PRIVACY POLICY
1. GENERAL PROVISIONS
The controller of personal data collected via the Online Store is Sinesis Joanna Pingot, Aleja Wojska Polskiego 15/6, 80-277 Gdańsk, Poland, NIP 5841512617, REGON 220517336, e-mail address: kontakt@chinskikacik.pl – hereinafter referred to as the “Controller”, who is simultaneously the Service Provider of the Online Store and the Seller.
The personal data of the Service Recipient (Customer) are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “Regulation” or “GDPR”), the Act of 10 May 2018 on the protection of personal data, and the Act of 18 July 2002 on the provision of electronic services (Journal of Laws No. 144, item 1204, as amended).
The Controller makes every effort to protect the interests of data subjects and, in particular, ensures that the data collected are processed lawfully; collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes; factually correct and adequate in relation to the purposes for which they are processed; and stored in a form permitting identification of data subjects for no longer than is necessary to achieve the purposes of processing.
All words, expressions and acronyms appearing on this website and beginning with a capital letter (e.g. Seller, Online Store, Electronic Service) shall be understood in accordance with the definitions contained in the Online Store Terms and Conditions available at:
http://chinskikacik.pl/regulamin
2. PURPOSE AND SCOPE OF DATA COLLECTION
The purpose of collecting personal data by the Controller is:
-
to establish, define the content of, amend, perform or terminate a contractual relationship between the Service Provider (Seller) and the Service Recipient (Customer), consisting of the provision of Electronic Services via the Online Store or the conclusion and performance of a Sales Agreement for Products and their delivery to the Customer;
-
direct marketing of the Controller’s own products or services.
Advertising features of Google Analytics have been implemented on the website, enabling, among other things, the collection of demographic and interest reports.
Recipients of personal data:
-
In the case of a Customer who uses postal or courier delivery in the Online Store, the Controller discloses the collected personal data of the Customer, to the extent and for the period necessary to complete delivery, to the selected carrier carrying out shipments on behalf of the Controller.
-
In the case of a Customer who uses electronic payment methods or payment cards in the Online Store, the Controller discloses the collected personal data of the Customer, to the extent and for the period necessary to complete the payment, to the selected entity handling such payments in the Online Store.
The Controller processes the following personal data of Service Recipients (Customers): first and last name; e-mail address; contact telephone number; address (street, house number, apartment number, postal code, city, country). In the case of Service Recipients (Customers) who are not consumers, the Controller additionally processes the company name and tax identification number (NIP).
Providing the personal data referred to above is voluntary; however, it is necessary for the Service Provider to provide Electronic Services within the Online Store or to conclude a Sales Agreement for Products. Failure to provide such data will make it impossible to conclude the relevant agreement. Each time, the scope of required data is also indicated in the Online Store Terms and Conditions and prior to the provision of a specific Electronic Service or the conclusion of a Sales Agreement on the Online Store website.
Advertising features of Google Analytics have been implemented on the website, enabling, among other things, the collection of demographic and interest reports.
Certain areas of the website may use cookies, i.e. small text files sent to the user’s computer, identifying the user in a way necessary to simplify or complete a given operation. Cookies are not harmful to the computer, its user or their data. Cookies require acceptance by the browser and must not be deleted from the disk in order to function properly.
Personal data of our customers collected via cookies are not shared with third parties.
To prevent cookies from being stored on your computer, you may refuse or disable them in your web browser settings. Please note that disabling cookies may significantly impair the functionality of our website as well as other websites.
Your personal data will be processed in an automated manner (including profiling); however, this will not produce any legal effects concerning you or similarly significantly affect your situation. Profiling by http://chinskikacik.pl consists of processing your data (also in an automated manner) in order to evaluate certain information about you, in particular to analyse or predict personal preferences and interests.
You have the right to object to profiling at any time.
