PRIVACY AND COOKIES POLICY OF SZNURKIOUTLET.PL ONLINE STORE
The administrator of your personal data within the meaning of the data protection regulations is Tomasz Urbaniak conducting business activity registered in the Central Register and Information on Business Activity maintained by the minister responsible for economy under the name Tomasz Urbaniak, ul. Jana Olbrachta 94A, 01-102 Warsaw, NIP 5252203113, REGON 017205074 (hereinafter "ADO" or "Administrator"). Legal basis for processing personal data:
1. Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter "GDPR".
The purposes, legal basis and duration of personal data processing are indicated separately for each purpose of data processing (see description of individual purposes of personal data processing below). Rights: GDPR grants you the following potential rights related to the processing of your personal data:
- 1. the right to access personal data,
- 2. the right to rectify personal data,
- 3. the right to have your personal data erased,
- 4. the right to restrict the processing of your personal data,
- 5. the right to object to the processing of your personal data,
- 6. the right to data portability
- 7. the right to lodge a complaint with a supervisory authority,
- 8. the right to revoke your consent to the processing of personal data, if you have given such consent.
We guarantee you the confidentiality of any personal information you provide to us. We ensure that we take all security and data protection measures required by data protection regulations. Personal data is collected with due diligence and properly protected from access by unauthorized persons. List of entrustments. We entrust the processing of personal data to the following entities: 1. Kylos Sp. z o.o. (KRS: 0000496957)- to store personal data on the server, 2. Accounting office Credo Sp.j. - In order to use accounting services that involve processing your data when we issue an invoice for you, 3. TheInternets Sp z o.o. (KRS: 0000550944) - in order to use IT support services that involve the possibility of the service provider accessing your personal data. All entities to which we entrust the processing of personal data guarantee they use the appropriate measures for protection and security of personal data required by law.
PURPOSES AND PROCESSING OPERATIONS
When you create a user account, you need to provide your e-mail address and define a password for the account. Provision of data is voluntary, but necessary to create an account. As part of editing your user profile, you can provide further details about yourself, i.e. your name, billing address and shipping address. Provision of this data is completely voluntary. You can have an account without providing further details. In this situation, you will have to enter this data manually when placing your order. The data you enter within your user account is processed solely for the purpose of maintaining your account and enabling you to use it. Providing data in your user account is to make it easier for you to place orders in the store by automatically filling in your data in the order form. The legal basis for the processing of your personal data under your user account is the performance of the account agreement you enter into under the store's regulations - Article 6(1)(b) of GDPR. The data collected in the user's account is processed within the system of the online store sznurkioutlet.pl based on PrestaShop and stored on the server provided by Kylos Ltd. Your data will be processed within your account for as long as you have a user account. When you delete your account, your data will be deleted from the database, except for data on orders placed. You can access your personal data processed under your account at any time by logging into your user account. After logging into your account, you can modify your data at any time, as well as delete your data, except for data on orders placed. You can also decide to delete your account at any time. In relation to the data collected in your account, you also have the right to data portability as provided in Article 20 of GDPR.
When placing an order, you must provide the data necessary to process the order, i.e. name, billing address, delivery address, email address, phone number. Provision of data is voluntary, but necessary to place an order. Data provided to us in connection with an order, is processed for the purpose of processing the order (Article 6(1)(b) of GDPR), issuing an invoice (Article 6(1)(c) of GDPR), including the invoice in our accounting records (Article 6(1)(c) of GDPR), and for archival and statistical purposes (Article 6(1)(f) of GDPR). The data contained in the order placed through the store is processed within the online store system sznurkioutlet.pl based on PrestaShop and stored on the server provided by Progresso Sp z o.o.. If you have a user account, your order will be visible in the order history section of the account. Each order is documented with an invoice. Invoices are forwarded to the accounting office Credo Sp.j.. Orders are also recorded in our internal database for archival and statistical purposes. Order data will be processed for the time necessary for the execution of the order, and then until the expiration of the statute of limitations for claims under the concluded agreement. In addition, after this deadline, the data may still be processed by us for statistical purposes. Remember also that we are obliged to keep invoices with your personal information for a period of 5 years from the end of the fiscal year in which the tax liability arose. In the case of order data, you cannot correct such data after the order has been processed. You cannot object to the processing of data and demand deletion of data until the expiration of the statute of limitations for claims under the concluded agreement. Likewise, you cannot object to the processing of data and demand the deletion of data contained in invoices. After the expiration of the statute of limitations for claims under the concluded agreement, you may still object to our processing of your data for statistical purposes, as well as demand the deletion of your data from our database. In relation to your order data, you also have the right to data portability as stipulated in Article 20 of GDPR.
Complaints and withdrawal from the agreement
If you make a complaint or withdraw from the agreement, you provide us with the personal data contained in the body of the complaint or statement of withdrawal, which includes your name, address, telephone number, e-mail address, bank account number. The data provided to us in connection with the filing of a complaint or withdrawal from the agreement are used for the purpose of the complaint procedure or withdrawal procedure (Article 6(1)(c) of GDPR). The data will be processed for the time necessary to carry out the complaint procedure or the withdrawal procedure. Complaints and withdrawal statements may also be archived for statistical purposes. In the case of data contained in complaints and withdrawal statements, you cannot correct such data. You cannot object to the processing of data and demand deletion of data until the expiration of the statute of limitations for claims under the concluded agreement. After the expiration of the statute of limitations for claims under the concluded agreement, you may still object to our processing of your data for statistical purposes, as well as demand the deletion of your data from our database.
When you contact us by e-mail, including sending an inquiry through the contact form, you naturally provide us with your e-mail address as the sender of the message. In addition, you may also include other personal information in the body of the message. Your data in this case is processed for the purpose of contacting you, and the basis for processing is Article 6(1)(a) of GDPR, i.e. your consent resulting from initiating contact with us. The legal basis for post-contact processing is the legitimate purpose of archiving correspondence for internal purposes (Article 6(1)(c) of GDPR). The content of the correspondence may be subject to archiving, and we are unable to clearly determine when it will be deleted. You have the right to request the history of correspondence you have had with us (if it was subject to archiving), as well as to request its deletion, unless its archiving is justified by our overriding interests, such as defense against potential claims on your part.
COOKIES AND OTHER TRACKING TECHNOLOGIES
Consent to cookies
We use proprietary cookies to ensure the proper operation of the site.
Analysis and statistics
Using the site involves sending requests to the server where the site is stored. Each request to the server is recorded in the server logs. The logs include, among other things, your IP address, the date and time of the server, information about your web browser and the operating system you are using. Logs are saved and stored on the server. The data stored in the server logs are not associated with specific individuals using the site and are not used by us to identify you. Server logs are only support material for the administration of the site, and their contents are not disclosed to anyone except those authorized to administer the server.