Privacy Policy

Nowadays business cannot exist without using IT tools and Internet resources from one side, and processing personal data from the other side. For that reason it is highly important to take care of data safety and respect privacy. This is also the case in our company. We take care of the safety of our clients, employers and business partners personal data and we respect their privacy. For that reason all correspondence addressed to us (also via electronic way) is secured, according to the rules of the Privacy Policy. We care that every person who visits our website or contacts us in any other way knows how we secure their privacy and in what way they can protect it on their own. That is why it is worth reading our Privacy Policy.

At the same time we inform you that we reserve the right to modify the Privacy Policy depending on changed external circumstances, used legal and organisational solutions or IT tools (including security/cybersecurity).

Explanations in this document are also fulfillment of the information obligation indicated in Art. 13 and Art. 14 of the GDPR.

What concepts will you often find in the Policy?

The User, according to the rules of this Privacy Policy, means any natural person visiting our web portal (service or website), or using services offered by the Administrator, as well as person involved in the recruitment process.
GDPR is the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC.
Personal Data according to this Privacy Policy is all information about natural person identified or possible to be identified by one or few specific factors, including IP tools, localization data, Internet identifier or information gathered via cookies and other similar technologies.

Who is responsible for processing personal data?

Administrator of your personal data is Simply4net Sp. z o. o. (limited liability company) with its registered seat in Poznań Królowej Jadwigi St. 43 REGON number: 3024649290, NIP number: 9721244748, registered in National Court Register under KRS number: 00004901595.
Administrator runs websites (web portals, websites) at https://getbuybox.com/ https://www.books4business.pl/ and https://100shoppers.com/. Remember that while visiting our web portal or our website, sending us a question form or a register form, or sending us correspondence, including electronic correspondence, you accept the rules of our Privacy Policy. Although to view the content of our website it is not necessary to give any personal data, however if you wish to use our services, you must accept this Privacy Policy.
This Privacy Policy concerns solely our web portals and website. With a help of a link that may be put in our web portal, the User may be redirected to another website, where a different privacy and cookies policy applies. We recommend that you get familiar with their content.
We also use social media (e.g. Facebook, Twitter) where one can find information about our company and contact us. However, the rules of protecting personal data in the social media were created independently – by their owners. It is worth getting familiar with personal data protection rules on these websites (Privacy Policy, cookies Policy).
Providing personal data is voluntary, however e.g. providing the User’s login and password is required in order to take advantage on some services of the abovementioned web portals and provide required data on register form (e.g. regarding Newsletter) or contact form, and optional data during the recruitment process requires the User’s consent to their processing. If you deny to provide data or give your consent we will not be able to perform these services for you and we will not take into consideration your data during the recruitment process.
As far as the newsletter is concerned, it is possible to resign from its receipt at any time by unchecking the appropriate checkbox in your account settings, writing to the Administrator (e.g. on the address hello@buybox.pl) or clicking on the appropriate link in any newsletter.
The Administrator selects and uses adequate technical and organisational measures providing protection of processing personal data with due diligence. Full access to personal data is given only to persons duly authorized by the Administrator with appropriate permissions.
The Administrator’s personal protection data system, as well as particular solutions used are regularly reviewed and if necessary updated (these kind of actions are also performed on a daily basis – this applies generally to technical safeguards.
For that reason your personal data are secured against access of unauthorized persons as well as their processing in violation of applicable law.
Personal data processed by us are not the subject to automated decision-making, including profiling. However, our services also use Google Analytics statistics. This allows us to get to know what kind of content available on the Website was the most interesting for the User – this provides us with knowledge as to which side of the Website is the most popular. This allows us to meet your expectations and needs. By using the websites you agree to the analysis of this data by Google Analytics in this respect. However, in that case we do not process personal data. If you disagree with these actions, you may unplug appropriate settings from your browser or download the appropriate plug-in available at this address https://tools.google.com/dlpage/gaoptout?hl=pl. By analyzing the collected data we may direct personalized commercial information related to our services to a natural person using our services, as well as suggestions made on the basis of the acquired data. Such activities are carried out in an automatic way with the use of available marketing or analytical tools available, e.g. on Facebook. The use of such personalized commercial information or suggestions is voluntary.
Visiting persons may view our web portals without prior registration or providing personal data.

