PRIVACY POLICY
The purpose of this Privacy Policy is to explain the rules according to which HAPPY BRANDS FACTORY SP. Z O.O. based in Bytom collects, uses and protects your personal data, as well as to present your rights related to the processing of your personal data by the Administrator.
Please read the following information.
PERSONAL DATA CONTROLLER
The administrator of the personal data, gathered by means of the website available at https://happybrands.promo is HAPPY BRANDS FACTORY SP. Z O.O. located in Bytom (41-902), ul. Pszczyńska 2, KRS: 0000375233, e-mail: rodo@hbf.team, tel: 721001282.
The Administrator shall exercise due diligence in the selection and use of appropriate technical and organizational measures to ensure the protection of the processed data, including securing the data against their disclosure to unauthorized persons, as well as other cases of their disclosure or loss and against their destruction or unauthorized modification, as well as against their processing in violation of applicable laws. The Administrator shall exercise permanent control over the process of data processing and shall limit access to data to the greatest possible extent, granting appropriate authorizations only when necessary.
If you have any questions regarding the processing of your personal data, please contact us at the following e-mail address: rodo@hbf.team
PURPOSE AND BASIS OF DATA PROCESSING
We collect personal data in the following cases:
1) Entering into and performing a contract or taking action at the request of the data subject prior to entering into a contract. Legal basis: article 6(1)(b) of the GDPR;
2) Contact form - the purpose of data processing (name, surname, telephone number, e-mail address) is to provide an electronic (via e-mail address) or telephone (including SMS) response to your inquiry
and, if you have given your consent, to send commercial information, including about services offered by the Administrator. Legal basis: Article 6(1)(a) of the GDPR;
3) Newsletter - the purpose of data processing (e-mail address) is to send commercial information concerning the Administrator's offer and promotional materials by e-mail. Legal basis: Article 6(1)(a) and (f) of GDPR;
4) to conduct current recruitment or - in the case of consent - to conduct future recruitment processes. Legal basis: Article 6(1)(a) and (b) of the GDPR;
5) fulfilment of legal obligations incumbent on the Personal Data Administrator. Legal basis: Article 6(1)(c) of the GDPR;
6) resulting from the legally justified interests pursued by the Administrator or a third party, and in particular for the purpose of asserting, establishing and defending against claims, ensuring ICT security, for archiving and statistical purposes, as well as for analytical purposes involving the analysis of data collected automatically when using the website, including cookies, e.g. Google Analytics cookies, Facebook pixel. Legal basis: Article 6(1)(f) of the GDPR.
As part of the website, the Administrator processes personal data that you have provided. Personal data may also in some situations be collected automatically by means of cookies, which is mentioned in the cookies policy available below.
Providing personal data is voluntary, however, it is required for the purposes of the processing described above. Without providing them, the Administrator cannot realize the above mentioned purposes.
The processing of the data provided by you, which are not obligatory or excessive, takes place on the basis of your decision. Thus, the basis for the processing of these data by the Administrator is your consent (Article 6(1)(a) of the GDPR).
DATA PROCESSING PERIOD
Personal data may be processed for the following duration, respectively:
(a) with regard to the purpose of processing defined in point 1 - until the full performance of the contract, and thereafter for the period resulting from the provisions on archiving and limitation of claims and the provisions of tax law. In the event that the performance of the contract does not take place, the personal data will be deleted immediately;
b) in relation to the purpose of processing defined in point 2 - for the period necessary to clarify the matter in connection with the receipt of an inquiry via the contact form placed on
the website, and in the case of consent to receive commercial information - for the period necessary due to the Administrator's business needs. The data will not be processed for longer than 3 years or until the consent to the processing of personal data is withdrawn;
c) in relation to the purpose of processing defined in point 3 - for the period of availability of the Newsletter service or until the moment of withdrawal of consent for processing of personal data, filing an objection against processing of personal data or demanding their deletion;
d) in relation to the purpose of processing defined in point 4 - for the period necessary for the realization of recruitment processes being in progress, and in the case of expressing consent to data processing in further recruitment processes also later, however for no longer than 1 year;
e) with regard to the purpose of processing defined in points 5 and 6 - for the period necessary for the realization of the indicated purpose of processing, however no longer than for the period resulting from the provisions on archiving and limitation of claims as well as tax law provisions.
After the expiry of the indicated periods, the data will be deleted.
YOUR RIGHTS
You have the following rights:
(a) request access to your personal data, rectification, erasure or restriction of processing;
(b) object to the processing of your personal data, including profiling;
(c) portability of your personal data;
d) in the case where processing is based on consent - to withdraw your consent to data processing at any time, whereby the withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal;
e) to lodge a complaint with the supervisory authority (data protection authority) if you consider that the processing of your personal data violates the provisions of the GDPR.
RECIPIENTS OF THE DATA
The recipients of your personal data may be authorized employees of the Controller, entities providing legal services, external service providers (e.g. entities providing IT services, operating a mailing system, other entities processing data on behalf of the Controller on the basis of an agreement on entrusting the processing of personal data), as well as entities authorized under applicable laws (in particular, courts and state authorities).
Due to the Administrator's use of Google or Facebook, your personal data may be transferred to the United States of America (USA). The portals use approved contractual clauses or apply the safeguards provided by the GDPR, where applicable, for the transfer of data from the European Economic Area to the United States and other countries.
