PRIVACY POLICY

This Privacy Policy sets out the principles for the processing and protection of the personal data of users of sklep.bezdmianonds.pl (hereinafter referred to as the "Website") concerning data provided in connection with the use of the Website's functionalities.

GENERAL PROVISIONS

1. Best Diamonds Markowski Spółka komandytowa Spółka Komandytowa is registered in the National Court Register under number 0000963537, with its registered office at 15-111 Białystok ul. Michała Motoszko 28, NIP 5423321091, REGON 380786285, e-mail address: [email protected], telephone number: 790791211 as the Administrator of your personal data (hereinafter referred to as "Administrator" or „ADO”) cares about your privacy, therefore, based on the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Dz. Urz. EU L 119, p. 1) - hereinafter "RODO" - we provide you with the most important information about the principles of ADO's processing of your personal data, including cookies, which are used by our online platform;
2. The Administrator collects and processes personal data by the relevant legislation, including in particular the RODO, and the data processing rules provided for therein. We strive to provide you with transparency in data processing, in particular, we always inform you about the data processing at the time of collection, including the purpose and legal basis of the processing - e.g. when creating an Account on bestdiamonds.co.uk concluding a contract, subscribing to a newsletter. The controller ensures that the data are collected only to the extent necessary for the indicated purpose and processed only for the time necessary.
3. The Administrator attaches great importance to the protection of your data and the information entrusted to him. It is the Administrator's policy to ensure the greatest possible confidentiality as regards personal data, in particular as regards protection against unauthorized access, unauthorized modification, disclosure, or destruction.
4. The controller shall take particular care to protect the interests of data subjects and shall in particular ensure that the data are:
   1. processed lawfully;
   2. collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes;
   3. adequate, relevant, and limited to what is necessary for the purposes for which they are processed,
   4. correct and where necessary, kept up to date,
   5. kept in a form that permits identification of the data subject for no longer than is necessary for the purposes for which the data are processed.
5. If despite the security measures in place, a breach of personal data protection occurs (e.g. data "leakage" or data loss), we apply the provisions of the RODO and inform the supervisory authority and data subjects of such an incident in a manner consistent with the provisions of the RODO.

PERSONAL DATA ADMINISTRATOR

1. The Administrator of your personal data is the company Best Diamonds Markowski Spółka komandytowa with a registered office in Białystok, operating at the address: 28 Michała Motoszko Street, 15-111 Białystok, entered in the Register of Entrepreneurs of the National Court Register under KRS number: 0000963537, NIP: 5423321091, REGON: 380786285 (hereinafter the "Company").
2. If you have any questions regarding the processing of your data and your rights, you can contact:
   1. in writing, to: Best Diamonds Markowski Spółka komandytowa ul. Michała Motoszko 28, 15-111 Białystok,
   2. by telephone at: 790791211,
   3. by electronic correspondence, at the e-mail address: [email protected].

SCOPE OF WHAT PERSONAL DATA DO WE PROCESS?

1. The Administrator may process the following personal data of Users or Customers using the Website: first and last name; e-mail address; contact telephone number (if you provide it to us in connection with your request); delivery address (street, house number, apartment number, postal code, town, country), address of residence/business/site (if different from the delivery address), data related to the processing of the order, including payment. In the case of Users or Customers who are not consumers, ADO may additionally process the company name and tax identification number (NIP) of the Customer. The provision of personal data referred to in the point above may be necessary for the conclusion and performance of the Sales Agreement or the agreement for the provision of Electronic Services on the Website. Each time the scope of data required to conclude an agreement is indicated beforehand on the Website and in the Rules and Regulations of the Online Shop.
2. Depending on which functionalities of the Website you use, we process your data voluntarily provided by you for the following purposes:
   1. […]
3. Entering the Website and using certain functionalities of the Website without placing an order or registering with the Website, as a rule, does not involve the provision of personal data.
4. We do not process so-called sensitive data at all (e.g. personal data revealing racial or ethnic origin, political opinions, genetic data, biometric data, data concerning the person's health, sexuality or sexual orientation, etc.).
5. We may also process the IP address for the purposes described in the Cookies Policy.

WHY DO WE PROCESS YOUR DATA?

