PRIVACY POLICY
WEBSITE PRIVACY POLICY
1. for the Owner of this website, the protection of personal data Users are of the utmost importance. It makes great efforts to ensure that Users feel secure in entrusting their personal information when using the website.
2. A User is a natural person, legal entity or organizational unit, The user is a natural person, a legal person or an organizational unit without legal personality, to which the law grants legal capacity, using the electronic services available on the website.
3. This privacy policy explains the principles and scope of processing of the User's personal data, his/her rights, as well as his/her obligations. administrator of these data, as well as informs about the use of cookies.
4. The administrator uses the most modern technical means and organizational solutions organizational solutions, ensuring a high level of protection of the processed personal data and security against unauthorized access
I. PERSONAL DATA ADMINISTRATOR The administrator of the personal data is Daria Smishko based at: Krakow 31-047 ul.Sarego 28/1, NIP: 6772486023, REGON: 523567271 (hereinafter: “Owner”).
II. PURPOSE OF PERSONAL DATA PROCESSING
1. The Administrator processes the User's personal data for the purpose of: Processing orders for products and services. We collect and store personal data voluntarily provided to us in connection with the use of the websites and services. We use the contact and payment information provided to us to provide the products and services that you have ordered on our Websites.
2. This means that the data is needed in particular for: PURPOSE OFPROCESSING PERSONALDATA
1. The Administrator processes the User's personal data for the purpose of: Processing orders for products and services. We collect and store personal data voluntarily provided to us in connection with the use of the Websites andservices. We use the contact and payment information provided to us to provide the products and services that you have ordered on our Websites.
2. This means that the data is needed in particular for 2/5 a. to conclude a contract; b. to perform billing; c. deliver the goods ordered by the User or perform the services
3. The User may also agree to receive information on news and promotions, which will also cause the administrator to process personal data, in order to send the User commercial information regarding, among other things, new products or services, promotions or sales.
4. Personal data shall also be processed in fulfillment of legal obligations incumbent on the data controller and the performance of tasks in the public interest, including, among others, to perform tasks related to security and defense or storage of tax records.
5. Personal data may also be processed for the purposes of direct marketing of products, securing and asserting claims or protecting against claims by the User or a third party, as well as marketing of services and products of third parties or marketing of our own, which is not direct marketing.
III. TYPE OF DATA
1. The Administrator shall process the following personal data required to: a. make purchases through the website:- name;- gender;- delivery address;phone number;- e-mail address; b. Optional data provided by the User:- date of birth;- PESEL number (if an invoice is requested);- VAT number (if an invoice is requested for an entrepreneur). 3/5
IV. LEGAL BASIS FOR PROCESSING OF PERSONAL DATA
1. Personal data shall be processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4.5.2016, p. 1-88, hereinafter referred to as the “RODO Regulation”.
2. The Administrator shall process personal data only after obtaining the User's prior consent at the time of confirming the transaction made on the website.
3. The granting of consent for the processing of personal data iscompletely voluntary, however, the failure to grant such consent shall make it impossible to make purchases, via the website.
V. USER'S RIGHTS 1. The user may at any time request information from the administrator about the scope of processing of personal data.
2. The user may at any time request correction or rectification of his/her personal data.
3. The User may withdraw his/her consent to the processing of his/her personal data at any time, without giving any reason. The request not to process the data may concern the specific purpose of processing indicated by the User, e.g. withdrawal of consent to receive commercial information, or concern all purposes of data processing. Withdrawal of consent as to all processing purposes will result in the User's account being deleted from the website, along with all the User's personal data previously processed by the administrator. The withdrawal of consent will not affect the activities already performed.
4. The user may request at any time, without stating a reason, that the administrator delete his/her data. The request to delete the data will not affect the activities already performed. Deletion of data means simultaneous deletion of the User's account, together with all personal data stored and processed so far by the administrator.
5. The User may at any time object to the processing of 4/5 personal data, both with respect to all the User's personal data processed by the administrator, as well as only to a limited extent, e.g. as to the processing of data for a specifically indicated purpose. The objection will not affect the activities performed so far. Raising an objection will result in the deletion of the User's account, together with all personal data stored and processed to date, by the administrator.
6. The User may request the restriction of the processing of personal data, whether for a certain period of time or without time limitation, but within a certain scope, which the administrator will be obliged to fulfill. This request will not affect the activities performed so far.
7. The user may request that the controller transfer to another entity, the processed personal data of the user. For this purpose, he should write a request to the administrator, indicating to which entity (name, address) the User's personal data should be transferred and what specific data the Userwishes the administrator to transfer. After the User confirms his request, the administrator will transfer, in electronic form, to the indicated entity, the User's personal data. Confirmation of the request by the User is necessary for the security of the User's personal data and to be sure that the request comes from an authorized person.
8. The Administrator shall inform the User of the action taken, before the expiration of one month from the receipt of one of the requests listed in the preceding paragraphs.
VI. STORAGE PERIOD OF PERSONAL DATA
1. In principle, personal data shall be retained only as long as necessary to fulfill the contractual or statutory obligations for which it was collected. The data will be deleted immediately when its storage is no longer necessary, for evidentiary purposes, in accordance with civil law, or in connection with a statutory obligation to store data.
2. Information, relating to the contract, shall be kept for evidentiary purposes, for a period of three years, starting from the end of the year in which the business relationship with the User was terminated. Deletion of data will take place after the expiration of the statutory limitation period for the assertion of contractual claims.
3. In addition, the administrator may retain archival information relating to concluded transactions, as their storage is related to the User's claims, such as warranty.
4. If no contract has been concluded, between the User and the Owner, 5/5 the User's personal data is stored until the User's account on the website is deleted. Deletion of the account may occur as a result of the User's request, withdrawal of consent to the processing of personal data, or objection to the processing of such data.
VII. ENTRUSTING DATA PROCESSING TO OTHER ENTITIES
1. The Administrator may entrust the processing of personal data to entities cooperating with the Administrator to the extent necessary for the implementation of the transaction, e.g. for the preparation of the ordered goods and delivery of shipments or transmission of commercial information from the Administrator (the latter applies to Users who have consented to receive commercial information).
2. In addition to the purposes indicated in this Privacy Policy, personal data of Users, will not be shared in any way with third parties, or transferred to other entities, for the purpose of sending marketing materials of these third parties.
3. Personal data of Website Users shall not be transferred outside the European Union.
4. This Privacy Policy complies with the provisions arising from Article 13(1) and (2) of the RODO Regulation. 4 This Privacy Policy complies with the provisions arising from Article 13(1) and (2) of the RODO Regulation.