Privacy policy

I. General Provisions

1. This Privacy Policy defines how personal data of Users, necessary for the provision of electronic services through the website https://bin-to-win.com/ (hereinafter: the Service), is collected, processed, and stored.
2. The Service collects only personal data necessary for the provision and development of the services offered therein.
3. Personal data collected through the Service is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR), as well as the Personal Data Protection Act of 10 May 2018.

II. Data Controller

The controller of personal data collected through the Service is OSF POLSKA sp. z o.o., with its registered office in Warsaw, ul. Wspólna 70/Vp, 00-687 Warsaw, entered in the register of entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw, XII Commercial Division of the National Court Register, under KRS: 0001050030, NIP: 7011117996, REGON: 525985647, email: contact@bin-to-win.com (hereinafter: the Controller).

III. Purpose of Personal Data Collection

1. Personal data is used for the following purposes:
   1. registration in the application and verification of the User’s identity,
   2. enabling login to the Service,
   3. performance of the agreement regarding services and e-services,
   4. communication with the User (live chat, contact form, etc.),
   5. sending newsletters (upon the User’s consent to receive them),
   6. promotion of the Controller’s offer,
   7. marketing, remarketing, and affiliation,
   8. personalisation of the Service for Users,
   9. analytical and statistical activities,
   10. establishing and pursuing claims or defending against them.
2. Providing data is voluntary but necessary to enter into an agreement or to use other functionalities of the Service.

IV. Types of Personal Data Processed

The Controller may process the following personal data of the User: first and last name, date of birth, residential address, email address, phone number, tax identification number (NIP).

V. Personal Data Retention Period

Users’ personal data will be processed for the following periods:
a. where the legal basis for processing is the performance of an agreement – until the limitation period for claims arising from its performance has expired,
b. where the legal basis for processing is consent – until consent is withdrawn, and after withdrawal, until the limitation period for claims has expired.
In both cases, the limitation period is 6 years, and for claims for periodic performance and claims related to business activity – 3 years (unless a specific provision provides otherwise).

VI. Sharing of Personal Data

1. Users’ personal data may be transferred to: entities affiliated with the Controller, its subcontractors, entities cooperating with the Controller, e.g. companies handling e-payments, companies providing courier/postal services, and law firms.
2. Users’ personal data may be transferred outside the European Economic Area (EEA).

VII. Users’ Rights

1. A User of the Service has the right to: access their personal data, rectify it, erase it, restrict processing, data portability, object to processing, and withdraw consent at any time (which does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal).
2. Requests to exercise any of the above rights should be sent to contact@bin-to-win.com.
3. The Controller shall fulfil or refuse to fulfil the request without undue delay – within one month of receipt at the latest.
4. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing violates their rights and freedoms under the GDPR.

VIII. Cookies

1. The Service collects information using cookies – session, persistent, and third-party cookies.
2. The collection of cookies supports the proper provision of services on the Service and serves statistical purposes.
3. The User may define the scope of cookie access to their device in the browser settings.

IX. Automated Decision-Making and Profiling

1. Users’ data may not be processed in an automated manner that would result in any decisions being made against them.
2. Users’ data may be profiled in order to tailor content and personalise offers, upon the Users’ consent.

X. Final Provisions

1. The Controller reserves the right to make changes to this Privacy Policy, provided that the rights of Users shall not be restricted.
2. Information about changes introduced will appear in the form of a notification available on the Service.
3. For matters not regulated in this Privacy Policy, the provisions of the GDPR and Polish law shall apply.