PRIVACY AND COOKIES POLICY
This Privacy Policy (hereinafter: “Policy“) contains information on the processing of your personal data in connection with the use of the website: https://bb-g.pl (hereinafter: “Website“).
Personal data administrator
The administrator of your personal data is Big Brands Group Daoudo Meftah Spółka Komandytowo – Akcyjna with its registered office in Stara Bukówka (registered office address: ul. Warszawska 22, 96-321 Stara Bukówka), entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the city of Łódź – Śródmieście in Łódź, 20th Commercial Division of the National Court Register, under KRS number: 0000952339 , with NIP: 701-03-38-388 (hereinafter: “Administrator”).
Contact with the Administrator
In all matters related to the processing of personal data, you can contact the Administrator electronically by sending an e-mail to the following address: contact@bb-g.pl.
Personal data protection measures
The administrator applies modern organizational and technical security measures to ensure the best protection of your personal data and guarantees that it processes them in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: “GDPR“), the Act of May 10, 2018. on the protection of personal data and other provisions on the protection of personal data.
Information about processed personal data
Using the Website requires the processing of your personal data. Below you will find detailed information about the purposes and legal grounds for processing, as well as the processing period and the obligation or voluntarily to provide them.
|
Purpose of processing |
Processed personal data |
Legal basis |
|
Contact form support | 1) name and surname 2) e-mail address 3) address of residence/business activity | article 6 sec. 1 lit. f GDPR (processing is necessary in order to implement the Administrator’s legitimate interest, in this case, to reply to the message sent or to send commercial information by electronic means |
|
Application of the above providing personal data is voluntary, but necessary in order to receive a response to the message sent (the consequence of not providing them will be the inability to receive a response). The administrator will process the above. personal data until the objection is successfully raised or the purpose of processing is achieved. | ||
|
Purpose of processing |
Processed personal data |
Legal basis |
| Subscribing to the Newsletter | 1) name and surname 2) e-mail address | article 6 sec. 1 lit. f GDPR (processing is necessary in order to implement the Administrator’s legitimate interest, in this casesending commercial information by electronic means |
| Application of the above Providing data is voluntary, but necessary to receive the Newsletter, failure to provide personal data makes it impossible to receive the Newsletter. The administrator will process the above. personal data until the objection is successfully raised or the purpose of processing is achieved. | ||
|
Purpose of processing |
Processed personal data |
Legal basis |
| Meeting booking form support | 1) name and surname 2) e-mail address 3) address of residence/business activity | article 6 sec. 1 lit. f GDPR (processing is necessary in order to implement the Administrator’s legitimate interest, in this case booking a meeting with the Administrator’s representative) |
| Application of the above providing personal data is voluntary, but necessary in order to book a meeting with a representative of the Administrator (the consequence of not providing them will be the inability to receive a response). The administrator will process the above. personal data until the objection is successfully raised or the purpose of processing is achieved. | ||
|
Purpose of processing |
Processed personal data |
Legal basis |
|
Determination, investigation or defense against claims |
1) name and surname/company, 2) e-mail address, 3) address of residence/business activity 4) PESEL number 5) tax identification number |
article 6 sec. 1 lit. f GDPR (processing is necessary to implement the Administrator’s legitimate interest, in this case to establish, investigate or defend against claims that may arise in connection with the use of the Website) |
|
Application of the above personal data is voluntary, but necessary to determine, investigate or defend against claims that may arise in connection with the use of the Website (the consequence of not providing the above-mentioned data will be the Administrator’s inability to take the above-mentioned actions) The administrator will process the above. personal data until the expiry of the limitation periods for claims that may arise in connection with the use of the Website. | ||
|
Purpose of processing |
Processed personal data |
Legal basis |
|
Fulfillment of obligations related to the protection of personal data |
1) name and surname 2) contact details provided by you (e-mail address, correspondence address, telephone number) |
article 6 sec. 1 lit. f GDPR (processing is necessary to fulfill the legal obligation incumbent on the Administrator, in this case the obligations arising from the provisions on the protection of personal data) |
|
