PRIVACY AND COOKIES POLICY beIN website Offices General information This Privacy and Cookie Policy describes how personal data is processed via the beIN website Offices powered by biznesHUB, operating at https://beinoffices.pl/ (from now on referred to as the “Website”), which is run by BiznesHUB, a limited liability company with its registered office in Krakow at the following address: Plac Jana Matejki 10 lok. 6B, 31-157 Kraków, entered into the register of entrepreneurs of the National Court Register kept by the District Court for Kraków – Śródmieście in Kraków, 11th Commercial Division of the National Court Register, under KRS number 0000846568, with the tax identification number NIP: 6762581808 and REGON number: 386321400, whose capital company amount is PLN 50,000.00, paid in full (from now on referred to as: “Service Provider”). PERSONAL DATA The Website may process personal data such as name and surname, contact telephone number, e-mail address, and IP address. The administrator of personal data collected as part of the Website is BiznesHUB spółka z ograniczoną odpowiedzialnością with its registered office in Krakow at the following address: Plac Jana Matejki 10 lok. 6B, 31-157 Kraków, entered into the register of entrepreneurs of the National Court Register kept by the District Court for Kraków – Śródmieście in Kraków, 11th Commercial Division of the National Court Register, under KRS number 0000846568, with a tax identification number (NIP): 6762581808 and REGON number: 386321400, whose share capital is PLN 50,000.00 (paid in total), as well as all entities related to it and dependent on it, both personally and capitally, directly or through other entities, including Office& Cowork Center spółka z ograniczoną odpowiedzialnością with its registered office in Kraków, registered in the register of entrepreneurs of the National Court Register kept by the District Court for Kraków – Śródmieście in Kraków, 11th Commercial Division of the National Court Register, under KRS number 0000665698, with REGON number: 366657908, NIP: 6762523828, with a share capital of PLN 20,000, 00 PLN paid in full and the company Office& Cowork Center Spółka Akcyjna with its registered office in Kraków at the following address: Plac Jana Matejki 10/6b, 31-157 Kraków, entered into the register of entrepreneurs kept by the District Court for Kraków – Śródmieście in Kraków, 11th Commercial Division of the National Register Court Register under KRS number 0000856873, with NIP number 6762584617 and REGON number 386872956, with a share capital of PLN 100,000.00, fully paid up. Personal data may be processed within the Website for the following purposes: provision of services electronically via the Website – in such a case, the basis for the processing of personal data is the statutory authorisation for processing necessary for the performance of the contract when the data subject is a party to it or when it is essential to take action before concluding the contract at the request of the data subject the data concerns (Article 6(1)(b) of the GDPR), and also, fulfilment of obligations arising from legal provisions – in such a case, the basis for the processing of personal data is the statutory authorisation to process data necessary for lawful activities (Article 6(1)(c) of the GDPR), undertaking promotional and commercial activities conducted by the Service Provider or entities related to the Service Provider – in such a case, the basis for the processing of personal data is the legitimate interest pursued by the Service Provider consisting in providing information about its services and that of its partners (Article 6(1)(f) of the GDPR) or voluntary consent (Article 6(1)(a) of the GDPR), pursuing possible claims or rights against Users or defending against Users’ claims – in such a case, the basis for the processing of personal data is the legitimate interest pursued by the Service Provider consisting in the need to pursue or defend rights (Article 6(1)(f) of the GDPR). Personal data may be processed for the period specified in the law (in the case of accounting documents, for six years from the end of the year in which the document was issued) and necessary for the Service Provider to demonstrate the correct performance of its obligations, and this time corresponds to the length of the limitation period. Claims. In the case of marketing activities, personal data may be processed until the person concerned objects to further processing of their data for marketing purposes or until the consent to sending messages with marketing content is withdrawn. To secure personal data obtained from the User, whether personal data is required or not, the connection between the User and the server is encrypted. In some cases, the Service Provider or entities related to the Service Provider may perform automated decision-making, including profiling, for marketing purposes, i.e. to present the User with an offer of products and services tailored to the User’s needs. The User’s data will not be profiled or used for automated decision-making, other than marketing activities, until the person concerned objects to further processing of their data for marketing purposes or withdraws consent to sending messages with marketing content. To the extent that the User’s data are subject to profiling and automated decision-making, the User is entitled to object to such activities, and to the extent that the User’s consent is the basis for processing – the right to withdraw it. The User has the right to access personal data processed via the Website, request rectification or limitation of processing, transfer this data, and, in justified cases, object to the processing. If the processing of the User’s data is based on his consent, the User has the right