Privacy & Cookie Policy

This Privacy Policy (hereinafter referred to as the “Policy”) is addressed to Users of the www.studiob3.pl online platform (hereinafter referred to as the “Online Store”). The Policy is provided for information, and it is an integral part of the Terms and Conditions of the Online Store. All capitalised terms used in the Policy have the same meaning as that defined in the Terms and Conditions of the Online Store, unless indicated otherwise in the Policy.

Who is the controller of your personal data?

The personal data controller is Ms Paulina Blachura carrying on business under the name of Paulina Blachura STUDIO B3 at: ul. Jana Zamoyskiego 33/21, 30-519 Kraków, NIP (Tax Identification Number): 6772287453, REGON (National Official Business Register Number): 120754453, e-mail: onlineshop@studiob3.pl, contact phone No.: +48 606 987 555 (hereinafter also referred to as the “Controller” or the “Seller”).

What personal data will be processed?

When you place an Order at the Online Store without Account registration and/or register an account, and/or sign up for the newsletter, and/or contact the Seller (by e-mail, phone or using the contact form in the CONTACT section), and/or use the remaining services provided by the Seller by electronic means as indicated in Chapter III of the Terms and Conditions of the Online Store, you provide your personal data (first name and last name, address, e-mail address, phone number and, where applicable, company name, business address, NIP and the IP address of your computer) to the Seller.

Why and how do we process your personal data?

1. placing an Order without Account registration – providing the data is optional, but it is necessary to perform the Sale Contract and deliver the Products you have ordered. The data provided when you place your Order are used to perform the Sale Contract with you.

The legal basis for processing is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the GDPR).

Your data will be processed by the Seller for the period required to perform the Sale Contract, but the Seller will still keep your data in order to defend against any claims connected with the potential withdrawal from the Contract, consider your complaints or for the purpose of tax payment, which is a legitimate interest of the Controller as referred to in Article 6(1)(f) of the GDPR.

2. Account registration – you may register an Account in order not to have to provide your personal data during subsequent purchases. Providing the data is optional, but it is necessary in order to register an Account. The data you provide during registration are used to maintain your Account and perform your Sale Contracts.

The legal basis for the processing of such data is the consent you give during Account registration (according to Article 6(1)(a) of the GDPR).

The data will be processed by the Seller for as long as your Account is maintained, unless you decide earlier that you no longer want to have an Account. However, the Seller may still keep your data in order to defend against any claims connected with the maintenance of your Account, including, in particular, to prove that you have given your consent to the registration, which is a legitimate interest of the personal data controller as referred to in Article 6(1)(f) of the GDPR.

3. contact with the Seller – when you contact us by e-mail, phone or using the contact form, you provide us with your e-mail address as the address of the sender of the message, your first name and last name and your contact phone number. Providing such data is optional, but it is necessary in order for the Seller to contact you. Your data in this case will be processed to contact you in connection with any actions you request and initiate.

The legal basis for processing is Article 6(1)(b) of the GDPR. The legal basis for processing after the end of our contact with you is the legitimate purpose of archiving the correspondence so that it can be presented in the future (Article 6(1)(f) of the GDPR).

The contents of the correspondence may be archived. The Seller is unable to conclusively state when the correspondence will be removed. You may demand that the history of your correspondence with the Seller be shown to you (if it was archived) or demand that it be removed, unless the archiving of your correspondence is justified by an overriding interest of the personal data controller, e.g., protection against any claims you may make.

4. using the services provided by the Seller by electronic means, where a link is sent to you by e-mail to enable you to reset your Password to the Account – providing the data is voluntary, but it is necessary to perform the contract for the provision of services by electronic means by the Seller. The data you provide when using this services are used to perform the contract signed with you, i.e., to send you a link by e-mail and enable you to reset your current Password to the Account.

The legal basis for processing is the performance of the contract signed with you, according to Article 6(1)(b) of the GDPR.

The data will be processed by the Seller for the period required to perform the contract for the provision of services by electronic means. After the end of the contract, the Seller may still keep your data to defend against any claims concerning the services provided by the Seller by electronic means or consider your complaints, which is a legitimate interest of the personal data controller as referred to in Article 6(1)(f) of the GDPR.

5. newsletter – if you want to sign up to the newsletter to receive commercial, advertising or marketing information from the Seller by e-mail, you have to provide your e-mail address using the form intended for signing up for the newsletter or tick a relevant checkbox with the consent when you place your Order. Providing the data is optional, but it is necessary to sign up for the newsletter. The data provided when you sign up for the newsletter will be used to send the newsletter to you.

The legal basis for processing is the consent you have given when you signed up for the newsletter (according to Article 6(1)(a) of the GDPR).

The data will be processed by the Seller for as long as the newsletter is sent, unless you decide earlier that you no longer want to receive it. However, the Seller may still keep your data in the mailing system in order to defend against any claims connected with the sending of the newsletter, including, in particular, to prove that you have given your consent to receive the newsletter, which is a legitimate interest of the personal data controller as referred to in Article 6(1)(f) of the GDPR.

