Privacy Policy
ONLINE STORE SKLEP24IP - PRIVACY POLICY
(RULES OF PERSONAL DATA PROCESSING)
GENERAL PROVISIONS
The Administrator of the personal data collected within the scope of the online store available at www.sklep24ip.pl (Online Store) is PS SERWIS with its registered seat in Poland, in Świdnica (58-100), 16 Niepodległości Avenue, Tax Identification Number: PL8841013063.
Administrator's contact details: kontakt@sklep24ip.pl, tel. +48 221 221 022.
This Privacy Policy sets out the principles concerning the processing of personal data by the Administrator in the Online Store, including the grounds, purposes and scope of personal data processing and the rights of data subjects.
Personal data are processed by the Administrator in accordance with applicable laws, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: RODO).
Personal data is provided by the user within the Online Store voluntarily, but in certain cases it is necessary to do so in order to perform a contract concluded within the Online Store or to fulfill the Administrator's statutory requirements.
We take special care to protect the interests of the persons whose personal data we process, in particular, we ensure that the processing of data takes place for a period no longer than necessary to achieve the purpose of processing, bearing in mind the security of personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage, by means of appropriate technical and organizational measures.
RIGHTS OF THE DATA SUBJECT
In accordance with the RODO Regulation, you have:
Right of access, rectification, restriction, erasure or portability - The data subject has the right to request from the Controller access to his/her personal data, rectification, erasure (right to be forgotten) or restriction of processing, and has the right to object to processing, and has the right to portability of his/her data.
The right to withdraw consent at any time - a person whose data is processed by the Administrator on the basis of expressed consent has the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
Right to lodge a complaint - a person whose data is processed by the Administrator has the right to lodge a complaint with the President of the Office for Personal Data Protection (supervisory authority).
Right to object - the data subject has the right to object at any time to the processing of personal data concerning him/her based on the legitimate interests of the Controller, including profiling. In such case, the Controller shall no longer be allowed to process such personal data, unless the Controller demonstrates the existence of compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for establishing, asserting or defending claims.
Right to object to direct marketing - if personal data are processed for the purposes of direct marketing, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, including profiling, to the extent that the processing is related to such direct marketing.
Importantly, you are not entitled to all of the rights indicated above in every case, and the RODO indicates when you may exercise a particular right.
In order to exercise the above-mentioned rights, you may contact the Administrator by sending an appropriate message in writing or by e-mail to the Administrator at the data indicated in point. I of the Privacy Policy or by using the contact form available on the website of the Online Store.
BASIS, PURPOSE AND SCOPE OF DATA PROCESSING
The Administrator is authorized to process personal data in cases where, and to the extent that, at least one of the following conditions is met:
the data subject has consented to the processing of his or her personal data for one or more specified purposes;
processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract;
processing is necessary for the fulfillment of a legal obligation incumbent on the Controller;
processing of personal data is necessary for purposes arising from legitimate interests pursued by the Controller or by a third party.
Each time the Administrator processes personal data, at least one of the grounds indicated in paragraph 1 above must be present.
Each time, the purpose, basis, period and scope, as well as recipients of personal data processed by the Administrator results from actions taken by the Customer in the Online Store.
The Administrator may process personal data in the Online Store for the following purposes, on the following grounds, for the following periods and to the following extent:
Purpose of data processing
Legal basis for processing
and period of data storage
Scope of the processed data
Performance of a contract or taking
action at the request of the data subject
Data subject, prior to the conclusion of the aforementioned contracts.
Art. 6(1)(b) RODO (performance of a contract).
Data shall be kept for the period necessary for the execution, termination or otherwise expiration of the concluded contract.
Maximum scope: first and last name; e-mail address; contact telephone number; delivery address (street, house number, apartment number, postal code, city, country), residential/business/site address (if different from delivery address), company name, TIN
Direct marketing
Art. 6(1)(f) RODO (legitimate interest of the administrator).
Data is kept for the period of
the existence of a legitimate interest pursued by the Administrator, but not longer than the period of the statute of limitations for claims
in relation to the data subject on account of the Administrator's business activity.
Administrator's business activities.
E-mail address
Marketing (in case the user has given his/her consent to processing in this regard)
Art. 6(1)(a) RODO (consent).
Data is stored until the data subject withdraws consent to further processing of
His/her data for this purpose.
Name, email address
Maintenance of tax books
Article 6(1)(c) RODO in conjunction with Article 86 § 1 of the Tax Ordinance.