Application of the above personal data is voluntary, but necessary for the proper performance by the Administrator of the obligations arising from the provisions on the protection of personal data, including exercising the rights granted to you by the GDPR (the consequence of not providing the above-mentioned data will be the inability to properly exercise the above-mentioned rights). The administrator will process the above. personal data until the expiration of the limitation periods for claims for violation of the provisions on the protection of personal data. | ||
|
Purpose of processing |
Processed personal data |
Legal basis |
|
Analysis of your activity on the Website |
1) date and time of the visit 2) device IP number 3) type of operating system of the device 4) approximate location 5) type of web browser 6) time spent on the Website 7) visited subpages and other activities undertaken as part of the Website |
article 6 sec. 1 lit. f GDPR (processing is necessary to implement the Administrator’s legitimate interest, in this case obtaining information about your activity on the Website) |
|
Application of the above personal data is voluntary, but necessary for the Administrator to obtain information about your activity on the Website (the consequence of not providing them will be the Administrator’s inability to obtain the above-mentioned information). The administrator will process the above. personal data until the objection is successfully raised or the purpose of processing is achieved. | ||
|
Purpose of processing |
Processed personal data |
Legal basis |
|
Administration of the Website |
1) IP address 2) server date and time 3) information about the web browser 4) information about the operating system The above data is automatically saved in the so-called server logs, each time you use the Website (administrating it without the use of server logs and automatic saving would not be possible) |
article 6 sec. 1 lit. f GDPR (processing is necessary to implement the Administrator’s legitimate interest, in this case to ensure the proper operation of the Website) |
|
Application of the above personal data is voluntary, but necessary to ensure the proper operation of the Website (the consequence of not providing them will be the inability to ensure the correct operation of the Website). The administrator will process the above. personal data until the objection is successfully raised or the purpose of processing is achieved. | ||
Profiling
In order to create your profile for marketing purposes and to direct direct marketing to you (e.g. advertisements on the Facebook social network) tailored to your preferences, the Administrator will process your personal data in an automated manner, including profiling – however, this will not cause any no legal consequences for you
similarly significantly affect your situation.
The scope of profiled personal data corresponds to the scope indicated above in relation to the analysis of your activity on the Website.
The legal basis for the processing of personal data for the above purpose is art. 6 sec. 1 lit. f of the GDPR, according to which the Administrator may process personal data in order to pursue its legitimate interest, in this case conducting marketing activities tailored to the preferences of recipients. Application of the above personal data is voluntary, but necessary for the implementation of the above. purpose (the consequence of not providing them will be the Administrator’s inability to conduct marketing activities tailored to the preferences of recipients).
The administrator will process personal data for the purpose of profiling until the objection is successfully raised or the purpose of processing is achieved.
Also remember that you can disable Facebook Pixel by going to cookie settings.
Recipients of personal data
The recipients of personal data will be the following external entities cooperating with the Administrator:
- hosting provider;
- internet domain provider;
- companies providing tools for analyzing activity on the Website and directing direct marketing to people using it (including Google Analytics);
In addition, personal data may also be transferred to public or private entities, if such an obligation results from generally applicable provisions of law or a final decision.
Transfer of personal data to a third country
Due to the Administrator’s use of tools such as Google Analytics or Facebook Pixel, your personal data may be transferred to the following third countries: Great Britain, Canada, USA, Chile, Brazil, Israel, Saudi Arabia, Qatar, India, China, Korea South, Japan, Singapore, Taiwan (Republic of China), Indonesia and Australia. The basis for the transfer of data to the above-mentioned third countries are:
- in the case of Great Britain, Canada, Israel and Japan – decisions of the European Commission stating the appropriate level of protection of personal data in each of the above-mentioned third countries;
- for the US, Chile, Brazil, Saudi Arabia, Qatar, India, China, South Korea, Singapore, Taiwan (Republic of China), Indonesia and Australia, adequacy contractual clauses in line with the standard contractual clauses set out in the Commission Implementing Decision ( EU) 2021/914 of June 4, 2021 on standard contractual clauses for the transfer of personal data to third countries under Regulation (EU) 2016/679 of the European Parliament and of the Council.
You can obtain from the Administrator a copy of the data transferred to a third country.
