Privacy Policy

Privacy Policy of the Ministerstwo Dobrego Mydła shop

1. GENERAL INFORMATION

1. This Privacy Policy (the "Policy"), together with the Shop's Cookie Policy, forms an integral part of the Terms and Conditions of the online shop operated by Bielun & Bielun sp. z o.o. at www.ministerstwodobregomydla.pl (the "Shop") and describes how we process your personal data, with whom we share it and how we keep it secure.

2. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

1. The controller of your personal data is Bielun & Bielun sp. z o.o., with its registered office in Szczecin, ul. Sosnowa 6c, 71-468 Szczecin, entered in the Register of Entrepreneurs kept by the District Court Szczecin-Centrum in Szczecin, 13th Commercial Division, under KRS number 0000729322, holding NIP (tax identification number): 8513223904, REGON (statistical number): 369533555, with a share capital of PLN 34,500 partly covered by a contribution in kind, hereinafter in this Privacy Policy referred to as the "Controller".

3. HOW CAN YOU CONTACT THE CONTROLLER OF YOUR PERSONAL DATA?

1. If you have any questions about the personal data processing rules we apply, please contact us at the following e-mail address: [email protected], or, for enquiries sent by traditional post, please send them to the Controller's registered office (Bielun & Bielun sp. z o.o., ul. Sosnowa 6c, 71-468 Szczecin) marked "Dane osobowe IOD" (Personal data - DPO).
2. We will forward your enquiries to our Data Protection Officer: Ms Urszula Ośmiałowska (e-mail: [email protected]).

4. SCOPE OF THE PERSONAL DATA PROCESSED, PURPOSE AND LEGAL BASIS OF PROCESSING

1. The Controller processes the personal data of the Shop's users and customers within the scope, for the purposes and on the legal bases listed below. As a rule, the Controller may combine data obtained as a result of your various interactions with the Shop, depending on their intensity, the communication channels used and your wishes / enquiries. For example, if you have decided to create a customer account on the Shop's website, then in addition to the data in item 1 of the Table (Users visiting the website) we will naturally combine your data with the data in item 6 of the Table (Registered users of the Shop) or with complaint-related enquiries, etc. in order to make customer service easier.
2. In addition, if the information provided during a call to the Helpline or via the contact form indicates that you are or have been a customer or a representative of one of our customers, the Controller may, at your request, combine the personal data you have provided with your history of purchases, promotional campaigns or complaints submitted to us. We may also combine your data with information concerning the safety and effectiveness of the products distributed by the Controller.

5. HOW DO WE OBTAIN YOUR DATA?

1. We obtain your data directly from you. We use it to the extent described above because you have visited our Shop's website, made purchases from us, contacted us by e-mail or telephone, consented to receive commercial information by electronic means or taken part in one of our competitions.

6. PROFILING AND AUTOMATED DECISION-MAKING

1. The Controller may profile your data, including your purchase history and the data indicated in Section 4 of this Policy, in particular using the Trustisto tool and the tools described in the Cookie Policy.
2. The Controller does not process your data for the purpose of automated decision-making.
3. Your personal data concerning activity on the Shop's website may be profiled by third-party providers of technical solutions, in particular cookie providers, e.g. Google Ads, Google Maps, IAI S.A., Meta, Trustisto, in accordance with the privacy policies of these third-party providers and your cookie choices. The rules for the processing of data by the above third parties, which are not affiliated with the Controller, are set out in their separate privacy policies, which the User should read independently. If you do not consent to such processing, we encourage you to place orders via our Helpline or in person in our brick-and-mortar shops. A list of our brick-and-mortar shops can be found here.

7. IS PROVIDING PERSONAL DATA MANDATORY?

1. It is up to you to decide whether and what data you share with us, depending on the form and purpose of your contact with us, as indicated in Section 4 of this Policy. However, refusing to provide certain data or limiting its scope may make it impossible to make purchases via the Shop's website or to use all of its functionality. In turn, refusing to provide a delivery address or payment data will require the order to be cancelled. If you do not consent to the processing of data described in this document, we encourage you to make purchases in our brick-and-mortar shops. A list of our brick-and-mortar shops can be found here.

