PRIVACY STATEMENT

Who is the information intended for?:

The clause describes the principles of data processing:

Customers and contractors,

Potential customers;

Marketing content recipients;

 Persons acting on behalf of customers; and is transferred in accordance with the obligation arising from Art. 13 and 14 of PEiR Regulation (EU) No. 2016/679 of 27 April 2016 on the protection of legal persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ L of 2016, 119, p. 1, as amended) - hereinafter referred to as GDPR.

Administrator data and contact details:

The administrator, i.e. responsible for ensuring the confidentiality of your data, is:

Bevo Poland Sp. z o. o with its registered office at ul. Logistyczna 5, Dąbrówka, 62 - 070 Dopiewo, phone: 61 641 41 02, e-mail: info@bevo.pl

Categories of persons and scope of processing

Purposes of processing

Legal basis

Customers and contractors. Name, surname, e-mail address, telephone number, delivery address (street, house noumber, apartment noumber, postal code, city, country), address of residence/business/registered office (if different from the delivery address), NIP noumber, customer noumber, date of birth.

Conclusion and implementation of contracts, including setting up and maintaining an online account, participating in the loyalty program and handling orders and complaints; Issuing invoices, accounting settlements, tax payments; Maintaining a profile on social media, including providing information related to the Administrator or his business, and responding to messages.

Concluded contract - art. 6 section 1 letter b GDPR; Tax regulations, in particular the Act on tax on goods and services, as well as the Accounting Act - Art. 6 section 1 letter c GDPR; The legitimate interest of the administrator, which is building the brand image and maintaining relationships with persons interested in the Company's activities - Art. 6 section 1 letter f GDPR.

Potential customers. Name, surname, e-mail address, telephone noumber.

Presenting an offer of goods and services; Establishing business cooperation; Direct marketing; Providing answers to the questions asked.

The legitimate interest of the administrator, which is the possibility of establishing business relations, presenting one's offer at the request of a potential customer and answering questions - Art. 6 section 1 letter f GDPR; Due to specific regulations, marketing activities via e-mail address or telephone noumber are carried out based on a separate consent to use the appropriate communication channel.

Recipients of marketing content.

Name, surname, e-mail address, telephone noumber.

Direct marketing, including sending a newsletter.

The legitimate interest of the administrator, which is the possibility of establishing business relations, presenting one's offer at the request of a potential customer and answering questions - Art. 6 section 1 letter f GDPR; Due to specific regulations, marketing activities via e-mail address or telephone noumber are carried out based on a separate consent to use the appropriate communication channel.

Persons acting on behalf of customers and contractors.

Name, surname, business e-mail address, business telephone noumber, position, place of work

Enabling the conclusion and implementation of a contract with the entity on behalf of which this person acts.

The legitimate interest of the administrator, which is the proper implementation of business obligations and contact with representatives of customers and contractors in related matters - Art. 6 section 1 letter f GDPR; Provisions of the Civil Code - Art. 6 section 1 letter c GDPR.

Natural persons staying on the Company's premises, whose image was recorded using video monitoring devices installed on the premises of the Administrator's enterprise. The scope of possible information processed, apart from the image of persons recorded on the monitoring device, includes in particular: vehicle registration noumber, time and place of the event covered by monitoring, and the behavior of persons whose image was recorded on the image recording device.

Defense and pursuit of claims, ensuring security on the Company's premises and ensuring information protection and compliance with professional secrets.

The legitimate interest of the administrator in the form of properly ensuring security on the Company's premises and protecting its interests - Art. 6 section 1 letter f GDPR.

Data retention time:

Categories of people Data retention time

Customers and contractors

5 years after the year of termination of the contract, and in the case of pursuing claims, until their satisfaction or limitation period. If cooperation is not established, the data will be immediately deleted, unless storing it is justified in defense against claims, then until the claims expire.

Potential customers

Until cooperation is established and a contract is concluded (from that moment on, the data is processed as customer data). If cooperation is not established, the data will be immediately deleted, unless storing it is justified in defense against claims, then until the claims expire.

Recipients of marketing content

Until you stop providing marketing information, object to such activity or consent withdrawal

Persons acting on behalf of customers and contractors

Data indicated in the contracts up to 5 years after the year of termination of the contract. Data related to correspondence for a period of 5 years after receiving the message. In the event of claims related to acting on behalf of a client or contractor, until they are satisfied or expire.

Natural persons staying on the Company's premises, whose image was recorded using video monitoring devices installed on the premises of the Administrator's enterprise

In relation to video monitoring on the Company's premises, data is stored in the video monitoring system for 7 days from the date of recording and then overwritten; in the event that image recordings constitute evidence in proceedings conducted pursuant to law or information has been received that they may constitute evidence in such proceedings, the deadline specified above is extended until the final conclusion of the proceedings.

Rights of legal persons:

Every person has the right:

To withdraw consent on the basis of which the data is processed; To request from the Administrator access to one’s personal data, rectification, deletion or limitation of processing, or the right to object to the processing, as well as the right to transfer data. In order to exercise your rights, please contact the Administrator in writing, by e-mail or by phone.

Right to make a complaint:

Each person whose data is processed by the Administrator has the right to submit a complaint about unlawful processing to the President of the Personal Data Protection Office (Information on the rules for submitting complaints: https://uodo.gov.pl/pl/83/155).

Data recipients:

The recipients of your personal data may only be entities that are entitled to receive them under the law. In addition, your data may be made available to couriers, postal operators, hosting providers, mail servers, accounting offices, human resources offices, debt collection companies, law firms, entities ensuring the correct operation of services such as a website or a mail sending program, and other entities. when it is necessary to achieve a specific goal.

Data source and scope of data provided:

The administrator obtains data directly from data subjects.

