Polityka prywatności
Who is the Administrator of your personal data?
The administrator of your personal data, i.e. the entity deciding on the purposes and methods of their processing, is Wytwórnia Opakowań Blaszanych “Beczkopol” sp. z o. o. with its registered office in Łasin (86-320) at ul. Młyńska 78, entered into the Central Information of the National Court Register under KRS number: 0000136651, NIP 876-10-04-872, REGON: 870284162, BDO: 000022362
How can you contact us in matters related to personal data?
If you want to contact us regarding the processing of personal data, you can do so:
a) by e-mail at: sekretariat@beczkopol.com.pl
b) in writing – by traditional mail at the address: Wytwórnia Opakowań Blaszanych “Beczkopol” sp. z o. o, ul. Młyńska 78, 86-320 Łasin.
In what situations do we process your personal data?
We process personal data in particular for the purpose of:
- conclusion of the contract;
- performance of the contract;
- provision of services;
- regarding claims;
- ensuring communication;
- handling applications and complaints;
- conducting analyzes and statistics
Do you have to provide personal data?
Providing data is voluntary, however, some of the data may be necessary to use the services and perform the contract as well as their proper provision and implementation. In addition, some data is necessary to meet the legal requirements referred to below.
What data do we process?
We process only the data that is necessary to achieve the purpose for which they were collected. Depending on the type of service
provided, the scope of data may be different:
- When placing an order, the Customer provides the following data:
a. e-mail address
b. address data: zip code and city, country (country), street with house/apartment number,
c. name and surname,
d. telephone number - In the case of entrepreneurs, the above scope is additionally extended by:
a. the company of the entrepreneur
b. tax identification number
c. KRS number
d. registered office address
e. contact details - In the case of using the contact form services, the Customer provides the following data:
a. e-mail address
b. name and surname
c. telephone number
What purpose for do we process personal data?
We process personal data for the purpose necessary to conclude and perform a contract or provide a service, including handling any complaints, complaints or pursuing receivables arising from concluded contracts. The processing of some of your personal data is also necessary in order to meet the obligations arising from legal provisions, such as the obligation to store certain data for a certain period of time, collecting certain information to verify and identify the user or transferring data to authorized authorities or entities, e.g. :
1) Act of 29 September, 1994. about accounting,
2) Act of 11 March 2004. on goods and services tax,
3) Act of 16 November 2000. on counteracting money laundering and financing of terrorism,
What legal basis on do we process personal data?
We process Personal Data in accordance with applicable law, in particular in accordance with the provisions of the Regulation (GDPR) regarding personal data. The legal basis for data processing is:
- expressed consent or
- consideration of an application or request, or
- conclusion and implementation of the contract, or
- implementation of legally justified interests of the Administrator or
- fulfillment of obligations resulting from the applicable provisions of law.
How long will we process personal data?
For individual cases, the data processing time is as follows:
- if we process data on the basis of a contract, the processing will last as long as the contract lasts and the limitation
period for any claims, - if we process data on the basis of consent to processing for a specific purpose, the data will be processed until the
consent is revoked, after which it will be deleted immediately, - data that we process on the basis of the legitimate interest of the data controller – the processing period lasts until the
termination of the above-mentioned interest (e.g. the period of limitation of civil law claims) or until the data subject
objects to further such processing – in situations where such an objection is due in accordance with the law, - We process data processed in order to meet the obligations arising from applicable law for as long as it results from
these provisions.
Who are the data recipients?
The recipients of the data are persons authorized by the Administrator to use the data as part of the performance of their official duties, whom the Administrator commissions to perform such activities. In some situations, we have the right to transfer data, if necessary, in order to be able to perform my services, perform contracts, fulfill our obligations and properly comply with applicable law. When performing most of the tasks (e.g. document destruction, data storage, accounting, HR and payroll services,
legal services, marketing services), we use the help of our own employees who, on the basis of authorizations, perform specific
activities. We entrust personal data to external entities, e.g. IT companies, in order to achieve a specific goal on our behalf under
the Data Entrustment Agreement.
We provide data to the following groups:
- authorized persons, i.e. employees and associates who must have access to data to properly perform their duties,
- processing entities, in order to achieve a strictly defined purpose (e.g. a law firm, IT company, transport companies, a statutory auditor to audit financial statements),
- other recipients of data (e.g. law enforcement authorities, banks in the event of their request for information based on an appropriate legal basis in accordance with the provisions of applicable law).
Do we transfer personal data outside the European Union?
Our partners are based mainly in Poland and other countries of the European Economic Area (EEA). If it is necessary to transfer data outside the EEA, we minimize the scope of data sent outside the EEA. At the same time, we verify whether there is a risk of violation of personal data protection by these entities from outside the EEA, e.g. how their data protection process looks like and whether the data made available may potentially be of interest to third countries.
How do we protect your data?
We make every effort to provide physical, technical and organizational measures to protect personal data against accidental or
intentional destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable laws.
What are your rights and how can you exercise them?
- In connection with the processing of personal data, you have the following rights: to withdraw consent (Article 7(3) of the GDPR)
a) The customer has the right to withdraw any consent
b) Withdrawal of consent takes effect from the moment of withdrawal of consent
c) Withdrawal of consent does not affect the processing carried out by Beczkopol in accordance with the law before its withdrawal
d) Withdrawal of consent does not entail any negative consequences for the Customer, but it may prevent further
use of services which, according to the law, Beczkopol can only provide with consent - for information on the processing of personal data, the so-called “information obligation” (pursuant to Articles 12 and 13 of the GDPR),
- access to your personal data (in accordance with Article 15 of the GDPR),
- request rectification of your personal data (in accordance with Article 16 of the GDPR), i.e. correcting incorrect data and supplementing incomplete data,
- submit a request to limit the processing of your personal data (in accordance with Article 18 of the GDPR),
- the right to request the transfer of your personal data to another Administrator (in accordance with Article 20 of the GDPR),
- object to data processing for reasons related to a special situation (in accordance with Article 21(1) of the GDPR), however, this right is not absolute – i.e. despite the objection, we will still be able to process personal data if we demonstrate that there are valid, legitimate grounds for processing, overriding your rights and freedoms, or grounds for establishing, pursuing or defending claims,
- object to the processing of your personal data for the purposes of direct marketing, to the extent that the processing is related to such direct marketing. This objection does not require justification or conditions of effectiveness – in this case, we will no longer be able to process your personal data for direct marketing purposes. Withdrawal of consent does not affect the lawfulness of the processing that was made on the basis of consent before its withdrawal.
- submit a request to delete your personal data (in accordance with Article 17 of the GDPR) – the so-called “right to be forgotten”, this right can be exercised, for example, when: a. The administrator processes personal data unlawfully, b. an objection to the processing of data for marketing purposes has been submitted, c. the data must be deleted in order for the Administrator to fulfill the obligation resulting from the law;
You can exercise the above rights by submitting a relevant statement to us (the Data Administrator):
a. by e-mail at: sekretariat@beczkopol.com.pl or
b. in writing – by traditional mail at the address: Wytwórnia Opakowań Blaszanych “Beczkopol” sp. z o. o, ul. Młyńska 78, 86-320 Łasin with the note “personal data”
10. In addition, you have the right to lodge a complaint with the supervisory body, i.e. the President of the Office for Personal Data Protection (formerly GIODO).