Respecting your right to privacy and out of concern for the security of your personal data, BRUK-BET PV sp. z o.o. with its registered office at ul. Mroźna 8, 33-102 Tarnów, entered into the register of entrepreneurs of the National Court Register kept by the District Court for Kraków-Śródmieście in Kraków, XII Economic Division of the National Court Register under the KRS number: 0000783431, NIP: 9930672075, REGON: 383167000, (hereinafter also referred to as “BRUK-BET PV” or the “Company”) as the owner and administrator of the Website at https://bbpv.pl and its subpages (hereinafter referred to as the “Website”) as well as the administrator of the data collected and processed as part of the operation of the above-mentioned internet Website, applies appropriate solutions contained in the internal Security Policy ensured by the said policy.

The Privacy Policy explains how we use, collect and store your personal data. By using the Website, you consent to the practices described in this Privacy Policy.

We collect your personal information provided during your use of the Website with the greatest care and in accordance with applicable laws:

• The Data Protection Act of 10th May 2018
• The Regulation (EU) of the European Parliament and of the European Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such persons and the repeal of Directive 95/46/EC (GDPR)
• The Telecommunications Act of 16th July 2004, i.e. dated 14th September 2018 (Journal of Laws of 2018, item 1954)
• The Act of 18th July 2002 on the provision of services by electronic means, i.e. of 13th December 2018 (Journal of Laws of 2019, item 123),

respecting the right to privacy and we guarantee to all persons using the Website that the data provided will be properly protected against interception by unauthorised third parties.

We take special care to protect your interests and, in particular, ensure that we collect your data for designated legitimate purposes and do not subject it to further processing incompatible with those purposes. We ensure that your data is factually correct and relevant to the purposes for which it is processed and that it is stored no longer than it is necessary to achieve the purpose of the processing. We ensure that your personal data is up-to-date and correct, and we respond promptly to any requests to correct or update your data. We comply with your right to access and correct your personal data. We also comply with the rights to delete personal data, withdraw consent, limit processing and portability, the right to object to processing, the right not to be subject to a decision based solely on automated data processing, including profiling.

Who is the administrator of your personal data?

The Administrator of your personal data is BRUK-BET PV sp. z o.o. with the registered office at ul. Mroźna 8, 33-102 Tarnów, registered in the register of entrepreneurs of the National Court Register kept by the District Court for Kraków Śródmieście in Kraków, XII Economic Division of the National Court Register under KRS number: 0000783431, NIP: 9930672075, REGON: 3831670000.

Our company has not appointed a Data Protection Inspector.

What data do we collect?

The user remains anonymous until creating an account, subscribing to a newsletter or filling out a contact form. In these cases, it is required to provide (electronically or in any other way) certain contact information, which is then sent to the system. Information collected automatically is used to manage the Website, identify possible security risks, study User traffic within the Website and for statistical purposes. This information is not connected in any way with Website User’s personal data and is not used to determine User’s identity. The scope of information collected automatically depends on the User’s web browser settings. The User should check their browser settings in order to find out what information is made available by the browser automatically or to change these settings. Bruk-Bet PV wishes to inform that in accordance with commonly binding legal regulations, authorised bodies may oblige the administrator of the Website to disclose the Website User’s data, including the IP address.

In the course of using the Website, you may be asked to provide some of your personal data, in particular by filling out a photovoltaic installation quote form. The data collected are: first name, last name, company name, registered office address, company NIP (identification number), e-mail address, telephone number, postal code, address and size of the potential investment, order number. All information that does not enable (also in combination with other information) the identification of the user or another person is considered non-personal data (anonymous data). If your personal data is combined with anonymous data, all data in such a package is treated as personal data.

If it is necessary for you to provide personal data of a third party (an investor for whom your investment entailing an installation of photovoltaic modules purchased from the Website is to be carried out), you will be required to entrust us with personal data of the third party at the time of collection of such data from you on the terms specified in the Privacy Policy and a separate contact form. We assume that providing only the address and size of the investment without any other information to identify the third party — the investor — does not require entrusting the data.

Providing the above data is voluntary, but necessary in order to:

• prepare and present a commercial offer
• respond to correspondence sent by you in order to present information on the products manufactured by our Company, provide technical and design support
• send marketing information (promotional and advertising) about our products and services
• use the Website

In addition, we may also record your information when you contact us by phone, email or post by writing or calling us at the numbers and addresses provided on our Website.

Your activity on the Website, including your personal data, is recorded in the system data section (a special computer programme stores a chronological record containing information about events and activities relating to the IT system used to provide services by the Administrator). We process the information collected in the logs primarily for the purposes related to the provision of services. The Administrator also processes this data for technical and administrative purposes, to ensure the security of the IT system and its management, as well as for analytical and statistical purposes.

The Website also uses cookies which are used to provide high quality services and in order to optimise the content available on the Website, adapt it to the individual needs of each user, as well as for advertising and statistical purposes. Entering a login in order to gain access to the part of the Website intended only for registered users is equivalent to giving your consent to placing cookies on your computer or device connected to the Internet.

In connection with the above, your personal data may be processed in an automated manner (including in the form of profiling), however, this will not have any legal effect on you or affect your situation in any similar manner. Profiling is carried out in order to analyse or forecast your personal preferences and interests and to adjust the content of the Website to these preferences, as well as to adjust the marketing offer to these preferences.

An IP address is a number assigned to your computer when it connects to the Internet, which enables communication between your computer and the server. The IP addresses of users visiting the Website may be registered in order to ensure the security of the IT system as well as for diagnostic purposes. This information may also be used in an aggregated form to analyse Internet trends and evaluate the performance of the Website.