However, data of persons acting on behalf of customers and contractors may be transferred to the Administrator in the content of concluded contracts or orders. The scope of such data includes name, surname, position, place of work and business contact details.

The administrator may also obtain data from publicly available sources, such as the National Court Register, CEIDG, or the white list of taxpayers, in order to attempt to establish cooperation or verify the customer/contractor's registration data. The scope of the data obtained is consistent with the scope of information publicly available in these registers. In addition, the Administrator also obtains data from sources other than the data subject, for example as a result of purchasing a marketing database.

Automated processing, including profiling:

Your personal data will not be processed in an automated manner (including in the form of profiling) that may produce legal effects for you or similarly significantly affect your situation.

Information on data transfer outside the European Economic Area:

Personal data may be transferred to countries/international organizations outside the European Economic Area when, based on a decision of the European Commission, these countries/organizations have been recognized as ensuring an adequate level of protection of personal data to the level of protection applicable in the European Economic Area or provided that appropriate safeguards are applied, which may consist in the use of binding corporate rules, standard data protection clauses adopted by the European Commission, standard data protection clauses adopted by the President of the Office for Personal Data Protection or contractual clauses allowed by the President of the Office for Personal Data Protection, and copies thereof may be obtained upon request submitted in the manner indicated below.

Cookies:

The website and online store operating at: https://www.bevo.com/pl-pl/ enable the collection of information about the user via cookies and similar technologies, the use of which most often involves installing this tool on the user's device (computer, smartphone, etc.).

Cookies are small pieces of text that are downloaded to the hard drive of the devices from which the user connects to the content of our website. Cookies do not harm computers or the files on them. Thanks to cookies, we collect information from devices through which the user accesses the website and online store, as well as information about the group's products and services. We use data regarding the website content viewed by remembering user preferences and settings. Moreover, using analytical cookies, we would like to find out what services, information and links are popular when customers browse our websites. Cookies are served by a well-known external company - Google.

The information collected using cookies is used for:

 determining the noumber of visitors on websites,

determining the amount of time visitors spend on websites,

determining the order in which visitors view individual pages,

website optimization,

assessing which page elements require modification,

reading browser settings in order to optimize the functionality of websites and the information contained therein,

remembering preferences and settings, such as location,

transferring information from one website to another to eliminate the need to provide the same data each time,

loading pages uniformly, ensuring quick access to them,

enabling you to respond to the content of the pages.

Information obtained via cookies and similar technologies is not combined with other user data and is not used to identify them by the Administrator.

The user can set the browser to block specific types of cookies and other technologies, for example by specifying that only those necessary for the correct display of the website will be allowed. By default, most browsers allow the use of all cookies, but the user can change these settings at any time and can also delete already installed cookies. Each browser enables such operation through one of the options available in the settings or preferences.

The user can also use the website in the so-called incognito mode, which blocks the possibility of collecting data about his visit.

Using the website without changing browser settings, i.e. accepting cookies and similar technologies by default, constitutes consent to their use for the purposes specified above. The administrator does not use the information obtained for marketing purposes.

Data related to network traffic analysis collected via cookies and similar technologies may be stored until the cookie expires. Some cookies never expire, therefore the data storage time will be equivalent to the time necessary for the administrator to achieve data collection purposes, such as ensuring security and analyzing historical data related to traffic on the website https://www.bevo.com /pl-pl/

We use two types of cookies or similar technologies, depending on their lifespan:

session - files stored on the user's device until the user logs out or leaves the website,

permanent - files stored on the user's device until they are deleted by the user or until the cookie expires within the period specified in the cookie specification.

The Administrator and other entities providing services to him (e.g. analytical and statistical) use cookies for various purposes, which can be divided into the following categories:

 required cookies, necessary to use the website:

cookies with data entered by the user (session identifier) for the duration of the session (user input cookies);

authentication cookies used for services requiring authentication for the duration of the session (authentication cookies); cookies used to ensure security, e.g. used to detect authentication abuse (user centric security cookies);

multimedia player session cookies (e.g. flash player cookies), for the duration of the session (multimedia player session cookies)

Functional cookies that facilitate the use of the website:

persistent cookies used to personalize the user interface for the duration of the session or slightly longer (user interface customization cookies),

cookies used to monitor traffic on the website, i.e. data analytics - these are files used to analyze how the user uses the websites, to create statistics and reports on the functioning of the websites.

Facebook social plugin:

We use the Facebook social plug-in on our websites and blog. If this plug-in is activated, your browser establishes a direct connection to the servers of the relevant social network as soon as you open a page on our website. The content of the plug-in is transferred from the social network directly to your browser and incorporated into the website. Of course, you can deactivate the plug-in with one click.

The purpose and scope of data collection and the further processing and use of data by Facebook as well as the related rights and setting options to protect your privacy can be found in the privacy policy of Facebook or the websites. The link can be found below. If you do not want Facebook to collect data about you through our website, you must log out of these networks before visiting our websites.

We use a plug-in from the social networking site facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") on our websites. The link to Facebook's Privacy Policy can be found here: Facebook Privacy Policy https://www.facebook.com/about/privacy/

Contact details:

Requests, declarations and all correspondence regarding personal data should be sent by phone to: 61 641 41 02 / in writing to the following address: Bevo Poland Sp. z o. o. based in Dopiewo, ul. Logistyczna 5, Dąbrówka, 62 - 070 Dopiewo / by e-mail to the e-mail address: info@bevo.pl

 Update:

The Privacy Policy is verified on an ongoing basis and updated, if necessary. The current version of the Privacy Policy has been adopted and is valid from January 1, 2023.

Personal data administrator

Bevo Poland Sp. z o. o