PRIVACY AND COOKIES POLICY
1. This Privacy Policy (hereinafter referred to as the " Policy ") is addressed to users of the website available in the domain www.pm.com.pl (hereinafter referred to as the " Online Store ") and defines the type, scope, methods of using data and protection of personal data. The policy is informative and constitutes an integral part of the regulations of the Online Store. All terms used in the Policy written with a capital letter have the same meaning as assigned to them in the regulations of the Online Store, unless otherwise provided in this Policy.
2. The administrator of personal data obtained from Users and Orderers using the Online Store is the Seller, i.e. Mrs. Mariola Kubiak, running a sole proprietorship under the name Kubiak Mariola PPHU P & M at the address: ul. Tomaszowska 22H, 96-200 Rawa Mazowiecka, NIP: 835-112-69-08, REGON 750187472, entered into the Central Register and Information on Economic Activity of the Republic of Poland, contact phone number +48 504 287 478, email: biuro@pm.com .pl (hereinafter also referred to as " Personal data administrator " or " Seller ").
3. By placing an Order via the Online Store without registering the Orderer's Account, and/or by registering the Orderer's Account, and/or by contacting the Seller (by e-mail or by phone), and/or using other services provided by the Seller electronically, as indicated in Chapter III of the Regulations Online Store - provides the Seller with his personal data (name, address, email address, telephone number, possibly company name, business address, tax identification number, IP address of the computer used by the User when using the Online Store).
4. Purposes and activities of personal data processing:
4.1. placing an Order without registering the Orderer's Account - providing data is voluntary, but necessary for the performance of the Sales Agreement and the delivery of the Order. The data provided when placing the Order are used to implement the Sales Agreement concluded with the Ordering Party, and the legal basis for their processing is Art. 6 sec. 1 lit. b) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation data) (hereinafter referred to as the " GDPR Regulation "). The data will be processed by the Personal Data Administrator for the period necessary to perform the Sales Agreement, however, the Personal Data Administrator will still store the Ordering Party's data in order to defend against any claims related to withdrawal from the Sales Agreement, consideration of complaints, for the purposes of tax settlements, which is the Administrator's legitimate interest personal data referred to in art. 6 sec. 1. lit. f) GDPR Regulations. The user can correct his data at any time. The user also has the right to transfer data referred to in art. 20 of the GDPR;
4.2. registration of the Orderer's Account - the User may register the Orderer's Account in order not to provide personal data during subsequent purchases. Providing data is voluntary, but necessary to register the Ordering Party's Account. The data provided during registration is used to maintain the Orderer's Account and perform the Sales Agreements concluded by the User, and the legal basis for their processing is the consent given by the User during the registration of the Orderer's Account (in accordance with Article 6(1)(a) of the GDPR Regulation). The data will be processed by the Personal Data Administrator for the duration of the Ordering Party's Account, unless the Online Store User resigns from having it earlier. However, resignation from the Customer's Account does not lead to the removal of data from the database. The personal data administrator will continue to store the User's data in order to defend against any claims related to the maintenance of the Ordering Party's Account, in particular for the purposes of demonstrating the User's consent to registration, which is the legitimate interest of the personal data Administrator referred to in art. 6 sec. 1. lit. f) GDPR Regulations. The user can correct his data at any time. The user also has the right to transfer data referred to in art. 20 of the GDPR;
4.3. contact of the Online Store User with the Administrator of personal data - by contacting via e-mail, by phone, the User provides the Administrator of personal data with his e-mail address as the address of the sender of the message, his name and surname, contact telephone number and address. Providing data is voluntary, but necessary for the Administrator of personal data to be able to contact the User of the Online Store. In this case, the User's data is processed in order to contact the Personal Data Administrator, based on the activities requested and initiated by the User, and the basis for processing is art. 6 sec. 1 lit. b) GDPR Regulations. The legal basis for data processing after the end of contact is the justified purpose of archiving correspondence for the purpose of demonstrating its course in the future (Article 6(1)(f) of the GDPR Regulation). The content of the correspondence may be archived, the Personal Data Administrator is not able to clearly determine when the correspondence will be deleted. The Online Store User has the right to request a history of correspondence he conducted with the Personal Data Administrator (if it was subject to archiving), as well as to demand its removal, unless archiving is justified due to the overriding interest of the Personal Data Administrator, e.g. claims on the part of the Online Store User;
4.4. using the services provided by the Seller electronically, consisting in sending by the Seller by e-mail a reminder of the Password to the Orderer's Account, saving the Goods on the wish list or in the storage room - providing data is voluntary, but necessary in order to perform the contract for the provision of electronic services by the Seller selected by service user. The data provided when using the selected service is used to implement the contract concluded with the User (e.g. to remind the User of the Password to the Ordering Party Account), and the legal basis for their processing is the performance of the contract concluded with the User, in accordance with art. 6 sec. 1 lit. b) GDPR Regulations. The data will be processed by the Personal Data Administrator for the period necessary to perform the contract for the provision of electronic services. After the contract is performed, the Personal Data Administrator will continue to store the User's data in order to defend against any claims regarding the services provided by the Seller electronically, to consider complaints, which is the legitimate interest of the Personal Data Administrator referred to in art. 6 sec. 1. lit. f) GDPR Regulations. The user can correct his data at any time. The user also has the right to transfer data referred to in art. 20 of the GDPR;