Data shall be kept for the period required by law mandating the Administrator to keep tax books (until the expiration of the statute of limitations on tax liability, unless otherwise provided by tax laws)
First and last name, address of residence/business/residence (if different from the delivery address), company name, TIN
Determination, investigation or defense of claims that the Administrator may raise or that may be raised against the Administrator
Art. 6(1)(f) RODO.
Data shall be kept for the period of existence of the legitimate interest pursued by the Administrator, but no longer than the period of the statute of limitations for claims against the data subject from the Administrator's business activities.
First and last name, contact telephone number, e-mail address, delivery address (street, house number, apartment number, postal code, city, country), address of residence / business / registered office (if different from the delivery address), company name, NIP
RECIPIENTS OF DATA IN THE ONLINE STORE SKLEP24IP
For the proper functioning of the Online Store, including the execution of contracts concluded with you, it is necessary for the Administrator to use the services of external entities, such as, for example, a courier company, a transport company, an entity handling online payments, a software provider or an entity servicing equipment).
The Administrator uses only such processors that provide sufficient guarantees to implement appropriate technical and organizational measures so that the processing meets the requirements of the RODO and protects the rights of data subjects.
Importantly, the transfer of data by the Administrator does not take place in every case and not to all recipients or categories of recipients indicated in the Privacy Policy - the Administrator transfers data only when it is necessary for the realization of a given purpose of personal data processing and only to the extent necessary for its realization.
Personal data of the Customers of the Online Store may be transferred to the following recipients or categories of recipients:
Couriers, carriers, transport companies and companies participating in the shipping process - in the case of a Customer who uses the method of delivery by mail or courier service in the Online Store, the Administrator shall make the collected personal data of the Customer available to the selected entity performing the shipment on behalf of the Administrator to the extent necessary to complete the order for the Customer;
Entities handling electronic or credit card payments - in the case of a Customer who uses an electronic or credit card payment method in the Online Store, the Administrator makes the collected personal data of the Customer available to a selected entity handling the above payments in the Online Store on behalf of the Administrator to the extent necessary to handle the payment made by the Customer. It may also happen that the user, in order to make a payment, will be redirected to the website of a third party. In this case, we recommend that you familiarize yourself with the privacy policy of such an entity;
Providers of IT and technical services to the Administrator - in such cases, the Administrator shall make the collected personal data of the Customer available to the selected provider acting on its behalf only in the case and to the extent necessary to realize the given purpose of data processing in accordance with this Privacy Policy;
Accounting, legal and consulting service providers - providing accounting, legal or consulting support to the Administrator. In such cases, the Administrator shall make the collected personal data of the Customer available to the selected provider acting on its behalf only in the case of and to the extent necessary to realize the given purpose of data processing in accordance with this Privacy Policy.
PROFILING IN THE ONLINE STORE
We may use profiling on the Online Store for direct marketing purposes, but the decisions we make on the basis of profiling do not relate to the conclusion or refusal of a contract or the fulfillment of an order.
The effect of the use of profiling in the Online Store may be, for example, to grant a person a discount or to send shopping suggestions that may match the person's preferences, with the person deciding in any case whether to take advantage of the suggestions received.
Profiling in the Online Store consists of automatic analysis or prediction of a person's behavior on the Online Store website, e.g. by adding a specific product to the shopping cart, browsing the page of a specific Product in the Online Store, or by analyzing the previous history of purchases made in the Online Store.
The condition for such profiling is that the Administrator has the personal data of the person in question in order to be able to subsequently send him/her, for example, a discount code.
The data subject has the right not to be subject to a decision which is based solely on automated processing, including profiling, and which produces legal effects with respect to the data subject or similarly significantly affects the data subject.
COOKIES, GOOGLE ANALYTICS, ANALYTICS TOOLS
Cookies are small pieces of information in the form of text files, sent by a server and stored on the side of the person visiting the website of the Online Store (e.g. on the hard drive of a computer or on the memory card of a mobile device.
We may process the data contained in Cookies when visitors use the Online Store website for the following purposes: (i) identifying Customers as logged in to the Online Store, (ii) remembering products added to the shopping cart, (iii) remembering data from completed forms, surveys or login data, or (iv) keeping anonymous statistics of the Online Store.
Everyone has the ability to determine the conditions of use of cookies through the settings of their own web browser (to restrict or disable the storage of cookies).
The settings of your Internet browser regarding Cookies are important in terms of your consent to the use of Cookies by our Online Store - such consent can also be expressed through the settings of your Internet browser. In the absence of such consent, you should change your Internet browser settings regarding Cookies accordingly.
