INFORMATION ON PERSONAL DATA PROCESSING
On 25 May 2018, Regulation of the European Parliament and of the (EU) Council 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data as well as on free movement of such data and the repeal of Directive 95/46/EC, will apply (referred to as “GDPR” (General Data Protection Regulation) or “RODO” and “ORODO” in Polish).
Therefore, we would like to inform you about the processing of your Personal Data by us and the rules on which it will be carried out after 25th May 2018. Below you will find essential information on this topic.
I. DATA ADMINISTRATOR
The administrator of personal data is ENSIFER JAN CHODKIEWICZ based in Gdańsk Address: Mostowa 14, 80-778 Gdańsk, Poland. In order to contact us regarding the processing and protection of personal data, you may email us at the following address: firstname.lastname@example.org
II. PURPOSE AND BASIS FOR PERSONAL DATA PROCESSING
Data Administrator will process your personal data in particular for the purpose of:
a) concluding a contract / providing services based on your interest in our offer (the basis of Article 6 (1) (b) of the GDPR);
b) performing the contract / providing services that we have concluded (the basis of Article 6 (1) (b) of the GDPR);
c) fulfilling legal obligations incumbent on the Administrator (the basis of Article 6 (1) (c) of the GDPR);
d) analytics [adjusting services to the needs of our customers, optimising our products based also on your comments and your interest, optimising service processes based on the course of sales and after-sales service processes, including complaints, etc.], that is realising our legitimate interest and business reason (the basis of Article 6 (1) (f) of the GDPR)
e) archiving (evidence) that is implementation of our legitimate interest in securing information in the event of a legal need to prove facts (Article 6 (1) (f) of the GDPR);
f) possible determination, investigation or defence against claims being the implementation of our legitimate interest and business reason (the basis of Article 6 (1) (f) of the GDPR);
g) customer satisfaction research, which is the implementation of our legitimate interest in determining the quality of our service and the level of satisfaction of our customers with products and services (the basis of Article 6 (1) (f) of the GDPR);
h) offering you products and services directly (direct marketing), including selection of products and services to meet your needs, as part of our legitimate interest in doing so (basis of Art. 6 (1) (f) GDPR);
i) notifying you of, among other things, changes to our online shop regulations, price list, our address or registered office to a specified address based on your consent (basis of Art. 6 (1) (a) GDPR);
j) using direct marketing, including organising and conducting competitions, other marketing actions, informing about promotions and news based on your consent (basis of Art. 6 (1) (a) GDPR);
k) direct marketing conducted with your consent may be carried out by means of electronic communication such as e-mail, text message, telephone.
III. DATA RECIPIENTS (PROCESSING PARTIES)
Your personal data may be disclosed to entities with whom we cooperate, in particular: our business partners, IT companies, accounting company, debt collection company, insurance company, postal operators and courier companies, document archiving companies, marketing agencies, and law firm.
IV. RETENTION PERIOD
1. Your personal data processed in order to perform the contract concluded with us and fulfil the legal obligation imposed on us will be processed for the duration of the contract, and after its expiry for the period:
a) in which claims related to this contract may be disclosed,
b) of after-sales service (including consideration of complaints),
c) required to fulfil legal obligations incumbent on us (e.g. resulting from accounting or tax regulations).
2. If the contract is not concluded within 60 days after presenting our offer, your personal data related to discussions about the contract will be immediately deleted, except for the data needed for direct marketing.
3. We may process personal data processed for the purposes of direct marketing of our products and services until you object to their processing for this purpose or when we deem them obsolete.
4. Personal data processed on the basis of a separate consent will be kept until its revocation.
V. RIGHTS OF DATA SUBJECTS:
Pursuant to the GDPR, you are entitled to:
a) the right to access your data and receive its copy;
b) the right to rectify (correct) your data;
c) the right to request deletion of data or restriction of data processing;
d) the right to object to the processing of data if they are processed based on the legitimate interest of Data Administrator or for direct marketing;
e) the right to transfer data;
f) the right to withdraw consent to the processing of your personal data, if the processing was based on consent. However, withdrawal of consent does not affect lawfulness of the processing carried out with your consent provided before its withdrawal.
g) the right to lodge a complaint with a supervisory authority.
The rights listed in points a) to f) can be exercised by contacting Data Administrator at the address provided at the beginning.
VI. VOLUNTARY SUBMISSION OF PERSONAL DATA
Providing your personal data is voluntary, however necessary to conclude and perform a sales / service contract with us.
VII. PROCEDURES OF AUTOMATED DECISION-MAKING AND PROFILING
The data controller does not make decisions in an automated manner, including profiling, based on the processed personal data.
WHAT DATA DOES THE ONLINE STORE COLLECT WHEN YOU ARE USING THE WEBPAGE?
Except for the data contained in cookie files when you browse the webpage, the online store does not automatically collect any data while website is being used. Cookies are small text files sent by the Online Store and stored on the user’s computer, containing certain information related to your use of the Website and Online Store. Cookies are used by the online store to operate the Website and may provide you with interesting information, but also during the purchasing process, e.g. to remember products added to the basket.
Cookies used by the online store may be temporary or permanent. Temporary cookies are deleted when the browser is closed, while permanent cookies are also stored after the end of the Website session and are used to store information such as a the password and login, which speeds up and facilitates the use of the Website. In any case, you can block the installation of cookies or delete permanent cookies using the appropriate options of your web browser. Should any issues arise, we advise you to use the browser’s help file or contact the manufacturer of the browser you are using.
In addition to cookies, the Online Store can also collect data usually collected by the system administrators within the so-called Internet logs or log files. The information contained in the logs may include, among others: Your IP address, type of platform and web browser, internet provider and the address of the page from which you entered the Website.
WHAT DATA DOES THE ONLINE STORE COLLECT DURING REGISTRATION AND SHOPPING?
The Online Store will collect the following personal data via the Website and other forms of communication during purchases and registration on the Website:
• name and surname,
• home address,
• shipping address, if different from home address,
• email address,
• telephone number.
Providing these data is voluntary, but necessary for registration and purchases on the Website. Providing the above data is voluntary, requires your consent and is necessary only for the implementation of the above-mentioned purposes.
We emphasise that you do not have to provide this data if you do not want to use the above-mentioned features. You have the right to access your personal data and the right to correct it. In order to exercise this right, please use the options within your account or from the following address: email@example.com. Consent may be withdrawn at any time.