This information is provided pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 94/46/EC (hereinafter referred to as „GDPR”).

 

Controller and contact information

The Controller of your personal data is Billon Solutions Sp. z o .o. with its registered office at 11 Waliców Street, 00-851 Warsaw, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, XII Economic Division of the National Court Register under the KRS number 0000682897, having NIP 5272811301 and REGON 367554369, with the share capital of PLN 4,400,000.00. (hereinafter: Controller).

In matters related to the processing of personal data, you may contact the Data Protection Officer – Anna Jędrasiak at: iod@billongroup.com or by mail to the registered office address indicated above.

 

Purposes and legal basis of data processing

Depending on your relationship with the Controller, your personal data will be processed for the following purposes:

• to conclude and perform a contract for the use of services provided by the Controller (the legal basis for processing is Article 6(1)(b) of the GDPR);
• to fulfill the Controller’s legal obligations, including the prevention of crimes and fraud money laundering (the legal basis for processing is Article 6(1)(c) of the GDPR);
• contact and direct marketing of products or services electronic and telephonic communications (the basis for processing is your consent and Article 6(1)(a) of the GDPR);
• for the purpose of processing complaints (the legal basis for processing is Article 6(1)(c) of the GDPR);
• protection against claims or recovery by the Controller (the legal basis for processing is Article 6(1)(f) of the GDPR).

Your data may also be processed (insofar as it related to the Controller’s activities and insofar as the collateral purposes are related to the above-mentioned purposes) for the following  purposes (the legal basis for the processing is Article 6(1)(f) of the GDPR):

• data archiving,
• To ensure the smooth functioning of the Controller’s website and to tailor it to users’ needs,
• create internal reports and analysis,
• conducting internal audits,

The personal data was obtained directly from you for the purpose of contact or in connection with a contract. Data may also be obtained from external sources such as: sanction lists, CRBR, KRS, CEiDG.

Data scope:

• identification data: name, surname, PESEL number or other identification number, citizenship, number and series of identity card,
• contact information: address, telephone, e-mail address,
• transfer data: concerning the transfer of electronic money or crypto-assets in accordance with applicable regulations.

The Controller may also collect data when using the website. These data are collected automatically and relate in particular to technical information that allows the website to function properly. For more information on cookies, please refer to the Cookies Policy.

 

Data retention period

Your personal data will be processed for the period necessary to achieve the purposes indicated in this clause, in particular:

• for the purpose of implementing the agreement- for the duration of the agreement;
• for marketing purposes – until you revoke your consent to the processing of personal data;
• for the purpose of processing complaints and claims made – until the statute of limitations for claims;
• for the purposes of collection and investigation of claims – until the statute of limitations for claims;
• for the purpose of applying financial security measures for a period of 5 years, starting from the date on which the business relationship was terminated;
• for tax and accounting purposes for a period of 5 years from the end of the fiscal year in which the contract between the parties was terminated;

Recipients of data

Your data may be transferred  to the following entities:

• to state authorities or other entities authorized under the law – if necessary to perform legal obligations,
• entities supporting the Controller’s operations, on behalf of the Controller, in particular: suppliers of external ICT systems, subcontractors, intermediaries, auditing entities, entities for archiving and disposal of documents, etc.
• entities providing accounting, human resources or legal services – to the extent necessary to fulfill legal obligations or to establish, assert and defend claims,

 

Rights of data subjects

You have the right to: access the content of your data and the right to rectify, delete, limit processing, the right to data portability, the right to object, at any time.

You have the right to lodge a complaint with the President of the Office for Personal Data Protection when you consider that the processing of personal data concerning you violates the provisions of the General Data Protection Regulation of April 27, 2016.

 

Transfer to a third country

As a general rule, personal data will be processed in the European Economic Area. However, the transfer of data to a third country may occur when (subject to other provisions of generally applicable law) the conditions for ensuring an adequate level of protection of natural guaranteed by the GDPR are met, e.g. a contract containing standard contractual clauses has been concluded with the entity receiving the data. The transfer of data to a third country may also occur in certain situations, in particular when the transfer is necessary for the performance of a contract between the data subject and the controller.

 

Voluntariness of providing data

Your provision of personal data is voluntary, but failure to provide it will prevent the conclusion and execution of the contract.

 

Automated processing

The Controller does not perform automated processing of personal data.

Cookie Policy

This policy should be read in connection with the Privacy Policy. Cookies are small text files that are stored in your browser folder. When you use a website, these files transfer certain information to your browser. As these files are very useful for website publishers, they are very popular and frequently used. Thanks to these files, the website administrator is able to determine whether, for example, a given computer (and its user) has visited the website before or if it is their first visit. Cookies are therefore used to improve the functioning of the website and make it more user-friendly.

The Controller uses cookies and places them on the devices of Website Users in order to facilitate navigation for Users and the proper functioning of the Website.

The User can prevent cookies from being saved at any time by using the browser settings on their computer or mobile device. Disabling cookies does not make it impossible to use the Website, but it may cause certain difficulties in this respect, and in some cases even prevent the use of specific services provided on the Website.

 

1. Types of cookies

The website uses two types of cookies:

• session cookies – they remain on the User’s device until they leave the website or turn off the web browser;
• persistent cookies – they remain on the User’s device for a specified period of time or until they are manually deleted by the User.

Cookies are only used to collect anonymous statistical data about users to improve the user experience. The service provider does not collect any data that identifies users as individuals or customers.

2. Purpose of using cookies

Necessary cookies are used to ensure the proper functioning and optimisation of websites in terms of devices and browsers that are most commonly used by visitors to these websites – this allows the computer or mobile device to display them correctly and legibly. These files are also used to remember whether a given user has given or not given specific consent (e.g. to display selected content). Blocking these cookies may therefore prevent or significantly hinder access to certain functionalities and areas of the website.

Analytical cookies are used to create aggregate statistics and analyses that help us understand how the Website is used. This allows us to constantly improve the structure and content of the pages so that they best meet the needs of current and potential Users.

We also use a tool called Hotjar, which creates click maps and analyses user engagement on the website (in terms of scrolling). This tool can also be used to record behaviour on the website.

List of cookies used:

Cookie name	Purpose and content	Cookie retention period
Necessary
wpEmojiSettingsSupports	to store browser details.	session
elementor	displaying a customizable popup
Analytical

3. Links to other websites

If the Website contains links to other websites, we cannot be held responsible for the privacy practices of these websites. We encourage you to review the privacy policies of these websites upon entering them. This privacy policy applies only to the Website.

4. Changes to cookies

The Company’s intention is to make our use of cookies and other technologies as transparent as possible for the Website Users. We want to provide you with the best product possible – in this case, a website. We can do this thanks to cookies from external companies, as described above.

Some browsers allow you to choose how your browser responds to requests by third parties to send a cookie to your device. To restrict your browser from accepting cookies, please refer to the following pages, which provide information on how to avoid the placement of cookies: Firefox; Edge;Google Chrome; Bing; and Safari.

The company reserves the right to make changes to all or part of this Policy. Any changes to the Policy will take effect immediately after the amended policy is posted on the Website.