Privacy Policy of BEBIO SP. Z O. O

Detailed information on data processing The Administrator of your personal data:

1. BEBIO Sp. z o. o. with its registered office in Warsaw (02-677), at ul. Cybernetyki 13/19, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, under the KRS number 0000424933, with the Tax Identification Number (NIP): 5252533572, REGON: 146181882 and the share capital of PLN 20,000.00 ("BEBIO Sp. z o.o.")
2. Trusted partners:
   • Google Ireland Limited (Gordon House Barrow St Dublin 4, Ireland)
   • Google, LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA)
   • Facebook Ireland (Hanover Reach 5-7 Hanover Quay, Dublin 2, Ireland)
   • Facebook, Inc.(1601 Willow Road Menlo Park, CA 94025, USA)
   • Active Campaign, LLC ( 1 North Dearborn St 5th Floor, Chicago, IL 60602, USA)
   • Spotify AB (Regeringsgatan 19, 111 53 Stockholm Sweden)
   • Apple Inc. (One Apple Park Way, Cupertino, California, USA, 95014)
   • Zendesk Inc. (989 Market St., San Francisco CA 94103)

Data Protection Officer BEBIO Sp. z o. o. and its contact details

BEBIO Sp. z o. o. has appointed a data protection officer who can be contacted in all matters concerning the processing of personal data and the exercise of rights related to data processing. If you wish to contact the Data Protection Officer of BEBIO Sp. z o. o., please use the following contact details: Address: Personal Data Protection Officer BEBIO Sp. z o. o., ul. Cybernetyki 13/19, 02-677 Warsaw E-mail address: iodo@bebio.pl

What is the legal basis for the processing of your personal data and for what purposes are your personal data processed?

BEBIO Sp. z o.o. processes and stores your personal data in a manner consistent with the provisions of applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR"). With respect to the provision of services by BEBIO Sp. z o. o., your data will be processed for the purpose of:

• promotion and advertising of the activities, products and services offered by BEBIO Sp. z o.o. and the website www.beactivetv.pl – in the case of persons who have given appropriate consent thereto and only to the extent specified in such consent) – on the basis of art. 6 sec. 1 letter a of the GDPR and no longer than until the consent is withdrawn;
• sending the newsletter from the BEBIO Sp. z o.o. online store and the website www.beactivetv.pl– provided that you subscribe to the newsletter, on the basis of art. 6 sec. 1 letter a of the GDPR b) GDPR and no longer than until you unsubscribe from the newsletter service;
• conclusion and proper implementation of contracts concluded with you, in particular delivery of ordered products in the BEBIO Sp. z o.o. online store and through the website www.beactivetv.pl and consideration of complaints – based on art. 6 sec. 1 letter b) GDPR and no longer than until the claims in connection with these contracts expire;
• monitoring your activity on the website and BEBIO Sp. z o.o. online store, on the website www.beactivetv.pl and in BEBIO Sp. z o.o. social media, in order to adapt the displayed content to your needs and improve the services provided by us, which is our justified legal interest – based on art. 6 sec. 1 letter b) GDPR f) GDPR and no longer than until an objection is filed, and for this purpose in some cases we use profiling,
• making automated decisions with respect to you in individual cases, including decisions based on profiling - only in the event of consent to such action, on the basis of art. 6 sec. 1 letter a of the GDPR and no longer than until you withdraw your consent,
• ensuring the security and proper functioning of the BEBIO Sp. z o.o. online store and the website www.beactivetv.pl, which is our justified legal interest – on the basis of art. 6 sec. 1 letter f) GDPR and no longer than the time necessary to achieve the indicated purpose or to file an objection to data processing in a situation where the Administrator is unable to demonstrate grounds that override the rights and freedoms of the person filing the objection;
• defining target groups of advertisements and other user activities using tools to measure the effectiveness of online marketing activities - on the basis of art. 6 sec. 1 letter f) GDPR and no longer than the time necessary to achieve the indicated purpose or to file an objection to data processing in a situation where the Administrator is unable to demonstrate grounds that override the rights and freedoms of the person filing the objection;
• defining target groups of advertisements and other user activities using tools to measure the effectiveness of online marketing activities - on the basis of art. 6 sec. 1 letter f) GDPR and no longer than until an objection is filed;
• defining target groups for advertisements and other user activities using tools to measure the effectiveness of online marketing activities - on the basis of Art. 6 sec. 1 letter f) GDPR and no longer than until an objection is filed.
• pursuing the legitimate interests of BEBIO Sp. z o.o., including pursuing possible claims by BEBIO Sp. z o.o., archiving to protect the legal interest of BEBIO Sp. z o.o. - on the basis of art. 6 sec. 1 letter f) of the GDPR and no longer than until an objection is filed. In the case of pursuing claims or protecting the legal interest of BEBIO Sp. z o.o., we use automated processing, including profiling, but this is necessary to conclude or refuse to conclude a contract related to the delivery of ordered products to you.

