Privacy Policy

Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the Regulation, we inform you that we process your personal data for the operation of our website, in accordance with the information provided hereinbelow. The Privacy Policy is a set of rules designed to inform the Website Users about all aspects of the acquisition, processing, and protection of personal data provided while one is on the Website. The Privacy Policy is an integral part of the Website Regulations and all terms, unless otherwise defined in the Privacy Policy, shall have the meanings given thereto by the Regulations.

General provisions

The Controller of your personal data shall be the Website Administrator, i.e. the website regarding Plan Be Eco Sp. z o.o., entered in the Register of Entrepreneurs of the National Court Register [KRS] under the number KRS 0000877966 with its registered office at Aleja Jana Pawła II 43A / 37B, 01-001 Warsaw, Poland. You can contact the Controller electronically: [email protected], or by sending correspondence to the Website Administrator’s address on all matters related to the processing of your personal data, including if you have any doubts about your rights.

For what purposes and on what basis do we process your personal data?

If, when visiting the Website, you choose not to create an account on the Website or contact us through the contact forms available on our website, then we shall not process any information about you, except for your IP address. Storing your IP address is necessary for technical reasons related to the administration of our servers. We shall also use your IP address to collect general, statistical information about you (e.g. regarding the location where you connect to the Website). However, we are not able to identify you based on your IP address alone. Data collected provided when using the contact forms available on the Website shall be processed in order to respond to the submitted inquiry. This data shall be erased after the communication with you ends. The legal basis for processing your personal data shall be your consent. Providing personal data shall be necessary to process your inquiry. The personal data you provide in the registration form when creating an account on the Website shall be processed for the purpose of creating your profile, organising the exchange of information between you and the Website Administrator on the terms and conditions specified in the Regulations, as well as—if you file a complaint—for the purpose of processing those complaints. The legal basis for the processing of your personal data shall be the contract concluded with the Website Administrator for the use of the Website. Providing personal data shall be necessary to conclude the contract. Refusal to provide them or provision of incorrect data shall prevent the use of the services in question. We may also process your personal data for marketing purposes. The legal basis for processing your personal data for this purpose shall be our legitimate interest in advertising our services. Your personal data may also be processed for the purpose of establishing, defending or exercising claims. The basis for processing your personal data for this purpose shall be our legitimate interest in protecting the rights of the Seller in judicial or administrative proceedings.

Where and how do we obtain your personal data?

The Website Administrator processes your personal data obtained directly from you by providing personal data on the Website forms or obtained from the entity referred to in Article III(2) of the Regulations.

What categories of your personal data do we process?

Depending on the relationship you have with the Website Administrator, the Website Administrator may process the following categories of personal data, in particular:

1. personal data (e.g. first and last name),
2. identification details (e.g. IP address),
3. contractual data (e.g. elements of concluded contracts and agreements),
4. behavioural data (e.g. data on products or services owned and on how they are used),
5. data used to calculate the carbon footprint (e.g. data of the conducted analysis)

How long are my personal data stored?

We shall process your personal data arising from the conclusion of a contract, performance of a service or warranty/guarantee for the period during which claims related to that contract may arise, i.e. for 6 years + 12 months from the end of the year in which the contract was performed. We clarify that the period of 6 years indicated hereinabove is the possible statute of limitations for your claims. We have extended the period by an additional 12 months for last-minute claims, delivery problems, and the counting from the end of the year is used to determine a single data erasure date for Contracts ending in a given year. We shall process data processed for marketing purposes, including direct marketing of our products and services, until you file an objection or until you withdraw your consent but no longer than 3 years from your last contact with us. We keep the data processed for billing, tax, and archiving purposes for 6 years from the end of the year in which the provision of services ended.

Recipients of your personal data may be:

1. an entity appropriate to the stage of contract execution, i.e.: entities to which the Website Administrator has entrusted data processing, meaning entities operating an electronic payment system, postal service providers, entities providing accounting services, entities organising and providing IT support to the Website Administrator,
2. persons cooperating with the Website Administrator on the basis of a civil law contract or an employment contract,
3. entities providing consulting and auditing services, e.g. auditing firms,
4. entities with which the Website Administrator is equity-linked or to which the Website Administrator is personally related, responsible for the performance of contractual obligations and obligations resulting from the provisions of law.

The Website Administrator shall not sell, assign or lend the personal data of the Website Users to other entities, natural persons, and institutions. Deviation from this rule may be made only with the express consent or at the request of a User. For the sake of security of the Website Users’ data, the Website Administrator shall allow alteration or erasure of their personal data from the Website database. Alteration or erasure of data may be reported to the following address: [email protected]

What rights do you have regarding your personal data?

You shall have the right to access your personal data and the right to request their rectification, erasure, and restriction of processing. Depending on the specific circumstances of the processing activity, certain conditions or restrictions may apply. We may be subject to certain legal obligations that do not allow us to erase your data immediately. Such obligations arise from anti-money laundering and counter-terrorist financing laws and accounting regulations. To the extent that the processing of your personal data is based on the premise of the controller’s legitimate interest, you shall have the right to object to the processing of your personal data. In particular, you shall have an unconditional right to object to the processing of your personal data for direct marketing purposes. To the extent that the basis for processing your personal data is consent, you shall have the right to withdraw consent at any time. Withdrawal of the consent shall not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal. You may withdraw your consent by contacting us at: [email protected] To the extent that your data is processed for the purpose of entering into and performing a contract or processed on the basis of consent—you shall also have the right to portability of personal data, i.e. to receive your personal data from the controller, in a structured, commonly used machine-readable format. You may send this data to another data controller. The right to data portability shall not apply to data that constitute company secrets. You shall also have the right to file a complaint with the data protection supervisory authority. In the case of a contract or transaction, the provision of personal data shall necessary for its execution. Providing personal data shall be voluntary but it shall be necessary for the Website Administrator to provide services within the Website. The consequence of failing to provide the abovementioned personal data shall be an inability of the Website Administrator to provide the services insofar as the provision of the data is necessary to provide the said services.