to withdraw consent to the processing of data and the right to object to the processing of his personal data. In justified cases, the User can complain to the supervisory authority regarding irregular data processing, i.e., the Personal Data Protection Office. Any possible complaints and objections regarding the Website and the processing of data relating to the Website should be reported by phone or e-mail using the following contact details: e-mail: administra@biurabiznesowe.pl, telephone: +48 535 899 899. COOKIES The Website of the Service does not automatically collect any data, except for the data contained in cookies when using the Website mentioned above. Cookies are IT data stored on the User’s end device. They are intended for use on the Website. Cookies usually contain the name of the Website they come from, their storage time on the end device and a unique number. Cookies used by the Website may be temporary or permanent. Temporary cookies are deleted when the browser is closed. At the same time, permanent cookies are also stored after the User has finished using the Website and are used to store information such as your password or login, which speeds up and facilitates the use of the Website. Cookies used by the Website may be necessary for the proper operation of the Website. Cookies belonging to this category are used to ensure, among others, maintaining the user session, saving the state of the user session, enabling authorization, saving information necessary for the operation of the online shopping cart, and monitoring the availability of services. The Website also uses cookies, which are not necessary to use the Website but make it easier to use. They are used to enable the restoration of the last visited view the next time you log in to the product, remember the User’s choice to stop displaying the selected message or display it a specified number of times, restore the User’s session, remember the last selected category in the product, check whether cookies are saved functions properly, enabling automatic login to the product, matching product content to user preferences, setting the preferred language, currency, font size and other such properties that facilitate work with the application, restoring the last search result in the product, displaying recently viewed products in the online store, displaying the previously selected sorting parameter. The Website uses the services of third parties who use cookies for the following purposes: monitoring traffic on our Website pages, collecting anonymous, aggregate statistics that allow us to understand how users use our Website and enable us to improve our products continuously, determining the number of anonymous users of the Website’s websites, controlling how often selected content is shown to users, controlling how often users choose a given service, examining subscriptions to newsletters, using a system of personalized recommendations for e-commerce, using communication tools, integration with social networking sites, making online payments. Cookies placed on the User’s end device in connection with the use of the Website may be used by advertisers and partners cooperating with the website operator. In any case, it is possible for the User to independently change the settings for Cookies, specifying the conditions for storing them and obtaining access via Cookies to the User’s device. Such changes can be made via web browser settings or service configuration. Changes to cookie settings may include, among others, blocking the installation of cookies and deleting permanent cookies, using the appropriate options of the web browser used by the User. Rejecting cookies may mean that some functions offered by the Website may not work correctly, and even in some cases, it may result in the complete inability to use a given function. SERVER LOGS Information about certain User behaviours is logged in the server layer. This data is used solely to administer the Website and ensure the most efficient operation of the hosting services provided. URL addresses identify browsed resources. The following data may be recorded: time of arrival of the order or inquiry, time of sending the response, name of the User’s station – identification carried out by the HTTP protocol, information about errors that occurred during the HTTP transaction, URL address of the page previously visited by the User – if the transition to the page website of the Website was made through a link, information about the User’s browser, information about the IP address. The data mentioned above is not associated with specific persons browsing the Website. DATA SAFETY The Service Provider applies technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of data protected, and in particular, technically and organizationally protects the data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of the Act and change, loss, damage or destruction. The Service Provider has implemented appropriate technical and organizational measures, such as pseudonymization, designed to implement data protection principles, such as data minimization effectively, and to provide the processing with the necessary safeguards to meet the requirements of the GDPR and protect the rights of data subjects. OTHER PROVISIONS The Website reserves the right to disclose selected information regarding the User or another natural person using the Website’s websites to competent authorities or third parties who request such information based on an appropriate legal basis following applicable law. The Website may contain links enabling Users to access other websites directly. The Website does not influence the privacy policy or cookie use policy of the administrators of these websites and is not responsible for them.