1. PERSONAL DATA PROTECTION POLICY
This Privacy Policy is a set of rules designed to inform you about all aspects of the process relating to the collection, processing and protection of your personal data.
This policy specifies how and for what purposes your personal data will be processed, how they will be protected and what your rights will be. Barlinek processes personal data for different purposes, and different collection methods, legal grounds for processing, use, disclosure and storage periods may apply depending on the purpose.
The protection of personal data is especially important to us, and we give priority to the security of all data held by us. The guarantee of applying the highest standards and principles of personal data processing security are the policies, procedures and trainings implemented by us, including data protection, confidentiality and security, as well as appropriate IT systems, including independent certificates (SSL certificate). Regular checks on the measures taken to ensure their adequacy in order to secure the data held and the principle of minimising the processing thereof guarantee the security and transparency of the processes conducted.
Personal data are processed on the basis of the applicable provisions of the law, in particular the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and on the free movement of such data and the repeal of Directive 95/46/EC (hereinafter referred to as the GDPR) and the Act on Personal Data Protection.
We hope that this Privacy Policy will help you understand the principles, purposes and ways in which we collect personal information we provide, both through the website and in connection with our business activities with our customers, contractors and their employees, and marketing, including training, contests and loyalty programmes.
2. PERSONAL DATA CONTROLLER
The Controller of your personal data is Barlinek S.A. with its registered office in Kielce (25-323), Al. Solidarności 36, KRS 0000018891, NIP 959-08-21-486 (hereinafter referred to as: Barlinek / the Controller) If you have any questions regarding the processing of your data, please contact us via e-mail [email protected]
3. PROCESSING OPERATIONS
Process
Barlinek processes personal data of current and prospective Clients. This process also includes the data of their employees, collaborators, and/or related natural persons.
Personal Data
Processing of Clients’ personal data is initiated by a Barlinek employee. Personal data includes first and last name, employer name, job title of the contact person, phone number, email address, and other business contact details, including the store details where Barlinek products were purchased (address). These data are primarily used for establishing business cooperation and handling potential complaints.
If consent is given to participate in loyalty programs organized by Barlinek, personal data includes point-of-sale information (POS name, tax identification number, address, phone number, email) and seller data (job title, first name, last name, mailing address, phone number, email, bank name and address, bank account number).
If consent is given to participate in installer training programs organized by Barlinek, personal data includes first name, last name, mailing address, phone number, email, company name, company address, and body measurements for the purpose of providing specialized work clothing.
Where personal data are collected for the purpose of concluding and performing a contract, providing such data is a requirement for entering into the contract. Failure to provide the data will result in the inability to establish cooperation between you and Barlinek. Providing data for other purposes is voluntary, but necessary for their fulfillment.
Purpose and Legal Basis for Processing
Personal data of our Clients are processed for the following purposes:
Data Retention
Personal data will be stored by Barlinek for the period necessary to fulfill the purposes specified above, i.e., for the duration of the cooperation agreement, the time required to process complaints, until the resolution of disputes/settlements between parties, taking into account applicable limitation periods for claims, and in the case of direct marketing, until you object.
If consent is given to participate in contests, loyalty programs, or training, data will be processed until consent is withdrawn or until the contest, loyalty program, or training ends and any related claims are settled.
In all cases, Barlinek reserves the right to process personal data beyond the above periods where required by law or within the statute of limitations for potential claims.
Recipients
Recipients of your personal data will include entities providing services to Barlinek necessary to perform the contract with you, processing data based on data processing agreements concluded with the Controller. These include, in particular, companies within the Barlinek Group, IT system providers, transport/courier/postal service providers, professional document destruction services, customer service providers including complaint handling, companies or individuals enabling the organization of contests and loyalty programs, and, in the case of training, entities providing accommodation and professional protective clothing.
In addition, Barlinek may disclose personal data to entities authorized to receive such data under applicable law.
Process
Barlinek processes personal data of current and prospective Contractors. This process also includes the data of their employees, collaborators, and/or related natural persons.
