PRIVACY POLICY of the website https://aniaholding.pl ( hereinafter referred to as the Site ) operated by CENTRUM ELEKTRYCZNE ″ANIA″ BOGUCCY SP. Z O.O. SP. K. and its affiliates: Centrum Usług Wspólnych BOGUCCY Sp.z o.o z/s in Wieluń, BIOAN Sp. z o.o. z/s in Wieluń, Firma Produkcyjno Handlowa „JB” Jacek Bogucki Sp. z o.o. z/s in Wieluń.
This document implements the requirements set out in the provisions of the Electronic Services Act and the Telecommunications Act.

The purpose of the Privacy Policy is to inform on what basis and for what purpose the personal data of the Users of the Website are processed, what are the grounds for processing the data and what rights the Users have in relation to the processing of personal data by CENTRUM ELEKTRYCZNE ″ANIA″ BOGUCCY SP. Z O.O. SP. K.and related entities (Shared Services Centre BOGUCCY Sp.z o.o z/s in Wieluń, Bog, BIOAN Sp. z o.o. z/s in Wieluń, Firma Produkcyjno Handlowa „JB” Jacek Bogucki Sp. z o.o. z/s in Wieluń.), as joint controllers of data via the Website.

We use cookies on our website. They are used in particular for the purposes of ensuring the proper functioning of the website, adapting its functionality to the user's preferences, conducting statistics and marketing activities.
At any time, the user has the option of withdrawing the consent given for the use of cookies by using the cookie management option available on the website (the so-called cookie declaration provided by Cookiebot) or by changing the settings of the Internet browser. The withdrawal of consent does not affect the legality of the processing carried out before its withdrawal. Detailed information on the types of cookies, the purposes for which they are used, the storage period and the possibility to manage them can be found in the Cookiebot tool, available on our website www.aniaholding.pl.

Data controllers/co-controllers :

The privacy policy sets out the principles for the collection, processing and use of data
Personal data obtained by Centrum Elektryczne ″ANIA″ Boguccy sp. z o.o. sp. k. and by related entities, as co-administrators The administrator /co-administrator/ of your personal data in relation to their processing for the purposes indicated below is:
Centrum Elektryczne ″ANIA″ Boguccy sp. z o.o. sp. k., KRS:0000473142 SĄD REJONOWY DLA ŁODZI-ŚRÓDMIEŚCIA W ŁODZI, XX WYDZIAŁ KRAJOWEGO REJESTRU SĄDOWEGO, NIP: 832 000 41 79, REGON: 730015440 with registered office at the address: ul. R. Traugutta 43, 98-300 Wieluń.
Due to the fact that we operate as Affiliates and share IT systems and servers, the Joint Administrators of your personal data are also:

• Centrum Usług Wspólnych BOGUCCY Spółka z ograniczoną odpowiedzialnością z/sw Wieluń, 43 Traugutta Street , entered in the National Court Register under KRS no. 0000211382, NIP8321683946, REGON : 730330590,
• BIOAN Spółka z ograniczoną odpowiedzialnością z/s in Wieluń , 43 Traugutta St., registered in the National Court Register under KRS no. 0001106755, NIP 8322097156, REGON 528689263.
• - Firma Produkcyjno Handlowa „JB” Jacek Bogucki Spółka z ograniczoną odpowiedzialnością,
  z/s in Wieluń, 43 Trauguta Street , entered in the National Court Register under KRS number 0000947585, NIP: 8322076734 , REGON: 363347107,

RODO CONTACT:

The Joint Administrators for all issues concerning your data can be contacted via the Data Protection Officer, who can be contacted at: email: a.bednarek@centrumelektryczne.pl or by post at: Centrum Elektryczne ″ANIA″ Boguccy Sp. z o.o. Sp. k., 43 R. Traugutta St., 98-300 Wieluń with the annotation „Data Protection Inspector”. Furthermore, Users have the right to lodge a complaint with the supervisory authority in charge of personal data protection in Poland: Office for the Protection of Personal Data ul. Stawki 2, 00-193 Warsaw

RESPONSIBLE ENTITIES :
By means of an agreement, the Joint Controllers have agreed on the responsibilities and division of tasks relating to the processing of personal data within the jointly used IT systems and servers and the activities carried out as related entities. Pursuant to Article 26 of the RODO, the Joint Controllers have entered into joint arrangements, the substance of which is hereby made available to data subjects:
a) Implementation of the information obligation
- The co-administrators agreed that the implementation of the information obligation is handled by Centrum Elektryczne ″ANIA″ Boguccy Sp. z o.o. Sp. k
(b) Point of contact for data subjects
- The co-controllers agreed that the contact point for the data subjects is under Centrum Elektryczne ″ANIA″ Boguccy Sp. z o.o. Sp. k., ul. R. Traugutta 43, 98-300 Wieluń e-mail address: a.bednarek@centrumelektryczne.pl.
(c) Identification of the responsible entity
- The co-administrators agreed that the entity responsible in all matters related to personal data protection is Centrum Elektryczne ″ANIA″ Boguccy Sp. z o.o. Sp. k., ul. R. Traugutta 43, 98-300 Wieluń
Notwithstanding the above, pursuant to Article 26(3) of the RODO, the data subject may exercise his or her rights under the content of the RODO against any of the Joint Controllers.
Centrum Elektryczne ANIA Boguccy sp. z o.o. sp.k. takes due care that the data
personal data are processed in accordance with the purposes for which they were collected and used
according to the scope of the authorisations (consents) granted and the areas of processing permitted
Rights.

