Privacy policy

So Chic Limited Liability Company, as the owner of the website https://www.bratapeofficial.com/ ("Service" or "Site"), respects privacy and takes special care in protecting personal data. We treat the protection of personal data with utmost seriousness.

To this end, we have created this Policy. In it, we inform you about the legal basis for processing personal data, the types of data we collect, how we collect and use them, as well as the rights of the individuals whose data is being processed.
We kindly ask you to carefully read the Policy.

I. INTRODUCTION

This document is informative, meaning it does not impose any obligations on individuals using the Service.
The Policy includes principles regarding the processing of personal data, including the legal basis for processing, the purposes and scope of personal data processing, and the rights of individuals whose data is being processed.
In addition to the information provided in point 2 above, the Policy also includes information regarding the use of cookies and analytical tools within the Service.
If you have any doubts regarding the processing of personal data, please contact us using the contact details provided in section III of the Policy.

II. INTERPRETATION

Terms that are not defined in the table below should be interpreted in accordance with the General Data Protection Regulation.
The headings used in the Policy are for convenience only.
Unless otherwise indicated by the context, words used in the Policy in the singular form also include their plural forms, and vice versa.
All terms written with capital letters have the following meanings:

"Personal Data"
Refers to information about an identified or identifiable natural person.

"Anonymous Information"
Refers to information through which an individual natural person cannot be identified, including, for example, information about the time spent on the Service, operating system, browser, time spent on the Site, or approximate location.

"Profiling"
Refers to any form of automated processing of personal data, involving the use of personal data to evaluate certain personal factors of a natural person.

"Processing of Personal Data"
Refers to an operation or set of operations performed on personal data, whether automated or non-automated, such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmission, disseminating or making available, aligning or combining, restricting, erasing, or destroying.

"GDPR" or "General Data Protection Regulation"
The Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

"Personal Data Protection Act"
The Act of 10 May 2018 on the protection of personal data (Journal of Laws 2018, item 1000, as amended).

"User" or "Service Recipient"

A natural person with full legal capacity, or, in cases provided by applicable law, a natural person with limited legal capacity.
A legal person.
An organizational unit without legal personality, to which the law grants legal capacity, using the Service.

III. PERSONAL DATA ADMINISTRATOR
The administrator of your personal data collected through the website https://www.bratapeofficial.com/ is SO CHIC Sp. z o.o. with its registered office in Malbork, at Bartosza Wojciecha Głowackiego 2/7, 82-200 Malbork, registered in the National Court Register maintained by the District Court Gdańsk-North in Gdańsk, VII Economic Department of the National Court Register under number KRS: 0000701786, NIP: 579-226-41-24, REGON: 368872462 ("SO CHIC" or "Administrator").

As the Administrator, we take care of your personal data, process it with due diligence, and in accordance with applicable laws, in particular the General Data Protection Regulation (GDPR).

IV. CONTACT DETAILS
For any matters related to the protection of your personal data, you can contact the Administrator using the contact details provided below:
(a) email address: info@sochic.pl
(b) phone number: +48 55272 60 40 ext. 15
(c) mailing address: Bartosza Wojciecha Głowackiego 2/7, 82-200 Malbork.

V. COLLECTION AND PROCESSING OF PERSONAL DATA
The Administrator processes personal data of Users, individuals participating in actions or events organized by SO CHIC, and other persons if it results from the Administrator's legitimate interest or a concluded contract.

To use the Site, you are not required to provide any personal data, but as the Administrator, we are entitled to collect data that you voluntarily provide.
Please note that the Site has been equipped with all systems and tools used for the processing of personal data for the purposes outlined in point V of the Policy.
If you voluntarily decide to use the available functionalities of the Site (e.g., Newsletter service), consent for the processing of personal data will be obtained by the Administrator in accordance with applicable data protection regulations.
As the Administrator, we will inform you about the collection and processing of personal data before obtaining and processing the data.
The Site is not intended to collect and process sensitive personal data as defined in Article 9 of the GDPR (so-called sensitive data) or data referred to in Article 10 of the GDPR (criminal convictions and offenses).

VI. PURPOSES, LEGAL BASES FOR DATA PROCESSING, AND STORAGE PERIODS:
As the Administrator, we may process your personal data if necessary for you to use the functionality of the Service or for other purposes described in the Policy.

