Privacy Statement
On May 25, 2018, the GDPR entered into force - Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95 / 46 / EC. The regulation imposes new obligations on all entities that collect, process and use personal data, therefore in practice applying to every entrepreneur in Poland.
At Bochem we treat all our clients’ personal data with care and this regulation’s implementation as a priority. Bochem’s Privacy Statement, which can be found below, contains information on what the purpose of collecting your personal is and what the Data Administrator’s obligations are.
1. Definitions
a) Data Administrator: Zakłady Chemiczne Bochem Sp. z o.o. with its registered office at 26-670 Pionki, Działki Suskowolskie 22B
b) Personal data: All information about an identified or identifiable natural person through one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity of the person, including device IP numbers, location data, internet identifier and information collected via cookies and other similar technology.
c) GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of April 7, 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data, and repealing Directive 95/46 / EC.
d) User: any natural person visiting the site or using functionalities on it.
2. DATA PROCESSING IN CONNECTION WITH THE USE OF THE WEBSITE
As the User uses the website, so the Administrator collects data to the extent necessary to provide individual services offered on the website, as well as information about the User’s activity on it. Detailed rules and purposes for processing personal data collected while using the website are described below.
3. PURPOSES AND LEGAL BASIS FOR PROCESSING DATA ON THE WEBSITE
a. Using the website
Personal data of all persons using the Website (including the IP address or other identifiers and information collected via cookies or other similar technologies) are processed by the Administrator:
o In order to provide Users with services electronically in the scope of sharing content collected on the Website. In which case, the legal basis for processing is its necessity for the performance of the contract (Article 6 paragraph 1 point b of the GDPR)
o For analytical and statistical purposes. Wherein the legal basis for processing is the legitimate interest of the Administrator (Article 6 paragraph 1 point f of the GDPR), consisting in conducting analyses of Users' activities, as well as their preferences, in order to improve the functionalities and services provided.
The User's activity on the Website, including his/her personal data, is recorded in system logs (a special computer program used to store a chronological record containing information about events and activities related to the IT system used to provide services by the Administrator). The information collected in the logs is processed primarily for purposes related to the provision of services. The Administrator also processes this data for technical and administrative purposes, with the aim of ensuring IT system security, to manage it, as well as for analytical and statistical purposes. In this respect, the legal basis for processing is the legitimate interest of the Administrator (Article 6 paragraph 1 point f of the GDPR), consisting of care for the quality of services provided electronically and statistical analysis of these services.
b. Contact form
The Administrator provides the opportunity to contact him/her using the electronic contact form. Providing personal data is necessary to use the form, to contact the User and answer the query. The User may also provide other data in order to facilitate contact or enable the query to be handled. Providing data marked as mandatory is required in order to accept and deal with the query, and failure to do so results in the inability to handle it. Providing other data is voluntary.
Personal data is processed to identify the sender and to handle his/her inquiry sent via the form provided . The legal basis for processing it is the necessity to perform the obligations contained in the contract (Article 6 paragraph 1 point b of the GDPR).
Personal data is processed on the basis of consent and as such, consent may be withdrawn by the User at any given time without influence on the compliance with the law of the data processing prior to the withdrawal of consent.
4. COOKIES AND SIMILAR TECHNOLOGY
Cookies are small text files installed on the User's device as he/she browses the Website. Cookies collect information that facilitates the use of the website, e.g. by remembering User's visits to the Website and his/her activities.
5. DATA RETENTION PERIOD
The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the contract, until consent is withdrawn or an effective objection to data processing is raised in cases where the legal basis for data processing is the legitimate interest of the Administrator.
The data processing period may be extended if the processing is necessary to establish, investigate or defend against possible claims, and after this period only in cases when, and to the extent, required by law. After the processing period, the data is irreversibly deleted or anonymized.
6. USER'S RIGHTS
The User has the right to: access data content and request its rectification or deletion; impose restrictions on its processing or the right to its transfer; and to object to data processing, as well as the right to lodge a complaint to the supervisory body dealing with the protection of personal data.
User data is processed on the basis of consent, and as such consent can be withdrawn at any time by contacting the Administrator.
The User has the right to object to the processing of data for marketing purposes, if the processing takes place in connection with the legitimate interest of the Administrator, as well as for reasons related to his/her particular situation and in other cases, where the legal basis of data processing is the Administrator's legitimate interest (e.g. for analytical and statistical purposes).
7. DATA RECIPIENTS
In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for operating IT systems for providing services to entities such as banks and payment operators, entities providing accounting services, couriers (in connection with the realization of an order) and entities related to the Administrator. If the User's consent is obtained, his/her data may be transferred to other entities for their own purposes, including marketing purposes.
The Administrator reserves the right to disclose selected information about the User to relevant authorities or third parties who submit a request for such information, with an appropriate legal basis and in accordance with the applicable law. The administrator will not transfer data to third countries.
8. SECURITY OF PERSONAL DATA
The administrator conducts risk analysis on an ongoing basis to ensure that personal data are processed in a secure manner, and above all, that only authorized persons have access to the data and only to the extent that it is necessary for the tasks they perform . The Administrator ensures that all operations on personal data are recorded and carried out by authorized employees and associates only.
The Administrator takes all necessary actions so that its subcontractors and other cooperating entities guarantee the use of appropriate security measures whenever they process personal data at the request of the Administrator.
9. CONTACT DETAILS
Contact with the Administrator is possible by writing to the following address: Zakłady Chemiczne Bochem Sp. z o.o. with its registered office at 26-670 Pionki, Działki Suskowolskie 22B or by e-mail: bochem@bochem.pl