What is GDPR?

On 25 May 2018 a new European regulation on the protection of personal data (GDPR) was introduced replacing EU Directive of 1995 on the protection of personal data. As the controller of your personal data, BBK S.A. with its registered office in Kowale, ul. Magnacka 15A, 80-180 Kowale, near Gdańsk, entered into the register of entrepreneurs of the National Court Register kept by the District Court Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register under KRS [National Court Register number] 0000015349, with share capital of PLN 510,000 paid up in full, NIP [tax identification number] 584-20-56-682, REGON [National Business Registry Number] 191337990, contact information: telephone no. 058/762-20-20, email address: (hereinafter referred to as “BBK”), we take responsibility for the issue of our clients’ personal data protection.

GDPR refers to Regulation (EU) no. 679/2016 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. The new regulations have been in force since 25 May 2018. The EU regulation directly and comprehensively governs the protection of personal data across the European Union. The purpose of the document was to limit the diversification of the regulations in particular member states. GDPR brings new solutions and strengthens previous requirements. It also introduces many new rights for natural persons and obligations for data controllers.

Important! Pursuant to GDPR, you do not have to contact us, just read the information available on this website.

Purpose of processing

Please note that we use profiling of your personal data, i.e. automated analysis of your expectations, needs, preferences and behaviours to offer you optimal products. We use your personal data gathered during the conclusion of the agreement and during its term for the following purposes of:

  1. Concluding and performing of our agreement, including provision of good quality of our services during the term of the agreement and billings after it terminates (Article 6 of GDPR)
  2. Performing our legal obligations, such as issuance and storage of invoices and accounting documents, providing responses to complaints in a timely manner and as applicable to law,

In such a case, we use the data:

  • while performing obligations, e.g. issuing an invoice (Article 6(1c) of GDPR),
  • for the period for data storage required by law, e.g. tax regulations (Article 6(1c) of GDPR),
  • for the period during which we may take legal consequences for failure to perform the obligations, e.g. receive a fine from national authorities (Article 6(1f) of GDPR),
  1. Detecting and preventing misuse during the term of the agreement and until prescription of the claims arising from the agreement and if we make claims or notify relevant authorities - for the duration of such proceedings.
  2. Determining defence and pursuing claims - it can apply to the sale of our receivables from the agreement to another entity - for the period until the claims arising from the agreement prescribe
  3. Direct marketing - for the duration of the agreement or based on your permission until it is revoked
  4. Making summaries, analyses and statistics for our internal purposes; it applied in particular to reporting, marketing research, planning development of the services or developmental works in IT systems, creating statistics models - for the duration of the agreement and then until the claims arising from the agreement prescribe
  5. Supporting service, including information about failures, adaptation of the service based on data concerning the products that you use and the complaints submitted so far - for the duration of the agreement

What are your rights?

  1. The right to rectify your data - This right allows you to notify us about the necessity to correct inaccurate data or complete the data resulting from an error in data collection or processing.
  2. The right to erase your data - This right allows you to file a motion to erase your data. If the motion is justified, we will erase the date immediately.
  3. The right to restrict processing - This right allows you to file a motion to restrict processing of the data, e.g. you can argue against the correctness of data processing. If the motion is justified, we can only store the data. Processing may be unlocked after the grounds for restriction of processing cease. The regulations allow calculation of fees and debt recovery process (if it is justified), despite simultaneous performance of the right to restrict data processing.
  4. The right to access the data - This right offers you the opportunity to collect information about the types of data being processed, the way they are processed and the purposes of the processing.
  5. The right to transfer the data - This right offers you the opportunity to transfer the data directly to a different controller, as well as receive a copy of the data in a structured format that should be machine-readable in such a way that you transfer the data to a different controller by yourself.

    Personal data safety

    The controller must again determine whether they guarantee safety of data processing. Personal data safety may be ensured through implementation of encryption, pseudonymisation (type of data processing that prevents direct identification of the data owner).

    Data Protection Officer - Contact Information

    BBK S.A. with its registered office in Kowale, ul. Magnacka 15A,

    80-180 Kowale k/Gdańska

    Data Protection Officer:

    email address:

    Phone: 576 071 241

    Consent and complaint

    If you want to give consent for the processing of your data by the entities of BBK SA and the Trusted Partners collected in relation to your use of websites and web applications delivered by BBK SA entities for marketing purposes (including necessary analytic activities and marketing profiling based on your activity on the websites), including their processing in cookies etc. installed on your devices and read from those files by the entities of BBK SA and the Trusted Partners, you can easily give consent by clicking “Go to service” or by closing this window. If you do not want to give the above consent, leave this page. The consent is voluntary. You can edit your preferences at any time, within the scope of the consent, and even revoke it by switching to our privacy policy page. The above consent applies to the processing of the data for marketing purposes other than the ones of the BBK SA entities. Please note that, as part of their web services, the BBK SA entities process your data for their own marketing purposes described in detail above, based on their legitimate interests, as the controller.

    If your personal data that we use are not related to performance of our agreement, legal obligation or if they do not constitute our legitimate interest, we can ask you to give consent for specific ways in which your data are used. Such consent may enable us to perform activities specified in advanced that you will be notified about. Of course, you can revoke the consent at any time (it will not affect the legality of the activities before the consent is revoked). You are also entitled to file a complaint with the President of the Personal Data Protection Office (formerly: GIODO), if you think that the processing of your data is in breach of the law.

    Where can I find more information about personal data processing?

    We encourage you to read information published on our websites:

    - Privacy Policy -

    - Cookie Policy -

    - Information for Newsletter subscribers -

    - Complaints


    How to contact us about personal data processing

    In matters related to personal data and their processing, you can contact us via:

    - contact form at

    - email at

    - phone: 576 071 241.