PRIVACY POLICY

version 4.0

Privacy Policy

 

I. PERSONAL DATA

This privacy policy has been adopted following the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (OJ L 119/1, 4.5.2016, hereinafter referred to as the GDPR). The goal of this policy is
in particular to comply with the information obligation referred to in Articles 13 and 14 of the GDPR.

 

 

  1. Definitions

The following terms are used in this policy:

1) We, BIELMAR, Data Controller – Zakłady Tłuszczowe “BIELMAR” Sp. z o.o., with registered office in
in Bielsko-Biała at ul. Sempołowskiej 63, entered in the register of entrepreneurs of the National Court Register by the District Court in Bielsko-Biała, 8th Commercial Division, under number 49583, NIP (Tax ID): 547-01-68-857, REGON (Business ID): 070487588, with a share capital of PLN 4,661,000.00.

2) You – any person whose personal data are processed by BIELMAR
 

  1. Who is the data controller?

The data controller is a person defining the purposes and means of personal data processing. The controller of your personal data is Zakłady Tłuszczowe “BIELMAR” Sp. z o.o. with its registered office in Bielsko Biała. 

 

  1. What personal data do we process?

In connection with our activities, we process in particular the personal data of our business partners being natural persons (including customers, suppliers, etc.), contact persons appointed by the said business partners (including sales representatives, persons appointed to be in charge of the performance of joint projects, drivers, etc.), persons with whom we conduct correspondence, persons obtaining access to our premises, as well as persons interested in employment with us. The extent of the data processed is in each case adequate to the purposes of the processing.
 

  1. For what purposes do we process data?

Your personal data may be processed for the following purposes:

1) performing concluded agreements or taking steps to conclude an agreement at your request (pursuant to Article 6(1)(b) of the GDPR). In this case, the data shall be processed for the term of the agreement, as well as any further period necessary for the full exercise of the rights and obligations arising therefrom.

2) complying with our legal obligations, in particular with regard to tax law, accounting and archiving legislation, anti-money laundering legislation, etc. (Article 6(1)(c) of the GDPR). The duration of data processing is then determined by the regulations forming the basis for the respective obligation.

3) pursuing our legitimate interest (Article 6(1)(f) of the GDPR) – consisting of:
a) carrying out direct marketing of our goods and services,
b) preparing compilations, analyses and statistics, including in particular marketing research, commercial data analysis, service development planning, etc.,
c) establishing, asserting and defending claims, including debt collection,
d) conducting correspondence by means of all known technologies, including traditional mail, electronic mail (e-mail) and other methods of communication
(e.g. instant messaging, etc.),
e) establishing telephone contact,
f) initiating and maintaining business contacts,
g) ensuring that our websites are displayed correctly,
h) conducting video surveillance of our facility(ies), to the extent necessary to ensure the safety of persons and property on its (their) premises and to maintain the secrecy of information the disclosure of which could expose us to harm.

In the cases mentioned in point 3, your data will be processed for the duration of the interest in connection with which they are processed. In particular: (i) we will carry out marketing activities until you raise an appropriate objection, and (ii) video surveillance recordings will be stored for no longer than 3 months, unless otherwise required by generally applicable law.

4) your personal data may be occasionally processed for other purposes, based on relevant consent, which freely given, specific, informed and unambiguous (Article 6(1)(a) of the GDPR). In particular, the consent is the basis for the processing of data collected for the purposes of recruitment procedures (included in CVs, etc.).

In such cases: (i) your data will be processed for a period of time adequate to the purpose indicated in the consent, (ii) you have the right to revoke your consent at any time, without affecting the lawfulness of the processing performed on the basis of the consent before its revocation.
 

  1. Is it obligatory to provide personal data?

You are under no obligation to share your personal data with us. Nevertheless, refusal to do so may make it possible to conclude an agreement with us or perform the agreement concluded with us or may prevent us from carrying out other activities (e.g. sending correspondence, gaining access to the premises, participating in the recruitment process, etc.).
 

  1. Can data be processed in processes involving automated decision-making, including “qualified” profiling?

At present, we do not use any operations involving automated decision-making that produce legal effects on the addressees or significantly affect them in any similar way. If we implement such personal data processing operations in the future, we will ensure compliance with the relevant legislation, including Article 22 of the GDPR.
 

  1. With whom can we share your personal data?

Your personal data may be shared only with third parties if we are obliged or authorised to do so by law. The recipients of your data may be, in particular:

1) processors, including:
a) persons operating our infrastructure or IT systems, as well as persons disposing of redundant documentation or data carriers,
b) subcontractors participating in the performance of obligations incurred towards you,
c) persons providing services related to the execution or improvement of the sales process or the performance of services (e.g. payment agents, couriers or carriers, advertising agencies, experts involved in complaints procedures),
d) debt collectors on our behalf, persons providing audit or advisory services to us, e.g. legal, tax or accounting assistance.

2) other data controllers, including:
a) public administrations entitled to request access to data,
b) our related companies,
c) vehicle importers,
d) other entities – in cases where the nature of the services provided by them to us results in the indicated entities independently defining the purposes and means of personal data processing and thus becoming personal data controllers. This may include in particular the following: advertising agencies, agencies involved in the organisation of competitions or promotional events, banks, couriers and carriers, as well as entities cooperating with us in handling accounting, tax or legal matters,
e) purchasers of debts owed to you if we decide to dispose of such debts, in particular due to the existence of significant payment arrears.

We will not disclose your personal data to any persons who are not authorised to process them.

 

  1. Can your personal data be transferred outside the European Economic Area (EEA)?

Some of your personal data processed within our IT systems may be transferred outside the European Economic Area for technical reasons, based on the agreements concluded where they include a hosting service. In this case, your data are secured in each case in the manner required by generally applicable legislation, in particular through the use of standard contractual clauses (SCC).
 