Rights
In connection with the processing of personal data, you have the following rights:
- the right to information which personal data concerning you are processed by the Administrator and to receive a copy of this data (the so-called right of access). The release of the first copy of the data is free of charge, the Administrator may charge a fee for the next ones;
- if the processed data becomes outdated or incomplete (or otherwise incorrect), you have the right to request their rectification;
- in certain situations, you can ask the Administrator to delete your personal data, e.g. when:
- the data will no longer be needed by the Administrator for the purposes of which he informed;
- you have effectively withdrawn your consent to data processing – unless the Administrator has the right to process data on a different legal basis;
- the processing is unlawful;
- the need to delete the data results from the legal obligation imposed on the Administrator;
- in the event that personal data is processed by the Administrator on the basis of consent to processing or in order to perform the Agreement concluded with him, you have the right to transfer your data to another administrator;
- in the event that personal data is processed by the Administrator on the basis of your consent to the processing, you have the right to withdraw this consent at any time (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal);
- if you decide that the processed personal data are incorrect, their processing is unlawful, or the Administrator no longer needs specific data, you can request that the Administrator does not make any operations, but only stored them;
- you have the right to object to the processing of personal data, the basis for which is the legitimate interest of the Administrator. In the event of an effective objection, the Administrator will stop processing personal data in the above-mentioned manner. purpose;
- you have the right to lodge a complaint with the President of the Office for Personal Data Protection when you consider that the processing of personal data violates the provisions of the GDPR.
Cookies
- The administrator informs that the website uses “cookies” (cookies), installed on your end device. These are small text files that can be read by the Administrator’s system, as well as by systems belonging to other entities whose services the Administrator uses (e.g. Facebook, Google).
- The administrator uses cookies for the following purposes:
- ensuring the proper operation of the Website – thanks to cookies, it is possible to operate the Website efficiently, use the functions available on it and conveniently move between individual subpages;
- increasing the comfort of browsing the Website – thanks to cookies, it is possible to detect errors on some subpages and improve them constantly;
- creating statistics – cookies are used to analyze how users use the Website (e.g. how many users visit it, how long they stay on it, which content arouses the greatest interest). Thanks to this, it is possible to constantly improve the Website and adapt its operation to the preferences of users.
- conducting marketing activities – thanks to cookies, the Administrator can direct advertisements to users tailored to their preferences.
- The administrator can place both permanent and temporary files on your device. Temporary files are usually deleted when the browser is closed, while closing the browser does not delete permanent files.
- Data collected using cookies do not allow the Administrator to identify you.
- The administrator uses the following tools that use cookies:
- necessary cookies of the Website – these files enable the proper and safe functioning of the Website (they are used, among others, to adjust the layout of the website to the screen of the device), therefore turning them off is not possible (the operation of these files is a condition for using the Website website). Necessary cookies remain on your end device for up to 1 year;
- Google Analytics – this tool (using cookies provided by Google LLC) enables the collection of statistical data on how users use the website, including about the number of visits, duration of visits, search engine used, location. The collected data helps to improve the Website and make it more user-friendly. Cookies used by Google Analytics remain on your end device for up to 2 years;
- Google Ads – this tool (using cookies provided by Google LLC) allows you to collect data about your preferences (including subpages visited, content viewed) and allows you to direct advertisements displayed on other websites that you visit. Cookies used by Google Ads remain on your end device for up to 3 months;
- Facebook Pixel – this tool (using cookies provided by Meta Platforms Ireland Limited) allows you to determine that you have visited the Website, as well as directing you to advertisements displayed on Facebook and Instagram social networks and measuring their effectiveness. Cookies used by Facebook Pixel remain on your end device for up to 3 months.
- The Administrator uses the reCaptcha service provided by Google Inc. on its Website. This is primarily used to verify whether the data on the Website (for example, in the contact form) is entered by a human or was performed by means of automated machine processing (robot operation). The analysis starts automatically when the user visits the Website. The service includes sending the IP address and possibly other data required by Google Inc. for the operation of the reCaptcha service.
- Through most commonly used browsers, you can check whether cookies have been installed on your device, as well as delete installed cookies and block their installation in the future by the Website or other websites. Disabling or limiting the use of cookies may, however, cause quite serious difficulties in using the Website, e.g. in the form of the need to log in to each subpage, longer page loading time, restrictions on the use of functionality.
Final Provisions
To the extent not covered by this Policy, generally applicable provisions on the protection of personal data shall apply.
The policy is valid from 28/07/2023.
