GENERAL INFORMATION

Our company, Buen Iryna Kosyak, with its registered office in Warsaw, ul. Mielczarskiego 1/D, 02-798 Warsaw, NIP: 5214008303, is fully aware of the importance of our Clients’ privacy. We make every effort to ensure that the processing of your personal data is carried out lawfully and only to the extent necessary for providing our catering services and for improving our offer.

You may contact us personally at our registered office, by correspondence at the indicated address, by email at kontakt@buen-iryina.pl, or via the contact form on our website. At the same time, we inform you that we are the data controller of your personal data in accordance with the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council) and the Polish Personal Data Protection Act.

WHAT DATA DO WE PROCESS?
The data we process comes directly from you or from entities authorized to provide it, including:
•contact data (first name, last name, email address, telephone),
•invoicing data (NIP, address),
•information necessary for the execution of orders and provision of services.

LEGAL BASES FOR PROCESSING
We process your data based on:
•consent (e.g., for newsletters),
•necessity for the performance of a contract,
•legal obligations (e.g., tax obligations),
•our legitimate interests in conducting business activities.

TO WHOM MAY YOUR DATA BE DISCLOSED?
Your data may be transferred to our partners and service providers who assist us in executing orders (e.g., couriers, payment operators, accounting offices). We provide only the data necessary for the provision of services. In certain situations, data may be disclosed on the basis of the law (e.g., court decision or public authority).

TRANSFER OF DATA OUTSIDE THE EEA
If, for the purpose of providing services, we cooperate with partners outside the European Economic Area, we ensure that the data transfer is carried out in accordance with the GDPR and only to locations providing adequate security standards.

DATA RETENTION PERIOD
Data is stored only for as long as necessary to provide services and in accordance with applicable law, usually up to 5 years after the end of cooperation, and in some cases up to 10 years, e.g., in connection with limitation periods for claims.

VOLUNTARY NATURE OF DATA PROVISION
Providing data is voluntary but necessary for the execution of orders, contact, or exercising rights under the GDPR.

CLIENT RIGHTS
You have the right to:
•rectify data,
•delete data,
•restrict processing,
•access data,
•transfer data to another controller,
•object to the processing of data.

All requests may be submitted by email or in writing to the above contact details.

DATA SECURITY
We apply appropriate technical and organizational measures to protect data against unauthorized access, loss, alteration, or disclosure. We use industry best practices to ensure the security of information.

WHAT DO WE PERIODICALLY CHANGE?
The Privacy Policy may be updated. The currently effective version is always available on the website. We encourage you to check its content regularly.