§ 4. Privacy policy

The Customers' personal data Controller is Patrycja Guzik who conducts economic activity under the name of PAT GUZIK Patrycja Guzik, postal address: 30-328 Kraków Praska 28a/5, e-mail address: pat.guzik@gmail.com

1. The Controller processes personal data in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 r. on the protection of natural persons regarding the processing of their personal data and on the free movement of such data, and to the repealing Directive 95/46/EC (GDPR). The Controller has taken appropriate technical and organisational measures to ensure an appropriate level of security in relation to the risks of infringing the rights or freedoms of Customers who are natural persons.

2. Only personal data voluntarily provided by the Customer is collected.

3. The data is processed in order to perform the provisions of the Sale Agreement, in particular to:

   a) conclude an agreement for the sale of goods ordered,b) confirm the conclusion of the sale agreement,

c) deliver the ordered goods to the Customer,

d) issue a document confirming the sale of goods transaction,

e) contact current customers to manage their order.

The above data processing shall be carried out in accordance with article 6 paragraph 1 b) of the GPDR.

1. The Controller shall process the Customer's data to the extent that it is necessary in order to fulfil its legal obligations, in particular:

    

a) the archiving of financial documents arising from the concluded agreement, for a period of limitations on tax liabilities.

b) the handling of complaints and any legal measures to which the Customer is entitled in relation to the concluded agreement, for the duration of these entitlements and one year after they expire.

The above data processing shall be carried out in accordance with article 6 paragraph 1 c) of the GPDR.

1. The Controller shall process the Customer's data for the purposes of its legitimate interests including: 

    

a) direct marketing in the form of presenting the Shop's commercial offers and other marketing information related to the Shop to the Customer (sending commercial information in electronic form and using communication terminal equipment and automated call systems is only possible with the Customer's consent), until the Customer submits an objection to the processing of his/her personal data or withdraws his/her consent, whichever occurs first,

b) storing of personal data and documentation related to the agreement concluded by the Customer for a limited period in the Customer database for the purpose of civil law claims which may arise from the agreement,

c) seeking redress in relation to the concluded agreement, until proceedings in relevant courts and institutions are lawfully completed, including enforcement proceedings,

d) running statistical analysis of the Shop's operations and agreements, which enables the Shop to improve its operation, as long as the Controller has other additional lawful reasons for the data processing – if these additional reasons are no longer applicable, the data shall be anonymized.

The above data processing shall be carried out in accordance with article 6 paragraph 1 f) of the GPDR.

1. If subscribing to the newsletter, it is only necessary to provide an e-mail address to which commercial information from the Controller shall be sent. The Customer may withdraw consent to receiving such information at any time, by clicking on the link to cancel the subscription that can be found in the footnote of each newsletter.

    

2. Data provided when placing an order is also processed by the following operators dealing with deliveries: DPD Polska sp. z o.o. with its registered office in Warszawa, Poczta Polska S.A. with its registered office in Warszawa (depending on the Customer's choice). Processed data includes: name and surname, telephone number, e-mail address and address provided for delivery purposes. They are given to the above companies in the form of a shipping label which also acts as a delivery order.

    

3. The Customer has the right to access his/her personal data, correct it and transmit it. Detailed information about this can be found in article 16, article 19 and article 20 of GPDR, available at the address: https://eurlex.europa.eu/legalcontent/PL/TXT/?uri=CELEX%3A32016R0679.

    

4. The Customer has the right to request deletion of his/her personal data from the Controller's database („right to be forgotten”), in particular when one of the following applies:

    

a) the personal data is no longer needed for the purposes, for which it was collected or otherwise processed,

b) the Customer's personal data was processed only on the basis of his/her consent, and the Customer has withdrawn this consent,

c) personal data has been unlawfully processed

Detailed information about this can be found in article 17 of GPDR, available at the address:: https://eurlex.europa.eu/legalcontent/PL/TXT/?uri=CELEX%3A32016R0679.

