Privacy Policy and Personal Data Protection

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), we inform you that:

• Administrator The administrator of your personal data is https://en.burning-bliss.com/, NIP: 5242979740, REGON: 525996237, based in Warsaw, hereinafter referred to as the Company.
• Purposes of Data Processing Your personal data will be protected and processed for the following purposes:
  a. Creation and maintenance of a user account and services on the website https://en.burning-bliss.com (based on Article 6(1)(b) of the GDPR – performance of a contract for the provision of electronic services regarding the User Account).
  b. Enabling the placement and execution of orders and conclusion of sales contracts for products offered by the Company through the website (based on Article 6(1)(b) of the GDPR).
  c. Marketing of the Company’s own products or services (Article 6(1)(f) of the GDPR – the Company’s legitimate interest is to inform about its commercial offer).
  d. Ensuring the security of provided online sales services by registering the IP addresses of users of the website (based on Article 6(1)(f) of the GDPR, the Company’s legitimate interest is to ensure the security of electronically provided services).
  e. Realization of the Company’s legitimate interest in potentially establishing or pursuing claims or defending against claims (the legal basis for processing is Article 6(1)(f) of the GDPR).
• Data Retention Period Your personal data will be stored for the period necessary to achieve the purpose for which you have given your consent, with a systematic review of their usefulness, no longer than 3 years from the date of their entry. Specifically, they will be processed for the duration of the offer’s validity or the contract, but not longer than the duration of the contract, and in the case of consent – until the consent is withdrawn. The processing period may be extended each time by the period of limitation of claims if the processing of personal data is necessary for the pursuit of any claims or defense against such claims by the Company. After this period, the data will be processed only to the extent and for the time required by law, including tax and accounting laws. To the extent that the data is processed for marketing purposes, they will be processed until the consent is withdrawn or an objection to such processing is lodged.
• Data Sharing Your personal data will not be transferred to other entities except:
  a. Carriers or intermediaries carrying out shipments on behalf of the Company when you have used postal or courier delivery when placing an order on the website.
  b. Entities handling payments in the system when you have used electronic payment methods or a payment card when placing an order.
  c. Selected entities supporting marketing campaigns and promotion of offers when you have consented to receive electronic information about discounts and the Company’s current offer.
  d. Providers of IT systems and IT services to the Company, entities providing services necessary to perform the contract concluded with you, including legal services, postal operators and couriers, banks for payment processing, and certain regulated professionals, such as lawyers.
• Your Rights You have the right to:
  a. Access your personal data, including requesting copies, and request their rectification, erasure (right to be forgotten), or restriction of processing.
  b. Transfer your personal data to another administrator.
  c. Object to the processing of personal data, including profiling and for direct marketing purposes.
  d. Withdraw consent at any time and in any manner, without affecting the lawfulness of processing based on consent before its withdrawal.
  e. Lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of personal data violates the GDPR.
• Right to Object You have the right to object to the processing of your personal data for marketing purposes. In addition, with respect to the processing of personal data for purposes arising from the Company’s legitimate interests, you have the right to object due to your particular situation.
• Voluntary Data Provision Providing your personal data is voluntary but necessary to place and execute an order on the website, conclude a sales contract, and use the user account service.
• Automated Decision-Making and Profiling Your personal data will not be subject to profiling. Alternatively, your data may be used in automated data processing, including profiling. Profiling of personal data by the Company involves processing your data (including in an automated manner), using them to assess certain information, particularly to analyze or forecast personal preferences and interests related to the Company’s offer.

For any questions or concerns regarding the processing of your personal data, please contact us at bb@burning-bliss.com.