Detailed information about the processing of personal data is available in the privacy policy of each of these entities:
Facebook Ireland Ltd: https://www.facebook.com/privacy/explanation
Google Ireland Ltd: https://policies.google.com/privacy?hl=pl
LinkedIn Ireland Unlimited Company: https://www.linkedin.com/legal/privacy-policy?_l=pl_PL
SOCIAL MEDIA
The Administrator may process the data of Users who:
a) have subscribed to a fanpage on a social network by clicking on the "Like" or "Observe" icon,
b) published a comment or clicked on the "Like" icon or an identical icon under any of the posts posted on the fanpage.
The Administrator may process the following data:
(a) basic identification data (name and surname) to the extent published by Users on their own profiles on the social network,
b) data published by Users on their profile on the social networking site;
Users' personal data may be processed for the following purposes:
a) running a fanpage under the name Happy Brands on Facebook, a profile under the name happybrands_promo on Instagram, a profile under the name Happy Brands a YouTube portal, a profile under the name Happy Brands on LinkedIn, including for the purpose of administration and management of the fanpage (profile) and communication with Users, under the terms and conditions specified by the entities owning the above-mentioned portals, pursuant to Article 6(1)(a) and (f) GDPR;
b) possible determination, investigation or defense against claims, on the basis of Article 6 paragraph. 1 point f GDPR,
c) customer satisfaction survey and determining the quality of products offered by the administrator, on the basis of Article 6(1)(f) of the GDPR.
The recipients of the Users' personal data processed in connection with the activity on the social networking site may be the Administrator's authorized employees, entities related to the Administrator by a contract for the provision of services in the scope of ensuring the functioning of the fanpage or another profile on Facebook, Instagram, YouTube or LinkedIn, owners of social networking sites in the scope resulting from ensuring the functioning of the fanpage on these sites, in accordance with their regulations.
The Users' data was obtained from the above-mentioned portals and from the public profiles of the Users on the indicated Internet platforms.
Users' personal data will be stored for a period necessary for the Administrator's business needs, for the period of running the fanpage (profile), or until the User objects to its processing, withdraws consent - if the data was processed on the basis of consent, or the Administrator determines that the data is outdated.
The User has the rights mentioned in this Privacy Policy.
PROFILING
The Administrator does not make decisions that have legal effect or that affect you in a similar way. Your personal data may be processed in the form of profiling for the purpose of carrying out marketing activities by the Administrator. Automated data processing allows for the assessment of selected behaviors, the creation of behavioral forecasts for the future and the display of marketing content. However, this does not affect your legal situation. You have the right to object to profiling if it would adversely affect your rights and obligations.
CHANGE OF PRIVACY POLICY
The Data Controller reserves the right to change the Privacy Policy if the applicable law requires it, the technological conditions of the functioning of the Website change or the change introduces a standard higher than the minimum required by law.
COOKIE POLICY
Cookies are IT data, in particular small text files sent by a visited website to a visitor's device. This means that if you use the Service available at: https://happybrands.promo (hereinafter: the Website), cookies will be stored on the User's end device.
An entity placing cookie files on the end device of a User of the Website and accessing them is the Website operator: HAPPY BRANDS FACTORY Sp. z o.o., based in Bytom.
Cookies are used in order to:
a) Enabling use of services available on the website (e.g. authentication);
b) creation of statistics that help to understand how Service User use the website, which enables adjustment of website content to User preferences and optimisation of website use; in particular these files enable recognition of Service User device and appropriate display of the website, adjusted to individual needs;
c) storing settings selected by the User and personalizing the interface;
d) Collecting information about the way of using the website, observing User preferences (including through Google Analytics code);
e) manage Facebook ads and conduct remarketing activities (Facebook pixel);
f) Provide the User with advertising content more suited to their interests;
g) to enable referral to the website of an external provider, including the owner of the social network Facebook, Instagram, Youtube, LinkedIn.
The Service uses two main types of cookies: "session" (session cookies) and "permanent" (persistent cookies). Session" cookies are temporary files that are stored in the final device of the User until logging out, leaving the website or switching off software (web browser). "Permanent" cookies are stored in the end user's device for the time specified in the parameters of cookies or until they are deleted by the user.
Within the Website the following types of cookies are used:
a) "necessary" cookies making it possible to use services available within the Service, e.g. authentication cookies used for services requiring authentication within the Service;
b) cookies used for ensuring safety, e.g. used for detecting abuses in the scope of authentication within the Service;
c) "efficiency" cookies enabling gathering information on the manner of use of the Service websites;
d) "Functional" cookies enabling "remembering" the settings selected by a User and personalization of the User's interface, e.g. in the scope of a chosen language or region from which a User comes from, font size, appearance of the website etc;
e) "advertising" cookies which make it possible to provide Users with advertising content more suited to their interests.
At any time, the User can change the settings of their browser regarding cookies. In most Internet browsers you can delete cookies from your computer hard drive, block the cookies sent to you or set a warning before storing them. Detailed information about the possibility and methods of using cookies is available in the settings of your web browser. The method of changing cookie settings may vary depending on the Internet browser used.
Please note that limiting or disabling the use of cookies may affect some of the functionalities available on the Website. Failure to change these settings and using the Website means that you accept the use of cookies.
Happy Brands Factory Sp. z o.o. 41-902 Bytom, ul. Pszczyńska 2
www.happybrands.promo rodo@hbf.team