Privacy Policy

PRIVACY POLICY FOR THE WWW.BOEVA.EU WEBSITE

1. General Information

This Privacy Policy sets forth the rules for the processing and protection of personal data provided by Users in connection with their use of the website available at www.boeva.eu, including the use of its features, placing orders, contacting the Controller, and subscribing to the newsletter.

This Privacy Policy has been prepared in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (“GDPR”).

2. Data Controller

The controller of personal data is:

Anna Borowiak – Papierówka
, 19
Główna St., 64-030 Stare Bojanowo
, Poland

Tax ID (NIP): 6972251690
National Business Registry Number (REGON): 302370341

For matters related to the processing of personal data, you may contact the Controller using the contact information available in the “Contact” tab on the website www.boeva.eu.

3. Data Security

The Data Controller implements appropriate technical and organizational measures to ensure the protection of processed personal data against loss, destruction, unauthorized access, disclosure, alteration, or unlawful use.

The Controller takes special care to ensure that personal data is:

  • processed in accordance with the law,
  • collected for specific and legitimate purposes,
  • adequate, relevant, and limited to what is necessary to achieve those purposes,
  • retained for no longer than is necessary,
  • adequately secured.

4. Legal Basis for Data Processing

Users’ personal data may be processed on the basis of:

  • consent given by the User,
  • the necessity of processing to fulfill a contract or to take steps at the User’s request prior to entering into a contract,
  • applicable laws,
  • the Controller’s legitimate interest, in particular for the purposes of conducting correspondence, handling inquiries, ensuring the security of the website, pursuing or defending against claims, and conducting analyses and statistics.

In the case of marketing activities requiring consent, the Administrator processes data based on the consent granted by the User.

The User may withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.

5. Method of Data Collection

The Website collects information about Users through:

a) data voluntarily entered by Users in forms, in particular contact, order, and newsletter forms,

b) information related to the use of the Store, including information about the User’s activity on the website,

c) cookies and similar technologies, in accordance with the applicable Cookie Policy,

d) analytical and marketing tools used by the Administrator.

6. Voluntary Provision of Data

Providing personal data is voluntary; however, in certain cases it may be necessary for:

  • placing and fulfilling an order,
  • enter into or perform a contract,
  • responding to a submitted inquiry,
  • creating a user account, if this feature is available,
  • subscribing to the newsletter or using other features that require the provision of data.

Failure to provide the data required in a given form may prevent you from performing a specific action or using a particular feature of the website.

7. Purposes of Data Processing

Users’ personal data may be processed, in particular, for the following purposes:

  1. fulfilling orders and entering into contracts,
  2. processing payments and delivering orders,
  3. contacting the User,
  4. handling inquiries and correspondence,
  5. handling complaints and returns,
  6. fulfilling the legal obligations incumbent upon the Controller,
  7. maintaining accounting and tax records,
  8. ensuring the proper functioning of the website,
  9. conducting analyses and compiling statistics regarding the use of the website,
  10. conducting marketing activities, including sending newsletters, information about products, promotions, and new releases—if the User has given the appropriate consent or when such activities are permitted under applicable laws,
  11. personalizing marketing communications,
  12. to pursue or defend against claims.

8. Newsletter and the edrone system

To manage the newsletter and conduct marketing automation activities, the Controller uses the edrone system, provided by:

edrone Sp. z o.o.
, ul. Lekarska 1
, 31-203 Kraków
, NIP: 676-248-20-64
, KRS: 0000537197

The Controller entrusts edrone with the processing of personal data to the extent necessary to use the marketing automation system, in particular for the purpose of:

  • sending newsletters and marketing messages,
  • managing newsletter subscriptions and unsubscriptions,
  • managing the database of marketing communication recipients,
  • conducting automated marketing campaigns,
  • segmenting recipients,
  • analyzing the effectiveness of sent messages,
  • personalizing communications,
  • conducting marketing activities initiated by the Administrator via the edrone system.