What scope and for how long will your personal data be stored?

Your personal data will be stored for the time necessary to achieve each of the above-mentioned purposes. If the processing of personal data takes place on the basis of your consent, you have the right to withdraw this consent at any time, but this will not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal. We may process the following scope of your personal data: name, surname, e-mail address, as data necessary to set up an account on our websites. Additionally, we may process, among others, the history of orders placed, any complaints, address, telephone number, as well as additional data that you may voluntarily provide (e.g. date of birth).

Requirement to provide data

Providing data in order to achieve the above purposes is necessary to provide these services. If you do not provide this data, the service cannot be provided. Providing personal data for marketing purposes is voluntary. If you do not consent to the processing of personal data left by you as part of the use of websites, services and other functionalities, including those saved in cookies, your personal data will not be processed for this purpose. Consent to making automated decisions in relation to you in individual cases, including decisions based on profiling, is voluntary. Data processing for other purposes, i.e. matching the content of BEBIO Sp. z o. o. to your interests, detect bots and abuses in BEBIO Sp. z o. o. services, statistical measurements and improvement of BEBIO Sp. z o. o. services is necessary to ensure high quality of BEBIO Sp. z o. o. services. Failure to collect your personal data for these purposes may prevent the correct provision of services.

To whom will your personal data be transferred?

Your data may be transferred to entities processing personal data on behalf of the administrator, including IT service providers, marketing agencies - and such entities process data on the basis of an agreement with the administrator and only in accordance with the administrator's instructions. Your data may also be prepared for entities authorized to obtain them under applicable law, e.g. law enforcement authorities in the event of a request by the authority on an appropriate legal basis (e.g. for the purposes of ongoing criminal proceedings).

Data transferred outside the European Economic Area

In connection with our use of the following marketing tools: Active Campaign and Google, LLC and Facebook, Inc. tools, your personal data may be shared outside the European Economic Area (EEA), in particular to the United States. In accordance with data protection regulations, safeguards that will ensure an adequate level of protection of personal data when processing data outside the EEA are guaranteed by the use of external data processing agreements based on standard contractual clauses approved by the EU. If you have any questions regarding the transfer of data outside the European Economic Area, please contact the Data Protection Supervisor.

What are your rights in relation to the processing of personal data?

You have the following rights in relation to our processing of your personal data:

• the right to access your data, including obtaining a copy of the data,
• the right to request the rectification of data,
• the right to request the deletion of data (in certain situations),
• the right to request the restriction of data processing,
• the right to transfer personal data, i.e. to receive from the controller your personal data in a structured, commonly used machine-readable format.
• the right to withdraw consent to the extent to which they are processed on this basis. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal,
• the right to object to the processing of data - where it is carried out for the purpose of pursuing the legitimate interests of BEBIO Sp. z o.o. – for reasons related to the specific situation of a person, i.e. a factual situation that did not exist at the time of data collection, if the data was collected directly from the person to whom it pertained, or a factual situation that existed at the time of data collection but was not known to BEBIO Sp. z o.o., at the time of data collection not directly from the person to whom it pertained;
• the right to object to data processing - if it takes place for direct marketing purposes;
• the right to lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection). In order to exercise the above rights, contact the Personal Data Protection Inspector.

Final provisions

This Privacy Policy is verified and updated on an ongoing basis. Any changes to this Privacy Policy caused by changes in legal provisions or related to changes in the offer of services available on BEBIO Sp. z o.o. services or the development of the functionality of BEBIO Sp. z o.o. services will be immediately communicated to you by means of an announcement on the BEBIO Sp. z o.o. services website. or in an e-mail message sent to you if you have an account on BEBIO Sp. z o.o. services. The BEBIO Sp. z o.o. website contains links or other references leading to external websites or social networking sites (e.g. YouTube, Facebook, Instagram) and BEBIO Sp. z o.o. profiles on such portals that do not belong to BEBIO Sp. z o.o. BEBIO Sp. z o.o. has no influence on and is not responsible for the manner in which personal data is processed by entities that own these portals, while in relation to BEBIO Sp. z o.o. profiles on such services, the Privacy Policy applies accordingly. The person who uses the redirection will also be subject to the privacy and cookie policies published by the administrators of external websites. Please read these policies. BEBIO Sp. z o.o. is not responsible for the policies regarding the processing of personal data of other entities and organizations, providers of social networking sites (e.g. YouTube, Facebook, Instagram), operating systems, portals, services, including data that is disclosed to other entities via these social networking sites. BEBIO Sp. z o.o. will have access to some data of users of the aforementioned portals, such as age, gender, location, activity on external websites within the BEBIO Sp. z o.o. profile, which will not enable identification of users. This data may be used to target advertising, which is a legitimate purpose of BEBIO Sp. z o.o.. Acceptance or non-acceptance of the use of the above data within the aforementioned portals can be made in the account settings on social networking sites, after logging into the account on the given site - in the tab regarding privacy and settings regarding displayed advertisements.