Privacy Policy

1 Administration of personal data

1. The administrator of the personal data is BERGEN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Kraków, ul. Henryka Kamieńskiego 51, entered in the register of entrepreneurs of the National Court Register kept by the District Court FOR KRAKOWA ŚRÓDMIEŚCIA, XI Economic Department of the National Court Register under the KRS number 0001020837, NIP: 6793260755, REGON 524540707, share capital in the amount of ZŁ 50 000,00.
2. Contact with the person who supervises the processing of personal data in the organization is possible by e-mail at: kontakt@bergenfarby.pl, in writing to the Administrator's address or by phone at 729 122 224.
3. This Policy contains rules regarding the Administrator's processing of personal data on the Website, including the grounds, purposes and scope of personal data processing and the rights of data subjects.
4. Dane osobowe przetwarzane są przez Administratora zgodnie z obowiązującymi przepisami prawa, w szczególności zgodnie z rozporządzeniem Parlamentu Europejskiego i Rady (UE) 2016/679 z dnia 27 kwietnia 2016 r. w sprawie ochrony osób fizycznych w związku z przetwarzaniem danych osobowych i w sprawie swobodnego przepływu takich danych oraz uchylenia dyrektywy 95/46/WE (ogólne rozporządzenie o ochronie danych) Oficjalny tekst Rozporządzenia RODO: http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679.
5. The User's rights are not absolute and do not apply to all personal data processing activities.

2 Definitions

1. Administrator - BERGEN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Kraków, ul. Henryka Kamieńskiego 51, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court FOR KRAKOWA ŚRÓDMIEŚCIA, XI Economic Department of the National Court Register under the KRS number 0001020837, NIP: 6793260755, REGON 524540707, share capital in the amount of ZŁ 50 000,00.
2. Personal data - information about a natural person identified or identifiable by one or more specific factors that determine physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, Internet ID and information collected through cookies and other similar technology.
3. Policy - this Privacy Policy.
4. Cookies Policy - the document that defines the rules of using cookies on the Website available at: https://bergenfarby.pl/pomoc/polityka-cookies/.
5. Profiling - automated processing of personal data that involves analyzing and predicting user behavior.
6. RODO / Regulation RODO - Regulation of the European Parliament and of the Council (EU) 2016/679 of 27.04.2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
7. Service - the Internet service operated by the Administrator at bergenfarby.pl.
8. User - any natural person visiting the Site or using one or more of the services or functionalities described in the Policy.

3 Safety

1. The controller has implemented appropriate technical and organizational measures to ensure the security of the processing of personal data, and in particular is responsible for and ensures that the data it collects are:
   1. processed in accordance with the law;
   2. collected for designated legitimate purposes and not subjected to further processing incompatible with those purposes;
   3. Substantially correct and relevant to the purposes for which they are processed;
   4. stored in a form that allows identification of the individuals to whom they relate for no longer than necessary to achieve the purpose of the processing, and
   5. processed in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by means of appropriate technical or organizational measures.

4 Purposes and legal basis for data processing

1. Based on Article 6(1)(a) of the RODO Regulation (consent), personal data may be processed for purposes:
   1. Retargeting and behavioral advertising, including the display of personalized ads based on the User's activity history on the Website and on other websites. Data processing for these purposes is carried out only on the basis of the User's consent expressed in the cookie banner. Data may be collected via cookies and similar technologies, in accordance with the Cookies Policy.
   2. Publication of opinions
   3. Saving data in cookies in accordance with the Cookies Policy available at: https://bergenfarby.pl/pomoc/polityka-cookies/.
   4. Contact through remote communication tools, in particular: telephone, email or application.
   5. Content Moderation.
   6. Content Personalization.
   7. Marketing of products and services of the Administrator and the Administrator's partners.
   8. Participate in a webinar or online training.
   9. Participation in contests and loyalty programs.
   10. To invite participation in surveys and market research.
2. Based on Article 6(1)(b) of the RODO Regulation (performance of a contract), personal data may be processed for purposes:
   1. To perform a contract of sale or a contract for the provision of a Service or to take action at the request of the data subject before or after the conclusion of the indicated contract, in particular: the right of warranty, processing of complaints.
   2. Complaint or withdrawal from a contract concluded at a distance.
3. Based on Article 6(1)(c) of the RODO Regulation (legal obligation incumbent on the Administrator), personal data may be processed for purposes:
   1. Issuance and storage of invoices, receipts or fulfillment of other obligations under tax and accounting regulations, (archiving obligation for accounting documents).
   2. Cooperation with law enforcement agencies and public institutions.
   3. Creation of records and other documentation mandated by RODO regulations.
4. Based on Article 6(1)(f) of the RODO Regulation (legitimate interest of the Administrator), personal data may be processed for purposes:
   1. Service Support bergenfarby.co.uk.
   2. To store data necessary for the proper operation of the Service in cookies in accordance with the Cookie Policy.
   3. Supporting Facebook, Instragram account and interacting with Users of the indicated portals.
   4. Safeguard the security of the Service, the management of the Service and its proper operation.
   5. To conduct statistics and analysis of traffic on the Website.
   6. Direct Marketing.
   7. Determine claims raised by or against the Administrator.
   8. User Contact.
5. Personal Data may also be processed for other purposes if the Administrator has an appropriate legal basis for doing so, in particular under Article 6 of the RODO, provided that this purpose does not violate the User's rights and freedoms. In this case, the User will be informed of the new purpose of processing before processing for that purpose begins.

