Ladies and gentlemen,
on 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”) entered into force throughout the European Union, and thus in the Republic of Poland. Bearing in mind your safety, which is a priority for us, we ensure that we apply all the measures provided for by law for the protection of personal data, and we also apply the principle of particular care. Below you will find the rules according to which we collect and store your data, your rights and the persons responsible for the security of your personal data processed by us. We kindly ask you to read the information below and to accept the terms and conditions of use of our website. All processing of your personal data will be based on the provisions of generally applicable law, including in particular the above mentioned GDPR regulation, as well as the provisions of the Polish Personal Data Protection Act of 10 May 2018.
What is personal data and what is its processing?
In Article 4 point 1, “GDPR” defines personal data as any information from which a natural person can be directly or indirectly identified. These include, but are not limited to, first and last name, identification number (PESEL), telephone number, email address, IP address, physical or physiological characteristics. In addition, such data includes information about your location sent by smartphones, tablets and other electronic devices.
Furthermore, we would like to inform you that according to “GDPR”, the protection of personal data only applies to natural persons and therefore does not extend to legal persons.
The processing of personal data is basically any activity involving personal data, whether or not it is carried out by automated means, e.g. collecting, storing, recording, organizing, modifying, viewing, using, sharing, limiting, deleting or destroying.
Who is the Personal Data Administrator?
The Administrator is the entity responsible for collecting personal data. The Administrator is also the recipient to whom you can address all your requests related to the collection and processing of your personal data by us. In our case, the Administrator is Agnieszka Kułaga running her business under the name of Dietetyka Funkcjonalna Agnieszka Kułaga, ul. Bielatowicza 11, 33-100 Tarnów, NIP: 8732999444 (BeCompleat). The administrator of personal data may be contacted by letter or e-mail at email@example.com or by telephone at +48 694 932 247.
What personal data do we process?
As a rule, we only process personal data if this is actually necessary for the provision of the service or fulfillment of the contract. In this case, we process personal data of BeCompleat customers, those who contact BeCompleat in order to obtain information about the offer, to share comments about services or products, to start cooperation or to conclude a contract, i.e. in particular the following personal data: first and last name, residential or company address, information about health, email address and telephone number.
In addition, if you agree to do so in order to properly perform the services provided by us and, consequently, to properly prepare a diet based on health information, we inform you that we will collect your “sensitive” data, i.e., among others, information about your health condition, biometric data. At the same time, we would like to inform you that each time you provide information from a particular category of personal data, such as sensitive data, in person, via websites, email or during a telephone call, it means that you expressly consent to the collection and use of such information by us in the manner specified herein or in the place where the information has been disclosed.
On what grounds and for what purpose do we process data?
We process personal data in a lawful, fair and transparent manner. We process your personal data on the grounds of:
The purposes for which we process your personal data are as follows:
Who can we give your data to?
If you agree to this, your data will only be passed on to trusted parties cooperating with us, i.e. in particular: dieticians, customer assistants and IT specialists. Your data may be passed on to our subcontractors, co-workers or service providers who will help us to provide the service (e.g. entities providing postal services, courier services, accountants, related to the order fulfillment). The transfer of your personal data to another entity does not entitle them to a free use, but only to processing for the purposes specified in the entrustment agreement, ensuring the security of processing and to the extent necessary for the appropriate provision of services to you and the performance of agreements binding on us. The transfer of personal data does not relieve us (as the transferor) of responsibility for the processing. We point out that your data may also be transferred to a public authority, but only if such authorisation is based on generally applicable law and if the authority makes an appropriate request in this respect.
For how long will we process your personal data?
Your personal data will be processed for as long as it is purposeful, from the point of view of the legal relationship between us, i.e. until there is a basis for processing your personal data. For example, if your consent is given until it is revoked, limited or otherwise restricted; if your data is necessary for the performance of an agreement – for the duration of the agreement and after it has been performed until the expiry of the statute of limitations resulting from it; and if the basis for processing the data is the legitimate interest of the Administrator – until such legitimate interest exists. Furthermore, your personal data will be processed by us for as long as it is necessary due to the applicable legal regulations, the periods of data processing for this purpose are determined by these regulations.
What rights do you have?
“GDPR” provides a number of rights for persons whose personal data is collected and processed. According to the GDPR, you have:
If you have any questions, objections or concerns about the content of this information or the way in which we process personal data, as well as complaints about these issues (although we hope that there will be no need for such complaints), please send an email with details of the complaint to: firstname.lastname@example.org. Any complaints received will be dealt with and replied to.
In addition, you also have the right to lodge a complaint with a supervisory authority, i.e. the President of the Office for Personal Data Protection (address: Stawki 2, 00-193 Warsaw), if in your opinion, our processing of your personal data violates the provisions of the EU GDPR regulation.
You can contact the Administrator at any time to exercise any of your rights, for this purpose we provide you with precise contact details: Dietetyka Funkcjonalna Agnieszka Kułaga, Bielatowicza 11, 33-100 Tarnów, email@example.com or by phone at +48 694 932 247.