Privacy Policy

Privacy Policy of the Beef-Atelier.com Store

§1 General information

This Privacy Policy sets out the rules for processing personal data of users of the online store available at www.beef-atelier.com (hereinafter: the “Store”), operated by BF Sp. z o.o., with its registered office in Kraków, ul. Skośna 18, entered into the Register of Entrepreneurs of the National Court Register (KRS) under number 000111862, NIP: 6762689569, REGON: 541182657, hereinafter referred to as the “Controller”.

You can contact the Controller via e-mail: shop@beef-atelier.com.

The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), the applicable personal data protection laws, and the Act on Providing Services by Electronic Means.

§2 Scope and purpose of data processing

The Controller processes Users’ personal data for the purpose of:

– entering into and performing a sales contract for goods offered in the Store,

– creating and managing a user account,

– processing payments and delivering orders,

– handling complaints, returns and customer inquiries,

– fulfilling legal obligations imposed on the Controller (e.g. issuing invoices),

– direct marketing of the Controller’s own products, provided the User has given consent.

The processed data may include: first and last name, e-mail address, phone number, delivery address, residential address, invoicing details, and login credentials for the account (e-mail and password).

§3 Legal basis for data processing

Personal data is processed:

– pursuant to Article 6(1)(b) GDPR – for the purpose of entering into and performing a contract,

– pursuant to Article 6(1)(c) GDPR – for the purpose of fulfilling legal obligations,

– pursuant to Article 6(1)(f) GDPR – for the purpose of establishing, pursuing or defending against claims,

– pursuant to Article 6(1)(a) GDPR – where the User has given consent (e.g. marketing).

§4 Data recipients

Personal data may be shared with entities cooperating with the Controller in order to fulfil orders, such as:

– courier and logistics companies (DPD),

– payment service providers (Stripe),

– accounting offices and legal advisors,

– IT and hosting service providers.

Personal data is not transferred to third countries or international organisations, unless such transfer is necessary to provide services (e.g. as part of the operation of payment providers) and is carried out in accordance with applicable law.

§5 Data retention period

Personal data is stored for the period necessary to achieve the purposes of processing:

– for the duration of the contract and for the limitation period for claims (generally up to 6 years),

– accounting and invoicing data – for 5 years in accordance with applicable regulations,

– marketing data – until consent is withdrawn.

§6 Rights of data subjects

Any person whose data is processed has the right to:

– access their personal data,

– rectify their personal data,

– erase personal data (“right to be forgotten”),

– restrict processing,

– object to processing,

– data portability,

– lodge a complaint with the President of the Personal Data Protection Office (UODO) or another competent supervisory authority.

§7 Cookies

The Store uses cookies in order to:

– ensure proper functioning of the website,

– analyse traffic statistics and user behaviour,

– personalise content and marketing communications to user preferences.

Users can change their browser settings regarding cookies at any time.

§8 Voluntary provision of data

Providing personal data is voluntary, but necessary to enter into and perform a contract. Failure to provide the data may make it impossible to use the Store’s services.