Privacy Policy of the Bebe Concept Store
https://www.bebeconcept.pl
("Store")
Dear User!
We care about your privacy and want you to feel comfortable when using our services. Therefore, below we present the most important information about the principles of our processing of your personal data and cookies that are used by our Store. This information has been prepared taking into account the GDPR, i.e. the General Data Protection Regulation.
PERSONAL DATA ADMINISTRATOR
BEBE CONCEPT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office at ul. Kłopot 4/U.2.1., 01-066 Warsaw, entered into the National Court Register - register of entrepreneurs by the District Court for the Capital City of Warsaw. WARSAW IN WARSAW, 13TH COMMERCIAL DEPARTMENT OF THE NATIONAL COURT REGISTER, KRS number 0000943561, NIP 5272985225, REGON number 52096141200000, share capital PLN 2419700.00.
If you want to contact us regarding our processing of your personal data, please write to us at the following e-mail address: kontakt@bebeconcept.pl.
YOUR RIGHTS
You have the right to request:
- access to your personal data, including obtaining a copy of your data (Article 15 of the GDPR or - if applicable - Article 13(1)(f) of the GDPR),
- rectification (Article 16 of the GDPR),
- deletion (Article 17 of the GDPR),
- restrictions on processing (Article 18 of the GDPR),
- transferring data to another administrator (Article 20 of the GDPR).
And also the law:
- object at any time to the processing of your data:
- for reasons related to your particular situation - in relation to the processing of personal data concerning you, based on Art. 6 section 1 letter f GDPR (i.e. on our legitimate interests), including profiling (Article 21(1) of the GDPR);
- if personal data are processed for the purposes of direct marketing, including profiling, to the extent that the processing is related to such direct marketing (Article 21(2) of the GDPR).
Contact us if you want to exercise your rights. You can object to our use of cookies (read about them below), in particular using appropriate browser settings.
If you believe that your data is being processed illegally, you can submit a complaint to the President of the Office for Personal Data Protection.
PERSONAL DATA AND PRIVACY
Below you will find detailed information on the processing of your data depending on the activities you undertake.
1. Placing an order in the Store
| For what purpose? | |
|---|---|
| fulfillment of your order | |
| On what basis? | |
| sales contract or contract for the supply of digital content (Article 6(1)(b) of the GDPR) | legal obligation related to accounting, obliging us to process your personal data (Article 6(1)(c) of the GDPR) |
| How long? | |
| for the duration of the above-mentioned agreement | until our legal obligation related to accounting expires |
| Moreover, your data will be processed until the expiry of the period in which it is possible to pursue claims - by you or us (more information on this subject can be found in the last table of this section) | |
| What happens if you don't provide data? | |
| you will not be able to place an order | |
2. Creating an account in the Store
| For what purpose? |
|---|
| execution of the contract for the provision of account management services in the Store |
| On what basis? |
| contract for the provision of services (Article 6(1)(b) of the GDPR) |
| How long? |
| for the duration of the above-mentioned agreement |
| Moreover, your data will be processed until the expiry of the period during which it is possible to pursue claims - by you or us (more information on this subject can be found in the last table of this section) |
| What happens if you don't provide data? |
| you will not be able to create an account and use its features, such as viewing order history or checking order status |
3. Contact us (e.g. to ask a question)
| For what purpose? | |
|---|---|
| handling your inquiries or reports | |
| On what basis? | |
| contract or actions taken at your request, aimed at concluding it (Article 6(1)(b) of the GDPR) - if your inquiry or notification concerns a contract to which we are or may be a party | our legitimate interest in processing your data for the purpose of communicating with you (Article 6(1)(f) of the GDPR) - if your inquiry or notification is unrelated to the contract |
| How long? | |
| for the duration of the contract binding us or - if the contract is not concluded - until the expiry of the claims period - see the last table of this section* | until the claims period expires - see the last table of this section - or until we take into account your objection to processing* |
| Moreover, your data will be processed until the expiry of the period in which it is possible to pursue claims - by you or us (more information on this subject can be found in the last table of this section) | |
| What happens if you don't provide data? | |
| we will not be able to respond to your inquiry or report | |
4. Browser settings or other similar action allowing marketing activities
| For what purpose? |
|---|
| direct marketing, consisting in displaying personalized ads (read more about this in the "Profiling" and "Cookies" section of the Privacy Policy) |
| On what basis? |
| our legitimate interest in processing data for the above-mentioned purpose (Article 6(1)(f) of the GDPR) |
| How long? |
| until they expire or you delete cookies used for marketing purposes* |
| What happens if you don't provide data? |
| you will not receive suggestions for products or services you may be interested in |
5. You consent to receiving marketing content from us (e.g. information about special offers)
| For what purpose? | |
|---|---|
| sending marketing information, especially special offers | analysis of the effectiveness of messages sent by us, in order to establish general principles for the effective sending of messages in our activities (read more about this in the "Analytical activities" section of the Privacy Policy) |
| On what basis? | |
| Your consent to our marketing activities (Article 6(1)(a) of the GDPR) | our legitimate interest in processing data for the above-mentioned purpose (Article 6(1)(f) of the GDPR) |
| How long? | |
| until you withdraw your consent - remember, you can withdraw your consent at any time. Data processing remains lawful until you withdraw your consent. | until we take into account your objection to processing |