3. COOKIES AND OPERATIONAL DATA
Cookies are small pieces of text information in the form of text files, sent by a server and stored on the device of the user visiting the Online Store website (e.g. on a computer hard drive, laptop or smartphone memory card, depending on the device used). Detailed information about cookies and their history can be found, among others, at:
http://pl.wikipedia.org/wiki/Ciasteczko
The Service Provider processes data contained in cookies when visitors use the Online Store website for the following purposes:
-
identifying Service Recipients as logged in to the Online Store and displaying their logged-in status;
-
remembering Products added to the shopping cart in order to place an Order;
-
remembering data entered in Order Forms, surveys or login data for the Online Store;
-
adapting the content of the Online Store website to the individual preferences of the Service Recipient (e.g. colour preferences, font size, page layout) and optimising the use of the Online Store website;
-
creating anonymous statistics on how the Online Store website is used and researching Service Recipient needs, excluding personal identification of Service Recipients.
Most web browsers available on the market accept cookies by default. Everyone may specify the conditions for the use of cookies via their web browser settings. This means that you may partially restrict (e.g. temporarily) or completely disable the storage of cookies on your computer – although in the latter case this may affect some functionalities of the Online Store (e.g. it may be impossible to complete the ordering process via the Order Form).
Browser settings regarding cookies are important from the perspective of consent to the use of cookies by our Online Store – in accordance with the law, such consent may also be expressed through browser settings.
Detailed information on changing cookie settings and deleting cookies in the most popular web browsers is available in the browser help section and on the following websites:
-
Chrome
-
Firefox
-
Internet Explorer
-
Opera
-
Safari
The Service Provider also collects operational data (so-called logs – IP address, domain), which are stored for an indefinite period and used to generate statistics helpful in administering the Online Store. These data are collective and anonymous, i.e. they do not contain features identifying persons visiting the Online Store website. Logs are not disclosed to third parties.
4. LEGAL BASIS FOR DATA PROCESSING
Providing personal data by the Service Recipient/Customer is voluntary; however, failure to provide the personal data indicated in the Terms and Conditions as necessary to conclude a Sales Agreement or an agreement for the provision of an Electronic Service will result in refusal to conclude such an agreement. Data necessary to conclude a Sales Agreement or an agreement for the provision of an Electronic Service are also indicated each time on the Online Store website.
The legal basis for data processing results from actions taken by the Service Recipient (Customer) in the Online Store. The basis for processing personal data is the necessity to perform a contract to which the Service Recipient/Customer is a party or to take steps at their request prior to concluding the contract. In the case of data processing for the purpose of direct marketing of the Controller’s own products or services and the implementation of Google Analytics advertising functions, the basis for such processing is either (1) the prior consent of the Service Recipient/Customer or (2) the legitimate interests of the Controller. Legitimate interest is understood in particular as direct marketing of the Controller’s own products or services.
5. RIGHT OF ACCESS, CONTROL AND RECTIFICATION OF DATA
The Service Recipient has the right to access the content of their personal data and to request rectification, deletion or restriction of processing, the right to data portability, the right to object to processing, the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal, as well as the right to lodge a complaint with a supervisory authority if they consider that the processing of personal data violates the provisions of the Regulation.
Personal data will be processed for the period necessary until the basis for processing ceases, and thereafter for the limitation period of claims available to and against the Controller, as well as for statistical and accounting purposes. For example, data provided for the purpose of concluding and performing a sales agreement or an agreement for the provision of electronic services will be processed for the duration of the agreement, and after its termination for the limitation period of claims arising therefrom.
6. FINAL PROVISIONS
The Online Store may contain links to other websites. The Controller encourages users, upon moving to other websites, to read the privacy policy established there. This privacy policy applies only to this Online Store.
The Controller applies technical and organisational measures ensuring protection of processed personal data appropriate to the threats and categories of data protected, and in particular safeguards data against disclosure to unauthorised persons, acquisition by unauthorised persons, processing in breach of applicable regulations, and alteration, loss, damage or destruction. The Controller ensures a level of security appropriate to the state of technical knowledge, the nature, scope, context and purposes of personal data processing, and the risk of infringement of the rights and freedoms of data subjects.