Each time, the purpose, legal basis, processing period, scope, and categories of recipients of personal data depend on the actions taken by the data subject.
(a) Sending the Newsletter
If you decide to subscribe to the Newsletter, we will process the following personal data:
• identification data (first name or full name),
• email address.
Providing this data is voluntary but necessary for subscribing to the Newsletter (contractual requirement).
Purposes of data processing indicated when subscribing to the Newsletter:
• sending the newsletter – based on your voluntary consent, in accordance with Article 6(1)(a) of the GDPR,
• archiving documents, statistics, and potential claims or defense against claims related to the execution of the electronic service agreement (Newsletter) – the legal basis for such processing is the necessity of processing data to fulfill the legitimate interests of the Administrator – Article 6(1)(f) of the GDPR. The legitimate interest of the Administrator is to archive documents, conduct statistics, pursue claims, or defend against claims.
Data retention period:
Your personal data will be processed until you withdraw your consent to its processing and unsubscribe from the Newsletter.
Despite unsubscribing from the Newsletter, your data will still be stored in the database to identify returning subscribers and possibly defend claims related to sending you the Newsletter, particularly to prove the fact of your consent to receive it and the time of withdrawal, which constitutes a legitimate interest of the Administrator under Article 6(1)(f) of the GDPR.
(b) Comment Handling
If you decide to add a comment, we will process the following personal data:
• username (e.g., first name or full name),
• email address.
Providing this data is voluntary but necessary to add a comment.
Your comment, along with your publicly disclosed data, will be visible on the site. You can modify or delete your comment at any time.
Purposes of data processing:
• handling the comment system – based on Article 6(1)(f) to fulfill the legitimate interest of the Administrator mentioned above.
Data retention period:
Your personal data will be processed until you effectively object to the processing or the purpose of the processing is achieved.
(c) Handling Correspondence
If you decide to contact SO CHIC via the email address available on the Site, we will process your personal data:
• identification data (first name or full name),
• email address,
• additional data if you voluntarily include them in the content of the message.
Purposes of data processing indicated in the form:
• handling the contact in response to the sent message – based on Article 6(1)(f) of the GDPR to fulfill the legitimate interest of the Administrator in providing a response to your message, after the contact is concluded, your personal data may be processed based on Article 6(1)(f) of the GDPR for the legitimate interest of the Administrator to archive the correspondence or establish, pursue, and enforce claims, as well as defend against claims resulting from the Administrator's business activity.
Additionally, in the message content, you may voluntarily include other personal data if you believe it is necessary for providing a response.
You have the right to request the Administrator to provide a history of the correspondence, provided it has been archived, and to request its deletion unless its archiving is justified by the Administrator's overriding interest, primarily in defending against potential claims, in accordance with Article 6(1)(f) of the GDPR.

Data retention period:
In principle, correspondence is deleted regularly, no less than once a month, except for correspondence that is archived to protect the Administrator's interests. Archiving correspondence in the aforementioned situations constitutes a legitimate interest of the Administrator, in accordance with Article 6(1)(f) of the GDPR.

(f) Handling Social Media
If you follow the Administrator's profiles on social media (Facebook, Instagram) or interact with the content we post on social media, we naturally gain access to your personal data that you make public on your social media profile, such as:
• profile name,
• data you have posted on your profile as public.
Providing this data is voluntary but necessary to use our profiles on social media platforms.

Data Processing Purposes:

Management of Administrator's Social Media Profiles on social media platforms: Facebook and Instagram – based on Article 6(1)(f) of the GDPR to fulfill the Administrator's legitimate interest in managing the relevant social media service.

Data Retention Period:
Your personal data will be processed until an effective objection is raised or the purpose of processing is achieved.

(g) Complaints:
If you decide to file a complaint related to the functioning of the website, we will process your personal data included in the complaint, in particular:

Identification data,
Email address,
Correspondence address.

Providing this data is necessary to process the complaint.

Purpose of data processing when submitting a complaint:

Processing the complaint,
Fulfillment of the Administrator's legitimate interest in determining, pursuing, and enforcing claims, and defending against claims arising from the Administrator’s business activities, under Article 6(1)(f) of the GDPR.

Data Retention Period:
Personal data processed for the purpose of handling submitted complaints will be stored for the time necessary to process the complaint, and after that, until any potential claims become time-barred.

(h) Activity Analysis on the Website:
If you use the website, we process Anonymous Information regarding:

Date and time of visit,
IP address of the device you use,
Approximate location,
Type of web browser,
Time spent on the website,
Subpages visited, and other actions you take on the website.

Purpose of data processing when signing up for an event we organize:

Activity analysis on the website – based on Article 6(1)(f) of the GDPR to fulfill the legitimate interest in adapting the website's functionality to user interest.