| Moreover, your data will be processed until the expiry of the period in which it is possible to pursue claims - by you or us (more information on this subject can be found in the last table of this section) | |
| What happens if you don't provide data? | |
| you will not receive our marketing materials, including information about our special offers | |
6. Signing up for the newsletter
| For what purpose? | |
|---|---|
| sending newsletter | analysis of the effectiveness of the content we send, in order to establish general principles for the effective sending of messages in our activities (read more about this in the "Analytical activities" section of the Privacy Policy) |
| On what basis? | |
| agreement for the provision of newsletter shipping services (Article 6(1)(b) of the GDPR) | our legitimate interest in processing data for the above-mentioned purpose (Article 6(1)(f) of the GDPR) |
| How long? | |
| until you unsubscribe from our newsletter | until we take into account your objection to processing |
| Moreover, your data will be processed until the expiry of the period in which it is possible to pursue claims - by you or us (more i formation on this subject can be found in the last table of this section) | |
| What happens if you don't provide data? | |
| you will not be able to receive information regarding the Store and our services | |
7. Taking action or omission that may give rise to claims related to the Store or our services
| For what purpose? |
|---|
| determination, investigation or defense of possible claims related to the concluded contract or services provided |
| On what basis? |
| our legitimate interest in the processing of personal data for the purpose indicated above (Article 6(1)(f) of the GDPR) |
| How long? |
| until the limitation period for claims expires or until we take into account your objection to processing* |
| What happens if you don't provide data? |
| no possibility of establishing, pursuing or defending claims |
PROFILING
As part of the Store, we perform profiling - this will take place in relation to you if you allow such activities. This profiling involves automatic assessment of what products or services you may be interested in, using information about the content you display. Thanks to this, advertisements for products or services displayed within the online services you use will be more tailored to you and your needs.
The profiling we perform does not result in decisions that produce legal effects for you or affect you in a similarly significant way.
ANALYTICAL ACTIVITIES
If you express your will to receive marketing messages or a newsletter from us, we may analyze the effectiveness of our shipment. For example, we can check whether and how it influenced the activity in our Store. Such activities will help us establish general rules for sending this type of messages in our business - e.g. regarding optimal sending hours or how to formulate effective content.
DATA SECURITY
When processing your personal data, we use organizational and technical measures in accordance with applicable law, including encryption of the connection using an SSL/TLS certificate.
COOKIES
Our Store, like most websites, uses the so-called cookies (cookies). These files:
- are saved in the memory of your device (computer, phone, etc.);
- does not change your device's settings.
In this Store, cookies are used for the following purposes:
- marketing
To learn how to manage cookies, including how to disable them in your browser, you can use your browser's help file. You can read information about this by pressing the F1 key in your browser. Additionally, you will find relevant tips on the following subpages, depending on the browser you are using:
Cookies will not be processed by us longer than 2 years from the last visit to the Store.
Using the appropriate options of your browser, you can at any time:
- delete cookies,
- block the use of cookies in the future.
In such cases, we will no longer process it.
EXTERNAL SERVICES / DATA RECIPIENTS
We use the services of external entities that support us in running our business. We entrust them with processing your data - these entities process data only on our documented instructions.
Below you will find a list of recipients of your data:
| OPERATION | DATA RECIPIENTS | TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION |
|---|---|---|
| any action in connection with the Store | entity providing us with technical/IT support | no space |
| being on the Store's website with settings allowing marketing activities | entity providing marketing services | yes – United States of America ** |
| being on the Store's website with settings allowing analytical activities | entity enabling analytical activities on the website | no space |
| placing an order in the Store | payment provider | yes – United States of America ** |
| provider of software that facilitates running a business (e.g. accounting software) | no space | |
| provider of standard office software (including e-mail) | yes – United States of America ** | |
| accounting office | no space | |
| entity providing installment system | no space | |
| subscription to the newsletter or consent to sending marketing messages | entity providing sending of newsletter or marketing messages | yes – United States of America ** |
| using the online chat available in the Store | entity providing online chat available in the Store | no space |
| your use of services provided to us in connection with the Store via social networking sites | social networks | yes – United States of America ** |
| taking part in a satisfaction survey with our services or products | entities enabling posting opinions about the Store or products and comparing them | no space |
| contact us (e.g. ask a question) | provider of standard office software (including e-mail) | yes – United States of America ** |
And also:
appropriate public authorities to the extent that we are obliged to provide them with data.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
** Due to the above, your personal data may also be processed by entities outside the European Union. The appropriate level of protection of your data, including the use of appropriate security measures, is ensured by:
- participation of these entities in the so-called Data Privacy Framework, i.e. a program established by an implementing decision of the European Commission as a set of rules guaranteeing adequate protection of your privacy - in the case of entities from the United States of America
