Privacy policy

1. Definitions 
   1. Data Controller – the Data Controller, i.e. an entity deciding about purposes and means of personal data processing is Bienvenido Sp. z o.o. established in Warsaw at ul. Zamenhoffa 5/1, 00-165 Warsaw, registered in the District Court for the capital city of Warsaw in Warsaw, 12th Commercial Division of the National Court Register (KRS) under the number 0000908253.
   2. Personal data – information about a natural person identified or possible to identify through one or several particular factors determining physical, physiological, genetic, psychical, economic, cultural or social identity, including the IP of the device, localisation data, Internet ID and information collected through the cookie files and other similar technology.
   3. Policy – this Privacy Policy.
   4. GDPR – Regulation of the European Parliament and the (EU) Council No. 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
   5. Website – Internet website run by the Data Controller at www.bienvenido.pl.
   6. User – each natural person visiting the Website or using one or more services or functionalities described in this Policy.
2. Data processing in connection with the use of the Website 
   1. In connection with the use of the Website by the User, the Data Controller collects the data to the extent necessary in order to provide the offered services, as well as information on the User’s activity on the Website. Below, we describe detailed rules and objectives of the Personal data processing collected throughout the use of the Website by the User.
3. Objectives and legal basis for the personal data processing On the Website

USE OF THE WEBSITE

1. The personal data of all persons using the Website (including the IP address or other IDs and information collected through the cookie files or other similar technologies), and not being registered Users (i.e. persons who do not have a profile on the Website), are processed by the Data Controller:
   1. in order to give an answer to your question, including to send an offer of our services, if you ask for it, addressed to the Data Controller by e-mail or by a contact form. In that case, the legal basis for the processing of your data is your voluntary and informed consent (art. 6 item 1 a) of the GDPR) given in the contact form or expressed by sending us a question by e-mail;
   2. for analytical and statistical purposes – in that case, the legal basis for the processing of your data is legitimate interest of the Data Controller (art. 6 item 1 let. f of the GDPR), consisting in carrying out analyses of the Users’ activity, as well as their preferences in order to improve applied functionalities and provided services; 
   3. in order to determine and pursue potential claims or to defend ourselves against claims – the legal basis for the processing is legitimate interest of the Data Controller (art. 6 item 1 let. f of the GDPR) consisting in protection of its rights. 
2. The activity of the User in the Service, including his/her Personal data, are registered in system logs (a special computer programme serving for chronological storage of a record containing an information on events and actions that concerns IT system serving for provision of services by the Data Controller). The information collected in logs are processed above all for the purposes related to the services provision. The Data Controller processes them also for technical and administration purposes, in order to ensure security of the IT system and to manage this system, as well as for analytical and statistical purposes – in this matter, the legal basis for the processing is legitimate interest of the Data Controller (art. 6 item 1 let. f of the GDPR). 
3. If the User enters any personal data of other persons (including their first name, and last name, address, phone number or e-mail address) on the Website, he/she can do this only provided that he/she does not breach legal provisions nor personal rights of these persons. 

DIRECT MARKETING 

1. The personal data of the User can also be used by the Data Controller in order to address him/her marketing contents through different channels, i.e. by e-mail, by MMS / SMS or by phone. Such actions are taken by the Data Controller only if the User gives consent for them, that he/she can withdraw at any time. 
2. The Data Controller can also, in some cases, carry out direct marketing by traditional mail. The User will be informed separately about the intention of carrying out the marketing of such type. The User has the right to object against such kind of marketing.

‘SERVICE’ COOKIES

1. The Data Controller uses so-called ‘service cookies’ above all in order to provide services to the User provided by electronic means and improvement of quality of these products. Therefore, the Data Controller and other entities providing statistical and analytical services on its behalf use cookie files, storing information or obtaining access to information already stored in the telecommunication terminal equipment of the User (computer, phone, tablet etc.). Cookie files used for this purpose include:
   1. user input cookies with the data entered by the User (session ID) for the duration of the session ;
   2. authentication cookies used for services requiring an authentication for the duration of the session ;
   3. cookie files serving for security assurance, e.g. used in order to detect abuse in terms of authentication (user centric security cookies);
   4. multimedia player session cookies (e.g. flash player cookie files), for the duration of the session ;
   5. persistent cookie files serving for personalisation of User interface for the duration of the session or slightly longer (user interface customization cookies).

Bienvenido Sp. z o.o.

ul. Zamenhofa 5/1, 00-165 Warszawa (Warsaw)

1. You can contact the Data Controller by e-mail: privacy@bienvenido.pl in every matter relating to the personal data processing.