§1 GENERAL PROVISIONS
- This document defines the rules for processing personal data obtained from Customers by the Rezystancja Grzejnika Online Store, operated at www.rgfk.pl by Rezystancja Grzejnika Filip Klich. It also contains information regarding the use of Cookies and analytical tools in the Online Store.
- The administrator of personal data is Rezystancja Grzejnika Filip Klich, entered into the Central Registration and Information on Business (CEIDG) NIP: 8971845968, REGON: 368408546. (hereinafter referred to as "Rezystancja Grzejnika").
- Personal data collected by Rezystancja Grzejnika Filip Klich via the Online Store is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation), hereinafter referred to as GDPR.
- The Rezystancja Grzejnika Store informs that the personal data of Customers will be processed solely for the purpose of performing and fulfilling the contract concluded with the Buyer/Customer. With additional consent, personal data will also be processed for the purpose of delivering informational materials and marketing offers in the form of a Newsletter.
- The Rezystancja Grzejnika Online Store makes every effort to ensure respect for your privacy and protection of the personal information provided while using and making purchases in the store, and for this purpose, a secure encrypted communication protocol (SSL) is used, among other things.
- Providing personal data is voluntary; however, failure to provide data marked as necessary prevents registration or placing an Order.
§2 TYPE, PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
- In the Rezystancja Grzejnika Online Store, personal data is collected in the following cases:
- for the performance of the sales contract for goods from the Store concluded with the Customer, related to Account registration and placing Orders - the basis for processing is Art. 6(1)(b) GDPR (performance of a contract) and for the purpose of establishing, pursuing, or enforcing claims – legal basis Art. 6(1)(f) GDPR. In these cases, the necessary scope of processed data includes first and last name; email address; contact phone number; address: street, house number, apartment number, postal code, city, country, residence/business/registered office address, bank account number (in case of refunds), and for Customers who are not consumers, additionally the company name and tax identification number - NIP, and other data collected during the use of the Online Store.
- subscription to the informational bulletin (Newsletter), for the performance of a contract, the subject of which is a service provided electronically. Legal basis - consent of the Customer, whose data is concerned, to the performance of the contract for the provision of the Newsletter service (Art. 6(1)(a) GDPR). In this case, the necessary scope of processed data includes the email address and contact phone number.
- for marketing purposes solely and exclusively for the needs of email, SMS, and social media campaigns launched or indicated by the Administrator using the edrone system, by the company Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, NIP: 676-248-20-64, KRS: 0000537197.
- for the use of the edrone.me mailing system, used for sending the newsletter, by the company Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, NIP: 676-248-20-64, KRS: 0000537197.
§ 3 SHARING OF PERSONAL DATA
- For the proper functioning of the Online Store, it is necessary for the Administrator to use the services of external entities. The Administrator ensures that it uses the services of entities that process data correctly in accordance with the law, including the EU GDPR regulation.
- The Administrator transfers data only when it is necessary to achieve the purpose of processing and only to the extent necessary for this purpose.
- The personal data of Customers may be transferred to the following entities:
- providers of hosting and IT services,
- carriers performing shipments of Orders (listed in the Online Store Regulations),
- entities handling electronic payments in the Online Store,
- entities providing accounting, legal, and advisory services.
§ 4 DATA RETENTION PERIOD
- The provided personal data will be processed for the period:
- necessary for the performance of the concluded contract for the sale of Goods, including the Customer's complaint claims and the pursuit or defense of claims by the Administrator – but no longer than 10 years from the date of data provision.
§ 5 PROFILING
- The Rezystancja Grzejnika Online Store may use profiling functionality, which involves any automated processing of personal data that allows for the assessment of personal factors of a natural person, and in particular to analyze or predict aspects of Customers' preferences and interests.
- This functionality will allow the Administrator to display advertisements tailored to the Customer's preferences and interests and to present products that best meet their needs. This functionality will also allow for the use of appropriate communication methods, including the choice of communication language.