(RULES OF PERSONAL DATA PROCESSING)
GENERAL PROVISIONS
The Administrator of the personal data collected within the framework of the online store available at www.sklep24ip.pl (Online Store) is PS SERWIS with its registered seat in Poland, Świdnica (58-100), 16 Niepodległości Avenue, NIP number: 8841013063.
Administrator's contact details: kontakt@sklep24ip.pl, tel. +48 221 221 022.
This Privacy Policy sets out the rules regarding the Administrator's processing of personal data in the Online Store, including the grounds, purposes and scope of personal data processing and the rights of data subjects.
Personal data are processed by the Administrator in accordance with applicable laws, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: RODO).
Personal data is provided by the user within the Online Store voluntarily, but in certain cases it is necessary to do so in order to perform a contract concluded within the Online Store or to fulfill the Administrator's statutory requirements.
We take special care to protect the interests of the persons whose personal data we process, in particular, we ensure that the processing of data takes place for a period no longer than necessary to achieve the purpose of processing, bearing in mind the security of personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage, by means of appropriate technical and organizational measures.
RIGHTS OF THE DATA SUBJECT
In accordance with the RODO Regulation, you have:
Right of access, rectification, restriction, erasure or portability - The data subject has the right to request from the Controller access to his/her personal data, rectification, erasure (right to be forgotten) or restriction of processing, and has the right to object to processing, and has the right to portability of his/her data.
The right to withdraw consent at any time - a person whose data is processed by the Administrator on the basis of expressed consent has the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
Right to lodge a complaint - a person whose data is processed by the Administrator has the right to lodge a complaint with the President of the Office for Personal Data Protection (supervisory authority).
Right to object - the data subject has the right to object at any time to the processing of personal data concerning him/her based on the legitimate interests of the Controller, including profiling. In such case, the Controller shall no longer be allowed to process such personal data, unless the Controller demonstrates the existence of compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for establishing, asserting or defending claims.
Right to object to direct marketing - if personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, including profiling, to the extent that the processing is related to such direct marketing.
Importantly, you are not entitled to all of the rights indicated above in every case, and the RODO indicates when you may exercise a particular right.
In order to exercise the above-mentioned rights, you may contact the Administrator by sending an appropriate message in writing or by e-mail to the Administrator at the data indicated in point. I of the Privacy Policy or by using the contact form available on the website of the Online Store.
BASIS, PURPOSE AND SCOPE OF DATA PROCESSING
The Administrator is authorized to process personal data in cases where, and to the extent that, at least one of the following conditions is met:
the data subject has consented to the processing of his or her personal data for one or more specified purposes;
processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract;
processing is necessary for the fulfillment of a legal obligation incumbent on the Controller;
processing of personal data is necessary for purposes arising from legitimate interests pursued by the Controller or by a third party.
Each time the Administrator processes personal data, at least one of the grounds indicated in paragraph 1 above must be present.
Each time, the purpose, basis, period and scope, as well as recipients of personal data processed by the Administrator results from actions taken by the Customer in the Online Store.
The Administrator may process personal data in the Online Store for the following purposes, on the following grounds, for the following periods and to the following extent:
Purpose of data processing
Legal basis for processing
and period of data storage
Scope of the processed data
Performance of a contract or taking
action at the request of the data subject
data subject, prior to the conclusion of the aforementioned contracts.
Art. 6(1)(b) RODO (performance of a contract).
Data shall be kept for the period necessary for the execution, termination or otherwise expiration of the concluded contract.
Maximum scope: first and last name; e-mail address; contact telephone number; delivery address (street, house number, apartment number, postal code, city, country), address of residence/business/site (if different from delivery address), company name, TIN
Direct marketing
Art. 6(1)(f) RODO (legitimate interest of the administrator).
Data is kept for the period of
the existence of a legitimate interest pursued by the Administrator, but not longer than the period of the statute of limitations for claims
in relation to the data subject on account of the Administrator's business activity.
Administrator's business activities.
E-mail address
Marketing (in case the user has given his/her consent to processing in this regard)
Art. 6(1)(a) RODO (consent).
Data is stored until the data subject withdraws consent to further processing of
His/her data for this purpose.
Name, email address
Maintenance of tax books
Article 6(1)(c) RODO in conjunction with Article 86 § 1 of the Tax Ordinance.
