This document (hereinafter referred to as: “Privacy Policy“) contains information on the processing of your personal data in connection with the use of the bau-form.pl website and the provision of our services.

We use modern organizational and technical security measures to ensure the best possible protection of your personal data. We also guarantee that we process them in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 /EC (general regulation on data protection) (hereinafter: “GDPR”) and the Act of May 10, 2018 on the protection of personal data and other provisions on the protection of personal data. For this reason, pursuant to Art. 13 sec. 1 and 2 of the GDPR, we would like to inform you that:

1. The administrator of your personal data is:

BAU-FORM SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ sp. k. with its registered office in Przodkowo (83-304), Za Strumykiem 12 Street, registered in the Register of Entrepreneurs by the District Court Gdańsk-Północ in Gdansk, VIII Commercial Division of the National Court Register, KRS number 0000644671, Tax ID [NIP]: 5892028512, REGON: 365772257, represented by the general partner: 

BAU-FORM sp.z o.o. with headquarters in Przodkowo (83-304), Za Strumykiem 12 Street, registered in the Register of Entrepreneurs by the District Court Gdańsk-Północ in Gdansk, VIII Commercial Division of the National Court Register, KRS number 0000629318, Tax ID [NIP]: 5892026281, REGON: 365030544, with share capital of PLN 5,000,

correspondence address: Za Strumykiem 12 Street, 83-304 Przodkowo

telephone: +48 536 229 958

e-mail: biuro@bau-form.pl

2. Your personal data that you provide to us is processed for the following purposes:

Contact form

personal data: name and surname, e-mail address, telephone number, company

basis for processing: art. 6 sec. 1 lit. f) GDPR, i.e. processing in order to implement our legitimate interest, consisting in enabling contact with us and answering your question

data storage time: until an objection to the processing of personal data is raised

Contact with us regarding the conducted business activity

personal data: name, surname, correspondence address, e-mail address, telephone number, company

basis for processing: art. 6 sec. 1 lit. f) GDPR, i.e. processing in order to implement our legitimate interest, consisting in improving the quality of services provided and maintaining contact with customers

data storage time: until an objection to the processing of personal data is raised

Statistics analysis, traffic analysis on the store’s website

personal data: IP address

basis for processing: art. 6 sec. 1 lit. f) GDPR, i.e. processing in order to implement our legitimate interest, consisting in keeping statistics and measuring traffic on the store’s website

data storage time:…. months or until you object to the processing of your personal data

Compliance with legal obligations resulting from legal provisions, in particular the provisions on the protection of personal data

personal data: name, surname, contact details provided by you

basis for processing: art. 6 sec. 1 lit. c) GDPR, i.e. processing is necessary to fulfill the legal obligations incumbent on the Administrator, resulting from legal provisions, in particular provisions on the protection of personal data

data storage time: until the expiry of the legal obligations incumbent on the Administrator, which justified the processing of personal data

3. Voluntary provision of personal data

Providing your personal data is voluntary, but it is a condition for concluding a contract or for providing services, in particular services provided electronically.

4. Recipients of personal data

The recipients of your personal data may be entities providing legal, analytical and IT services to us.

5. Automated decision making, profiling

We do not make decisions about you in an automated manner and we do not use profiling.

6. Transferring data outside the European Economic Area or to an international organization 

Your personal data may be transferred to the USA, where Google’s servers are located. We use Google services to analyze traffic on our store’s website and build statistics in this regard. Google processes your IP address to provide us with these services and may store it on Google LLC servers located in the USA. Google LLC is on the Privacy Shield List 

(link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active) and applies the Data Security Model Contractual Clauses approved by the European Commission.

7. Your rights in connection with the processing of your personal data by us

Under the GDPR, you have the right to:

• request access to your personal data,
• request rectification of your personal data,
• request the deletion of your personal data,
• requests to limit the processing of personal data,
• object to the processing of personal data,
• requests to transfer personal data.

If you submit any of the above requests, we will provide you with information about the actions taken in connection with your request without undue delay – and in any case within one month of receiving the request.

If necessary, we have the right to extend the monthly period by another two months due to the complex nature of the request or the number of requests.

In any case, we will inform you within one month of receiving the request to extend the deadline and provide you with the reasons for the delay.

8. Complaint to the supervisory authority

If you believe that the processing of your personal data violates the provisions on the protection of personal data, you have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. In Poland, the supervisory body within the meaning of the GDPR is the President of the Personal Data Protection Office.