4.5. newsletter - the Online Store User who wants to subscribe to the newsletter, in order to receive commercial information from the Personal Data Administrator by e-mail, must provide his e-mail address via the newsletter subscription form or when placing the Order, tick the appropriate check-box with consent. Providing data is voluntary, but necessary to subscribe to the newsletter. The data provided when subscribing to the newsletter is used to send the newsletter to the User, and the legal basis for their processing is the consent given by the User when subscribing to the newsletter (in accordance with Article 6(1)(a) of the GDPR Regulation. The data will be processed by the Administrator of personal data for the duration of the newsletter, unless the User of the Online Store resigns from receiving it earlier. However, resignation from receiving the newsletter does not lead to the removal of data from the database. The personal data administrator will continue to store the User's data in the mailing system in order to defend against any claims related to sending the newsletter, in particular for the purpose of demonstrating the User's consent to receive the newsletter, which is the legitimate interest of the personal data Administrator referred to in art. 6 sec. 1. lit. f) GDPR Regulations. The user may at any time correct his data stored in the newsletter database. The user also has the right to transfer data referred to in art. 20 of the GDPR;
4.6. transfer of the User's personal data to ING Bank Śląski SA (" Bank ") in connection with:
a. provision by the Bank to the Seller in the Online Store of the service of providing infrastructure for handling payments via the Internet (service imoje.pl) - the legal basis is art. 6 sec. 1 lit. f) GDPR Regulations;
b. handling and settlement by the Bank of payments made by Orderers in the Online Store via the Internet using payment instruments - the legal basis is art. 6 sec. 1 lit. f) GDPR Regulations;
c. in order for the Bank to verify the proper performance of contracts concluded with the Seller via the Online Store, in particular to ensure the protection of payers' interests in connection with their complaints - the legal basis is art. 6 sec. 1 lit. f) GDPR Regulations.
In the case of transferring the User's personal data to the Bank in connection with the handling and settlement of payments made by the Ordering Party for payments to the Seller in the Online Store via the Internet using payment instruments, providing the data is required in order to make the payment and provide confirmation of its execution by the Bank to the seller.
In the case of transferring the User's personal data to the Bank in order for the Bank to verify the proper performance of contracts concluded with the Seller via the Online Store, in particular to ensure the protection of payers' interests in connection with their complaints, providing these data is required to enable the performance of the contract concluded between the Seller and the Bank.
4.7. transfer of the User's personal data to Twisto Polska sp. z oo in connection with the possibility of proposing payment for the purchased Goods by Twisto Polska sp. z oo under the contract of mandate covering the purchase formula "Buy with Twisto" and making this purchase formula available by the Seller in the Online Store and for the purpose of verification by Twisto Polska Sp. z o. o. for the proper performance of such mandate contracts (the legal basis is Article 6(1)(f) of the GDPR Regulation). In the case of providing personal data in order to transfer them to Twisto Polska sp. z o. o. before concluding the contract for the sale of Goods purchased in the Online Store, the provision of such data is a condition for concluding the Sales Agreement in connection with the business model adopted by the Online Store. In the case of transferring the User's personal data to Twisto Polska sp. z oo in connection with the possibility of offering the User to pay the price for the Goods purchased by him available in the Online Store by Twisto Polska sp. and making this formula available by the Seller in the Online Store, providing this data and processing it for this purpose is required in connection with the business model adopted by the Seller in the Online Store and in order to perform the contract concluded between the Seller and Twisto Polska sp. z o. o.
5. The personal data administrator may also use the personal data of the Online Store User in order to implement other personal data incumbent on the Administrator, e.g. to pursue claims arising from Sales Agreements, pursuant to art. 6 sec. 1 lit. f) and Art. 9 sec. 2 lit. h) Regulations of the GDPR - for periods of limitation of claims, specified in the law.
6. The personal data administrator informs that the Online Store User has, at any time, the right to transfer data, the right to access the content of personal data and the possibility of correcting them, objecting to data processing, and the consent to data processing may be granted by the Store User website revoked at any time. Withdrawal of consent does not affect the lawfulness of the processing that was made on the basis of consent before its withdrawal. The personal data administrator may refuse to delete the User's personal data if there are premises resulting from the law. The user also has the right to lodge a complaint regarding the processing of personal data to the President of the Office for Personal Data Protection. The rules related to the implementation of the indicated rights are described in detail in Art. 16 - 21 of the GDPR Regulation. Data of Online Store Users and Orderers will not be subject to automated decision making, including profiling.
