PRIVACY POLICY

  1. This Privacy Policy describes how to protect and process personal data obtained through the through the website www.bospal.com
  2. The owner of the www.bospal.com website and, at the same time, the Data Administrator, i.e. the entity deciding on how your personal data will be used, is Dariusz Dudys conducting business under the name of business activity under the name Eddi Complex D.Dudys. Sp.K., Krakowska 98a, 32-650 Kęty registered in the Centralna Register and Information on Business Activity of the Republic of Poland, maintained by the minister competent for economy; NIP: 5492436294; REGON: 122958846.
  3. Personal data collected through the website are processed in accordance with the Regulation European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in the in relation to the processing of personal data and on the free movement of such data and repealing the Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as RODO.
Where do we have the data from?
  1. We received these from customers when they filled out the contact form on www.bospal.com.
How do we collect data?
  1. Eddi Complex D.Dudys. Sp.K. take particular care to protect the interests of data subjects concerning it, and in particular shall ensure that the data it collects are processed lawfully; the data collected for specified, legitimate purposes and not subject to further processing incompatible with those purposes; Substantially correct and adequate in relation to the purposes for which they are processed and stored in the in a form which permits identification of data subjects for no longer than is necessary to achieve the purpose of the processing.
  2. Eddi Complex D.Dudys. Sp.K. collects information on natural persons performing a legal action not directly related to their activities, natural persons carrying out activities in their own name economic or professional persons and natural persons representing legal persons or organisational entities which are not legal persons to which legal capacity is granted by law, and which carry out on their own behalf business or professional activity, hereinafter collectively referred to as Customers.
  3. Customers’ personal information is collected when: (a) use of the contact form.
  4. When using the contact form, the customer provides: (a) e-mail address; (b) first and last name;
  5. When using the Website, additional information may be collected, in particular: address IP address assigned to the Customer’s computer or external IP address of the Internet provider, domain name, type of browser, access time, type of operating system.
  6. Navigation data may also be collected from Customers, including information about the links and references they choose to click on or other actions they take on our Website.
How do we use and with whom do we entrust the data we collect?
  1. When using the contact form on the Website, the Customers’ data are processed in order to respond to the message sent – on the basis of Article 6(1)(b) RODO.
  2. Navigation data may be used to provide better service to Customers, analyze data statistics and to customize the website to Customers’ preferences, as well as to administer the Online Store Online Store.
  3. The personal data provided by the customer will be processed for the purpose of defending against and investigating claims – on the basis of Article 6(1)(f) RODO – the legitimate interest of the Eddi company Complex D.Dudys. Sp.K., for a maximum of 10 years from the end of the contract.
  4. Our customers’ personal data is currently not processed outside the European Union.
  5. In connection with the purposes referred to above, the recipients of the personal data may be entities acting as intermediaries in the performance of the contractual obligations of the controller, e.g. IT service providers, accountants, law firms, online payment providers, courier companies
How long do we keep the data? We process and store your data in principle for the duration of our contractual relationship, and until to achieve the purposes of the processing in question. Insofar as this is prescribed by law, certain personal data is also stored for longer periods of time.What rights do customers have over their personal data?
  1. Right to withdraw consent – legal basis Article 7(3) RODO
  2. Right to object to data processing – legal basis Article 21 RODO
  3. Right to erasure (“right to be forgotten”) – legal basis Article 17 RODO Customers have the right to delete any data processed by Eddi Complex at any time D.Dudys. Sp.K. except where: (a) an order has been started which has not yet been dispatched, b) Customers have an outstanding debt to Eddi Complex D.Dudys. Sp.K., regardless of the method payments, (c) the customer has made any purchase, we will retain personal data relating to the transaction for the purposes of accountants.
  4. Right to restrict data processing – legal basis Article 18 RODO
  5. Right of access to data – legal basis Article 15 RODO At any time, you have the right to request information about which of your personal data we store.
  6. Right to rectification of data – legal basis Article 16 RODO The customer has the right to request the correction of his or her personal data if it is incorrect, and to complete incomplete data.
  7. Right to data portability – legal basis Article 20 RODO At any time, the Customer may edit, view or delete his or her own personal data in the area of his or her account, having first entered a login and password. If the Customer forgets his or her password, the login page contains a “password reminder” link, which redirects the Customer to a form, the completion of which with the email address provided at registration will send a replacement password.
  8. The customer has the right to lodge a complaint with the President of the Data Protection Authority regarding a breach of his/her right to data protection or other rights granted under the RODO.
How do we secure our services?
  1. Our technical standards – Data transfer is carried out using the Secure Socket Layer (SSL) transmission protocol.
  2. The website may contain links to other websites. The Administrator urges that when you go to other sites, you should read the privacy policy established there. This privacy policy applies only to this website.
  3. The controller shall apply technical and organisational measures to ensure the protection of the processed personal data appropriate to the risks and categories of data protected, and in particular to protect the data against their access to unauthorised persons, against their being taken by an unauthorised person, against their being processed in violation of the applicable regulations, and against their alteration, loss, damage or destruction.
How can you report a complaint if there is a breach of data security or data protection legislation?If you wish to exercise your right of objection, please contact us:e-mail address: info@bospal.comPostal address: Eddi Complex D.Dudys. Sp.K. , Krakowska 98a, 32-650 KętyHow to contact us for more information about the processing of your personal data?The Data Controller has appointed a point of contact for matters relating to the processing and protection of personal data – here are the contact details:e-mail address: info@bospal.comPostal address: Eddi Complex D.Dudys. Sp.K., Krakowska 98a, 32-650 KętyHow do we update our policies?We reserve the right to update or modernise our Privacy Policy at any time and without prior notice by posting the new amended version on our website www.bospal.com. The new version of the policy will be effective as soon as it is posted on our website.