Data Retention Period:
Anonymous information will be processed until an effective objection is raised or the purpose of processing is achieved.

(i) Informing About Actions Taken by SO CHIC:
We may also process personal data for the purpose of informing you about actions taken by SO CHIC. The maximum scope of data includes:

Identification data,
Correspondence address,
Email address,
Phone number.

The legal basis for processing personal data is Article 6(1)(a) of the GDPR, i.e., the consent given by the data subject.

Data Retention Period:
Data will be stored until the consent is withdrawn by the data subject.

(j) Ensuring the Proper Functioning of the Website:
We may also process Anonymous Information, including:

IP address,
Location data,
Data about the source from which the user accessed the website,
to ensure the proper functioning of the website.

The legal basis for processing personal data is Article 6(1)(f) of the GDPR – processing is necessary for the legitimate interests of the Administrator in managing and maintaining the website.

Data Retention Period:
Data will be stored for the duration of the legitimate interest pursued by the Administrator, but no longer than the period for the limitation of claims against the data subject due to the Administrator’s business activities.

(k) Statistical Reporting:
We may also process Anonymous Information, including:

IP address,
Location data,
Data about the source from which the user reached the website,
for statistical and traffic analysis purposes to improve the website’s performance.

The legal basis for processing personal data is Article 6(1)(f) of the GDPR – processing is necessary for the legitimate interests of the Administrator in increasing interest in the services offered by the Administrator.

(l) Fulfillment of Obligations Related to Personal Data Protection:
If you decide to exercise the rights mentioned in section IX of the Policy, we will process the following personal data:

Identification data (first and last name),
Contact data (email address, correspondence address, phone number – depending on the data you provide to the Administrator).

Providing personal data is voluntary, but necessary for the proper execution of the Administrator's obligations arising from the personal data protection regulations. Not providing the data may prevent the proper execution of the rights granted to you under the GDPR.

Purpose of data processing when participating in recruitment:

Fulfillment of legal obligations of the Administrator – based on Article 6(1)(c) of the GDPR.

Data Retention Period:
The Administrator will process the specified personal data until the expiration of the limitation period for claims related to the violation of personal data protection regulations, particularly the GDPR and the Personal Data Protection Act.

VII. CATEGORIES OF PERSONAL DATA RECIPIENTS:

We share your personal data with other entities only when it is necessary to fulfill legitimate needs.

We do not intend to disclose your personal data to other entities or third parties, except in situations where:

You give consent;
It is necessary for the performance of the services we provide, with the data shared always respecting the principle of data minimization and limitation of processing;
Your personal data will be shared with authorized companies providing specialized services, such as courier, logistics, legal, debt collection, consulting, auditing, marketing, hosting, or IT services;
It is necessary to ensure the security of the IT infrastructure;
It is necessary to fulfill obligations arising from applicable laws, particularly tax regulations;
It is justified by a request from state institutions or judicial authorities.

Recipients of your personal data may include the following external entities with whom we cooperate:

Domain provider,
Newsletter service provider.

VIII. TRANSFER OF DATA TO THIRD COUNTRIES

Some operations involving the processing of your personal data may involve their transfer to third countries.

The Administrator transfers your personal data to third countries in connection with the use of tools that store data on servers located in third countries, especially in the United States of America (USA).

Personal data is stored on servers located in third countries when using the following tools by the Website:

Wix platform's mailing system, provided by Wix.com Ltd., Tel Aviv-yafo, 635067, Israel – in terms of your name, email address, and IP address of the device you are using. The company uses servers worldwide, including in Europe and the USA. If the data processing involves transferring data outside the European Economic Area (EEA), the transfer is carried out in accordance with applicable data protection laws, particularly the GDPR.

The Website also uses other external tools that may collect Anonymous Information. Anonymous Information may be stored on servers located outside the EEA, particularly in the USA.

IX. YOUR RIGHTS:

Under data protection laws, especially the GDPR, you have the following rights:

(a) The right to withdraw consent for the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal, according to Art. 7 of the GDPR.

(b) The right to access your personal data, obtain confirmation whether your personal data is being processed, and if so, obtain information about: • The purposes of the processing; • Categories of personal data; • Recipients or categories of recipients to whom your data has been or will be disclosed, especially recipients in third countries or international organizations; • The planned period of storage of your personal data or the criteria for determining that period, in accordance with Art. 15 of the GDPR.

(c) The right to rectification or completion of your personal data if it is incomplete or inaccurate, in accordance with Art. 16 of the GDPR.