5 Profiling

1. The Administrator uses profiling for marketing purposes by analyzing the User's activity on the Website using cookies and similar technologies.
2. Profiling may include:
   1. Personalization of ads based on browsing history,
   2. Analysis of the User's interaction with the content on the Website,
   3. Adjustment of displayed advertising content on external services (e.g. Google Ads, Facebook).
3. Profiling is carried out only on the basis of the User's consent.
4. You may withdraw your consent to profiling at any time by changing your settings or by contacting the Administrator at the following email address: kontakt@bergenfarby.pl.

6 Period of processing of Personal Data

1. The period of data processing by the Administrator depends on the type of service provided and the purpose of the processing. As a general rule, data are processed for the duration of the service, until the withdrawal of the consent given, or until an effective objection to data processing is made in cases where the legal basis for data processing is the legitimate interest of the Administrator.
2. The processing period may be extended if the processing is necessary for the establishment and assertion of possible claims or defense against claims, and thereafter only if and to the extent required by law. After the expiration of the processing period, the data shall be irreversibly deleted or anonymized.
3. Specific retention periods depending on the purpose, such as:
   1. Data related to the performance of the contract - kept for the duration of the contract, and then until the expiration of the statute of limitations for claims (3 or 6 years).
   2. Accounting and tax data - kept for the period required by tax law (currently 5 years).
   3. Data obtained on the basis of consent received - kept until consent is withdrawn.
   4. Data related to user inquiries - stored for up to 12 months after the end of correspondence.

7 User Rights

1. You have the following rights with respect to your personal data:
   1. Access to their personal data,
   2. rectify personal data at any time,
   3. Delete your personal data at any time,
   4. receive a copy of their data,
   5. limitation of personal data processing,
   6. Object to the processing of personal data,
   7. portability of personal data,
   8. withdrawal of consent; withdrawal of consent does not affect the lawfulness of processing performed before its withdrawal,
   9. object to the processing of personal data on the basis of the legitimate interest of the Administrator for marketing, direct marketing and non-marketing purposes,
   10. To file a complaint with the supervisory authority.
2. In order to exercise the above rights, the User may contact the Administrator by sending a message to the e-mail address kontakt@bergenfarby.pl or correspondence to the Administrator's registered office address. The Administrator undertakes to process the request within 30 days of its receipt.
3. In some cases, the Administrator may refuse to comply with the User's request if the law requires further processing.

8 Recipients of personal data

1. The Administrator, in order to properly run the Service, transfers the User's personal data to other external entities, in particular: hosting company, courier companies, payment operators, legal and debt collection agencies, accounting firms.
2. The Administrator reserves the right to disclose personal data in a situation where this will result from applicable laws, including the obligation to provide information to the relevant administrative or law enforcement authorities.

9 Security of Personal Data

1. The Administrator conducts risk analysis on an ongoing basis to ensure that Personal Data is processed by him in a secure manner. Through its actions, it ensures first and foremost that only authorized persons have access to the data and only to the extent that it is necessary due to the tasks they perform.
2. The Administrator shall take all measures permitted by law to ensure that all operations on Personal Data are recorded and performed only by an authorized entity.
3. The Administrator is also obliged to ensure that other entities cooperating with the Administrator provide a guarantee of the application of appropriate security measures whenever they process Personal Data on behalf of the Administrator.
4. The administrator uses technical safeguards such as encryption of data transmission (SSL/TLS), restriction of access to systems and procedures to protect against unauthorized access to data.

10 Privacy Policy Changes

1. The policy is continuously reviewed and updated.
2. The current version of the Policy has been adopted and is effective as of 2025-07-04.