The Company does not intentionally collect “sensitive” personal data, unless such an obligation results from applicable laws.

The reason and legal basis for the use of the collected data

We use the data collected by us to be able to contact you by e-mail or telephone and provide you with support in terms of technology, products and design, to prepare a commercial offer in response to your inquiry, to determine your preferences regarding products and to send you promotional and marketing materials, to award prizes in case of participation in promotional campaigns and for other legally justified purposes.

When processing data for the purpose of selling a photovoltaic installation and pricing a submitted quote request and presenting an offer, the legal basis for data processing is to undertake activities in order to conclude a contract (Article 6(1)(b) of the GDPR).

When processing your data in order to respond to correspondence sent by you and to present information on products manufactured by our Company, to provide technical support, the legal basis for data processing is our legitimate interest (Article 6(1)(f) GDPR).

When we collect your personal data for marketing purposes (marketing of our own products) we also do so based on our legitimate interest (Article 6(1)(f) GDPR).

We also collect your data for the purpose of running promotion campaigns, including announcing the results of the promotion campaign, issuing prizes and processing any complaints in connection with participation in the promotion campaign, based on your consent (Article 6(1)(a) GDPR).

Consent can be given as a result of your active action (e.g. providing your data and submitting a form) or by the requirement to tick a checkbox.

When we process your personal data in the form of cookies and other similar technologies for marketing purposes (in the case of the marketing of our products), to send you advertisements tailored to your preferences, to analyse your activity, to improve relevant functionality features and for statistical purposes, we do so based on our legitimate interest (Article 6(1)(f) of the GDPR).

The potential purposes for the processing of your data by the Company are, in particular:

• concluding and executing a contract for the provision of services (creation of an individual user account) or taking action at the request of a future customer prior to the conclusion of such a contract
• concluding and executing a sales or reservation contract, or acting on a prospective customer’s request prior to the conclusion of such a contract
• receiving and processing complaints
• presenting offers or promotional offers (discounts) concerning Bruk-Bet PV products or services and its partners to all recipients, especially for the purpose of executing a contract for the publication of a newsletter
• asserting and defending against claims, also of third parties — in the case of using the functions provided by the Website
• fulfilling legal obligations resulting from regulations, e.g. tax and accounting regulations, especially in the case of paid contracts
• conducting correspondence, including replying to your messages

How long do we keep your data?

Your personal data is processed and stored for a period of 5 years from the date of its collection, and after that period for the purposes and to the extent required by law or for securing possible claims, or until withdrawal of the consent granted — if the basis for the processing was the consent granted to us by you. The period of data processing may be extended if the processing is necessary for the establishment, investigation or defence against possible claims, as well as at the request of competent public authorities, and after this period, only when required by law and to the extent required by law. After the end of the processing period, the data is irreversibly deleted or irreversibly anonymised.

What are your rights with respect to your personal data?

You have the right to access the content of your data and to request correction, deletion, restriction of processing, the right to data portability and the right to object to the processing of your data, and to the extent that we process your data on the basis of consent, and the right to withdraw the consent you have given at any time. The withdrawal of consent does not affect the legality of the processing that was carried out on the basis of consent before the withdrawal of the said consent.

If you have any doubts about the processing of your personal data, you can ask us for information. Regardless of this, you have the right to lodge a complaint to the supervisory authority — the President of the Office for Personal Data Protection.

Who do we share your data with?

In the course of providing the services available on the Website we transfer the personal data collected to companies providing ICT services and marketing services for us.

Your personal data may be transferred outside the European Economic Area in specific situations, i.e. in relation to cooperation with global corporations such as Google Inc. or Facebook Inc. In the case of Google Inc. our company uses systems such as Google Analytics, Google Adwords, Google My Company and Google Search Console, and in the case of Facebook Inc. the analytical tool in the form of Facebook Pixel. All processed data is transferred on the basis of the Commission Implementing Decision (EU) 2016/1250 of 12th July 2016 adopted pursuant to the Directive 95/46/EC of the European Parliament and of the Council, on the adequacy of the protection provided by the EU-US Privacy Shield (notified as document no. C(2016), to which Privacy Shield programme both Google Inc. and Facebook Inc. have entered.

Security and confidentiality

We use all technical and organisational means to ensure the security of your personal information and protect it from accidental or intentional destruction, accidental loss, alteration, unauthorised disclosure or access. The data is stored and processed on high-security servers with appropriate security measures, meeting the requirements of the Polish law.

We conduct risk analysis on an ongoing basis to ensure that personal data is processed by us in a secure manner, ensuring above all that only authorised persons have access to the data, and only to the extent necessary for the performance of their tasks. We ensure that all operations on personal data are recorded and carried out only by authorised employees and associates.

For example, the Company adequately provides the following technical measures to prevent unauthorised persons from obtaining and modifying personal data sent electronically:

• securing the data set against unauthorised access
• SSL certificate on the pages of the Website where personal data is provided
• encryption of data used for authorisation of a person using the Website’s features
• access to a user account only after providing an individual login and password

We also take all necessary measures to ensure that our subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process personal data on our behalf.

Changes in privacy policy

Our offer will expand over time. The technologies, standards, legal requirements and demands of doing business online will also change. This means that we may make modifications to the Privacy Policy in the future, of which you will be informed. By using the Website after you have been notified of changes to the Privacy Policy, you consent to our continued processing of your personal data under the new terms.

This Privacy and Cookies Policy is effective as of 1st August 2019.

Contact us

You can contact us by writing to:

BRUK-BET PV Sp. z o.o.

ul. Mroźna 8

33-102 Tarnów