This Privacy Policy ("Privacy Policy") is an integral part of the Terms and Conditions of the online store: bonjourcherie.pl, owned by Emitrust Corporation Sp. z o.o. Acceptance of the Terms and Conditions also implies acceptance of the Privacy Policy. Before using the online store, the Buyer should review the Privacy Policy. The Privacy Policy outlines the principles for processing and protecting the personal data of individuals using the bonjourcherie.pl website.

Data Controller

The Data Controller of personal data of individuals using the bonjourcherie.pl website, including Buyers and Users, is Emitrust Corporation Sp. z o.o., located at 2/14 Mariana Pisarka Street, 03-984 Warsaw, registered by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under KRS number 0000668761, NIP: 1132934183; REGON 366800033 ("Controller"). The Controller processes personal data in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR").

Collected Data

The personal data collected includes: name, company name, tax identification number (NIP), business address, company headquarters address, delivery address, phone number, email, bank account number, user password, and IP address of the computer from which the registration or order was made. Personal data is collected during user registration, order form completion, and completion of documents required by law.

Purposes of Data Processing

Data will be processed for the following purposes:

• Efficiently executing the company's core processes – based on Article 6(1)(b) of the GDPR.
• Concluding and performing sales agreements for products through the Portal at physical locations – until the contract is fulfilled – based on Article 6(1)(b) and Article 9(2)(h) of the GDPR.
• Fulfilling legal obligations incumbent on the Controller, particularly those arising from tax law – for 5 years from the end of the calendar year in which the tax payment deadline related to the sale agreement via the Portal expired, or longer if required by law – based on Article 6(1)(c) and Article 9(2)(h) of the GDPR.

Voluntary Nature of Data Provision and Consent for Processing

Providing data is voluntary. In the scope specified in the Terms and Conditions, providing data is necessary for registration or placing and fulfilling an order. If you consent to the processing of your data for the above purposes, you may withdraw this consent at any time by contacting the Customer Service Office at [email protected], phone: +48 662 709 284. Withdrawing consent does not affect the legality of the processing carried out based on the consent before its withdrawal.

Rights Related to Personal Data Processing

Anyone whose personal data is processed has the right to access their data, rectify it, delete it, or object to its processing (if permissible under the law), restrict processing, and the right to data portability. The person whose data is processed also has the right to lodge a complaint with the data protection authority. Contact with the Data Controller is possible at the address: [email protected]. The Controller may refuse to delete data if there are grounds arising from legal provisions. Upon the client's request, the Controller may export the data provided by the client during all contacts and the entire cooperation to a separate file for further transfer to another data controller, or any registered Client can check and download the data by entering the "My Account" section, then "My Personal Data."

Data Security

The Controller applies appropriate technical and organizational measures to ensure the protection of processed data, in particular, securing data against unauthorized access, processing in violation of the law, as well as alteration, loss, damage, or destruction. Only persons authorized by the Controller are permitted to process your data within the Controller's organization.

Additional Provisions

Data may be shared with entities authorized to receive it under applicable law, including judicial authorities, state administration, and organizations indicated in relevant regulations. The Controller provides collected personal data to state administration, law enforcement, and judicial authorities upon their explicit request and only in cases specified by law.

Cookies are small pieces of information stored on your computer, linked to your data. We use both session ID cookies (temporary), which disappear after you close your browser, and persistent cookies, which are stored on your hard drive. We use cookies for several reasons. For example, cookies save you from having to enter your username each time you log in, requiring only a password to access the system. Cookies also allow us to track and isolate our users' interests to enhance the service on our website. Most web browsers automatically accept cookies, but if you prefer, you can change your browser settings to block cookies in the future. If you choose to block cookies, you will still be able to use our website, but with limited access to certain areas.

The Controller reserves the right to make changes to the Privacy Policy. Anyone using our services is bound by the current version of the Privacy Policy.