DEFINES BEAUTY

In accordance with Article 13(1) and (2) of the General Data Protection Regulation of 27 April 2016 (hereinafter GDPR), we inform you that:

1. The controller of your personal data is Bell Cosmetics Sp. z o.o. – Józefów (05-410), ul. Graniczna 79G, KRS 0000651546, NIP 5322063061, REGON 366050477, which may make your data available to Bell Sp. z o.o. on the basis of cooperation agreements.

2. The Controller has appointed a Data Protection Officer – Krzysztof Radtke – who can be contacted by e-mail at: iod@bell.com.pl

3. Your personal data will be processed for the following purposes:

   • contact to provide commercial information on the basis of Article 6(1)(a) of the GDPR;

   • conclusion and proper performance of contractual obligations on the basis of Article 6(1)(b) of the GDPR;

   • fulfilment of the Company’s legal obligations under generally applicable laws, including tax and accounting regulations – on the basis of Article 6(1)(c) of the GDPR;

   • pursuing the Company’s legitimate interest in possibly establishing or pursuing claims or defending against claims, on the basis of the Company’s legitimate interest (Article 6(1)(f) of the GDPR);

4. The recipients of your personal data will be the Controller’s associates and employees within the scope of their professional duties on the basis of authorisation, and external entities with whom the Controller has signed a processing agreement.

5. Your personal data will not be transferred to a third country or international organisation;

6. You have the right of access to the content of your data and the right to rectification, erasure, restriction of processing, and the right to data portability.

7. You have the right to object to the processing of your personal data. Objections should be submitted to the Data Protection Officer, whose contact details are indicated in item 2. In accordance with Article 21(1) of the GDPR, when submitting an objection, you must indicate the reasons related to your particular situation.

8. You have the right to lodge a complaint with the supervisory authority – the Personal Data Protection Office – if you consider that the processing of your personal data violates the provisions of the General Data Protection Regulation of 27 April 2016.

9. Your data will not be processed by automated means, including profiling, i.e. any decision producing legal effects on a person or similarly significantly affecting them will not be based solely on automated processing of personal data and will not involve such an automated decision.