  1. What rights do you have in relation to data processing?

You have a number of rights, which we respect and implement in accordance with the principles set out in the GDPR:

In particular, you can request us to:


1) provide you with access to the data we process (including information about our processing of your data or the provision of a copy of your data),

You have the right to request confirmation from us as to whether your data are processed by us and, if they are, to obtain information on, inter alia, the purpose for which we process them and to what extent, the legal basis for processing the data and how long we intend to do so.

2) rectify (correct) your data,

If your data are outdated, incomplete or have been incorrectly recorded, you can request us to rectify them. The rectification of data should be understood as an element of data security, as, for example, if we have an outdated mailing address, there is a risk that information addressed to you will fall into the wrong hands.

3) restrict the processing (suspend data operations or not erase data),

This right can only be exercised at the request of the data subject and only in the situations listed in Article 18 of the GDPR.
The restriction of processing should instead cover the data indicated in the request sent.

4) erase your data (“the right to be forgotten”),

Any person whose data are processed by the Controller has the right to request that their data be erased. It is important to note that this right is not absolute; in some specified cases, the Controller is obliged to erase personal data without undue delay. This right is always available if you have given your consent to the processing of your data and there is no other legal basis for data processing.

5) transfer your data to another Controller,

Upon your request, we are obliged to collect the data previously obtained from you and transfer them to you in a structured file or send the data directly to another controller. You have the right to data portability if we have entered into an agreement with you or process your data on the basis of consent.

6) object to data processing,

The data subject has the right, at any time, to object to the processing of their personal data based on our legitimate interests. If the personal data are processed for marketing purposes, we will immediately cease such processing; if the processing is based on another type of interest, we will cease such processing unless we demonstrate that the said interest overrides your interests, rights and freedoms or there are grounds for establishing, asserting or defending claims.

7) not to be subject to decisions based on automated processing,

If decisions are based on automated processing and profiling, the data subject shall have the right to object to such processing unless the processing is carried out under Article 22(2) of the GDPR.

8) revoke the consent given for the processing of personal data (where the processing of personal data is based on freely given consent).

The data subject has the right to revoke consent at any time. The revocation of consent does not affect the lawfulness of processing carried out on the basis of consent before it was revoked.

We have developed a request form for the exercise of rights, which you can use when making a request.


Request for the exercise of rights – a downloadable form.

Requests may be sent in particular as set out in point 13 below and will be handled in accordance with the relevant provisions, including Articles 7 and 15–22 of the GDPR.
 

  1. Complaint to the supervisory authority

If you believe that the processing of data concerning you violates the applicable legislation, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection.
 

  1. Place of publication and updates of the privacy policy

This privacy policy may be revised from time to time. The current version of the policy will be available at all times on our website at www.bielmar.com.pl.
 

  1. How can you contact us?

If you have any questions about how we use your personal data, you can contact us by email or by post at the following addresses: 


Zakłady Tłuszczowe BIELMAR Sp. z o.o.
Sempołowskiej 63, 43-300 Bielsko-Biała
with a note: “personal data protection”
email: daneosobowe@bielmar.com.pl

 
 

II. COOKIES POLICY – COOKIES

What are cookies?

Cookies are small text files stored in the User's device. They are created by your web browser and store settings and information needed (and often necessary) for the proper functioning of the website.

 Cookies can be divided into two basic groups based on their functionality:

  • required (necessary) – they are used for the proper functioning of the website and to ensure security. You cannot disable them; otherwise our website will not function properly,
  • functional (statistical, advertising) – they make it possible to “remember” selected settings, influence interface personalisation and collect statistical information about visitors to our website.

 

Functional cookies.

In addition to necessary cookies, some of our websites may use functional cookies.

You can decide for yourself whether or not the web browser you are using will accept cookies. You can delete stored cookies on your device. Just clear your browser's browsing history. This will delete all cookies from all websites you have visited. Please note, however, that some website functions may be restricted or even blocked if cookies are not accepted.

By using this website you can accept cookies according to your browser settings.

Details on how to manage cookies from specific websites can be found in the privacy and cookie settings of your chosen browser.

If you give your consent to tracking, your data will be processed in order to adjust the website settings, create pseudonymised statistics or display personalised (advertising) content. After selecting “Go to settings”, you will be shown additional information about cookies and the purposes of their processing. At this point, you can make detailed choices about cookies.

We may process functional cookies for three main purposes:

  • to analyse website traffic statistics,
  • to address advertising to you elsewhere on the Internet,
  • to use social plug-ins.
     

On our Website, which uses cookies, you can manage your cookie settings in order to, for instance, revoke or give your consent again for particular groups of tools that we use on the Website, without our knowledge and intervention. For more information on how to manage your cookie settings on a website you visit, please see the Privacy Policy on this website.


Third party cookies.

Some of our pages display content from third parties such as YouTube, Facebook or Instagram.
If you do not view this type of content, no third party cookies will be installed on your device.

If you go to a third party website, you will be subject to a separate privacy and data protection policy for that website. Please read the privacy and data protection policies of the individual websites:
https://www.youtube.com/intl/ALL_pl/howyoutubeworks/our-commitments/protecting-user-data/
https://www.facebook.com/about/privacy

Legal basis for personal data processing in connection with cookies.

The legal basis for the processing of personal data in connection with cookies marked as “necessary” is Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the Controller's legitimate interests). This legitimate interest is the correct display of our websites. In the case of cookies marked as “functional,”, the legal basis for the processing of your data is your freely given consent, i.e. Article 6(1)(a) of the GDPR.


This privacy policy may be revised. The current version of the policy will be available at all times on our website at https://bielmar.pl/rodo/polityka-prywatnosci.