Privacy policy

General provisions

1. This privacy policy sets out the purposes and manner of processing the personal data of users of the Beelight online shop (www.beelight.company) operated by WaiWai spółka z ograniczoną odpowiedzialnością with its registered office in Koszoły, address for delivery: Koszoły 27, 21-532 Łomazy, Poland, entered in the Register of Entrepreneurs of the National Court Register under the KRS number 0000994324, NIP: 1133072878, REGON: 523243210.

2. Terms used in the Regulations shall mean:

a) personal data – any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person;

b) Shop – WaiWai spółka z ograniczoną odpowiedzialnością with its registered office in Koszoły, delivery address: Koszoły 27, 21-532 Łomazy, Poland, entered in the Register of Entrepreneurs of the National Court Register under the KRS number 0000994324, NIP: 1133072878, REGON: 523243210 operating the Shop via the Website;

c) User – a natural person visiting the Shop or using the Shop’s functionalities;

d) RODO – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU.L No. 119, p. 1);

e) Service – the website at www.beelight.company, through which the Store offers Products to Customers and enables the conclusion of contracts;

f) Account – the Customer’s individual account on the Website, enabling him/her, among other things, to personalise the Website and place orders after logging in;

g) Policy – this privacy policy.

3. The administrator of the personal data is WaiWai spółka z ograniczoną odpowiedzialnością with its registered office in Koszoły, delivery address: Koszoły 27, 21-532 Łomazy, Poland, entered in the Register of Entrepreneurs of the National Court Register under the KRS number 0000994324, NIP: 1133072878, REGON: 523243210.

4. In connection with the User’s use of the Website, the Administrator processes personal data to the extent necessary to provide the services, as well as information about the User’s activity on the Website. The Policy describes the specific principles and purposes of the processing of personal data collected during the User’s use of the Website.

5. Before using the Website, each User is required to read, accept and comply with this Policy.

6. The provision of personal data by the User is voluntary, however, failure to provide such data may result in the Store’s inability to provide electronic services and to process orders in the Store or to respond to queries and complaints.

Purposes and basis of processing of personal data
Personal data is processed:
(i) in order to provide services electronically in the scope of providing Users with access to content collected on the Website, in order to provide services related to maintaining and servicing an account on the Website and in order to process placed orders – the legal basis for processing is the necessity of processing for the performance of the agreement (Article 6(1)(b) RODO), and in the scope of data provided optionally – the legal basis for processing is the User’s consent (Article 6(1)(a) RODO);

(ii) in order to identify the sender of messages or queries and to handle such messages and queries of the User – the legal basis for the processing is the necessity of the processing for the performance of the service contract (Article 6(1)(b) RODO);

(iii) for analytical and statistical purposes – the legal basis of the processing is the Administrator’s legitimate interest (Article 6(1)(f) RODO), consisting of conducting analyses of Users’ activity on the Website and the manner of use of the account, as well as the User’s preferences in order to improve the functionalities used by the Website;

(iv) for the purpose of possibly establishing, pursuing or defending against claims – the legal basis for the processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO) to protect your rights;

(v) in order to comply with statutory obligations incumbent on the Controller, arising in particular from tax and accounting legislation – the legal basis for the processing is a legal obligation (Article 6(1)(c) RODO);

(vi) for marketing purposes of the Administrator and other entities – in particular for the provision of the newsletter mailing service – the legal basis for processing is the necessity of processing for the performance of the contract (Article 6(1)(b) RODO);

(vii) in the case of directing marketing content to the User as part of a newsletter – the legal basis for the processing, including profiling, is the legitimate interest of the Administrator (Article 6(1)(f) RODO) in connection with the consent to receive the newsletter.
The Shop processes personal data for the period necessary for the performance of the contract or until the statute of limitations for contractual claims or the cessation of legal obligations. Whenever the basis for the processing of personal data is the User’s consent (Article 6(1)(a) of the RODO), the data will be processed no longer than until such consent is withdrawn.

