Privacy policy

This Privacy Policy sets out the rules for the processing of personal data and the use of cookies in connection with the use of the website operated by BGroup Spółka z ograniczoną odpowiedzialnością Spółka Komandytowa (hereinafter: the “Controller” or “BGroup”).

The Controller takes particular care to protect users’ privacy and the security of the personal data processed. Data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and national provisions governing the protection of personal data and electronic communications.

§1 Personal data controller

The controller of personal data is:

BGroup Spółka z ograniczoną odpowiedzialnością Spółka Komandytowa
Pokrzywno 50, 86-330 Mełno
KRS: 0000723910
NIP: 8762473729
REGON: 369756769

For matters concerning the processing of personal data, the exercise of data subjects’ rights, and other issues relating to the protection of personal data, you may contact the Controller at the email address:
biuro@b-group.com.pl.

§2 Legal basis for data processing

Personal data is processed on the basis of applicable law, in particular:

Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
the Act of 10 May 2018 on the protection of personal data,
the Electronic Communications Law Act,
the Act on the provision of electronic services.

Depending on the purpose of processing, the legal basis may be:

Art. 6(1)(b) GDPR – processing necessary for the performance of a contract or to take steps prior to entering into a contract,
Art. 6(1)(c) GDPR – processing necessary for compliance with a legal obligation to which the Controller is subject,
Art. 6(1)(f) GDPR – processing necessary for the purposes of the Controller’s legitimate interests (e.g. business communication, pursuit of claims, ensuring the security of the website),
Art. 6(1)(a) GDPR – consent of the data subject (e.g. electronic marketing, analytics cookies).

§3 Scope of data processed

1. Data provided directly by the user

The Controller processes personal data provided voluntarily by the user, in particular in connection with:

registration for and use of the distributor zone,
establishing a business relationship,
contact via the contact form, email or telephone,
a request for a quotation.

This data may include in particular:

first name and surname,
email address,
telephone number,
job title,
company name and address,
content of correspondence.

2. Data collected automatically

When using the website, technical data may be collected automatically, such as:

the device’s IP address,
browser type and operating system,
information about the time of visit,
subpages visited,
the source of entry to the website,
cookie identifiers.

This data is used to ensure the proper functioning of the website, to improve its quality and to carry out statistical analyses.

§4 Purposes of data processing

Personal data is processed in particular for the following purposes:

concluding and performing commercial contracts,
handling enquiries and conducting correspondence,
maintaining user accounts in the distributor zone,
fulfilling obligations arising from legal provisions (e.g. tax, accounting),
conducting direct marketing of our own products and services,
analysing website visit statistics (Google Analytics 4),
ensuring the security of IT systems,
establishing, pursuing or defending claims.

§5 Data retention period

Personal data is stored for the period necessary to achieve the purpose for which it was collected, in particular:

for the duration of the cooperation and up to 6 years after its end – for evidentiary and claim-related purposes,
for the period required by law – in the case of accounting and tax documentation,
until consent is withdrawn – in the case of processing based on consent,
for the period resulting from the settings of analytics tools – in the case of statistical data.

§6 Data recipients

Personal data may be shared with entities cooperating with the Administrator to the extent necessary to provide the services, in particular:

hosting and IT service providers,
entities providing accounting services,
law firms,
analytics tool providers – Google Ireland Limited (Google Analytics 4),
public authorities – where the obligation to disclose arises from legal provisions.

Data is not sold or shared with third parties for commercial purposes.

§7 Transfer of data outside the European Economic Area

In connection with the use of Google Analytics 4, data may be transferred to the United States (Google LLC). The data transfer is carried out in accordance with applicable law, in particular on the basis of the European Commission’s adequacy decision regarding an adequate level of data protection (EU–US Data Privacy Framework) or using standard contractual clauses.

§8 Rights of data subjects

Every data subject has the right to:

access their personal data,
rectify their data,
erase their data,
restrict processing,
data portability,
objecting to processing,
withdrawing consent at any time,
lodging a complaint with the President of the Personal Data Protection Office.

§9 Cookies and Google Analytics 4

The website uses cookies to ensure the proper functioning of the site and – subject to consent – for analytical purposes.

Google Analytics 4 is an analytics tool provided by Google Ireland Limited. It enables analysis of how the website is used, including the number of visits, traffic sources and user behaviour.

Analytical cookies are used only after the user gives consent via the cookie banner. The user may change cookie settings or withdraw consent at any time.

§10 Data security

The Administrator applies appropriate technical and organisational measures to ensure the protection of the personal data processed, including:

connection encryption (SSL),
restricted access to data limited to authorised persons only,
IT system safeguards,
security incident response procedures.

§11 Final provisions

The Administrator reserves the right to make changes to this Privacy Policy, in particular in the event of changes to legislation, the scope of services provided or the way the website operates.

The current version of the Privacy Policy is published on the website.