PRIVACY POLICY

This document (hereinafter referred to as: „Privacy Policy”) contains information concerning the processing of data by BUGAŁA MANUFACTURING sp. k. with its registered seat in Częstochowa, 98 Legionów Street, entered into the Register of Entrepreneurs kept by the District Court in Częstochowa,
XVII Economic Division of the National Court Register under KRS number: 0001089546,
NIP: 9492245745, REGON: 387534776 personal data in connection with the use of the website www.bugala.pl (hereinafter: „Website” or „Portal”).
We ensure that we process personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons
in relation to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) (hereinafter: „RODO”), the Data Protection Act of 10 May 2018 (as amended) and any other legislation imposing data protection obligations on us.
Therefore, on the basis of Articles 13(1) and 13(2) of the RODO, we inform you that:

1 The controller of your personal data is:

BUGAŁA MANUFACTURING sp. k. with its registered seat in Częstochowa, ul. Legionów 98, entered into the Register of Entrepreneurs kept by the District Court in Częstochowa, XVII Economic Division of the National Court Register under the KRS number: 0001089546, NIP: 9492245745, REGON: 387534776 (hereinafter: „Administrator”).

You can contact the Administrator as follows:
a) by post, to the following address: BUGAŁA MANUFACTURING sp. k., 98 Legionów Street, 42-200 Częstochowa,
b) via e-mail: info@bugala.pl,
(c) by telephone, at: 34 360 23 83 (for calls from landlines) or +48 607 977 990 (for calls from mobile phones), Monday to Friday between 8:00 and 16:00.

2. The personal data you provide is processed for the following purposes:

1) Conclusion and execution of the sales contract
type of personal data processed: first name, surname, company name, Tax Identification Number, correspondence address, registered office address, e-mail address, telephone number, bank account number;
basis for processing: Article 6(1)(b) of the RODO, i.e. processing for the purpose of taking action at your request, prior to entering into a contract and processing necessary for the performance of a contract to which you are party (in particular, confirmation of an order or shipment of goods, contacting you about it);
data retention period: the period of performance of the sales contract, as well as the period required by law (in particular for tax or accounting reasons), unless a longer period results from their retention in the event of possible claims for the period of limitation prescribed by law or for other purposes resulting from the fulfilment of the Administrator's legitimate interests. In any case, the longer period of retention of Personal Data shall be decisive.
2) Newsletter
type of personal data processed: e-mail address;

basis for processing: Article 6(1)(b) RODO, i.e. processing necessary for the provision of the newsletter services, i.e. the performance of a contract to which you are a party;

retention period: until you object to the processing of your personal data.

3) Provision of marketing services
type of personal data processed: e-mail address, telephone number;
basis for processing: Article 6(1)(b) of the RODO, i.e. processing necessary for the provision of marketing services consisting of sending information on current offers, information on competitions organised, i.e. the performance of a contract to which you are a party;
retention period: until you object to the processing of your personal data.
4) Enabling contact with the Administrator via the contact form

type of personal data processed: e-mail address, telephone number;

basis for processing: Article 6(1)(b) RODO, i.e. processing necessary to enable you to contact us via the contact form on the Administrator's Website, i.e. to take action on your request;

retention period: until you object to the processing of your personal data.

5) Preparation of a dedicated offer and pricing of the product
type of personal data processed: name, surname, e-mail address, telephone number, registered office address, VAT number;
basis for processing: article 6(1)(b) of the RODO, i.e. processing necessary for the provision of the service consisting in the preparation and sending to you of a dedicated offer and a quotation of the product(s) by the Administrator, i.e. the performance of a contract to which you are a party;
retention period: until you object to the processing of your personal data.

6) Receive requests for individual technical support and maintain an account on the Portal for the requests sent
type of personal data processed: name, surname, e-mail address, telephone number, postal address, registered office address, tax identification number (NIP);
basis for processing: Article 6(1)(b) of the RODO, i.e. processing necessary for the provision of the service of accepting requests for individual technical support and maintaining an account on www.bugala.pl consisting of handling requests sent to the Administrator, i.e. the performance of a contract to which you are a party;
retention period: until you object to the processing of your personal data.

7) Determination, investigation and enforcement of claims and defence against claims in proceedings before courts and other state authorities
type of personal data processed: name, surname, company name, Tax Identification Number, correspondence address, registered office address (if different from correspondence address), e-mail address, telephone number;
basis for processing: Article 6(1)(f) of the RODO, i.e. processing for the purposes of our legitimate interest in establishing, pursuing and enforcing claims and defending against claims in proceedings before the courts and other state authorities;
retention period: until the expiry of the limitation period for claims concerning the performance of the contract or until the end of initiated and pending proceedings before courts and state authorities. In each case, the longer storage period for personal data is decisive.