WHERE DO WE GET YOUR DATA FROM
We obtain your data directly from you, e.g. in the context of concluding and performing contracts, answering your questions (e.g. via the contact form on our website), in the recruitment process for a job or cooperation . In order to use the contact form on the Website, the following personal data are collected: name, surname, e-mail address, content of the message. The data provided in the form are processed for the purpose resulting from the function of the specific form. If a cv is sent to an email address, the personal data contained in the cv and the documents attached by the candidate in the recruitment are processed. Furthermore, the Joint Administrators ensure that data are always obtained for a legitimate and clearly defined purpose , in particular in the areas of :
- the provision of services relating to the availability and functionality of the Site;
- the handling of communications between the Joint Administrators and the User (including contacts via e-mail, contact form);
- comply with legal requirements (including accounting regulations, the Labour Code, the Civil Code);
- recruiting candidates for jobs/co-operation/internships;
- to inform about and promote the services provided;
- administration of the IT system, improvement of the functionalities used and services provided.
We may also obtain data from publicly available sources, such as the website of your company or the company where you are employed - such as your name, surname, position, company telephone number and e-mail address (for contact purposes), or from the National Court Register or the Central Register and Information on Business Activity (in order to verify the information provided by you, only to the extent indicated therein), as well as from publicly available industry portals. Your data may also be provided to us by your employer - in order to enable us to contact you within the framework of the contract concluded with him or to verify your identity (e.g. when you are a driver who comes to collect our product). We may also obtain your data from the „white list of VAT taxpayers” kept in accordance with Article 96b of the Act of 11 March 2004 on Value Added Tax, to the extent indicated therein.

FOR WHAT PURPOSE WE PROCESS YOUR DATA
Your personal data is processed for:

1. conclude and perform the contract (Article 6(1)(b) RODO) - including verification of payment reliability and settlement of the contract - on the basis of data provided by you or data from other sources (National Court Register, Central Register and Information on Business Activity, Business Information Offices), in each case the basis for obtaining information is the regulations governing the functioning of individual information bases;
2. to comply with our legal obligations (Article 6(1)(c) of the DPA) consisting in particular of:
   a. The fulfilment of tax obligations (issue and settlement of invoices and other accounting documents);
   b. verification of the contractor's data included in the so-called „white list of VAT taxpayers”, kept in accordance with Article 96b of the Act of 11 March 2004 on tax on goods and services (to the extent specified therein), i.e. verification whether the contractor is an active VAT taxpayer, verification of the reasons for which the contractor was refused registration, deleted from the register or reinstated as a VAT taxpayer and learning the legal basis for these decisions, as well as confirmation of the contractor's bank account number;
   c. the performance of obligations relating to the exercise of the rights set out in the RODO (including to the extent necessary to identify and verify the identity of the person making the request and to respond);
3. the pursuit of our legitimate interests (Article 6(1)(f) RODO), in the form of:
   a. Direct marketing of our products or services carried out during the performance of the contract, with the proviso that if e-mail marketing is carried out, additional consent will be taken for the source of the marketing message;
   b. to establish, assert or defend against claims that may arise in connection with the conclusion of contracts (performance and settlement of the contract, handling of complaints) or in connection with the performance of obligations under the provisions of the RODO (to be able to demonstrate compliance);
   c. respond to enquiries and offers made by e-mail via the contact form or at the employee's e-mail address (e-mail correspondence);
   d. to allow contact between employees of the contracting parties who are not party to the concluded contracts, both at the bidding stage and in the execution of the concluded contracts;
   e. to verify the identity of employees of contractors cooperating with Centrum Elektryczne ″ANIA″ Boguccy sp. z o.o. sp.k e. drivers collecting products purchased from us
   f. Organisation of training and marketing events for employees or colleagues of contractors or potential contractors.
4. to receive our commercial (marketing) information - on the basis of the consent given for this purpose (Art. 6(1)(a) RODO).
5. advertise the recruitment process for job/co-op/internship candidates; including the possibility to apply back via the website

The provision of data is voluntary, but necessary in order to fulfil the above-mentioned purposes, e.g. so that we can conclude a contract with you or answer your question. Your consent is always completely voluntary - in particular when we collect your consent to send you commercial information under the contact form, it is not a condition for sending and receiving an answer to your question. The provision of data required by law is mandatory. Failure to do so may give rise to regulatory consequences, such as taxation. We may also process your data for other purposes - subject to compliance with all legal requirements in this regard (in particular, where we have the necessary legal basis and comply with information obligations towards you).