Personal Data
Processing of Contractors’ personal data is initiated by a Barlinek employee. Personal data includes first and last name, employer details (tax ID, business registry numbers, business address, bank account number), job title of the contact person, phone number, email address, cooperation history, and other business contact details.
Purpose and Legal Basis for Processing
Personal data of our Contractors are processed for the following purposes:
Where personal data are collected for the purpose of concluding and performing a contract, providing such data is a requirement for entering into the contract. Failure to provide the data will result in the inability to establish cooperation between you and Barlinek. Providing data for other purposes is voluntary, but necessary for their fulfillment.
Data Retention
Personal data will be stored by Barlinek for the period necessary to fulfill the purposes specified above, i.e., for the duration of the cooperation agreement, the time required to process complaints, until disputes are resolved / settlements between the parties are completed, taking into account applicable limitation periods for claims, and, in the case of direct marketing, until you object.
In all cases, Barlinek reserves the right to process personal data beyond the above periods where required by law or within the statute of limitations for potential claims.
Recipients
Recipients of your personal data will include entities providing services to Barlinek necessary to perform the contract with you, processing data based on data processing agreements concluded with the Controller. These include, in particular, entities within the Barlinek Group, IT system providers, transport/courier/postal service providers, and professional document destruction services.
In addition, Barlinek may disclose personal data to entities authorized to receive such data under applicable law.
Process
Barlinek processes personal data of individuals contacting the company both through traditional channels and via its website, including contact forms, inquiries, and architect registration. Personal data contained in such correspondence is processed solely for the purpose of communication and handling the matter to which the correspondence relates.
Use of electronic forms requires providing personal data necessary for contact. The contacting individual may also provide additional data to facilitate communication or handling of the inquiry. Providing data marked as mandatory is required to submit and process the inquiry; failure to provide such data will result in the inability to use the form. Providing optional data is voluntary.
When contacting the Controller by phone in matters not related to an existing contract or provided services, we may request personal data only if it is necessary to handle the matter.
Personal Data
Personal data processed in connection with contact includes first name, last name, email address, phone number, city, address (street, building number, ZIP code), company name, and affiliation with the architect zone (by selecting the appropriate field).
Purpose and Legal Basis for Processing
The legal basis for processing your personal data in connection with contact is Article 6(1)(f) of the GDPR (legitimate interest—responding to messages), in order to handle the submitted matter, send catalogs, or process inquiries.
If you provide additional consent to receive commercial information, your personal data (email address, phone number) may be processed for sending electronic marketing communications, including newsletters about Barlinek’s products. In this case, the legal basis for processing is Article 6(1)(a) of the GDPR (consent), granted by selecting the appropriate options on Barlinek Institute of Design pages or when registering for competitions organized by the Controller.
If consent is given, you have the right to withdraw it at any time by contacting: [email protected]
Cookies
We use technologies such as cookies on our websites to collect and process personal and usage data in order to personalize content and advertisements and analyze traffic on our websites.
Cookies are small text files sent by the website and stored on the user’s device (e.g., computer or other device). Cookies are not used to directly collect personal data such as names or email addresses. They are used to recognize user preferences. In other words, cookies allow the website to recognize the user’s device on subsequent visits and are intended only to facilitate use of the website.
Barlinek’s system logs may contain IP address information (network interface identifiers), but this data does not allow for direct identification of the user (i.e., a specific natural person using a device connected to the Internet).
Data Retention
Personal data will be stored by Barlinek for the period necessary to fulfill the purposes described above, i.e., for one year after the end of correspondence. After this period, data may be retained for the time required by applicable law or for the duration of limitation periods for potential claims.
If consent is given to receive marketing communications, including profiling, data will be processed until consent is withdrawn and thereafter for the period required by law or for the duration of limitation periods for potential claims.
Recipients
Recipients of your personal data will include entities providing services to Barlinek necessary to perform contracts, processing data based on data processing agreements concluded with the Controller. These include, in particular, entities within the Barlinek Group, IT and hosting providers, transport/courier/postal service providers, professional document destruction services, as well as companies or individuals supporting the organization of competitions or participation in the Barlinek Architect Zone.