7. The personal data administrator hereby also informs that he never transfers, sells or lends the collected personal data of Users and Orderers in the Online Store to third parties other than those indicated in this Policy, unless with the express consent or at the request of the User or Orderer, or at the request of state authorities authorized under the law in connection with pending proceedings (e.g. law enforcement authorities, Trade Inspection).
8. The personal data administrator processes personal data provided by the User or Ordering Party in a manner consistent with the scope of the granted permission and legal requirements, including the provisions of the GDPR Regulation, in particular, it protects the personal data of Users and Ordering Parties against disclosure to unauthorized persons, loss or damage, guaranteeing and the confidentiality of any personal data provided to him. The personal data administrator undertakes to make every effort to ensure proper protection of personal data provided to him by the User.
9. Personal data provided to the Administrator will not be made available to third parties other than those indicated in the regulations available in the Online Store (e.g. companies supplying Goods, banks, companies operating electronic payment systems, accounting company, ING Bank Śląski SA, Twisto Polska sp. o. o., a company providing technical support for the server on which the Online Store is located) for purposes other than those indicated in the Online Store regulations. All entities to which the Personal Data Administrator entrusts the processing of personal data guarantee the use of appropriate measures for the protection and security of personal data required by law.
10. The Online Store website uses the Google Analytics plug-in - the so-called tracking code that indicates age, gender, location of people entering the website and traffic in the Online Store. The data obtained in this way are used only for statistical purposes. Personal data obtained in this way are stored for a maximum of 36 months. At any time, the Online Store User may block the Google Analytics JavaScript code by going to the link: https://tools.google.com/dlpage/gaoptout and following the tips and instructions contained therein.
11. The online store uses "cookies" (cookies), which are used to identify the browser when using the online store, so that it is known which page to display. Cookies do not contain any personal data. By entering the Online Store website, certain information may be placed on the User's computer, which may be in the form of a "cookie" file. Detailed and most up-to-date information on this subject can be found directly on the manufacturer's website http://www.google.pl/intl/pl/policies/technologies/types/
12. "Cookies" are small files consisting of a string of letters and characters, saved on the computer by the Internet server when visiting a given page of the product presented in the Online Store. Cookies are used by the Online Store only to better adapt the website to the User's individual preferences. In addition, "cookies" used in the Online Store can be used for the following purposes:
a) ensuring proper operation and improving the functionality of the Online Store - "cookies" allow access to certain parts of the website, e.g.
b) improving the efficiency and optimization of the operation of the Online Store - "cookies" enable reading information on how Users navigate the website, and thus help to improve its operation;
c) targeting information and promotional content - "cookies" are intended to automatically adjust the content of the Online Store to the User's needs;
d) to prevent sending spam .
13. The information collected and generated by "cookies" in the Online Store does not allow for personalization and identification of the User, and as a result of their use, no personal data of the Online Store User is stored.
14. "Cookies" used in the Online Store are safe and do not have a harmful effect on the User's computer. By using the Online Store, the User agrees to the use of "cookies" in accordance with this Policy. The user may at any time change the way cookies are used by the browser, including blocking or deleting those that come from the Online Store. In most web browsers, you can delete or delete "cookies" from your computer's hard drive, block all sent "cookies" or set a warning before saving such files on the disk. To do this, refer to the user manual or help topics of the web browser you are using. The process of controlling and deleting "cookies" may differ depending on the browser used. Restricting the use of "cookies" may affect some of the functionalities available in the Online Store.
15. The online store contains links to other websites not administered by the Administrator of personal data (e.g. Facebook, Google), therefore it cannot be held responsible neither for the content of these websites nor for the degree of privacy protection implemented by the administrators of these websites. The personal data administrator also informs that this Policy applies only to the Online Store and that after switching to other websites, it is recommended that the User read the privacy policy applicable to a given website before providing their personal data there. When deciding to go to such websites and visit them, the User does so at his own risk.
16. The personal data administrator is entitled to make changes to this Policy for important reasons (e.g. change in the law, change in the rules for placing Orders in the Online Store). In the event of changes, the User will be notified at least 14 days in advance before the date of entry into force of the changes - relevant information about changes to the Policy will be placed in the Online Store, and Users with a registered Ordering Party Account or subscribers to the newsletter - will be notified of changes in Policy also by e-mail.
17. In the absence of acceptance of the amended Policy, the Online Store User has the right to terminate the Policy, and thus refuse to leave their personal data.
18. The User is asked to immediately notify the Personal Data Administrator of any breaches of security rules related to the use of the Online Store found by him. In the event of any questions, comments and requests or suggestions regarding this Policy, a request to provide information about the User, the Ordering Party, information about the data about the User, the Ordering Party in the Online Store, the Administrator of personal data has and for what purposes it processes them - the User or the Ordering Party is asked is to contact the Administrator of personal data by e-mail: biuro@pm.com.pl or by phone: +48 504 28 74 78
Rawa Mazowiecka, 03 October 2019