1.Who we are and how to find us?
- The joint controllers of your personal data are:
- 1. Beso Lux Sp. z o.o. with registered office in Łódź (address:Ul. Gen. Jarosława Dąbrowskiego 234, 93-231 Łódź, Poland), entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division, KRS number: 0000689756, identified with REGON number: 367958776 and NIP number: 7292718480,
- 2. Luxobesolux Sarl with its registered office in Luxembourg (address: 4, rue Fort Wallis L-2714 Luxembourg), VAT EU LU28279037.
- The aforesaid companies have entered into an agreement for the joint controlling of personal data, which means that:
• when one of the companies obtains your personal data, the other company will also have access to it,
• both companies decide jointly how and why they process your personal data,
• this privacy policy applies to both companies,
• you can contact any of the companies to obtain information or exercise any of your other rights under the GDPR. We have established a common point of contact for this purpose - i.e. email at: GDPR@besolux.com and telephone number: +33 974 775 430.
2. How and why we process your personal data?
- ONLINE STORE CUSTOMERS
- If you are a customer of our online store, we process your personal data for the purpose of contract performance and for the purposes of accounting, tax, and consumer law-obligations (e.g. for the purposes of complaint handling).
- The legal basis for the processing of your personal data is therefore Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: GDPR), (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract) and Article 6(1)(c) of the GDPR (processing is necessary for compliance with a legal obligation to which the controller is subject).
- RECIPIENTS OF PURCHASED PRODUCTS
- If you are a person indicated as the recipient of products purchased by customers of our online store (sometimes a customer indicates a family member, neighbour, receptionist, employee, etc. as the person who will collect the products ordered by the customer), the processing of your personal data is based on the legal premise of Article 6(1)(f) of the GDPR, i.e. the premise of the legitimate interest of the controller (processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party).
- The legitimate interest in this case is our intention to perform a contract with a customer who has indicated you as the recipient of purchased products. We assume in good faith that the customer has agreed this with you before providing us with your data, or that collecting shipments is part of your job duties. We therefore assume that in processing your data in the manner described here, we are not doing so for purposes other than those for which it was obtained from you by our customer.
- CONTACT
- If you contact us, you provide us with your personal data, including the data contained in your communication, in particular: your first name and surname and your e-mail address or telephone number. Providing this data is voluntary, but necessary to contact us.
- The legal basis for processing your personal data that you provide when contacting us is Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party). The legitimate interest in this case is to contact customers of our online store and to answer queries posed by persons interested in our services and the operation of our store.
- NEWSLETTER
- If you are a subscriber to our newsletter, we process your personal data in order to send you the newsletter, with your consent. The newsletter may include paid promotions, commercial offers, industry information and advertising.
- Therefore, the legal basis for processing your personal data in this case is Article 6(1)(a) of the GDPR (the data subject has given consent to the processing of his or her personal data for one or more specific purposes).
- You can withdraw your consent at any time (which does not affect the legality of the processing carried out on the basis of your consent before withdrawing it) by unchecking the appropriate box in your account settings.
- SITE USERS
- We process the data of each user of our site that characterises the manner in which they use our site (this is known as operating data). This processing includes the automatic reading of the unique identifier of the telecommunications network termination point or ICT system you are using (i.e. your IP address), as well as the date and time of the server, information about the technical parameters of the software and the device you are using (e.g. whether you are browsing our website using a laptop or a phone), and the location from which you connect to our server. We may use this information for market research purposes and to improve the operation of the website. The data recorded in the server logs are not associated with specific users of the site. The server logs constitute only auxiliary data used for administration of the website.
- The legal basis for the processing of operating data is Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller). The legitimate interest in this case is to enable diagnosing errors in the site and to improve its quality.
- MARKETING OF CONTROLLER'S SERVICES
- Upon your separate consent, we may also process your personal data for marketing purposes, including inviting you by email or telephone to take part in promotions and sending you other commercial, advertising, or marketing information, as well as inviting you to express your opinion about our store on online review sites.
- The legal basis for processing your personal data for these purposes is in this case Article 6(1)(a) of the GDPR (the data subject has given consent to the processing of his or her personal data for one or more specific purposes). You can withdraw your consent at any time (which does not affect the legality of the processing carried out on the basis of your consent before withdrawing it) by unchecking the appropriate box.
- In certain cases, the legal basis for the processing of your personal data for direct marketing purposes may be legitimate interests of the controller (Article 6(1)(f) of the GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller and recital 47 of the GDPR - The processing of personal data for direct marketing purposes may be regarded as carried out for a legitimate interest). In accordance with recital (47) of the GDPR, such a legitimate interest may exist in cases where there is a relevant and appropriate relationship between the data subject and the controller – for example where the data subject is a customer of the controller. Remember that you have the right to object at any time and free of charge to this processing, whether primary or further processing – Including profiling, insofar as it is related to direct marketing. Once you have objected to the processing of your personal data for direct marketing purposes - the controller may no longer process your data for such purposes.
- HANDLING OF LEGAL CLAIMS
- The content of your correspondence and information relating to the performance of the contract may be subject to archiving. You have the right to request the history of your correspondence with us and your purchase history (if archived) to be presented to you, as well as to request its deletion, unless archiving is justified by our overriding interests.
- The legal basis for our processing of your personal data after the termination of your contact with us or the performance of the contract between you and us is our legitimate interest. Therefore, we may process your personal data in order to assert and defend ourselves against claims, to ensure that, in the event of a dispute with you, we are able to demonstrate the content of the contract between you and us and that we have duly performed it, on the basis of Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child).