What kind of data we process?

In connection with running web portals as well as websites in social media (e.g. Facebook, LinkedIn) we collect, gather and use (process) the following personal data within the categories: Clients Data and Users Data).
1. First name, last name, e-mail address, address, telephone number, bank account number, company’s name (if it’s a business account), NIP number (if it’s a business account), URL address of the websites, IP address – applies to https://getbuybox.com/ and https://100shoppers.com/
2. Name, e-mail address, IP numer – applies to https://www.books4business.pl/
3. Information about the fact of visiting on our website and how the user came across our website, processed using cookie technology.

Why do we collect our personal data?

We collect the data (e.g. first name, last name, address, e-mail address, telephone number, website address on which you display our widget or other advertising information) in connection with the use of our advertising services and the necessity to respond to questions sent via contact form.
First name, last name, e-mail address, telephone number, company’s name and sometimes the content of the inquiry of people using our contact forms or the content of the blog comment made by the Users.
Personal data collected from the Users, who used a contact form, are used by us to prepare and send answers for this question/notification of interest in our services or products. If giving straight and comprehensive answer for the question requires acquiring some more information, we attempt to contact you in order to gather the information we need.
Information about actions of people visiting our website (as well as our websites in the abovementioned social media) reach us in statistical form – we have no possibility to make an analysis of behaviors of the particular User – natural person. They are used to examine the readability of the page and the content and to improve them.
The data collected for marketing purposes is used, among others, for the subsequent display of our advertisements on the websites offering such possibility.
Personal data, in connection with the recruitment process is processed within the scope required by law (Labour Code) or provided voluntary by people interested in working for the Administrator – in case of additional data, not required by law.

Legal basis for our data processing.

We process personal data on the basis of:
1. Art. 6 point 1 a of GDPR (on the basis of the User’s consent) – in order to carry out the recruitment process (including future activities) – it is about additional data, sending commercial and marketing information, sending a newsletter, examining opinions about the level of satisfaction;
2. Art. 6 point 1 a of GDPR – data processed, including collected data with a use of cookies technology, used to conduct behavioral analyses on our website or for marketing purposes, processed on the basis of a voluntary consent, which may be withdrawn at any time;
3. Art. 6 point 1b of GDPR – in order to perform and on the basis of contract concluded with our Customers, to enable you the use of our services specified in the Regulations as a publisher, store or producer, including, among others, in order to provide you with a widget or other advertising information to post on your website. The data are necessary to maintain an account on web portal/website and to improve the functionalities and services provided through the portal, thus, in order to do this, we analyze the User’s activity, their preferences, marketing of our own products or services, as well as in the case of providing us with a completed contact form – sending an inquiry via the form is interpreted as a presentation of will to start cooperation with us. The same applies to the data contained in the comments on blogs on our websites – their processing depends on the User’s prior registration, e.g. acceptance of the terms and conditions of service and thus the conclusion of the Agreement with us;
4. Art. 6 point 1c of GDPR – in order to fulfill the legal obligation borne by the Administrator;
5. Art. 6 point 1 f of GDPR (on the basis of Administrator’s legitimate interest) – in order to pursue or secure claims and carry out direct marketing.

How long do we process the data?

