Best Lab WEBSITE PRIVACY POLICY

  1. This Privacy Policy defines the principles of processing and protecting personal data provided by Users while using the website and the online store at www.bestlab.com.pl.
  2. AThe Administrator of personal data on the website is Best Lab, i.e.:
    BEST LAB SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
    (ul. Grzybowska 87, 00-844 Warszawa, NIP: 5272991208, REGON: 521347329, KRS: 0000956521) info@bestlab.com.pl 
  1. To ensure the security of data entrusted to us by Users, Best Lab declares that it has developed internal procedures and recommendations to prevent disclosure of data to unauthorised persons. Best Lab supervises such performance and constantly checks compliance with the relevant legal acts, including the Personal Data Protection Act, the Act on the provision of services by electronic means, the implementing acts to these documents and community law acts. 
  2. Personal Data are processed based on the User's consent, on the principles specified in the REGULATIONS, and in cases where the law authorises the Administrator to process personal data for the purpose of implementing the agreement concluded between the parties.
  3. Personal data are processed based on the REGULATIONS, in accordance with the Act of 10 May 2018 on the protection of personal data (Journal Laws of 2019, item 1781) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Journal of Laws EU L 119, p. 1).
  4. Personal data are processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, and the use of appropriate technical or organisational measures.
  5. Best Lab is the Administrator of personal data transferred within the framework of all activities covered by these Regulations, including the provision of Services and other documents. The Administrator did not appoint a Personal Data Protection Officer.
  6. Anyone can contact the Administrator. The details of the Personal Data Administrator and contact details can be found in § 1 of the Regulations.
  7. The legal basis for data processing is the Customer's consent to the processing of personal data.
  8. Personal data are processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, and the use of appropriate technical or organisational measures.
  9. The scope of personal data processed by the Administrator is as follows: name, surname, address, PESEL number, telephone number, e-mail address, bank account number, NIP and REGON numbers.
  10. Personal data are processed solely for purposes related to the execution of the Agreement and to take the necessary actions related to the conclusion of the Agreement itself, in particular:
  1. necessary for the performance of the Agreement to which the Customer is a party, pursuant to Art. 6 section 1 letter b of GDPR;
  2. necessary to conclude an Agreement based on your interest in the offer, pursuant to Art. 6 section 1 letter b of GDPR;
  3. surveys of the level of customer satisfaction, which entails the implementation of the legitimate interest of the Administrator and determining the quality of service, as well as the level of customer satisfaction with the Services we provide, pursuant to Art. 6 section 1 letter f of GDPR;
  4. possible pursuit or defence against claims, as the implementation of our legitimate interest, pursuant to Art. 6 section 1 letter f of GDPR;
  5. offering services to Customers as a fulfilment of our legitimate interest in direct marketing, including products and services provided by entities cooperating with us (partners).
  1. Providing personal data is not mandatory; however, failure to provide them will make the conclusion and performance of the Agreement impossible. This does not apply to marketing consent, which is optional.
  2. In the case of data processed for the purpose necessary to complete an Agreement to which the Customer is a party, we inform you that they will be processed for the period in which claims related to the Agreement resulting from the provisions of the Civil Code and/or tax law may be disclosed, as well as for 5 years counting from the end of the calendar year in which the tax obligation arose. We process data for the purposes of direct marketing of our products and services until the Customer objects to their processing for this purpose.
  3. Personal data may be shared with our partners with whom we cooperate by combining products or services. Our subcontractors (processors) may also have access to your data, namely IT companies, accounting companies, auditing companies, and law firms. The Administrator does not intend to transfer any personal data of Customers to a third country or international organisations.
  4. Everyone has the right to request access to their data, its rectification, transfer and deletion, receipt of a copy of the data, objection to data processing, as well as the right to limit data processing.
  5. Everyone has the right to complain to the supervisory authority—the President of the Office of Competition and Consumer Protection in Warsaw—regarding the Administrator's processing of personal data.
  6. Based on your personal data, the Administrator will not make automated decisions towards Customers, including decisions resulting from profiling.
  7. The website www.bestlab.com.pl obtains information about Users and their behaviour in the following manner:
    1. through information entered voluntarily in forms,
    2. through collecting cookie files, the collection and processing of which takes place on the basis of the COOKIE POLICY.
  1. The website www.bestlab.com.pl collects information voluntarily provided by the User, including data provided in the form that is processed for the purpose resulting from the function of a specific form, e.g. in order to process information contact, register, purchase services, submit complaints and use other services provided by Best Lab.
  2. We reserve the right to change the privacy policy of the website, which may be affected by the development of Internet technology, possible changes in the law on personal data protection and the development of our website. We will inform you about any changes in a visible and understandable way.
  3. Regardless of the above, we would like to inform you that the website www.bestlab.com.pl may contain links to other websites. Such websites operate independently and are not supervised by Best Lab in any way. These websites may have their own privacy policies and terms and conditions, which we encourage you to review.
  4. The Administrator informs Users that the processing of personal data is entrusted to the following entities:
    1. Edrone Sp. z o. o., ul.1 Lekarska, 31-203 Kraków, NIP: 676-248-20-64, KRS: 0000537197 – in order to use the edrone.me mailing system for sending the newsletter,
    2. Edrone Sp. z o. o., ul. Lekarska 1, 31-203 Kraków, NIP: 676-248-20-64, KRS: 0000537197: – for marketing purposes only and exclusively for the needs of e-mail, text message and social media campaigns launched or indicated by the Administrator via the edrone system.
  5. The Administrator informs that we use the following technologies to track actions taken by the User/Customer within the Store's website:
    1. edrone tracking codes – to analyse the statistics of the Store’s website, as well as for marketing purposes only and exclusively for the purposes of e-mail, text message and social media campaigns launched or indicated by the Administrator via the edrone system.
  6. In case of any doubts regarding any of the provisions of this Privacy Policy, we kindly inform you that we are at your full disposal - our details can be found in the CONTACT tab on the Best Lab website.