1. The Customer has the right to obtain a restriction of the data processing from the controller where one of the following applies:

    

a) the accuracy of the personal data is contested by the Customer, for a period enabling the controller to verify the accuracy of the personal data,

b) the processing is unlawful and the Customer opposes the erasure of the personal data and requests a restriction of its use instead,

c) the Controller no longer needs the personal data for processing purposes , but it is required by the Customer for the establishment of, exercise of or defence of legal claims,

d) the Customer has objected to the processing in accordance with Article 4 (12) of these Terms of Use pending verification of whether the legitimate grounds of the controller override those of the data subject.

1. Where the processing of personal data is based on the legitimate interests pursued by the Controller, the Customer has the right to object at any time, on grounds relating to his/her particular situation. After the objection is submitted, the Controller can no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment of, exercise of or defence of legal claims.

    

2. Where personal data is processed for direct marketing purposes, the Customer shall have the right to object to the processing of personal data concerning him/her for such marketing at any time. This includes profiling to the extent that it is related to such direct marketing.

    

3. The Customer can send his/her request for the execution of his/her rights referred to in § 4. 9-13 by e-mail or post to the addresses indicated in § 4 .1 and § 1.3. 

    

4. The Controller will inform the Customer of the action taken on the request without undue delay – and in any event within one month of receipt of the request. That period may be extended by two further months, depending on the complexity and number of the requests. The Controller will inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay. Where the data subject makes the request by means of an electronic form, the information shall be provided by electronic means where possible, unless otherwise requested by the data subject.

    

5. The Customer has the right to lodge a complaint to the President of the Office for Personal Data Protection, if in his/her opinion the data processing infringes the GPDR.

    

6. The Customer's data may be transmitted to the subjects that provide the Controller with accounting, IT, hosting, marketing and e-mail services, as well CRM (Customer Relations Management) services.

    

7. The Controller informs the Customer that he/she has no obligation to provide his/her personal data, however refusal to provide such data will make it impossible to properly provide the Customer with the services set forth in these Terms of Use and to execute the agreement concluded between the Shop and the Customer.

    

8. For the proper functioning of the service and to supply services of the highest possible quality, the online shop software uses so-called „cookies”. When the Customer visits the Shop, the system sends at least one cookie file to the Customer's computer in order to unambiguously identify the browser. The Shop’s server automatically registers information sent by the Customer's browser when displaying the website. Server logs may include such information as network request, IP address, browser type and language, date and time of sending a request. This information allows us to improve the quality of our services through identifying and storing Customers' preferences and tracking trends, such as the ways in which our website is searched.

    

9. „Cookies” are pieces of digital data, particularly text files, stored on users’ terminal devices, and are intended for use on the website. These files allow a website to recognize the User's device and show him/her the website adapted to his/her individual preferences. „Cookies” usually contain the name of the website from which they come, the period for which they are stored on the terminal device, and a unique number. „Cookies” files are used to adapt the content of websites to the User's preferences, to make services easier to use and to optimize the use of websites. They are also used to create statistics, excluding the personal identification of the user, which makes it possible to improve the website's structure and content.

    

10. If you browse this website without changing your cookie settings, cookies will be sent to the user's terminal device. The Customer may refuse to receive cookie files, thereby remaining anonymous, however as a result of the refusal to register cookies, the Shop will not be able to identify the Customer or his/her preferences. Detailed information about cookies can be found in the Cookie Policy available in the Cookies tab. The Customer can change the cookie settings at any time.

     

11. At sklep.pat-guzik.com the following types of „cookie” files are used: a) persistent „cookies” – files which are stored on the user's device for a period of time, specified by parameters in the cookie file, or until they are deleted by the Customer, b) session cookies – temporary files which are stored on the user's device until the Customer logs out or switches off the software (internet browser)

     

12. „Cookie” files used by integrated partners of the online shop, including in particular website users, are subject to their own privacy policy (e.g. Google).

     

13. Information about the rules and ways of recording, securing and making the content of the concluded agreement available to the other party:

     

1. 1. the content of the agreement will be recorded, secured and made available by sending an appropriate email after entering into the Sale Agreement;

       

   2. the content of the agreement will be recorded, secured and made available by sending the text of the concluded agreement to the email address provided by the Customer or by providing the Customer with the Order Specification and sale confirmation;

       

   3. the text of the concluded agreement will also be recorded and secured in the Shop's IT system and made available to the Customer on request.