PRIVACY POLICY BRIDGE SOLUTIONS HUB S.A.

§ 1. GENERAL PROVISIONS

1. The Administrator of the personal data collected through the website www.vithea.eu is Bridge Solutions Hub S.A. with its registered seat in Warsaw, 2A Zygmunta Vogla Street, 02-963 Warsaw, registered in the register of entrepreneurs kept by the District Court in Warsaw, XIII Economic Department of the National Court Register, under KRS number: 0000887045, REGON: 142524552, NIP: 5222967030, share capital of 1505000.00 PLN., e-mail address: info@vithea.eu, (hereinafter referred to as "Administrator" or "Bridge Solutions Hub S.A.").
2. Personal data collected by the Administrator through the website shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), (hereinafter referred to as: "RODO" and the Law on Personal Data Protection of May 10, 2018. (Journal of Laws of 2018, Item 1000, as amended).

§ 2. TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION

1. The Administrator processes personal data via www.vithea.eu, in particular for:
a) receipt and fulfillment of orders for the purchase of products (Article 6(1)(b) RODO) - regardless of the method of receipt of such orders, including through the online store at www.vithea.eu (hereinafter: "Online Store");
b) provision of warranty services (Article 6(1)(b) RODO);
c) tax settlement of purchases made (Article 6(1)(c) of the RODO in connection with the Corporate Income Tax Act and the Value Added Tax Act);
d) to secure and assert potential claims (Article 6(1)(f) RODO),
e) direct marketing: of Bridge Solutions Hub S.A. products or services and attaching promotional materials of Bridge Solutions Hub S.A. business partners to the shipments. (Article 6(1)(f) RODO),
f) to carry out marketing communications via telecommunications terminal equipment (Article 172 of the Telecommunications Law);
g) to maintain a list of objections to the processing of data for marketing purposes, if you raise such objection to us (Article 6(1)(c) of the RODO, in conjunction with Article 21(3) of the RODO).
h) to conduct correspondence with customers or potential customers and to answer questions asked by them in connection with their contact, including through the contact form on the website of the Online Store (Article 6(1)(a) or (f) RODO);
i) fulfillment of concluded agreements and maintenance of the user's account in the Online Store (Article 6(1)(b) RODO in connection with the Act on Provision of Electronic Services);
j) analytical and statistical activities with regard to the use of the Online Store by users of the Online Store (Article 6(1)(f) RODO).
2. The Administrator processes the following categories of the user's personal data: name and surname and gender, e-mail address, contact telephone number, delivery address (street, house number, apartment number, postal code, city, country), address of residence / business / registered office, IP address, other data related to the performance of the contract - e.g. bank account number). In addition, the following are also stored: purchase history (necessary, among other things, to provide warranty services for purchased products and to conduct correspondence with customers), information on how users navigate the Online Store.
3. Users' personal data are stored by the Administrator:
a) if the basis of data processing is the performance of a contract, for as long as it is necessary for the performance of the contract, and thereafter for a period corresponding to the period of limitation of claims. Unless a specific provision provides otherwise, the statute of limitations is six years, and for claims for periodic benefits and claims related to the conduct of business - three years.
b) where the basis for data processing is consent, for as long as consent is not revoked, and after revocation of consent for a period of time corresponding to the statute of limitations for claims that the Administrator may raise and that may be raised against him. Unless a special provision provides otherwise, the statute of limitations is six years, and for claims for periodic benefits and claims related to the conduct of business - three years.
4. When using the Website, additional information may be collected, in particular: the IP address assigned to the user's computer or the external IP address of the Internet provider, domain name, browser type, access time, type of operating system.
5. Navigation data may also be collected from users, including information about the links and references they choose to click on or other actions they take on the Website. The legal basis for such activities is the legitimate interest of the Administrator (Article 6(1)(f) of the RODO), which is to facilitate the use of services provided electronically and to improve the functionality of such services.
6. Provision of personal data by the user is voluntary, although failure to provide the above-mentioned personal data necessary to place and execute an order results in the inability to place an order. Providing personal data also enables us to undertake direct marketing activities on your behalf.
7. Personal data will also be processed in an automated manner in the form of profiling, provided that you consent to it on the basis of Article 6(1)(a) RODO. The consequence of profiling will be the assignment of a profile to a person in order to make decisions concerning him or her or to analyze or predict his or her preferences, behaviors and attitudes.
8. The controller shall exercise special care to protect the interests of data subjects, and in particular shall ensure that the data it collects are:
a) processed in accordance with the law,
b) collected for designated legitimate purposes and not subjected to further processing incompatible with those purposes,
c) substantively correct and adequate in relation to the purposes for which they are processed, and stored in a form that allows identification of the persons to which they relate for no longer than is necessary to achieve the purpose of processing.

§ 3. SHARING OF PERSONAL DATA

1. Users' personal data may be shared with the following recipients or categories of recipients: suppliers, service providers of the Company, the warehouse where goods are stored and shipments to Customers are packaged, the Customer Service Office, the Logistics Center, Postal Operators and courier companies that deliver shipments to Customers on behalf of Bridge Solutions Hub S.A., third-party providers specializing in providing marketing services (e.g. marketing agencies) in connection with the design, planning and placement of advertisements, banks and debt collection, legal or consulting companies that provide Bridge Solutions Hub S.A. with professional financial services.
2. In the case of a customer who makes a purchase from the Online Store, the recipient of the data is also the hosting provider. Users' personal data are stored only in the European Economic Area (EEA).