8) Fulfilment of legal obligations arising from legislation, in particular tax and accounting legislation
type of personal data processed: first name, surname, company name, Tax Identification Number correspondence address, registered office address (if different from correspondence address), e-mail address, telephone number, bank account number;
basis for processing: Article 6(1)(c) RODO, i.e. the processing is necessary for the fulfilment of the Administrator's legal obligations under the law, in particular tax and accounting legislation;
data retention period: until the expiry of the legal obligations incumbent on the Controller which justify the processing of personal data.

3 Voluntariness of providing personal data

The provision of personal data by you in the cases referred to in point 2 above is voluntary, but is a condition for the conclusion of a contract or the provision of services by us, in particular electronically supplied services.

4. your rights in relation to the processing of your personal data by the Controller

At any time, you have the right to:
(a) to object to the processing of your personal data carried out for the purposes of the legitimate interests of the Controller (where there are no other valid legitimate grounds for processing overriding your interests),

(b) to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place where the alleged infringement was committed;
In Poland, the supervisory authority is the President of the Office for Personal Data Protection (ul. Stawki 2,
00-193 Warsaw),

c) access to personal data (including, in particular, information on which personal data are processed or a copy thereof, the purposes of processing, the categories of personal data concerned, information on the recipients or categories of recipients to whom the data have been or will be disclosed, the intended period of storage of personal data or the criteria for determining that period, information on the right to request from the Controller rectification, erasure, restriction of processing of personal data and to lodge an objection, information on the right to lodge a complaint with a supervisory authority and, if the data have not been collected from you, information on their source),

(d) to request the rectification of personal data,

e) request the restriction of the processing of personal data, in the cases referred to in Article 18 of the RODO;

(f) request the erasure of personal data in the circumstances referred to in Article 17 of the RODO;

(g) portability of personal data under the terms of Article 20 of the RODO,

(h) to withdraw any consent given to the Administrator at any time (whereby withdrawal of consent does not affect the lawfulness of the processing carried out by the Administrator before its withdrawal).
If you make any of the above-mentioned requests, the Administrator will inform you without undue delay - and in any case within one month of receipt of the request - of the action taken in relation to your request.
If it is necessary to extend the one-month period by a further two months due to the complexity of the request or the number of requests, we will inform you within one month of receipt of the request, stating the reasons for the delay.

5 Recipients of personal data

Each recipient of the personal data processed by the Controller is primarily determined by the scope of the services you use.
The catalogue of data recipients also derives from the consent you have given or from the law and is further specified as a result of your actions on the Website.
To a limited extent, the Administrator's partners may be involved in the processing of your personal data, in particular, entities that technically support the running of the Website, providers of hosting or ICT services, carriers or intermediaries that carry out the shipment of orders, companies that maintain the software, as well as providers of legal, accounting and consultancy services.

6 Automated decision-making, profiling

We do not make automated decisions about you or use profiling.
We may display marketing content to you that is tailored to your preferences as determined by your online behaviour, pages visited or clicks. However, we only use the anonymous information stored in the cookies which you have consented to the use of for this purpose. By changing the cookie settings in your browser or revoking your consent, you can prevent the display of content which has been selected for you. You can find more information about this in the Cookie Policy.

7. server logs

The use of the Website involves sending requests to the server on which the Website is stored. Each such query that is directed to the server is recorded in the server logs.
The data stored in the server logs is not linked to specific users of our website and is not used by us to identify you.
The logs include, among other things, the IP address, date and time of the server, information about the web browser and operating system you are using.
The server logs are exclusively ancillary material for the administration of the Website, saved for an indefinite period of time, in particular for analytical purposes. The content of the logs is not disclosed to anyone except those authorised to administer the server.

8 Transfer of data outside the European Economic Area or to an international organisation

We use Google's services to analyse traffic on the Website and to build statistics on this.
Google, in order to provide us with these services, may collect data and store it on Google LLC servers located in the USA. Google LLC is listed as a participating entity
in the Privacy Shield programme
(link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active),
and uses model contractual clauses on data security approved by the European Commission.

9 Amendments to the Privacy Policy

The Administrator may change the Privacy Policy in the future.
In the event of a change to the Privacy Policy, the Administrator shall each time post a notice of such change on the Website, publishing the new version of the Privacy Policy with an appropriate date.
If you have any questions or concerns regarding the rules for processing personal data through the Website, please contact the Administrator. You can find the Administrator's contact details in point 1 of the Privacy Policy.