BB Care Privacy Policy

Below you will find information about how we process personal data and what tools we use on the bbcare.pl website.

We have written this document in plain language so that it is easy to understand what data we hold about you, why we use it and what rights you have.

1. General provisions

This privacy policy concerns the processing of personal data in connection with the use of the bbcare.pl website and contact with us via contact forms, e-mail or other channels indicated on the site.

The document has been prepared on the basis of the regulations in force in the European Union, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data ("GDPR").

2. Data controller

The controller of your personal data is:

BILLBERRY CAPITAL GROUP sp. z o.o.

Tax ID: 584-276-79-63

02-305 Warsaw
Aleje Jerozolimskie 136

For all matters relating to the processing of personal data, you may contact us via the form on the Contact page or using the details provided there.

3. Scope and categories of data processed

The scope of data we process depends on how you use the site and the purpose for which you contact us. We most commonly process the following categories of data:

  • identification data – first name, surname, company or entity name, job title,
  • contact data – e-mail address, phone number, postal address where applicable,
  • data related to the content of the enquiry – information about your situation, existing policies, claims or planned activities,
  • technical and statistical data – IP address, cookie identifiers, device and browser information, data on site activity (e.g. pages visited).

4. Purposes and legal bases for processing

We may process your personal data for the following purposes and on the legal bases set out below:

  • Responding to a submitted enquiry – when you contact us via a form or e-mail, we process data to provide a reply, present information about our services or propose next steps (legal basis: Art. 6(1)(f) GDPR – our legitimate interest in responding to enquiries).
  • Establishing and maintaining a business relationship – in the case of further cooperation, data may be processed for the purpose of preparing offers, negotiating terms, and concluding and performing contracts (legal basis: Art. 6(1)(b) GDPR – necessity for the conclusion and performance of a contract).
  • Fulfilment of legal obligations incumbent on the controller – e.g. arising from tax, accounting or insurance mediation regulations (legal basis: Art. 6(1)(c) GDPR).
  • Establishment, pursuit or defence of claims – to the extent necessary to protect our rights (legal basis: Art. 6(1)(f) GDPR – legitimate interest).
  • Analytical and statistical purposes related to the website – including adapting content, studying interest in individual site sections and improving usability (legal basis: Art. 6(1)(f) GDPR – our legitimate interest).

Where in specific cases we ask you to give your consent (e.g. for certain categories of cookies), the legal basis for processing in that respect is Art. 6(1)(a) GDPR. You have the right to withdraw your consent at any time; this does not affect the lawfulness of processing carried out before withdrawal.

5. Recipients and transfers outside the EEA

In connection with the pursuit of the above purposes, your personal data may be transferred to the following categories of recipients:

  • entities providing IT, hosting and maintenance services on our behalf,
  • providers of web analytics tools or site maintenance services,
  • entities providing advisory, legal, accounting or audit services,
  • public authorities, where such an obligation arises from law.

As a rule, we do not transfer personal data outside the European Economic Area. If the use of specific tools (e.g. cloud service providers) were to result in a transfer of data outside the EEA, this takes place on the basis of appropriate legal mechanisms provided for in the GDPR, such as standard contractual clauses or an adequacy decision.

6. Data retention period

We retain personal data for the period necessary to achieve the purposes for which it was collected, and subsequently for the period required by law or a justified limitation period for potential claims. For example:

  • data processed for the purpose of responding to an enquiry – for the duration of the correspondence and for a maximum of 12 months after it ends,
  • data related to the performance of contracts – for the duration of the cooperation and subsequently for the period required by tax and accounting regulations,
  • data processed for the establishment, pursuit or defence of claims – until the expiry of the limitation period.

7. Rights of data subjects

In connection with the processing of personal data, you have the following rights:

  • right of access – to obtain information on whether we process your data and to receive a copy of it,
  • right to rectification – to correct data that is inaccurate or incomplete,
  • right to erasure – in the cases provided for under the GDPR ("right to be forgotten"),
  • right to restriction of processing – e.g. when you contest the accuracy of the data or object to processing,
  • right to data portability – in respect of processing based on consent or a contract and carried out by automated means,
  • right to object – to processing carried out on the basis of our legitimate interest,
  • right to lodge a complaint with a supervisory authority – the President of the Personal Data Protection Office.

To exercise the above rights, you may contact us using the details provided in the "Contact" section on bbcare.pl. When handling your request, we may ask for additional information to verify your identity.

8. Cookies and analytics

The bbcare.pl website may use cookies, which are stored on the user's end device and read on subsequent visits. They are generally used to:

  • ensure the correct functioning of the site and its basic features,
  • remember selected user settings,
  • generate anonymous visit statistics and analyse how the site is used.

In your browser settings you can at any time restrict the saving of cookies or disable them entirely. Please note, however, that this may affect the correct functioning of certain site features. Detailed information about the categories of cookies used may be presented in a separate notice or banner displayed on your first visit to the site.

9. Data security principles

We take care to ensure an appropriate level of personal data security. To this end we apply organisational and technical measures appropriate to the risk associated with data processing, such as access controls, encryption of selected connections and rules for granting permissions to persons involved in running the site and handling client contacts.

Personal data may only be processed by persons authorised by the controller who are bound by confidentiality obligations, or by entities acting on our behalf under appropriate data processing agreements.

10. Changes to the privacy policy

We reserve the right to update this privacy policy, in particular in the event of changes in law, development of site features or changes in the tools used. We will communicate significant changes in a visible manner on bbcare.pl.

The current version of the policy is always available at /polityka-prywatnosci/ and takes effect from the moment of its publication.