We attach particular importance to respect for your privacy, and therefore we make every effort to ensure the security of personal data processed and compliance with the provisions of applicable law, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: “GDPR”),

 

1. PERSONAL DATA CONTROLLER 

The controller of your personal data, processed for the purpose of organizing the “Best Brands” ranking and event, is Group One S.A. based in Warsaw, at: Al. Jerozolimskie 134, 02-305 Warsaw, entered in the Register of Entrepreneurs of the National Court Register under number: 0000489566, NIP: 5272706395 (hereinafter: “Controller”).  

The Controller has appointed a Data Protection Officer, who can be contacted at the following address:  iod@groupone.com.pl 

 

2. CATEGORIES OF PERSONAL DATA PROCESSED

We may process the following categories of personal data: 

1) Information collected during your visit to the website;

2) Data provided through forms;

3) Data necessary for the conclusion and performance of the concluded contract;

4) Contact data; 

5) Information on attendance at events;

6) Any information regarding the expression or withdrawal of consent to the processing of personal data, if given.

 

3. OBJECTIVES, LEGAL BASIS AND PERIOD OF DATA PROCESSING

Personal data may be processed by us for the following purposes: 

1) to conclude and perform a contract, based on the rules of participation (Article 6(1)(b) GDPR) - data will be processed for the time necessary to conclude and perform the contract, 

2) to perform obligations imposed by law, such as accounting (Article 6(1)(c) GDPR) - data will be processed for the period required by law, 

3) to realize the legitimate interest of the Controller (Article 6(1)(f) GDPR):

a) performance of agreements with partners and event sponsors,

b) managing business relationships, including establishing and maintaining contact, 

c) targeting information about events and activities of Group One companies - if you agree to receive commercial information,

d) maintaining the security of the ICT system, including monitoring the website: checking that the website and other technological services are used in an appropriate manner and optimizing their functionality, 

e) conducting analyses, improving the website, learning about user preferences and interests,

f) targeting marketing content,

g) establishing, asserting and defending against claims,

h) responding to inquiries made by e-mail or through forms provided on the website, 

i) sending information related to the organization of the event (including responding to the submitted request),

– data will be processed for the duration of the legitimate interest or the successful resolution of the objection;

4) targeting of marketing content based on the user's interests (Article 6(1)(a) GDPR) - data will be processed until consent is withdrawn. 

 

4. RECIPIENTS 

The recipients of the data are only authorized persons processing the data on behalf of the Controller. The data may be disclosed to external entities providing and supporting the Controller's ICT systems, or to other entities providing services related to the day-to-day operations of the Controller, on the basis of relevant personal data processing entrustment agreements and with the provision of appropriate technical and organizational measures to ensure data protection. In cases provided by law, data may be made available to entities authorized to obtain them. 

Personal data may be shared with other members of Group One to the extent necessary for the implementation of corporate governance (in particular, shareholders).

Personal data may be shared with other members of the Group One capital group for the purpose of directing marketing content to individuals who have agreed to receive such information.

 

5. PROFILING AND AUTOMATED DECISION-MAKING

A website user may be subject to profiling, which does not involve automated decision-making or materially affect the user's rights. Information about the user's activity, location, terminal device, pages visited and content viewed may be used for profiling purposes.

 

6. RIGHTS 

In connection with the processing of personal data, you have the following rights: 

1) the right to withdraw consent at any time - without affecting the lawfulness of processing carried out on the basis of consent, 

2) the right to object to any decision that is based solely on automated processing (including profiling),

3) the right to object to the processing of data, which means the right of the data subject to object to further processing for reasons related to a particular situation of the data subject, 

4) the right to rectification of data, giving the opportunity to request immediate rectification and completion of incomplete data by submitting an additional statement,

5) the data subject's right of access to request relevant information from the controller about the data being processed and to obtain confirmation as to whether personal data relating to the data subject is being processed, 

6) the right to erasure or restriction of processing, being the right to request restriction of processing in cases referred to in Article 18 of the GDPR, and the right to request that the controller immediately erase the data of the data subject pursuant to Article 17 of the GDPR,

7) the right to data portability - the ability to receive in a structured, commonly used machine-readable format personal data concerning the data subject and to send such data to another controller, 

8) the right to receive relevant information provided upon request - i.e. the right to receive information on whether data is actually processed and to receive a copy of the data, as well as to receive information on other matters specified in Article 15 of the GDPR, 

9) the right to request erasure of personal data.

To exercise your rights, contact the Data Protection Officer at:  iod@groupone.com.pl

You have the right to lodge a complaint to the supervisory authority - the President of the Office for Personal Data Protection (address: 2 Stawki Street, 00-193 Warsaw).

 

7. DATA TRANSFER OUTSIDE THE EUROPEAN ECONOMIC AREA

Please be advised that, as a rule, data will not be transferred to third countries, i.e. countries outside the European Economic Area, or to any other European country. 

An exception to this rule may be when the server of a given website or the source of a service provided by us is located in another country (e.g. in the case of entities such as Google or Facebook). In that case, the transfer of data is carried out with appropriate security measures, in particular on the basis of the Standard Contractual Clauses defined by the European Commission.

 

8. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies to make the use of our website user-friendly and tailored to your preferences. We also use them to create statistics, verify the use of the website and for marketing purposes.

Due to the lifespan of cookies and other similar technologies, we use two main types of these files:

a) session files - temporary files stored on the user's end device until the user logs out, leaves the Web Portal or turns off the software (web browser); 

b) permanent files - stored on the user's end device for the time specified in the parameters of cookies or until they are deleted by the user. 

With regard to the purpose of cookies and other similar technologies, we use the following types of them: 

a) necessary for the operation of the service - e.g. enabling the use of our services, such as authentication cookies used for services that require authentication; 

b) advertising - enabling us to provide users with advertising content more tailored to their interests; 

c) analytical - for analysis.

 

Data from advertising and statistical cookies may be transferred to our partners 

Google Ireland Ltd. and Meta Platforms Ltd.  - this applies to advertising and analytical cookies.

Data from cookies will be stored for a period of time depending on the settings of the file and the browser. 

 

The user has the option to consent to the installation of advertising and analytics files on his device. Consent may be withdrawn at any time, which will not affect actions taken on the basis of consent before its withdrawal.

If you change the settings or disable cookies on your browser, you may not be able to use all the functionality offered by the website. 

For more information about the cookie settings of individual browsers, please visit the browsers' pages including, but not limited to:

a) Internet Explorer 

b) Mozilla Firefox 

c) Chrome 

d) Opera 

You can find information on cookies, for example, at wszystkoociasteczkach.pl, or in the Help section of your browser's menu.