This Privacy Policy (“Privacy Policy”) also forms an integral part of the Terms and Conditions of the Online Store: bonjourcherie.pl, owned by Emitrust Corporation Sp. z o.o. Acceptance of the Terms and Conditions also constitutes acceptance of the Privacy Policy. Before using the Online Store, the Buyer should review the Privacy Policy. The Privacy Policy sets forth the rules for the processing and protection of personal data of individuals using the bonjourcherie.pl website.
Data Controller
The controller of the personal data of individuals using the bonjourcherie.pl website, including Buyers and Users, is Emitrust Corporation Sp. z o.o., with its registered office at ul. Mariana Pisarka 2/14, 03-984 Warsaw, registered by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, under No. 0000668761, Tax ID (NIP): 1132934183; REGON 366800033 (“Controller”).
The Controller processes personal data in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”).
Data Collected
The personal data collected includes: first and last name, company name, Tax Identification Number (NIP), business address, company headquarters address, delivery address, phone number, email address, bank account number, and the User’s password, as well as the IP address of the computer from which registration was completed or an order was placed. Personal data is collected during User registration, when filling out the Order form, and when completing documents required by law.
Purposes of Data Processing
The data will be processed for the following purposes:
To effectively carry out the company’s core processes – pursuant to Article 6(1)(b) of the GDPR
Concluding and fulfilling product sales contracts via the Portal at brick-and-mortar locations – until the contract is fulfilled – pursuant to Article 6(1)(b) and Article 9(2)(h) of the GDPR
The Controller’s fulfillment of its legal obligations, in particular those arising from tax law – for a period of 5 years, counting from the end of the calendar year in which the deadline for payment of tax due in connection with the conclusion and performance of a product sales contract via the Portal expired, or longer if required by law – pursuant to Article 6(1)(c) and Article 9(2)(h) of the GDPR
Voluntary provision of data, consent to processing
The provision of data is voluntary. To the extent specified in the Terms and Conditions, the provision of data is necessary for Registration or for placing and fulfilling an Order.
If you have given consent to the processing of your data for the above purposes, you may withdraw this consent at any time by contacting Customer Service at [email protected], tel.: +48 662 709 284. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
Rights Related to the Processing of Personal Data
Any person whose personal data is processed has the right to access their personal data, to have it corrected or deleted, to object to its processing (to the extent permitted by law), to restrict its processing, and to data portability. The data subject also has the right to lodge a complaint with a data protection authority.
You can contact the Data Controller at: [email protected].
The Data Controller may refuse to delete the Data if there are grounds under applicable law.
At the customer’s request, the Data Controller may export the data provided by the customer during all contacts and the entire course of cooperation to a separate file for the purpose of further transfer to another data controller, or any registered Customer may view and download the data by going to the “My Account” tab and then “My Personal Data.”
Data Security
The Controller implements appropriate technical and organizational measures to ensure the protection of the processed data, and in particular safeguards the data against unauthorized access, unlawful processing, and alteration, loss, damage, or destruction.
Only persons authorized by the Administrator are permitted to process your data within the Administrator’s organization.
Other Provisions
Data may be disclosed to entities authorized to receive it under applicable law, including competent judicial authorities, government agencies, and organizations specified in relevant regulations. The Controller transfers the collected personal data to state administrative bodies, law enforcement agencies, and judicial authorities upon their explicit request and only in cases specified by law.
Cookies are small pieces of information stored on your computer that are associated with your data. We use both session cookies (temporary cookies), which disappear when you close your browser, and persistent cookies, which are stored on your hard drive. There are several reasons why we use cookies. For example, thanks to cookies, you don’t have to enter your username every time you want to log in; you only need to enter your password to access the system. Cookies allow us to track and identify our users’ interests so we can improve the service on our website. Most web browsers automatically accept cookies, but if you prefer, you can change your browser settings to block them in the future. If you choose to block cookies, you will still be able to use our website, though with limited access to certain areas.
The Administrator reserves the right to make changes to the Privacy Policy. The current version of the Privacy Policy applies to everyone using our services.