1. We process your personal data for the purposes of ensuring that we are able to provide our services and correctly perform the contract in relation to you and to handle complaints. The legal basis for the processing of your personal data in this respect is the necessity for the performance of the contract or for taking action at your request prior to the conclusion of the contract or your consent.
2. The data may also be processed for marketing purposes, including the sending of newsletters, based on your consent.
3. In order to properly perform the contract, your data are also processed for billing, invoicing, and financial reporting purposes. We have to do this due to applicable legislation.
4. In addition, if you contact us via the contact details available on the Website, in particular in order to obtain information about an offer, we will be able to process your personal data provided to us following your contact with our company in order to make use of our services or products.
5. Please note that the provision of your personal data such as your e-mail address or telephone number is a prerequisite for the Administrator to contact you and to present a possible offer. Providing your personal data is voluntary. Failure to provide personal data may result in the inability to conclude a contract or its execution in whole or in part, in the inability to receive an offer, or in the inability to communicate with you.

WHERE DO WE TRANSFER PERSONAL DATA?

1. In connection with the provision of services by ADO, your personal data may be disclosed to external entities, including in particular IT service providers, including those responsible for the operation of IT systems used to provide services over the Internet, entities such as banks and payment operators if the data subject has used an electronic payment method when placing an order, to entities providing accounting, bookkeeping, courier and delivery services, to the carrier or intermediary performing the delivery on behalf of ADO, to marketing agencies (within the scope of marketing services), to entities providing legal or accounting services, to couriers, to entities providing to ADO other minor services necessary for the performance of the concluded agreement.
2. Your data may be disclosed to the competent authorities or third parties who request such information, based on the relevant legal basis from which the legal obligation to provide information arises and in accordance with the provisions of the applicable law - we will disclose your personal data if we are requested to do so by authorized state authorities, in particular the organizational units of the public prosecutor's office, the Police, the President of the Office for Personal Data Protection, the President of the Office for Competition and Consumer Protection or the President of the Office of Electronic Communications.
3. The ADO is aware that the level of protection of personal data outside the European Economic Area (EEA) differs from that provided by European law. The ADO always communicates its intention to transfer personal data outside the EEA at the collection stage - the ADO does not currently use such entities. The entities that the ADO works with are mainly based in Poland and other countries in the European Economic Area (EEA). The ADO transfers personal data outside the EEA only when necessary, and with an adequate level of protection, primarily by: cooperation with entities, processing personal data in countries for which a relevant decision of the European Commission has been issued; applying standard contractual clauses, issuing by the European Commission; application of binding corporate rules, approved by the relevant supervisory authority; in case of data transfers to the USA, cooperation with entities participating in the Privacy Shield program, approved by a decision of the European Commission.

HOW LONG DO WE KEEP PERSONAL DATA?

1.  The period of processing depends on the type of service provided and the purpose of the processing. The period of processing of your data may also be determined by legislation, where this is the basis for the processing.
2. We store your personal data for the period you have an Account on the Website for the purposes of providing the Account service and related functionalities and other services in accordance with the Regulations for the provision of electronic services. After deletion of the Account, your data will be anonymized, except for the following personal data, which we will leave for the purposes of handling complaints and claims related to the use of the Administrator's services, investigation, or defense against claims.
3. Where the basis for processing is a necessity for the conclusion and performance of a contract, the data shall be processed for the duration of the provision of the service or the fulfillment of the order until the performance of the contract and the end of the post-sale period entitling to certain claims against the Controller (e.g. warranty/guarantee).
4. Where the processing is based on consent, data shall be processed until the consent is withdrawn or an effective objection is made or an effective request for erasure is made.
5. If the data are processed on the basis of the legitimate interest of the Administrator - the data shall be processed for the period enabling its realization or until an effective objection to the data processing is raised or, in the absence of an objection, until the existence of this legitimate interest.
6. Data processed for the purpose of handling a "Product Inquiry" will be stored for the duration of the correspondence. In the event of further interest in our product/service, acceptance of our price proposal, will be processed for the purpose necessary to fulfill the contract in accordance with point 5 above.
7. With regard to personal data to the extent that they will be processed for marketing purposes - they will not be processed for longer than [...] months.
8. the processing period may be extended if the processing is necessary for the establishment, investigation, or defense against possible claims, and thereafter, only if and to the extent required by law. We will only process your data for as long as we have a legal basis to do so, which is until:
   1. we are no longer under a legal obligation to process your data
   2. the possibility of asserting claims related to the contract concluded by the Store by either party ceases
   3. you withdraw your consent to the processing, if it was the basis for the processing, or you object to the processing- whichever is applicable in the case and which occurs at the latest.
9. After the expiry of the processing period, the data shall be irreversibly deleted or anonymized.

WHAT RIGHTS DO YOU HAVE?