As a rule, the data is processed for the duration of the provision of services or execution of order, limitation of claims, until withdrawal of a given consent or applying an effective objection to the processing of data in case when the legal basis of processing the data is the Administrator’s legitimate interest. The time of processing cookies depends, e.g. on the type of the collected files – this may be checked in the browser settings.
What is more, as far as an employment is concerned, additional data (not required by law, including labor law) we process (and store) in accordance with current legal regulations (including period of work, for the period necessary to complete the recruitment process, but no longer than 12 months from the date of selection of a suitable candidate for work). If the User accepted the processing of personal data for the purposes of future recruitment process, data will be processed no longer than until the end of the second calendar year from the date of application.
We will process the data obtained in connection with the complaint until we resolve the complaint, as well as for the period of limitation of claims.
As far as the newsletter is concerned, we will process your personal data until you express a will to stop receiving it.
We will archive the interviews carried out by e-mail or chat window put on our website until we complete the presented task, as well as for the period of limitation of possible claims.
In addition, separate regulations require us to store your data for the period provided for by law, e.g. the obligation to present financial documents (invoice, bill) resulting from tax regulations.
The period of data processing may be extended if the processing is necessary to establish, assert or defend against possible claims, and after this time only if and to the extent required by law. After the expiry of the processing period, the data is irreversibly deleted or anonymized.
Data used to study the activity of Users on our website is immediately anonymized.

Data recipients

In connection with the provision of services, personal data may be disclosed to external entities, including in particular our Partners (e.g. in case of organization or co-organization of business events by the Administrator), suppliers and producers responsible for service/update/delivery of IT systems and website (e.g. hosting provider, producer of software used to manage the portal), as well as to other entities such as companies providing accountant, legal, audit, consulting or post services and suppliers of recruitment services. These are in particular:
- Intercom R&D Unlimited Company with its registered seat in Ireland, Stephen Court, 18- 21 St. Stephen’s Green, Dublin 2 (https://www.intercom.com) and User.com Sp. z o.o. (limited liability company) with its registered seat in Warsaw, Grzybowska St. 87 (https://user.com), which help us with online communication with you and sending newsletters.
- Web Innovative Software sp. z o. o. (limited liability company) with its registered seat in Wrocław, Bolesława Krzywoustego St. 105/21, 51-166 Wrocław (https://wfirma.pl), INTAXO sp. z o. o. (limited liability company) with its registered seat in Tarnowskie Góry, Gliwicka St. 35 (https://Intaxo.pl) and COMARCH SA (joint stock company) with its registered seat in Kraków, przy al. Jana Pawła II (https://www.erpxt.pl), which deliver IT solutions in the accounting sector. Pipedrive OU with its registered seat in Estonia Paldiski mnt 80, 10617 Tallinn (https://www.pipedrive.com/), which provides us with a service to manage relationships with our customers.
- Dropbox International Unlimited Company with its registered seat in Ireland, Park Place, Hatch Street, Dublin 2, which provides us with cloud solutions that we use for electronic circulation of accounting documents.
- Facebook Ireland Limited with its registered seat in Ireland, Grand Canal Square 4, Dublin 2, through which we conduct marketing campaigns and communication.
- SWLEX Sp. z o. o. with its registered seat in Poznań, Szelągowska St. 49, 61-626 Poznań, which provides us with legal and accounting services.
In our business, we also use other IT solutions to ensure the high quality of our services, among other Hotjar – a system for monitoring the use of website activity, Disqus – a tool to comment blog entries, Tradedoubler – advertising apps (Books4business).
Basically, personal data is not transferred to third countries/international organizations, i.e. behind European Economic Area (EOG) and data decisions are not made by automated means. Nevertheless, in special cases, this data may be transferred outside the EEA, but only to organizations that comply with the principles of data protection, indicated in the GDPR (e.g. contract clauses, corporate regulations) and/or having registered seat in countries deemed safe by the European Commission for the protection of agreed personal data.
We do not cooperate with entities that do not provide a guarantee of proper protection of personal data, in particular with entities form EOG territory that do not comply with the requirements of the GDPR.