What rights do you have if you provide your data to the Seller?

You have, at all times, the right to data portability, the right to access your personal data and rectify or correct them and the right to object to data processing, and you may withdraw your consent to data processing at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. The Seller may refuse to erase your personal data if there are reasons to refuse according to the provisions of the law. You also have the right to lodge a complaint against personal data processing with the President of the Personal Data Protection Office.

The conditions under which you may exercise these rights have been described in detail in Articles 16–21 of the GDPR.

Your data will not be subject to automated decision-making, including profiling. Your personal data will also not be transferred outside the European Economic Area.

Can the Seller transfer your data or make them available to anybody?

The Seller never transfers, sells or provides the collected personal data of the Users of the Online Store to third parties other than those indicated in this Policy without an express consent or request of the User or without a request of the state authorities authorised by the law in connection with ongoing proceedings (e.g., law enforcement bodies, Trade Inspectorate).

The Seller processes your personal data in accordance with the extent of your permission and requirements of the law, including the provisions of the GDPR; in particular, the Seller protects your personal data to ensure that they are not provided to unauthorised persons, lost or damaged, and they also guarantee the confidentiality of all provided personal data.

Personal data provided to the Seller will not be disclosed to third parties other than those indicated in the Terms and Conditions of the Online Store (e.g., the administrator of the Facebook social media website, courier company, bank that processes the transfers, companies that process payments using an electronic payment system, accounting company, company providing technical support for the server of the Online Store), for purposes other than indicated in the Terms and Conditions of the Online Store, without your dedicated prior consent.

Can the Seller modify the Privacy Policy?

The Seller may modify this Policy for important reasons (e.g., change of the provisions of the law, change of the operating principles of the Online Store). If any changes are introduced, you will be notified at least 14 days in advance of the effective date of the changes – a suitable notice of the changes in the Policy will be published at the Online Store, and if you have a registered Account or have signed up for the newsletter, you will also be advised of changes in the Policy by e-mail.

If you do not accept the modified Policy, you may opt out of the Policy, thus refusing to leave your personal data with us any longer.

COOKIES:

The website of the Online Store uses the Google Analytics plug-in and Google AdWords – it is the so-called tracking code, which indicates the age, sex and location of anyone who enters the website as well as traffic at the Online Store. The data obtained this way are used only for statistical purposes. Personal data used this way are kept for up to 36 months. For specific and updated information about this, go to: http://www.google.pl/intl/pl/policies/technologies/types/

You may disable the JavaScript Google Analytics code at any time by clicking the following link: https://tools.google.com/dlpage/gaoptout, and you can disable Google AdWords by clicking the following link: https://support.google.com/ads/answer/2662922?hl=pl and following the instructions you find there.

The Online Store uses cookies to identify your browser when you use the Online Store in order to know what site should be displayed. Cookies do not include any personal data. When you access the Online Store, certain information that may have the form of a cookie may be placed on your computer. For specific and updated information about this, go to the website of the developer: http://www.google.pl/intl/pl/policies/technologies/types/

Cookies are small files consisting of a string of letters and characters that are saved on the computer by the Internet server when you visit the Product Page at the Online Store. Cookies are used by the Online Store only to better adapt the website to your individual preferences. Cookies are also used at the Online Store for the following purposes:

1. customising the contents of the web pages of the Online Store to your preferences and improving the way you use the web pages; in particular, these files can be used to identify your Device and correctly display the contents of the Online Store website, customised to your individual needs;
2. creating statistics to help in understanding the way you use the web pages and improve their structure and contents;
3. maintaining your session (after you log in to the Account) to prevent you from having to re-enter your Login and Password on every web page.

The Online Store uses two essential types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on your terminal device until you log out, leave the website of the Online Store or close your software (web browser). Persistent cookies are stored on your terminal device for the period specified in their parameters or until you delete them.

The information collected and generated by cookies at the Online Store does not enable your personalisation and identification, and its use does not result in the keeping of any of your personal data. Cookies used at the Online Store are safe and do not harm your computer.

By using the Online Store, you consent to use the cookies according to this Policy.

You may change the way your browser uses the cookies, including disabling or removing the cookies originating from the Online Store. In most web browsers, you can delete cookies from the hard drive of your computer, disable all cookies sent to you or set a warning before such files are saved on your drive. To do so, read the user manuals or help topics in your web browser. The process for controlling and deleting cookies may differ depending on the browser you use. Restrictions on the use of cookies may affect certain functions available at the Online Store.

Your Online Store also includes links to other websites not administered by the Seller (e.g., Facebook, Instagram, Twitter), and the Seller cannot be responsible for the contents of such websites or for the level of privacy protection by the administrators of these websites. The Seller also informs that this Policy only applies to the Online Store, and, after you go to another page, you should read the relevant privacy policy before providing your personal data. When you decide to go to such websites and visit them, you do so at your own responsibility.

You are requested to promptly notify the Seller of any identified breaches of the security rules connected with the use of the Online Store by e-mail: onlineshop@studiob3.pl or by phone: +48 606 987 555.

1st February 2021