1. We shall ensure the exercise of your rights as indicated below. You can realize your rights by making a request the contact information indicated in sec. IV above. The data subject shall have the following rights:
   1. Right to rectification of data
      You have the right to rectify and complete the personal data you have provided. With respect to other personal data, you have the right to request us to rectify this data (if it is incorrect) and to complete it (if it is incomplete).
   2. Right to object to the use of your data
      > You have the right to object at any time to the use of your personal data, including profiling, if we process your data based on our legitimate interests, e.g. in connection with keeping statistics on the use of particular functionalities of the Website and facilitating the use of the Website, as well as satisfaction surveys. If your objection proves to be valid and we have no other legal basis for processing your personal data, we will delete your data against the use of which you have objected.
   3. Right to erasure of data ("right to be forgotten")
      You have the right to request deletion of all or some of your personal data. We will treat a request to delete all personal data as a request to delete your Account. You have the right to request deletion of personal data if:
      
      1. you have withdrawn a specific consent, to the extent that personal data was processed based on your consent;
      2. Your personal data is no longer necessary for the purposes for which it was collected or for which it was processed;
      3. you have objected to the use of your data for marketing purposes;
      4. you have objected to the use of your data for the purpose of keeping statistics on the use of the Service, and the objection has been found to be valid;
      5. Your personal data is processed unlawfully.
         Despite your request for deletion of personal data, due to the filing of an objection or withdrawal of consent, we may retain certain personal data to the extent necessary for the purposes of establishing, asserting or defending claims. This applies in particular to personal data including: name, email address and application history, which we retain for the purposes of investigating complaints and claims related to the use of our services.
   4. The right to restrict data processing
      You have the right to request restrictions on the processing of your personal data. If you make such a request, we will prevent you from using certain functionalities or services, the use of which will involve the processing of the data covered by the request, until the request is processed. We will also not send you any communications, including marketing communications.
      You have the right to request restrictions on the use of your personal data in the following cases:
      
      1. When you question the accuracy of your personal data, in which case we will restrict the use of your personal data for the time we need to verify the accuracy of your data, but for no longer than 7 days;
      2. when the processing of your data is unlawful, and instead of deleting the data you request that we limit its use;
      3. when your personal data are no longer necessary for the purposes for which we collected or used them, but are needed by you to establish, assert or defend your claims;
      4. when you have objected to the use of your data, in which case the restriction shall be for the time needed to consider whether, in view of your particular situation, the protection of your interests, rights, and freedoms outweighs the interests we pursue by processing your personal data.
   5. Right of access to data
      You have the right to obtain confirmation from us as to whether we are processing your personal data, and if this is the case, you have the right:
   1. Get access to your personal data;
   2. obtain information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of that data, the intended period of storage of your data or the criteria for determining that period, your rights under the RODO and your right to lodge a complaint with a supervisory authority, the source of that data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of that data outside the European Union;
   3. obtain a copy of your personal data.
   6. Right to withdraw consent
      If your data is processed on the basis of your consent, you have the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before the withdrawal of such consent.
   7. Right to data portability
      You have the right to receive the personal data that you have provided to us and then send it to another personal data controller of your choice, such as another operator of similar services. You also have the right to request that we send your personal data directly to such other controller, if technically possible. We will send your personal data in the form of a file in a commonly used, machine-readable format that allows us to send the received data to another personal data controller.
   8. Right to complain
      If you believe that the processing of your personal data violates the provisions of the RODO or other data protection laws, you may file a complaint with the President of the Data Protection Authority.
2. If the ADO is unable to identify the applicant based on the filing, it will request additional information from the applicant. The request can be made in person or through a proxy (such as a family member).
3. For reasons of data security, ADO encourages the use of a power of attorney in a form certified by a notary public or authorized legal counsel or attorney, which will significantly speed up verification of its authenticity.
4. The response is provided in writing, unless the request is made by e-mail or requests that the response be provided electronically.
5. At what time do we fulfill your request? If, in the exercise of the above-mentioned rights, you make a request to us, we will either fulfill the request or refuse to fulfill it immediately, but no later than within one month after receiving it. However, if - due to the complexity of the request or the number of requests - we are unable to fulfill your request within one month, we will fulfill it within another two months informing you in advance of the intended extension. For technical reasons, we always need 24 hours to update your selected settings in our systems. Therefore, it may happen that you receive an email from us during the update of our Service or Systems, which you have opted out of receiving.
6. Filing Complaints, Inquiries and Requests You may file complaints, inquiries and requests with us regarding the processing of your personal data and the exercise of your rights.

PROFILING

1. Within the Service, we may automatically tailor certain content to your needs, i.e. perform profiling, using the personal data you provide. Before we perform profiling, based on which decisions will be made:
   
   1. producing legal effects towards you,
   2. affecting you in a similarly significant way, we will ask you for your consent. Remember that you can revoke your consent at any time. Data processing remains lawful until you revoke your consent.
2. Data may be used for profiling. Profiling of personal data by ADO consists of the processing of data (including by automated means), by using it to evaluate certain information, in particular, to analyze or forecast personal preferences and interests related to ADO's offer.

