletter, which end device, operating system, browser and, if applicable, which other device settings you use, whether and to what extent you recommend the newsletter content on social media or via email and which of our websites you visit after clicking on the links in the newsletter.

Data processing for the purposes of operating and optimizing the newsletter service takes place in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR.

To register, you must enter your email address in the "subscribe to newsletter" field. This allows us to inform you about special offers or events.

After sending the registration form, you will receive a confirmation email. The newsletter subscription only comes into effect after you click on the link in the confirmation email. If you do not click on the link in the confirmation email, your registration will not be completed.

We would also like to point out that we store your IP addresses as well as the time of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR.

You can unsubscribe from the newsletter at any time. To do this, you can use the unsubscribe link provided in each newsletter or contact us using the email address registered in the newsletter.

Your email address will be deleted from the newsletter distribution list. Unsubscribing does not affect the legality of the data processing carried out up to the time of unsubscription.

PROFILING

For the purpose of presenting general advertisements, offers or promotions (discounts) intended for all Customers, in a manner tailored to the interests of a given Customer, the Administrator may familiarize itself with their preferences, e.g. by analyzing how often they visit the Online Store. This allows for a better understanding of the Customer's expectations and adaptation to their needs, but does not significantly affect their decisions. Thanks to the use of advanced technologies by the Administrator, the above activities will often be performed by the system in an automated manner, thanks to which the content sent will be the most up-to-date, and the Customer will be able to quickly familiarize themselves with it.

In the case of adult Customers, the aforementioned analysis of interests or preferences will also serve to create, grant, implement dedicated and as highly tailored to them advertisements, offers or promotions (discounts), in an automated manner, which may cause legal effects for them or significantly affect them in a similar way, potentially limiting access to them by other Customers (option not available to Customers who are not adults and have not consented to such actions of the Administrator). Our actions differ from ordinary "profiling" (i.e., e.g., adapting our messages and banners to your interests) in that their result may significantly affect your choices as a consumer, i.e., their result may be a very favorable, temporary offer of clothing addressed exclusively to you based on your purchase history and behavior on our website, to which our other Customers will not have access. The more often a given Customer uses the Administrator's services and purchases its products, the better promotions and surprises can be prepared for him.

COOKIES

The online store does not automatically collect any data, except for the data contained in cookies during the use of the Website itself. Cookies are small text files sent by the online store and stored on your computer containing certain information related to your use of the Website and the Online Store. Cookies are used by the online store to operate the Website and provide you with the ability to provide you with interesting information and during the purchasing process, e.g. to remember your purchases.

Cookies used by the online store may be temporary or permanent. Temporary cookies are deleted when you close your browser, while permanent cookies are also stored after you have finished using the Website and are used to store information such as your password or login, which speeds up and facilitates the use of the Website. In each case, you can block the installation of cookies or delete permanent cookies using the appropriate options of your web browser. Detailed information about the possibilities and methods of handling "cookies" are available in the software (web browser) settings. In case of problems, we advise you to use the browser's help file or contact the manufacturer of the browser you are using.

In addition to cookies, the online store may also collect data typically collected by internet system administrators as part of so-called logs or journal files. The information contained in the logs may include, among others: Your IP address, type of platform and web browser, Internet service provider and the address of the page from which you entered the Website. Some subpages within the Website and other means of communication with you may contain so-called "web beacons" (so-called electronic images). Web beacons allow you to receive information such as the IP address of the computer on which the page on which the web beacon was placed was loaded, the URL number of the page, the time of loading the page, the type of browser, as well as information contained in cookies, in order to assess the effectiveness of our advertisements. This data will be archived and used for statistical analysis and evaluation of the global traffic of users of the Website.

Below is the current list of services of our Partners and Service Providers, whose scripts we place on our websites in order to save information cookies and in information stores using other technologies, and to which we may also transfer your personal data in connection with the provision of services:

SERVICE	WEBSITE ADDRESS	PRIVACY POLICY
Facebook	https://www.facebook.com	https://www.facebook.com/policy.php
Criteo	https://www.criteo.com	https://www.criteo.com/privacy/
Firebase	https://firebase.google.com/	https://policies.google.com/privacy
Google Analytics	http://www.google.com	https://www.google.com/analytics
Facebook Pixel	https://www.facebook.com/privacy/explanation	https://www.facebook.com/business/m/privacy-and-data
Google	https://www.google.com	https://www.google.com/ads/preferences
Domodi	https://domodi.pl	https://domodi.pl/polityka-prywatnosci
SalesManago	https://www.salesmanago.pl/	https://www.salesmanago.pl/info/obowiazek-informacyjny.htm
Merce	https://pl.merce.com	https://pl.merce.com

CHANGE OF PRIVACY POLICY

The Administrator may change the Policy in the future, e.g. for the following important reasons:

Changes to applicable regulations, in particular in the field of Personal Data protection, telecommunications law, services provided electronically and regulating consumer rights, affecting the rights and obligations of the Administrator or the rights and obligations of the data subject;
Development of functionality or Electronic Services dictated by the progress of Internet technology, including the use/implementation of new technological or technical solutions, affecting the scope of the Policy.

The Administrator will each time place information on changes to the Policy on the Online Store website.