This document specifies the conditions for the processing of personal data (hereinafter also referred to as "data") and cookies in the area of the online store Darmakai.com , run via the website, available at the URL: darmakai.com , hereinafter referred to as the "Store".
TABLE OF CONTENTS
- HOW TO CONTACT THE DATA ADMINISTRATOR
- ON WHAT BASIS WE PROCESS YOUR DATA
- INFORMATION ON THE PROCESSING OF DATA FOR THE CONCLUSION AND IMPLEMENTATION OF CONTRACTS, POSSIBLE PURSUING CLAIMS AND DEFENSE AGAINST THEM
- INFORMATION ON THE PROCESSING OF DATA FOR THE PURPOSE OF SENDING A NEWSLETTER
- INFORMATION ON THE PROCESSING OF DATA FOR THE PURPOSE OF SENDING NOTIFICATIONS
- INFORMATION ON THE PROCESSING OF DATA FOR DIRECT MARKETING
- INFORMATION ON THE PROCESSING OF DATA TO ENSURE SECURITY
- INFORMATION ON THE PROCESSING OF DATA FOR THE NOTIFICATION OF GOODS
- INFORMATION ON DATA RECIPIENTS
- ABSOLUTE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED
- RELATIVE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED
- COOKIES - INTRODUCTION
- DATA ADMINISTRATOR COOKIES
- THIRD PARTY COOKIES
- CONSENT TO THE USE AND MANAGEMENT OF COOKIES
- CURRENT
- LINKS TO OTHER WEBSITES OR SOFTWARE
- CHANGES TO THE PRIVACY POLICY AND COOKIES
§1. HOW TO CONTACT THE DATA ADMINISTRATOR
The administrator of personal data processed as part of the Store is Lustan sp. z oo with its registered office in Rąbień (95-070) at ul. Okręna 18/22, entered into the Register of Entrepreneurs of the National Court Register under the KRS number: 0000064516, NIP: 7260001833 and REGON: 004311613.
The data administrator can be contacted by phone: +48 604 097 230 and using the e-mail address: darmakai@darmakai.com.
§2. ON WHAT BASIS WE PROCESS YOUR DATA
When collecting personal data, we always inform about the legal basis of their processing. It results from the provisions of the GDPR (Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data on the free movement of such data and the repeal of Directive 95/46 / EC - General Data Protection Regulation). When we announce:
- 6 point 1 lit. a) GDPR - this means that we process personal data on the basis of the consent received,
- 6 point 1 lit. b) GDPR - this means that we process personal data because they are necessary to perform the contract or to take action before its conclusion, at the request received,
- 6 point 1 lit. c) GDPR - this means that we process personal data in order to fulfill a legal obligation,
- 6 point 1 lit. f) GDPR - this means that we process personal data in order to perform legitimate interests.
§3. INFORMATION ON THE PROCESSING OF DATA FOR THE CONCLUSION AND IMPLEMENTATION OF CONTRACTS, Possible CLAIMS AND DEFENSE AGAINST THEM
- We may process personal data necessary to perform the contract concluded with you. However, even before its conclusion, we may process personal data necessary to take action at your request. The processing of this data is based on Art. 6 point 1 lit. b) GDPR.
- During the performance of the contract and after its performance, we process the personal data of its party for the purpose of possible consideration of claims and their pursuit. Our legitimate interest is, for example, the possibility of responding to a possible complaint, to which we are obliged under separate provisions of civil law. In this case, we will process personal data based on the legitimate interest, which is the defense against possible claims or their pursuit. The processing of this data is based on Art. 6 point 1 lit. f) GDPR.
- We will store this data for the period necessary to achieve the designated purposes, no later than until the claims under separate legal provisions are time-barred.
- You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, and the right to lodge a complaint with the supervisory authority. In the event of data processing for the purpose set out in point 2, you also have the right to object to their processing.
- Providing this data is voluntary, but failure to provide this data will prevent the conclusion of the contract or its implementation.
- Recipients of this data are: our hosting provider, e-mail service provider, IT service provider, shipping service providers, accounting and invoice processing software provider, advertising service provider, newsletter sending service provider, banking and electronic payment provider, provider of legal, advisory and debt collection services and other service providers that we use for a designated purpose.
§4. INFORMATION ON THE PROCESSING OF DATA FOR THE PURPOSE OF SENDING A NEWSLETTER
- We enable subscribing to the list of our newsletter recipients. If you have used this functionality, we process your personal data for the purpose of sending it. The newsletter may contain advertising, commercial or marketing content.
- The processing of this data is based on your consent and thus art. 6 point 1 lit. a) GDPR.
- You have the right to withdraw your consent at any time. However, the withdrawal of consent does not affect the lawfulness of the earlier data processing.
- We will store your data until your consent is withdrawn. If you never withdraw it, we will process your data until we stop sending the newsletter.
- You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, and the right to lodge a complaint with the supervisory authority.
- Providing this data is voluntary, but failure to provide this data will prevent sending the newsletter.