In addition, Barlinek may disclose personal data to entities authorized to receive such data under applicable law.
Process
As part of Barlinek’s recruitment processes, we collect personal data of job applicants. Your personal data is collected directly from you through applications submitted via the Barlinek website (e-recruitment), in traditional form through CVs sent to our address, or from third parties such as recruitment agencies, depending on the requirements of the recruitment process.
If you provide additional consent, your data may also be used in future recruitment processes and shared for recruitment purposes with other designated entities within the Barlinek Group.
Personal Data
We process information provided in your CV, cover letter, or other forms required as part of the recruitment process. This includes necessary information specified by law, such as first name(s), last name, date of birth, contact phone number, mailing address, email address, education, employment history, skills, references, and other information disclosed in application documents.
You should not provide information beyond the required scope, in particular any special categories of data (e.g., ethnic origin, sexual orientation, religious or similar beliefs, political opinions, health data, or information regarding your sex life). If such additional data are included in your application, they will not be used or taken into account in the recruitment process.
For positions where applicable laws require information about a criminal record, we may request such data. We only collect such information to the extent permitted and required under applicable law.
Purpose and Legal Basis for Processing
Your personal data is processed for the purpose of fulfilling legal obligations, in particular arising from labor law regulations, as well as taking steps at your request prior to entering into a contract in connection with the recruitment process, based on Article 6(1)(c) of the GDPR (legal obligation) and Article 6(1)(b) of the GDPR (steps prior to entering into a contract).
Additionally, upon your separate consent, personal data may be processed for recruitment purposes beyond the scope required by law, including for future recruitment processes and recruitment conducted for designated entities within the Barlinek Group, based on Article 6(1)(a) of the GDPR (consent).
Providing data required under labor law or other applicable regulations (as specified in the job posting) is necessary to participate in the recruitment process. Failure to provide such data may result in exclusion from the recruitment process. Providing other data is voluntary and does not affect your ability to participate.
Data Retention
Your personal data in connection with recruitment will be stored:
a) until the recruitment process for the position specified in the job posting is completed,
b) if consent is given for future recruitment processes conducted by the Controller – until such consent is withdrawn, but no longer than one year from the date of consent,
c) if consent is given to share data with entities within the Barlinek Group – until such consent is withdrawn.
After the periods indicated above, data may be retained for the time required by applicable law or for the duration of limitation periods for potential claims.
In the case of successful recruitment, your personal data will be stored for the purpose of preparing an employment contract or a civil law contract, in accordance with applicable regulations.
Recipients
Recipients of applicants’ personal data will include entities providing services related to recruitment process support, document and data carrier destruction services, and entities authorized to receive personal data under applicable law.
If consent is given to share data, recipients will also include designated companies within the Barlinek Group.
4. LEGAL BASIS FOR THE PROCESSING
Barlinek will only process your personal data in accordance with the applicable provisions of the law. The legal basis for the processing of personal data in each process is specified in the relevant tab above.
Barlinek processes your personal data taking into account not only the legitimate interest of the Controller, but, above all, respecting your rights under the provisions on personal data protection and their impact on the activities undertaken in selected areas of activity.
5. DATA TRANSFER
Barlinek transfers personal data to other entities, including state authorities, exclusively on the basis of the provisions of the law.
In connection with its business activity which requires protection of many administrative and technical elements, Barlinek entrusts the processing of personal data to external entities. We make every effort to provide services of the highest quality with the support of external entities. The concluded and appropriate outsourcing agreements guarantee the highest standard of protection and confidentiality and security of personal data, as well as their use only for the purpose of performing the contractual or legal obligation of the Controller.
Personal data processed by us may be transferred to:
the entities belonging to the Barlinek Capital Group. Information on other Barlinek companies can be found here.
to external entities, providing services commissioned by Barlinek which are necessary for the purposes for which we process your personal data, including, but not limited to, services related to customer service (e.g. complaints), services related to the handling of the recruitment process, debt collection, logistics, postal and courier services, marketing and advertising, customs, accounting, hotel, technical.