(d) The right to erasure of all or some of your personal data if: • The data is no longer necessary for the purposes for which it was collected or used; • You withdraw consent, and we do not have another legal basis for processing the data; • You object, and we recognize the objection as justified; • Your personal data is used unlawfully, in accordance with Art. 17 of the GDPR.

(e) The right to restriction of processing of your personal data if: • You dispute the accuracy of your personal data, in which case we will restrict its processing for as long as necessary to verify its accuracy; • You dispute the lawfulness of the processing of your personal data; • We no longer need the data, but it is necessary for the establishment, exercise, or defense of legal claims; • You lodge an objection to the use of your data until we decide on the validity of your objection, according to Art. 18 of the GDPR.

(f) The right to receive a copy of your personal data that you have provided and to have it transmitted to you or another entity, provided this is technically feasible – in a commonly used, machine-readable format, if we process your data based on consent, in the performance of services, or in an automated manner, according to Art. 20 of the GDPR.

(g) The right to object to the processing of your personal data on grounds related to your specific situation, based on our legitimate interests as the Administrator. Following the objection, we will assess whether, due to your specific situation, your rights and freedoms outweigh our interests in using your personal data, according to Art. 21(1) of the GDPR.

(h) The right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw), if you believe your personal data is being processed improperly.

X. INFORMATION ON PROFILING:

SO CHIC does not make decisions based solely on automated data processing, including profiling, which would have legal consequences for you or otherwise significantly affect you.

We use tools that may take specific actions based on information collected through analytical mechanisms, but these do not have legal consequences for you and do not significantly affect your situation.

The effect of the tools we use is the delivery of online behavioral advertising to you, based on your interests. Additionally, this advertising is based solely on Anonymous Information collected through appropriate tools.

XI. COOKIES:

The website uses cookies. They are stored on your device if you give explicit consent. This does not apply to session cookies necessary to ensure the proper functioning of the Website and its security ("necessary cookies"). You can express consent by proceeding to use the Website without changing the cookie settings by clicking the "Save" button. The cookie notification will appear when you first visit the Website and will be displayed each time until you accept the cookies or change the settings using the "Cookie Settings" button. After making your choice, the notification will no longer appear, but you can always use the "Cookie Settings" tab to make changes. By changing the cookie settings, you can delete cookies already saved (e.g., including browsing history and cached files) or block the saving of new cookies. Depending on the settings, you can block or delete all cookies except those necessary for the Website to function. The Website may use the following types of cookies:

(a) Necessary cookies Some of the cookies we use are necessary for the functioning of the Website and cannot be turned off, as they enable users to navigate the Website and use its features. You can change your browser settings to block necessary cookies, but this will cause the Website to malfunction.

(b) Analytical cookies This type of cookies allows us to measure the number of visits to the Website and gather information about the traffic sources, enabling us to improve the Website's performance.

(c) Functional cookies This type of cookies helps us improve the efficiency of marketing activities and tailor them to user needs and preferences.

(d) Advertising cookies This type of cookies enables us to promote certain services, articles, or events. We may use ads that will be displayed on other websites, including social media platforms (Facebook, Instagram).

(e) Session cookies These are temporary cookies stored in your browser's memory until the session ends, i.e., until you close it.

(f) Persistent cookies These cookies improve the use of websites you visit frequently. Information contained in persistent cookies is stored for a longer period, which you can configure in your browser settings.

XII. SOCIAL MEDIA:

The Website includes plugins and other social media tools provided by social networking services (Facebook, Instagram).

If you do not want social media services to associate your data collected during a visit to the Website, log out of that service before visiting the Website. You can also prevent the loading of plugins by using appropriate extensions for your browser.

Any personal data or other information entered into social media applications by the User may be read, collected, and used by other users and service providers of that application. The Administrator is not responsible for the use, misuse, or appropriation of personal data or other information entered by Users into social media applications, even on the Administrator’s profiles available in those applications.

XIII. FINAL PROVISIONS:

The Website may contain links to external websites. However, we are not responsible for the content outside the Website.
The User is bound by the current content of the Privacy Policy when using the Website.
We reserve the right to make changes to the Privacy Policy if required by law or due to changes made on the Website (e.g., development of functionalities). We will notify users of any changes and their effective dates through the Website (https://www.bratapeofficial.com/polityka-prywatnosci), and in appropriate cases, we will send notifications electronically to the individuals concerned.
In areas not covered by this Privacy Policy, the applicable provisions on personal data protection, particularly the GDPR and the Personal Data Protection Act, apply.