REQUIREMENT TO PROVIDE PERSONAL DATA
The provision of personal data by you, dear User, is voluntary, but in some cases may be necessary to enter into a contract. Depending on the purpose for which the data is provided:

1. inability to register on the Website (service provided electronically),
2. inability to use the Service (service provided electronically - inquire about a quote and contact form),

WHAT CAN YOU NOT DO?

1. You may not provide personal information to any other person.
2. You are obliged to comply with the law on personal data protection.

HOW DO WE SECURE PERSONAL DATA?

1. The security of personal data is guaranteed by the secure and stable data protection system used by the Administrator.
2. Login and personal data entry sites are protected in the transmission layer (SSL certificate). Thanks to this, personal data and login data entered on the site are encrypted on the User's computer and can only be read on the target server.
3. Personal data stored in the database are encrypted in such a way that only the Administrator holding the key can read them. Thus, the data is protected in case the database is stolen from the server.
4. Users' passwords are stored in hashed form. The hashing function works one-way - it is not possible to reverse its operation, which is now the modern standard for storing Users' passwords.
5. The administrator periodically changes his administrative passwords.
6. An important element of data protection is regular updating of all software used by the Administrator to process personal data, which in particular means regular updates of software components.

COOKIES POLICY

1. The Website does not automatically collect any information, except for the information contained in cookies.
2. Cookies (so-called "cookies") are IT data, in particular text files, which are stored on the Service User's terminal equipment and are intended for use on the Website. Cookies usually contain the name of the website from which they originate, the time of their storage on the terminal equipment, and a unique number.
3. The Administrator is the entity placing cookies on the Service User's terminal equipment and accessing them. Cookies may also be placed on the User's terminal equipment by the Service Operator's partners.
4. Cookies are used for:
   1. Enabling the implementation of certain services available on the Website.
   2. creating statistics that help to understand how the Users of the Website use the websites, which makes it possible to improve their structure and content;
   3. customization of the content of the Website's websites to the User's preferences and optimization of the use of websites; in particular, these files allow for recognition of the Website User's device and appropriate display of the website, adjusted to his/her individual needs;
5. 5. Two types of cookies are used within the Service: "session" (session cookies) and "permanent" (persistent cookies). "Session" cookies are temporary files that are stored on the User's terminal device until, leaving the website or switching off the software (web browser). "Persistent" cookies are stored in the User's final device for the time specified in the parameters of cookies or until they are deleted by the User.
6. In particular, the following types of cookies may be used within the Service:
   1. "Necessary" cookies, enabling the use of certain services available within the Service;
   2. "performance" cookies, enabling the collection of information about the use of the Website's pages for statistical purposes.
7. In addition, the Administrator uses statistical analysis of website traffic, through Google Analytics (Google Inc. based in the USA). The Administrator does not transmit personal data to the operator of this service, but only anonymized information. The service is based on the use of cookies on the User's terminal device. Concerning information about User preferences collected by the Google advertising network, the User can view and edit information resulting from cookies using the following tool: https://www.google.com/ads/preferences/.
8. The Administrator uses remarketing techniques to match advertising messages with the user's behavior on the site, which may give the illusion that the user's personal information is being used to track the user, but in practice, no personal information is transferred from the Administrator to the advertising operators. A technological prerequisite for such activities is that cookies are enabled.
9. In many cases, web browsing software (web browser) allows cookies to be stored on the User's terminal device by default. Users of the Website may change their settings regarding cookies at any time. These settings can be changed, in particular, in such a way as to block the automatic handling of cookies in the settings of your web browser or inform them each time they are placed on the Service User's device. Detailed information on the possibility and methods of handling cookies is available in the settings of your software (web browser).
10. The Operator of the Website informs that restrictions on the use of cookies may affect the ability to use certain services available on the Website.
11. Cookies placed in the Service User's terminal equipment may also be used by partners cooperating with the Service Operator.
12. In connection with the use of cookies, profiling may take place to adapt the content of the Website to the User's preferences and to optimize the use of the website, while there is no automated decision-making in this regard.
13. More information on cookies is available in the "Help" section in the menu of the Internet browser used.

FINAL PROVISIONS

1. The Website may contain links to other websites. The Administrator recommends that when you go to other sites, you should read the privacy policy established there. This privacy policy applies only to this Website.
2. The Administrator will inform the users of the Website of any change in the Privacy Policy.