- The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
- The Administrator informs that it uses the following technologies to track actions taken by the user/Customer within the Store's website: - edrone tracking codes – for the analysis of the Store's website statistics, as well as for marketing purposes solely and exclusively for the needs of email, SMS, and social media campaigns launched or indicated by the Administrator using the edrone system.
§ 6 RIGHTS OF THE DATA SUBJECT
- In accordance with the GDPR, a person who provides their personal data has a number of rights, such as:
- The right to information on how personal data is processed,
- The right to access and update data,
- The right to withdraw consent – legal basis Art. 7(3) GDPR,
- The right to object to the processing of personal data – legal basis Art. 21 GDPR
- The Customer has the right to object at any time – on grounds relating to their particular situation – to the processing of their personal data, including profiling, if the [nazwa] Online Store processes their data based on a legitimate interest,
- The right to erasure of data, the so-called "right to be forgotten" – legal basis Art. 17 GDPR
- The right to restriction of processing – legal basis Art. 18 GDPR,
- The right to data portability – legal basis Art. 20 GDPR,
- The right to lodge a complaint with a supervisory authority.
§7 COOKIES
- The Rezystancja Grzejnika Online Store uses Cookies. These are small text files sent by the www server and stored by the browser's computer software. When the browser reconnects to the site, the website recognizes the type of device from which the user is connecting. Parameters allow the information contained in them to be read only by the server that created them. Cookies therefore facilitate the use of previously visited websites.
- The Administrator uses its own Cookies for the proper configuration of the Store, and in particular to:
- adapt the content of the Store's websites to the Customer's preferences and optimize the use of the websites;
- recognize the device of the Store's Customer and its location and accordingly display the website, tailored to their individual needs;
- remember settings selected by the Customer and personalize the interface, e.g., in terms of the chosen language or region of origin;
- match appropriate advertisements according to the Customer's preferences;
- remember the history of visited pages on the site for content recommendation;
- font size, website appearance, etc.
- The Administrator uses its own Cookies for user authentication in the Store and ensuring the maintenance of the user session on the website, and in particular to:
- maintain the session of the Store's Customer (after logging in), thanks to which the Customer does not have to re-enter their login and password on each subpage of the website;
- proper configuration of selected functions of the Service, enabling in particular verification of the authenticity of the browser session;
- optimization and increase of the efficiency of services provided by the Administrator.
- The Administrator uses its own Cookies to carry out processes necessary for the full functionality of the websites, and in particular to:
- adapt the content of the Service's websites to the User's preferences and optimize the use of the Service's websites. In particular, these files allow the recognition of the basic parameters of the User's Device and accordingly display the website, tailored to their individual needs;
- proper operation of the affiliate program, enabling in particular verification of the sources of redirecting Users to the Service's websites.
- The Administrator cooperates with the following external services, which may place external Cookie files:
- Google Inc. based in the USA (including Google AdSense, Google Analytics, Google AdWords, Google Maps API, Google Doubleclick, Google Tag Manager, Google Search Console) More information https://support.google.com/google-ads/answer/2407785;
- Facebook Inc. based in the USA or Facebook Ireland based in Ireland;
- Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, NIP: 676-248-20-64, KRS: 0000537197
- The User can independently and at any time change the settings regarding Cookies, defining the conditions for their storage and access by Cookies to the User's Device. Changes to the settings referred to in the previous sentence can be made by the User using the web browser settings or via the service configuration. These settings can be changed in particular to block the automatic handling of Cookies in the web browser settings or to inform about each time they are placed on the User's device. Detailed information about the possibilities and ways of handling Cookies are available in the software (web browser) settings.
- The User can delete Cookies at any time using the available functions in the web browser they use.
- Restricting the use of Cookies may affect some functionalities available on the Service's website.
§8 FINAL PROVISIONS
- The Administrator of the Online Store reserves the right to change this privacy policy at any time and place, while committing to immediately publish the new privacy policy on the Store's websites and inform all registered Users of this fact.
- In matters not regulated by this Privacy Policy, the universally binding provisions on personal data protection shall apply.
- Any questions related to the Privacy Policy and personal data protection should be directed to iod@uodo.gov.pl
- This Privacy Policy is effective from 09.03.2020.