TO WHAT EXTENT WE PROCESS YOUR DATA:

The extent of the personal data processed has been limited to the minimum necessary for the provision of services via the website functionality and taking into account the stated purpose of the processing. The provision of additional data that is not necessary for the provision of the service is voluntary and requires your express consent to its further processing. In order to prepare and present an offer of our services, we process the personal data sent by you via the contact form and/or the newsletter subscription form: Name and surname, email address, website address, telephone number, content of the enquiry. In order to provide our services: Name and first name, delivery address, electronic mail address (e-mail), telephone number, company name, company data

In order to recruit and conduct the recruitment process, we process the personal data sent via the contact form : Name, e-mail address, telephone number, data indicated in the body of your CV or documents attached by you.

For analysis and marketing purposes, we may process your visit data on the shopping platform and use your personal data to this extent :

• contact details, i.e. name, business or residential address, telephone number, e-mail ,
• organisational information , including position and company name,
• payment data and other related billing information
• information provided as part of a support ticket, survey, comments,
• Information necessary for legal compliance or control , such as date of birth, nationality, identification numbers, identity documents,
• information about your interaction with our site , including device and user identification, information about the operating system, pages and services visited, and the date and time of your request.

Your personal data shall be processed by the Data Controller in accordance with the applicable legal provisions and, in particular, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

HOW LONG WE PROCESS YOUR DATA
Your personal data will be kept for the period necessary to fulfil the purposes set out in this Policy, and thereafter for the period provided by law or for possible redress, or until the consent you have given is withdrawn. The Joint Administrators shall endeavour to keep the Website Users' data only for as long as it is needed to fulfil the purpose or fulfil the obligations imposed on the administrator. The processing period may be extended if the processing is necessary for the establishment, investigation or defence of possible claims, and thereafter only if and to the extent required by law. After the expiry of the processing period, the data shall be irreversibly deleted or anonymised.
Depending on the specific situation to which the processing of personal data relates, the following processing periods are provided for in the activities of the Joint Administrators:
- the duration of the contract and the period required by law, including the Civil Code, the Accounting Act;
- the period of time necessary to realise the rights and claims of the Joint Administrators or the User, including the periods of limitation on claims (6 years, and 3 years for claims for periodic performance and claims relating to the conduct of business);
- periods in accordance with the provisions of the Labour Code as regards data from recruitment and employment processes;
- until you withdraw your consent, if the data are processed on the basis of your consent (e.g. in the case of sending professional and commercial information).

WITH WHOM WE MAY SHARE DATA
Your data will not be disclosed to anyone, unless it is necessary for performance of the contract to which Centrum Elektryczne ″ANIA″ Boguccy sp. z o.o sp.k., and its affiliated entities are a party (e.g. contracts with insurance or forwarding companies) or it results from legal regulations, e.g. when we are requested to do so by the Police or another authorised body (e.g. we may disclose contractor's data to the Tax Office in accordance with Article 117ba § 3 of the Tax Ordinance). We can also share data when we have another legal basis, which is always verified by us and of which we inform you. Your personal data may also be shared with entities that process personal data on our behalf, such as accounting, legal, RODO, IT, administrative, logistics, and health and safety service providers. We enter into personal data entrustment agreements with such entities for processing and they may only process your data for the purpose and scope set out in that agreement. Your personal data may be transferred to employees of other departments (e.g. if you have entered into a contract with the sales department, your data will also be transferred to logistics - for the purpose of delivery). Only authorised employees will have access to your personal data to the extent necessary for the performance of their duties in their position.

TRANSFER OF DATA OUTSIDE THE EEA

If your personal data were to be transferred outside the EEA, we will put in place appropriate safeguards to ensure that such transfers are carried out in accordance with applicable data protection principles.

WHAT RIGHTS DO YOU HAVE AGAINST THE PROCESSING OF YOUR PERSONAL DATA?

You have the right to access and correct the content of the personal data concerning you, to request that your personal data be completed, updated, rectified, temporarily or permanently suspended or deleted if it is incomplete, outdated, untrue or has been collected in violation of the Act or is no longer necessary for the purpose for which it was collected. Your rights also include the right to data portability and the right to withdraw your consent to the processing of your personal data if the processing of your personal data is based on a legal provision, as well as the possibility to object to the processing of your personal data for a specific purpose, e.g. for marketing purposes. You can exercise the above rights by contacting the Data Protection Officer at the following email address: a.bednarek@centrumelektryczne.pl or by letter to: Centrum Elektryczne ″ANIA″ Boguccy Sp. z o.o. Sp. k., 43 R. Traugutta St., 98-300 Wieluń with a note „Data Protection Inspector”. In response to your request, you may be asked to provide data necessary to verify your identity or to provide additional information necessary to properly complete the request. The exercise of data subjects' rights is free of charge, unless otherwise provided for in the RODO. In accordance with Article 12(5) of the RODO, the controller may charge a reasonable fee taking into account the administrative costs of providing the information, carrying out the communication or taking the action requested.