Legal
Privacy policy
This policy explains what personal data we process when you use bestproductranking.com, why, for how long, and what you may demand from us. It is written to Regulation (EU) 2016/679 (GDPR) and Directive 2002/58/EC (ePrivacy).
1
Controller
The controller of your personal data within the meaning of Article 4(7) GDPR is:
HAGENN POLSKA Sp. z o. o.
ul. Domaniewska 37 / 2.43
02-672 Warszawa
Poland (European Union)
Email: contact@bestproductranking.com
Registered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw, 13th Commercial Division.
KRS: 0000871149 · VAT ID (NIP): PL5213913431 · REGON: 387628394
Share capital: PLN 5,000, paid up in full.
We have not appointed a data protection officer, because none of the cases in Article 37(1) GDPR applies to us. In all data matters write to contact@bestproductranking.com.
2
What we process, why, and on what basis
a) Correspondence. Your email address, your name if you give it, and the content of the message. Purpose: answering you and handling the matter. Basis: Article 6(1)(f) GDPR — our legitimate interest in replying to enquiries and handling corrections; where a message concerns a legal claim, also the establishment or defence of claims.
b) Server logs. IP address, date and time of the request, page address, browser and operating system, referring page. Purpose: keeping the site running, diagnosing faults, security. Basis: Article 6(1)(f) GDPR — our legitimate interest in the secure and correct operation of the service.
c) Cookies and similar technologies. Storing or reading information on your device requires your consent under Article 5(3) of Directive 2002/58/EC, except where it is strictly necessary to provide the service you requested. The only strictly necessary item we store is the record of your own consent choice. Analytics and marketing run solely after you agree — basis: Article 6(1)(a) GDPR, withdrawable at any time. Details in the cookie policy.
We run no user accounts, process no special categories of data under Article 9 GDPR, and do not knowingly collect data from children.
3
Retention
- Correspondence — for as long as the matter requires, then up to 3 years; correspondence behind a published correction is kept with that ranking's editorial history.
- Server logs — up to 12 months, then deleted or anonymised.
- Consent record — up to 12 months from your choice, or until you withdraw it. Article 7(1) GDPR requires us to be able to demonstrate that consent was given.
- Analytics data — no longer than the period stated for the tool in the cookie policy.
4
Recipients
We do not sell personal data and do not disclose it for anyone else's marketing.
Data may be entrusted to providers acting on our documented instructions under processing agreements meeting Article 28 GDPR: the hosting provider, the email provider and — only with your consent — an analytics provider.
Data may also be released to public authorities where EU or national law obliges us to do so.
5
Transfers outside the EEA
We prefer providers processing data inside the European Economic Area. Where a transfer to a third country takes place, it rests on Chapter V GDPR: an adequacy decision under Article 45, or the European Commission's standard contractual clauses under Article 46(2)(c), with a transfer impact assessment and supplementary safeguards where required.
You may ask us for a copy of the safeguards applied.
6
Your rights
Under Chapter III GDPR you have the right to:
- access your data and obtain a copy — Article 15,
- rectification — Article 16,
- erasure — Article 17,
- restriction of processing — Article 18,
- data portability, where processing is based on consent or a contract and carried out by automated means — Article 20,
- object to processing based on legitimate interest, on grounds relating to your particular situation — Article 21,
- withdraw consent at any time, as easily as it was given, without affecting the lawfulness of earlier processing — Article 7(3).
Write to contact@bestproductranking.com. We answer within one month; for complex requests we may extend this by two further months and will tell you why (Article 12(3) GDPR). Exercising your rights is free of charge.
Complaint. Article 77 GDPR gives you the right to lodge a complaint with a supervisory authority — in the Member State of your habitual residence, your place of work, or where the alleged infringement occurred. Our lead supervisory authority is the Polish authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. A list of all EEA authorities is kept by the European Data Protection Board at edpb.europa.eu.
7
Is providing data voluntary?
Yes. The whole site can be read without giving us any personal data. An email address is needed only if you want an answer — without it we cannot reply.
We take no decisions about you based solely on automated processing and we do not profile you within the meaning of Article 22 GDPR.
8
Changes
When our tools or the law change we update this policy and publish the new version here, with the date of the last update at the top. Where a change materially affects consent-based processing, we ask for your consent again through the cookie banner.