Data shall be kept for the period required by law mandating the Administrator to keep tax books (until the expiration of the statute of limitations on tax liability, unless otherwise provided by tax laws)
First and last name, address of residence/business/residence (if different from the delivery address), company name, TIN
Determination, investigation or defense of claims that the Administrator may raise or that may be raised against the Administrator
Art. 6(1)(f) RODO.
Data shall be kept for the period of existence of the legitimate interest pursued by the Administrator, but no longer than the period of the statute of limitations for claims against the data subject from the Administrator's business activities.
First and last name, contact telephone number, e-mail address, delivery address (street, house number, apartment number, postal code, city, country), address of residence / business / registered office (if different from the delivery address), company name, NIP
RECIPIENTS OF DATA IN THE ONLINE STORE SKLEP24IP
For the proper functioning of the Online Store, including the execution of contracts concluded with you, it is necessary for the Administrator to use the services of external entities, such as, for example, a courier company, a transport company, an entity handling online payments, a software provider or an entity servicing equipment).
The Administrator uses only such processors that provide sufficient guarantees to implement appropriate technical and organizational measures so that the processing meets the requirements of the RODO and protects the rights of data subjects.
Importantly, the transfer of data by the Administrator does not take place in every case and not to all recipients or categories of recipients indicated in the Privacy Policy - the Administrator transfers data only when it is necessary for the realization of a given purpose of personal data processing and only to the extent necessary for its realization.
Personal data of the Customers of the Online Store may be transferred to the following recipients or categories of recipients:
Couriers, carriers, transport companies and companies participating in the shipping process - in the case of a Customer who uses the method of delivery by mail or courier service in the Online Store, the Administrator shall make the collected personal data of the Customer available to the selected entity performing the shipment on behalf of the Administrator to the extent necessary to complete the order for the Customer;
Entities handling electronic or credit card payments - in the case of a Customer who uses an electronic or credit card payment method in the Online Store, the Administrator makes the collected personal data of the Customer available to a selected entity handling the above payments in the Online Store on behalf of the Administrator to the extent necessary to handle the payment made by the Customer. It may also happen that the user, in order to make a payment, will be redirected to the website of a third party. In this case, we recommend that you familiarize yourself with the privacy policy of such an entity;
Providers of IT and technical services to the Administrator - in such cases, the Administrator shall make the collected personal data of the Customer available to the selected provider acting on its behalf only in the case and to the extent necessary to realize the given purpose of data processing in accordance with this Privacy Policy;
Accounting, legal and consulting service providers - providing accounting, legal or consulting support to the Administrator. In such cases, the Administrator shall make the collected personal data of the Customer available to the selected provider acting on its behalf only in the case of and to the extent necessary to realize the given purpose of data processing in accordance with this Privacy Policy.
PROFILING IN THE ONLINE STORE
We may use profiling on the Online Store for direct marketing purposes, but the decisions we make on the basis of profiling do not relate to the conclusion or refusal of a contract or the fulfillment of an order.
The effect of the use of profiling in the Online Store may be, for example, to grant a person a discount or to send shopping suggestions that may match the person's preferences, with the person deciding in any case whether to take advantage of the suggestions received.
Profiling in the Online Store consists of automatic analysis or prediction of a person's behavior on the Online Store website, e.g. by adding a specific product to the shopping cart, browsing the page of a specific Product in the Online Store, or by analyzing the previous history of purchases made in the Online Store.
The condition for such profiling is that the Administrator has the personal data of the person in question in order to be able to subsequently send him/her, for example, a discount code.
The data subject has the right not to be subject to a decision which is based solely on automated processing, including profiling, and which produces legal effects with respect to the data subject or similarly significantly affects the data subject.
COOKIES, GOOGLE ANALYTICS, ANALYTICS TOOLS
Cookies are small pieces of information in the form of text files, sent by a server and stored on the side of the person visiting the website of the Online Store (e.g. on the hard drive of a computer or on the memory card of a mobile device.
We may process the data contained in Cookies when visitors use the Online Store website for the following purposes: (i) identifying Customers as logged in to the Online Store, (ii) remembering products added to the shopping cart, (iii) remembering data from completed forms, surveys or login data, or (iv) keeping anonymous statistics of the Online Store.
Everyone has the ability to determine the conditions of use of cookies through the settings of their own web browser (to restrict or disable the storage of cookies).
The settings of your Internet browser regarding Cookies are important in terms of your consent to the use of Cookies by our Online Store - such consent can also be expressed through the settings of your Internet browser. In the absence of such consent, you should change your Internet browser settings regarding Cookies accordingly.