As part of the integration with the edrone platform, edrone may process data concerning the User, in particular the email address, first and last name, phone number, and information related to the User’s activity on the platform, if such data has been provided to the Administrator or is collected as part of the system’s implemented functionalities.

Activity information may include, among other things, products viewed, products added to the shopping cart, order information, and interactions with messages sent via the edrone system.

The Administrator also uses edrone tools to analyze statistics regarding the use of the website and to conduct marketing activities, in accordance with the consents granted by the User and applicable laws.

Data may be transferred to edrone based on a personal data processing agreement concluded between the Administrator and edrone.

The edrone system also uses tracking technologies that may enable the User’s activity to be linked to their profile, particularly in the case of users who have previously been identified in the system.

Detailed information regarding how the edrone system operates and the scope of data processed is available in the system provider’s documentation.

9. Sharing and Outsourcing of Data

Users’ personal data is not sold to third parties.

The Controller may entrust or disclose personal data to entities cooperating with the Controller if this is necessary to achieve specific purposes, in particular:

  • courier and transportation companies,
  • payment processors,
  • accounting service providers,
  • IT and hosting service providers,
  • the provider of the edrone Sp. z o.o. marketing automation system,
  • providers of analytics and marketing tools,
  • entities providing services related to the operation of the Store,
  • entities authorized to receive data under applicable law.

Entities to which the Controller entrusts data processing process such data exclusively in accordance with the Controller’s instructions and to the extent necessary to perform a specific service.

10. User Rights

Every data subject has the right—to the extent provided for by the GDPR—to:

  • access their personal data,
  • receive a copy of the data,
  • rectify the data,
  • erase their data,
  • restrict processing,
  • to data portability,
  • to object to the processing of data,
  • withdrawal of consent at any time, if processing is based on consent,
  • to file a complaint with the President of the Personal Data Protection Office.

To exercise these rights, the User may contact the Controller using the contact information available in the Contact tab.

11. Newsletter – Unsubscribe

The User may unsubscribe from the newsletter at any time.

Unsubscription can be done by:

  • clicking the unsubscribe link found in every newsletter,
  • contacting the Administrator using the contact information available at www.boeva.eu.

Unsubscribing from the newsletter does not automatically result in the deletion of all User data if its continued storage is necessary for other reasons, such as in connection with order fulfillment, legal obligations, or the pursuit of claims.

12. Data Retention Period

Personal data is retained for the period necessary to fulfill the purpose for which it was collected.

Once the purpose has been fulfilled, the data may be retained for the period required by applicable law, in particular tax and accounting regulations, or until any potential claims become time-barred.

Data processed on the basis of consent is retained until such consent is withdrawn, unless further retention of the data is justified by another legal basis.

13. Cookies and Tracking Technologies

The www.boeva.eu website uses cookies and other technologies that enable the website to function properly, analyze traffic, and conduct marketing activities.

Cookies may be used, among other things, to:

  • ensuring the proper functioning of the website,
  • remembering the User’s settings,
  • compiling statistics,
  • analyzing how the website is used,
  • conducting marketing activities,
  • to personalize content and communication.

As part of the implementation of the edrone system on the website, tracking codes and cookies may be used to analyze User activity and utilize this information for marketing campaigns conducted through edrone.

Detailed information regarding the cookies used, their types, and how to manage consent can be found in the Cookie Policy.

14. Links to Other Websites

The website may contain links to other websites.

These websites operate independently of www.boeva.eu and may have their own privacy policies and terms of service.

The Administrator is not responsible for the data processing policies in effect on third-party websites and recommends that you review their privacy policies before using those sites.

15. Changes to the Privacy Policy

The Administrator reserves the right to make changes to this Privacy Policy, particularly in the event of:

  • changes in applicable laws,
  • changes in how the website operates,
  • the introduction of new features,
  • changes to the tools or service providers used,
  • changes in the processing of personal data.

The current version of the Privacy Policy is always available at www.boeva.eu.

16. Contact

If you have any questions regarding this Privacy Policy, the processing of personal data, or the exercise of your rights as a User, please contact us using the contact information available in the “Contact” tab on the website www.boeva.eu