Cookies Policy

Websites use cookies. These are little text files sent by a web server and stored by the browser computer software. When a browser reconnects to the page, website recognizes type of user’s tool. Parameters allow you to read the information contained in them only to the server thar created them. Cookies allow using earlier visited websites.
Stored information concerns IP address, type of browser, language, type of operational system, time of showing communicates on website, IT services supplier, information about time and date, localization, and information transferred to the website via contact form.
Collected data is used to monitor and verify the way that users use our websites, in order to improve the functioning of the website by providing more effective and trouble-free navigation. We monitor information about users using Google and WORDPRESS tools.
Cookies identifies the User, which allows to adjust the content of the website to their needs. By remembering their preferences, it enables to adjust advertisements. We use cookies files to guarantee the highest standard of our service, and stored data is used only within the company to optimize operations.
On our website we use session cookies, which are stored on your devices for as long as you do not log out from the Service or the web browser you are using will not be disabled. We also use “persistent” cookies that are stored on your device until they are deleted.
Change of the conditions of storage or receipt of cookies is possible through configuration of setting in Internet browsers, e.g.:
- Internet Explorer – http://windows.microsoft.com/pl-pl/windows7/how-to-manage-cookiesin-internet-explorer-9
- Mozilla Firefox – https://support.mozilla.org/pl/kb/ciasteczka
- Opera – http://help.opera.com/Linux/9.22/pl/cookies.html
- Chrome – http://support.google.com/chrome/bin/answer.py?hl=pl&answer=95647
Software for browsing websites, i.e. a web browser, usually by default allows the storage of cookies on the User’s end device. Website’s Users may change the setting in this respect. The web browser allows to delete cookies. It is also possible to block cookies. Detailed information on this subject can be found in the help box or documentation used by the web browser’s User.
Articles on our websites may contain embedded content (e.g. films, pictures, articles etc.). Embedded content from other sites behaves in the same way as if the user visited a specific website directly.
Sites may collect information about the User, use cookies, include additional, external tracking systems and monitor your interactions with the embedded content, including tracking your interactions with embedded material if you already have an account and are logged in to that site.
We use cookies to personalize content and advertisements in order to offer social functions and analyze movement on our website/service. In order to be able to link the actions that Users perform during different sessions, information about the configuration and type of the web browser is stored in the cookies. We may share information about how users use our website with social, advertising and analytics partners. Partners may combine the information with other data received from the User or obtained when the User uses their services (according to their privacy policies and cookies).

User’s rights

User has the right to access to their data content, obtain copies, the right to rectify, delete, limit processing, the right to transfer data, right to object to the processing of data on the basis of Administrator’s justified interest or transferring for direct marketing purposes, the right to withdraw at any time without influence on legal compliance of processing the data (if processing in on the basis of content) on the basis of consent given before its withdrawal.
If it is considered that the processing of personal data violated the provisions of the GDPR or other provisions on the protection of personal data, the data subject may submit a complaint to the President of the Office for Personal Data Protection.
A request regarding the exercise of the rights of data subjects may be submitted in writing or by e-mail to the Administrator’s contact details indicated below.
A request should, for as far as possible, indicate precisely what the request is about. In particular, what right the person submitting the application wants to use and what kind of processing process the request concerns.
If the Administrator is not able to determine the content of the request or identify persons filing a request on the basis of application, he should request additional information from the applicant.

Copyright

Unless otherwise stated, the owner of the copyright to the content published on the website is the Administrator. Copyright also protects the graphic design and layout of the content presented on the Websites. Unless otherwise stated, contents published on the Websites may be processed without the written consent of the website owner, provided that they cannot be commercially traded as stand-alone products and provided that the source of origin is indicated, e.g. https://getbuybox.com.
The Administrator gives his consent to use the service content (in whole or in part) in the fields of exploitation indicated below:
1. copying,
2. printing,
3. reproduction in digital form,
4. posting on public websites,
5. citation in own works.

Administrator’s contact details

In case of doubts as to the scope and purpose of processing your personal data, and the rights you are entitled to, please read this Privacy Policy or contact us at the following e-mail address: hello@100shoppers.com; or in writing to the address of our registered office indicated above.

We know that we are responsible for protection of personal data entrusted to us by the Users. We treat seriously the matters of security. For that reason we take care to protect your data against unauthorized access of third parties and we check our methods regarding collection, storage and processing of data. We use appropriate technical, physical and organizational security measures. Access to the data is granted only to these employees or entities that must have this access in order to process it solely for the purposes descried in the Privacy Policy.