Your rights
The User has the following rights in relation to the processing of personal data by the Controller:
(i) The right of access to the personal data being processed (Article 15 RODO),

(ii) The right to rectification of personal data, including the correction of personal data (Article 16 RODO),

(iii) The right to delete personal data from the Store’s systems (Article 17 of the RODO),

(iv) Right to restrict the processing of personal data – The User may request that the Shop restricts the processing of personal data only to the storage of personal data or the performance of activities agreed with the User (Article 18 RODO),

(v) The right to data portability (Article 20 RODO),

(vi) The right to withdraw consent to the processing of personal data – at any time, the User has the right to withdraw consent to the processing of personal data that the Shop processes on the basis of consent – Article 7(3) RODO. The withdrawal of consent will not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. Withdrawal of consent occurs by sending an email to: office@beelight.company,

(vii) Right to object – You may object to the processing of your personal data where the use is based on a legitimate interest of the Controller (Article 21 RODO),

(viii) If, in the opinion of the User, the processing of personal data violates the provisions of the RODO or other generally applicable laws, the User has the right to lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection.

Sharing of personal data
1. The Administrator may share Users’ personal data with service providers who provide services to or on behalf of the Administrator (e.g. PR/marketing agencies, IT service providers, payment service providers, banks, courier companies in relation to order fulfilment, telecommunications operators, the Administrator’s consultants). In contracts concluded with such service providers, the Administrator requires compliance with the applicable data protection regulations and, when necessary, the conclusion of a data processing outsourcing agreement with the Administrator;

2. If such an obligation arises from applicable law, the Administrator may also make User’s personal data available to third parties, in particular to authorised public administration bodies.

Cookies
1. Cookies are small text files sent to and stored on the User’s device as an end user. Cookies make it possible to recognise the User’s preferences and to adapt the website’s functionalities to the User’s needs and the requirements of the devices used by the User.

2. The shop may use the following types of cookies in particular:

a) session cookies: are stored on the User’s device and remain there until the session of the respective browser ends. The stored information is then permanently deleted from the device’s memory. The mechanism of session cookies does not allow any personal data or any confidential information to be collected from the User’s device.

b) permanent cookies: these are stored on the User’s device and remain there until they are deleted. Ending the session of the browser in question or switching off the device does not remove them from the User’s device. The mechanism of permanent cookies does not allow any personal data or any confidential information to be retrieved from the User’s device.

3. The shop uses cookies in particular to:

a) to adapt the content of the Shop’s websites to the User’s preferences and to optimise the use of the Shop;
b) recognise and locate the User’s device and display a website tailored to the User’s needs;
c) remember your selected settings and personalise the interface of the Store (your language or region of origin) and adjust the font size and the appearance of the Store’s website;
d) remember which pages a user visits and recommend relevant content on the basis of this;
e) maintain the session after the User has logged in to the Shop;
f) remember your location in order to correctly configure selected Store functions, taking into account your location;
g) improve the structure and content of the Shop by analysing the viewing statistics of the Shop’s websites;
h) display advertisements that may be of interest to users;
i) ensure the security and reliability of the Shop and duly protect User data.

4. The User may independently and at any time change the settings concerning cookies, specifying the conditions for storing and accessing these files on the User’s device. The User can change his/her settings via the settings of his/her web browser or via the configuration of the service.

Security of personal data
1. The controller shall carry out a risk analysis on an ongoing basis to ensure that personal data is processed by him in a secure manner – ensuring, in particular, that only authorised persons have access to the data and only to the extent necessary for the performance of their tasks. The controller shall ensure that all personal data processing operations are recorded and carried out only by authorised employees and associates.

2. The Administrator shall take all necessary measures to ensure that also its subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process personal data on behalf of the Administrator.

Contact with the Administrator
The User may contact the Administrator on any matter relating to the processing of personal data:

(i) via email to: office@waiwai.company;

(ii) by post to the delivery address: WaiWai sp. z o.o., Koszoły 27, 21-532 Łomazy, Poland.