IT systems security providers, providers of information technology, software, hosting and website management services, backup and data analysis services
law enforcement authorities, regulatory authorities and other state authorities or third parties, where required by applicable provisions of the law (in a manner consistent with such provisions).
Barlinek hereby reserves the right to disclose selected information concerning the data subject to the competent authorities or third parties who request such information, on an appropriate legal basis and in accordance with applicable provisions of the law.
The transfer of personal data outside the EEA to a country which, in the opinion of the European Commission, does not guarantee an adequate level of protection of personal data, takes place on the basis of an agreement which takes into account the EU requirements regarding the transfer of personal data outside the EEA, with appropriate clauses ensuring the security of processing. The transfer of personal data to the United States is based on the Transatlantic Data Privacy Framework to organizations that are listed in the “List of Data Protection Frameworks”.
6. RIGHTS OF NATURAL PERSONS
You have the following rights in connection with the processing of personal data:
the right of access to processed personal data – on this basis, the Controller, at the request of the data subject, provides information about the processing of personal data concerning the subject, including, first of all, the purposes and legal bases of the processing, the scope of the possessed data, the entities to whom the personal data are disclosed and the planned date of their deletion;
the right of data rectification – on this basis, the Controller, at the request of the data subject, removes possible incompatibilities or errors concerning the processed personal data, and supplements or updates them, if they are incomplete or have been changed;
the right to delete the data – on this basis, the Controller shall, at the request of the data subject, removes the data the processing of which is no longer necessary for the performance of any of the purposes for which the data were collected, the consent for their processing was withdrawn or an objection was lodged and it is not required for the determination, pursuit or defence of the Controller’s claims;
the right to limit and transfer the processing – on this basis, the Controller, at the request of the data subject, ceases to perform operations on these personal data, to the extent permitted by law, and also issues these personal data in a format allowing their reading by a computer;
the right to lodge a complaint – by exercising this right, the person who deems their personal data as being processed in breach of the applicable law, may file a complaint with the President of the Office for Personal Data Protection:
the right of objection – the data subject may at any time object to the processing of personal data for the purposes for which they were collected;
the right to withdraw consent – if we process personal data on the basis of the granted consent, the data subject may withdraw such consent at any time. Withdrawal of the consent shall not render the processing of personal data until that moment illegal; the withdrawal of the consent shall not affect the lawfulness of the existing processing, however, shall cause the personal data to be no longer used for such purposes.
An application to exercise the rights described above may be submitted by post to the following address: Al. Solidarności 36, 25-323 Kielce or via e-mail [email protected]
The application should, as far as possible, precisely indicate to what it pertains, i.e. in particular the addressee of the application and which of the above mentioned rights the applicant wishes to use. If the Controller is unable to determine the content of the application or identify the applicant on its basis, the Controller shall request additional information from the applicant.
The notification will be answered without delay, not later than one month after its receipt. If it is necessary to extend this time limit, the Controller shall inform the applicant of the reasons for the extension. The reply shall be given in writing unless the application is submitted by e-mail or providing the response electronically was requested.
Processing of personal data in an automated manner
Your personal data are not processed using tools based on automated decision-making (including in the form of profiling) in such a way that as a result of such automated processing, any decisions could be made that would produce legal effects or would similarly affect any effects. towards clients, contractors, their employees or associates, as well as the administrator’s employees or associates or job candidates.
7. REVISION
To the extent not regulated by this Privacy Policy, the provisions of the Personal Data Protection Act and the GDPR shall apply.
The Policy is reviewed on an ongoing basis and updated as necessary.
8. COOKIE FILES
Information about cookies can be found at the link: Cookies Policy
9. QUESTIONS AND CONTACT
The Controller stores correspondence with the Customer for statistical purposes and the best and quickest possible response to inquiries, including the request to remove data or exercising the right of objection, the data collected in this manner will not be used for purposes other than execution of the application.
If you have any questions regarding the processing of your personal data, please contact us by post at the following address: Al. Solidarności 36, 25-323 Kielce or by e-mail to [email protected]
