Who is the controller of your personal data?
The personal data controller is Ms Paulina Blachura carrying on business under the name of Paulina Blachura STUDIO B3 at: ul. Jana Zamoyskiego 33/21, 30-519 Kraków, NIP (Tax Identification Number): 6772287453, REGON (National Official Business Register Number): 120754453, e-mail: email@example.com, contact phone No.: +48 606 987 555 (hereinafter also referred to as the “Controller” or the “Seller”).
What personal data will be processed?
When you place an Order at the Online Store without Account registration and/or register an account, and/or sign up for the newsletter, and/or contact the Seller (by e-mail, phone or using the contact form in the CONTACT section), and/or use the remaining services provided by the Seller by electronic means as indicated in Chapter III of the Terms and Conditions of the Online Store, you provide your personal data (first name and last name, address, e-mail address, phone number and, where applicable, company name, business address, NIP and the IP address of your computer) to the Seller.
Why and how do we process your personal data?
The legal basis for processing is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the GDPR).
Your data will be processed by the Seller for the period required to perform the Sale Contract, but the Seller will still keep your data in order to defend against any claims connected with the potential withdrawal from the Contract, consider your complaints or for the purpose of tax payment, which is a legitimate interest of the Controller as referred to in Article 6(1)(f) of the GDPR.
The legal basis for the processing of such data is the consent you give during Account registration (according to Article 6(1)(a) of the GDPR).
The data will be processed by the Seller for as long as your Account is maintained, unless you decide earlier that you no longer want to have an Account. However, the Seller may still keep your data in order to defend against any claims connected with the maintenance of your Account, including, in particular, to prove that you have given your consent to the registration, which is a legitimate interest of the personal data controller as referred to in Article 6(1)(f) of the GDPR.
The legal basis for processing is Article 6(1)(b) of the GDPR. The legal basis for processing after the end of our contact with you is the legitimate purpose of archiving the correspondence so that it can be presented in the future (Article 6(1)(f) of the GDPR).
The contents of the correspondence may be archived. The Seller is unable to conclusively state when the correspondence will be removed. You may demand that the history of your correspondence with the Seller be shown to you (if it was archived) or demand that it be removed, unless the archiving of your correspondence is justified by an overriding interest of the personal data controller, e.g., protection against any claims you may make.
The legal basis for processing is the performance of the contract signed with you, according to Article 6(1)(b) of the GDPR.
The data will be processed by the Seller for the period required to perform the contract for the provision of services by electronic means. After the end of the contract, the Seller may still keep your data to defend against any claims concerning the services provided by the Seller by electronic means or consider your complaints, which is a legitimate interest of the personal data controller as referred to in Article 6(1)(f) of the GDPR.
The legal basis for processing is the consent you have given when you signed up for the newsletter (according to Article 6(1)(a) of the GDPR).
The data will be processed by the Seller for as long as the newsletter is sent, unless you decide earlier that you no longer want to receive it. However, the Seller may still keep your data in the mailing system in order to defend against any claims connected with the sending of the newsletter, including, in particular, to prove that you have given your consent to receive the newsletter, which is a legitimate interest of the personal data controller as referred to in Article 6(1)(f) of the GDPR.
What rights do you have if you provide your data to the Seller?
You have, at all times, the right to data portability, the right to access your personal data and rectify or correct them and the right to object to data processing, and you may withdraw your consent to data processing at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. The Seller may refuse to erase your personal data if there are reasons to refuse according to the provisions of the law. You also have the right to lodge a complaint against personal data processing with the President of the Personal Data Protection Office.
The conditions under which you may exercise these rights have been described in detail in Articles 16–21 of the GDPR.
Your data will not be subject to automated decision-making, including profiling. Your personal data will also not be transferred outside the European Economic Area.
Can the Seller transfer your data or make them available to anybody?
The Seller never transfers, sells or provides the collected personal data of the Users of the Online Store to third parties other than those indicated in this Policy without an express consent or request of the User or without a request of the state authorities authorised by the law in connection with ongoing proceedings (e.g., law enforcement bodies, Trade Inspectorate).
The Seller processes your personal data in accordance with the extent of your permission and requirements of the law, including the provisions of the GDPR; in particular, the Seller protects your personal data to ensure that they are not provided to unauthorised persons, lost or damaged, and they also guarantee the confidentiality of all provided personal data.
Personal data provided to the Seller will not be disclosed to third parties other than those indicated in the Terms and Conditions of the Online Store (e.g., the administrator of the Facebook social media website, courier company, bank that processes the transfers, companies that process payments using an electronic payment system, accounting company, company providing technical support for the server of the Online Store), for purposes other than indicated in the Terms and Conditions of the Online Store, without your dedicated prior consent.
The Seller may modify this Policy for important reasons (e.g., change of the provisions of the law, change of the operating principles of the Online Store). If any changes are introduced, you will be notified at least 14 days in advance of the effective date of the changes – a suitable notice of the changes in the Policy will be published at the Online Store, and if you have a registered Account or have signed up for the newsletter, you will also be advised of changes in the Policy by e-mail.
If you do not accept the modified Policy, you may opt out of the Policy, thus refusing to leave your personal data with us any longer.
The website of the Online Store uses the Google Analytics plug-in and Google AdWords – it is the so-called tracking code, which indicates the age, sex and location of anyone who enters the website as well as traffic at the Online Store. The data obtained this way are used only for statistical purposes. Personal data used this way are kept for up to 36 months. For specific and updated information about this, go to: http://www.google.pl/intl/pl/policies/technologies/types/
Cookies are small files consisting of a string of letters and characters that are saved on the computer by the Internet server when you visit the Product Page at the Online Store. Cookies are used by the Online Store only to better adapt the website to your individual preferences. Cookies are also used at the Online Store for the following purposes:
The Online Store uses two essential types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on your terminal device until you log out, leave the website of the Online Store or close your software (web browser). Persistent cookies are stored on your terminal device for the period specified in their parameters or until you delete them.
The information collected and generated by cookies at the Online Store does not enable your personalisation and identification, and its use does not result in the keeping of any of your personal data. Cookies used at the Online Store are safe and do not harm your computer.
By using the Online Store, you consent to use the cookies according to this Policy.
You are requested to promptly notify the Seller of any identified breaches of the security rules connected with the use of the Online Store by e-mail: firstname.lastname@example.org or by phone: +48 606 987 555.
1st February 2021