8. WITH WHOM WILL WE SHARE YOUR PERSONAL DATA?

1. Your personal data may be shared with authorised employees or associates of the Controller, as well as with external entities cooperating with the Controllers. This includes in particular providers of IT systems and services (e.g. Idosell, Presta); providers of technical and organisational solutions supporting the Controllers' operational activities (courier companies and payment operators); entities offering tools and services related to tax, accounting, financial planning and analysis, human resources, customer relations and supply chain management. Data may also be transferred to entities entitled to receive it under applicable law.
2. All these entities will process your personal data in accordance with data processing agreements concluded with the Controller or in accordance with applicable data protection law. The entities listed above may include the following categories of recipients:
   1. Entities supporting the Controllers' operational activities, e.g. courier companies and payment operators, including entities from the Comarch group with regard to e-receipts and invoices.
   2. Public authorities, e.g. the Tax Office, the Chief Sanitary Inspector (GIS) or other state authorities, where required by law.
   3. Intermediaries and business partners of the Controller involved in business activities.
   4. External service providers, e.g. those providing marketing services to the Controllers.
   5. Legal, financial, tax and accounting advisers engaged to support the Controllers' regulatory compliance.
3. The courier companies that work with us to provide the services necessary to deliver the goods you have purchased, depending on your choice, are:
   1. DHL eCommerce (Poland) Sp. z o.o.,
   2. DPD Polska Sp. z o.o.,
   3. FedEx Express Poland Sp. z o.o.,
   4. Inpost Spółka z ograniczoną odpowiedzialnością,
   5. other entities that may in future provide delivery services for goods you have purchased in the Shop.
4. The payment companies that work with us to handle the payments necessary to perform the sales contract for the goods you have purchased, depending on your choice, are:
   1. for issuing e-receipts: entities from the Comarch group,
   2. the courier companies listed above, if you have chosen the "cash on delivery" payment method for the selected goods,
   3. PayU S.A.,
   4. PayPal (Europe) S.à r.l. et Cie, S.C.A.,
   5. PayPo Sp. z o.o.,
   6. ING Bank Śląski S.A., which handles the receipt of payments on our Shop's side,
   7. possibly other payment operators with whom we may begin to cooperate in order to receive payment for the goods you have purchased.
5. Depending on the method of delivery of goods and payment you choose, we will share your data necessary for the performance of the contract and payment with the above entities indicated by you. However, the terms and conditions of these entities may contain provisions on the processing of your data that differ from this Policy.
6. Analytical and marketing tools provided by third parties, in particular Google (e.g. Google Ads, Google Analytics) and Meta Platforms (e.g. Facebook Pixel), or Trustisto, may be used on the Shop's website. These tools may use cookies and other tracking technologies for the purpose of:
   1. analysing website traffic,
   2. conducting marketing activities,
   3. tailoring advertising content delivered by the above entities to the user's preferences.

The user can manage cookie settings and consents and give or withdraw consent to their use via their own browser settings or the cookie management tool.

If you accept all cookies, the use of these tools means that your data may be transferred to third countries (e.g. the USA), in accordance with the rules set by the providers of these services.

Outside the structure of the Shop's website, the controllers of data collected via cookies are primarily the external providers of these services, in accordance with their own terms and conditions and privacy policies.

The Controller of the Website has no control over how the above third parties process data with regard to its further use for their own marketing or analytical purposes. The rules for the processing of data by these entities are set out in their separate privacy policies, which you should read independently. Such processing can be limited by the user rejecting cookies or by making purchases via the Helpline or in our brick-and-mortar shops, a list of which is available here.

9. PROCESSING OF DATA OUTSIDE THE EEA

1. The Controller does not export your data to third countries outside the European Economic Area (the "EEA"). However, external providers of technical solutions used on the Controller's website may make such transfers independently of the Controller. More information on this and on ways of limiting transfers by these entities can be found in Section 8 of this Policy.

10. HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?

1. Your personal data will be processed for the periods necessary to achieve the purposes set out in the Shop's Terms and Conditions, in particular the performance of the sales contract and consumer rights, including your complaint claims, as well as confirming the fulfilment of our obligations. We usually store data related to orders and sales in accordance with the archiving obligations set out in Polish law or in accordance with the statutory limitation periods for claims. Accordingly, your data will be processed for the duration of the provision of services and, after their completion, for the periods necessary to pursue the Controller's legitimate interests.
2. As a rule, the Controller will apply the following data retention periods, depending on the nature of your interaction with our Shop and the type of data processed:
   1. Data concerning purchases by unregistered users: 2 years from the date of purchase.
   2. Data concerning purchases by registered users: 3 years from the date of purchase or from the date of the last account activity, or account closure.
   3. Data concerning complaints and returns, in particular product defects: 2 years from the end of the complaint process, and in the case of a return up to 6 years, if necessary.
   4. Data contained in accounting and financial documentation (e.g. invoices, receipts): 5 - 10 years from the end of the calendar year in which the sale/order was completed (in accordance with tax regulations and the nature of the purchases), or longer if required by specific regulations.
   5. Data contained in product opinions (especially those published on the website): for as long as the Shop's website exists, unless you request their earlier deletion.
   6. Data concerning possible undesirable effects of products - for a period of a maximum of 1 year from the date on which the process of verifying and analysing the report is completed.
   7. Marketing data (e.g. newsletters or e-mails): until you withdraw your consent, but no longer than 6 months to 1 year from the last contact.
3. In exceptional cases, longer retention periods may apply. Where required by law, or where legal proceedings are pending or reasonably anticipated, personal data may be stored for a longer period. In addition, certain contracts, agreements or industry regulations may impose different data retention obligations which take precedence over the general retention periods, in particular regulations concerning cosmetic products.

11. WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH THE PROCESSING OF YOUR DATA?

1. You have a number of rights relating to the protection of your personal data under the GDPR. These include, among others:
   1. The right to access your data and to receive a copy of it in a format allowing it to be transferred.
   2. The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
   3. The right to rectification (correction) or erasure of your personal data.
   4. The right to restriction of the processing of personal data.
   5. The right to erasure of personal data.
   6. The right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland (the supervisory authority competent for the Controller).
2. If you submit any of the above requests, we will provide you with information/a response within the statutory time limit or inform you of its extension and explain the reasons. If we have any doubts as to the nature of your request, we may ask a few additional questions and ask you to verify your identity.

12. PROHIBITED ACTIVITIES

1. The Controller prohibits visiting or using any part of the Shop's website, including contact forms, for the purpose of obtaining the personal data of other natural persons (data mining), in particular the personal data of the Shop's users or the Controller's employees and/or associates. Furthermore, the use of any data mining tools or similar tools to collect and extract any data from the Shop's website is prohibited.
2. The Controller does not collect or process the personal data of children. If you are under 13 years of age, you may use the Shop's website only with the involvement of a parent or legal guardian, who will contact us on your behalf.
3. Although we make every effort to ensure the security of the Shop's website, we cannot guarantee the security or confidentiality of information transmitted via the Internet. However, we will make every effort to maintain its confidentiality where personal data has been provided in good faith. For this reason, we ask you not to send information that you consider harmful, unlawful, confidential, sensitive or valuable ("undesirable content").
4. Although we value users' opinions, we expect you to refrain from sending undesirable content. Accordingly, we accept no liability towards you or third parties for the confidentiality of such materials or their potential use. Content submitted by users, in particular via contact forms, must meet standards of accuracy, decency and lawfulness and may be used for the purposes described in this Policy. In particular, content submitted by you must:
   1. be your own original work and be submitted lawfully; in particular, it must not contain defamatory content or elements bearing the hallmarks of defamation of any person or entity;
   2. be consistent with the facts or reflect your genuine beliefs;
   3. comply with ethical standards and not contain offensive, obscene, sexual, discriminatory or misleading content, or content that is otherwise insulting, embarrassing or harassing.
5. As a rule, the Shop's website is interactive and allows registered users to post comments / opinions publicly, but such content should not disclose the personal data of other users or third parties. If in future we decide to enable message boards or other communication services on the Shop's website, we will not be obliged to monitor or moderate such content or the personal data posted there. However, if we decide to monitor or moderate content, we will provide information about the moderation methods. At our sole discretion, we may remove or edit any materials or personal data posted on the Shop's website.
6. We may delete any personal data provided to us (before the end of the retention periods set out in this Policy) if we have reasonable grounds to believe that it was provided in bad faith, infringes the rights of third parties (such as the right to privacy or image) or was intended to disrupt the services offered by the Shop or to breach the security of our IT systems, in particular where the Shop's website could be used:
   1. for purposes contrary to applicable law, principles of social coexistence or this Policy;
   2. to contact us with fraudulent, criminal or otherwise unlawful intent;
   3. to distribute viruses, malware or similar software, in particular in order to gain unauthorised access to computers, data, systems, accounts or networks;
   4. to promote unsolicited advertising, messages or spam;
   5. to impersonate us or other entities, or to obtain personal data, authentication data or other valuable information (e.g. "phishing", "smishing", "vishing");
   6. in a manner that disrupts the functioning of the Shop's website or the activities of the Controller, its affiliates or any third parties;
   7. in breach of intellectual property rights or software licensing rules.

13. FINAL PROVISIONS

1. The Shop's website may contain hyperlinks or redirects to other websites or applications belonging to third parties. This does not mean that we endorse the security or privacy rules of such entities. These links are provided solely for your convenience. We have no control over third-party websites or applications and are not responsible for their content or for the way in which these entities process your personal data, and we accept no liability in this respect. Your use of third-party websites or applications is usually subject to different personal data processing rules set by those entities, which you should read independently.
2. Any changes to this Privacy Policy take effect on the date of their publication on the Shop's website. However, we reserve the right to change this Policy at any time. By continuing to use the Shop's website or the Helpline, you accept these changes and undertake to comply with them. It is the user's responsibility to regularly read the provisions of this Policy and its updates. If you do not agree with the rules set out in this Policy, please leave the Shop's website immediately and refrain from using the Helpline and purchasing our products in our brick-and-mortar shops.