§ 4. RIGHT OF CONTROL, ACCESS TO THE CONTENT OF ONE'S OWN DATA AND THEIR CORRECTION

1. The data subject shall have the right to access the content of his/her personal data and the right to rectification, erasure, restriction of processing, the right to data portability, the right to object, the right to withdraw consent at any time without affecting the legality of the processing performed on the basis of consent before its withdrawal.
2. Legal grounds for user's request:
a) Access to personal data - Article 15 RODO
b) Correction of data - Article 16 of the RODO.
c) Deletion of data (so-called right to be forgotten )- Article 17 RODO.
d) Restriction of processing - Article 18 RODO.
e) Data portability - Article 20 RODO.
f) Objection- article 21 RODO.
g) Withdrawal of consent- Article 7(3) RODO.
3. In order to exercise the rights referred to in point 2, you can send the relevant email to: info@vithea.eu.
4. In a situation where the user applies for the right arising from the above rights, the Administrator shall fulfill the request or refuse to fulfill it immediately, but no later than within one month after receiving it. However, if - due to the complex nature of the request or the number of requests - the Administrator will not be able to fulfill the request within one month, it will fulfill it within another two months informing the user in advance, within one month of receiving the request, about the intended extension of the deadline and the reasons for it.
5. If it is determined that the processing of personal data violates the provisions of the RODO, any data subject has the right to lodge a complaint directly to the supervisory authority: President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.
6. We will process your data for the following periods:
a) performance of concluded contracts for the supply of products - for the period of execution of the contract and for the period of limitation of claims specified in the relevant regulations;
b) performance of warranty obligations - in accordance with the warranty period resulting from the Rules and Regulations of the Online Store - available at www.chemicaltiger.com (hereinafter: "Rules and Regulations of the Store") and applicable laws.
c) tax settlement of sales - for a period of 5 years from the end of the tax year in which the sale was made;
d) marketing of our products and services - for a period of up to 5 years after your last purchase; you have the right to object at any time to the processing of your data for marketing purposes and to withdraw your consent in this regard;
e) carrying out marketing communications - until you withdraw your consent to such contact or you object to the processing of your data for marketing purposes;
f) asserting or defending against claims - for this purpose we process your data if you do not make payment for the purchased products, or you bring claims against us - until the case is resolved or the statute of limitations for claims has expired;
g) maintaining a list of objections to data processing for marketing purposes - until you withdraw your objection (Article 6(1)(c) of the RODO in conjunction with Article 21(3) of the RODO).
h) answers to questions asked by you via the contact form - for the period of the correspondence itself and thereafter for a period of 24 months,
i) use of an account in the Online Store - for the period of time the Customer has an account in the Online Store, in accordance with its terms and conditions; after the Customer deletes the account, we may still process the Customer's data for the purpose of defense against claims, if justified by the circumstances;
j) analytical and statistical activities with respect to the use of the Online Store - for a further period of 24 months,

§ 5. "COOKIES" FILES

1. The Website uses "cookies" files.
2. Installation of "cookies" files is necessary for proper provision of services on the Website. The "cookies" files contain information necessary for the proper functioning of the Website, and they also provide the possibility to develop general statistics of website visits. Cookies or similar technologies do not adversely affect the operation of the device on which they are placed. Because of their use, there are no changes in the configuration of the device or in the software that is installed on the device. Information obtained through cookies and similar technologies may be disclosed, depending on the specific file/technology: to providers of services related to the administration of our website, providers of data analysis solutions, providers of online marketing services, social media platforms, providers of payment services.
3. The Website uses types of "cookies": session cookies and permanent cookies
a) "Session" "cookies" are temporary files that are stored on the user's terminal device until the user logs out (leaves the site).
b) "Permanent" "cookies" are stored on the user's terminal device for the time specified in the parameters of the "cookies" or until they are deleted by the user.
4. The administrator uses its own cookies to better understand how the user interacts with the content of the site. The files collect information about the user's use of the website, the type of website from which the user was redirected, and the number of visits and the time of the user's visit to the website. This information does not record specific personal information about the user, but is used to compile statistics on the use of the site.
5. The user has the right to decide on the access of "cookies" to his/her computer by selecting them in advance in his/her browser window. Detailed information on the possibility and methods of handling "cookies" is available in the settings of your software (web browser).

§ 6. FINAL PROVISIONS

1. This document is effective as of December 12, 2023.
2. This document is adopted by the Board of Directors of Bridge Solutions Hub S.A. and is subject to periodic review for updating, especially in case of changes in legal regulations
3. The Administrator shall apply technical and organizational measures to ensure the protection of the processed personal data appropriate to the risks and categories of protected data, and in particular shall protect the data from being accessed by unauthorized persons, from being taken by an unauthorized person, from being processed in violation of applicable regulations, and from being altered, lost, damaged or destroyed.
4. The Administrator shall provide appropriate technical measures to prevent acquisition and modification by unauthorized persons, personal data sent electronically.
5. In matters not covered by this Privacy Policy, the provisions of RODO and other relevant provisions of Polish law shall apply accordingly.