- The recipients of this data are: our hosting provider, IT service provider, e-mail service provider and newsletter sending service provider.
§5. INFORMATION ON THE PROCESSING OF DATA FOR THE PURPOSE OF SENDING NOTIFICATIONS
- We allow you to subscribe to the list of recipients of our notifications displayed via a web browser. If you have used this functionality, we process your personal data for the purpose of sending it. The notifications may contain advertising, commercial or marketing content.
- The processing of this data is based on your consent and thus art. 6 point 1 lit. a) GDPR.
- You have the right to withdraw your consent at any time. However, the withdrawal of consent does not affect the lawfulness of the earlier data processing.
- We will store your data until your consent is withdrawn. In the event that you never revoke it, we will process your data until we stop sending notifications.
- You can withdraw your consent to data processing in your web browser.
- You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, and the right to lodge a complaint with the supervisory authority.
- Providing this data is voluntary, but failure to provide this data will prevent sending notifications.
- Recipients of this data are our hosting provider, advertiser and notification service provider.
§6. INFORMATION ON DATA PROCESSING FOR DIRECT MARKETING
- We may process your personal data for direct marketing purposes. This happens, for example, when we reply to your message by providing details of our offer.
- The processing of this data is based on Art. 6 point 1 lit. f) GDPR.
- We will keep your data for the time necessary for the purpose.
- You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, the right to object to data processing, and the right to lodge a complaint with the supervisory authority.
- Providing this data is voluntary, and failure to provide this data will prevent direct marketing activities.
- The recipients of this data are: our hosting provider, IT service provider, e-mail service provider, advertising service provider
§7. INFORMATION ON THE PROCESSING OF DATA TO ENSURE SECURITY
- From the moment you launch our website, in order to ensure the security of services, we process data such as:
- public IP address of the device from which the request came,
- browser type and language,
- date and time of the request,
- number of bytes sent by the server,
- URL of the previously visited page, in case the visit was made using this link,
- information about errors that occurred while executing the query.
- Our legitimate interest in this processing is keeping logs of server events and securing the Store against potential hacking attacks and other abuses. Including the possibility of determining the IP address of a person performing an unlawful activity in the Store, such as an attempt to break security, or publication of prohibited content, or attempted illegal activities with the use of our servers.
- The processing of this data is based on Art. 6 point 1 lit. f) GDPR.
- We will store this data for the period necessary to achieve the designated purposes, no later than until the claims under separate legal provisions are time-barred.
- You have the right to access your data, rectify it, delete it, limit its processing, object to its processing, and the right to lodge a complaint with the supervisory authority.
- Providing this data is a condition for using the Store. Failure to provide this data will prevent the use of the Store.
- The recipient of this data is our hosting provider and IT service provider.
§8. INFORMATION ON THE PROCESSING OF DATA FOR THE PURPOSE OF NOTIFICATION OF THE GOODS
- The store has the functionality of sending a notification about the selected product to the e-mail address entered by the user.
- Our legitimate interest in this processing is the implementation of the user's request, and then securing the Store against potential abuse.
- The processing of this data is based on Art. 6 point 1 lit. f) GDPR.
- We will store this data for the period necessary to achieve the designated purposes, no later than until the claims under separate legal provisions are time-barred.
- The data subject has the right to access his data, rectify it, delete it, limit processing, object to its processing, and the right to lodge a complaint with the supervisory authority.
- Providing this data is a condition for sending the notification. Failure to provide this data will prevent this action.
- The recipient of this data is our hosting provider and IT service provider.
§9. INFORMATION ON DATA RECIPIENTS
When processing personal data, we use external services. Therefore, third parties may be recipients of your personal data. When collecting personal data, we always inform about these recipients, but due to the primacy of legibility of the message, we do it briefly. Therefore, we hereby explain that when we inform about individual categories of recipients, they are the following entities:
- Provider of transport services / couriers: InPost SA, ul. Wielicka 28, 30-552 Kraków; DPD Polska Sp. z o. o., ul. Mineralna 15, 02-274 Warsaw; bus courier.
- IT service provider: Kaate PL Jacek Tryl, ul. Marysińska 88a / 55, 91-850 Łódź; SOCO Szyma i Wspólnicy Spółka Jawna, ul. Jaracza 45, 90-249 Łódź.
- Hosting provider: IAI Sp. z o. o., al. Piastów 30, 71-064 Szczecin.
- Provider of electronic mail services: Kaate PL Jacek Tryl, ul. Marysińska 88a / 55, 91-850 Łódź.
- Provider of advertising services: IAI Sp. z o. o., al. Piastów 30, 71-064 Szczecin.
- Provider of accounting services: Integral Audit Przedsiębiorstwo Audytorskie Sp. z o. o., ul. Żeglarska 4, 91-321 Łódź.
- Supplier of invoice processing software: SONETA Sp. z o. o., ul. Wadowicka 8A, 30-415 Kraków.
- Provider of legal / advisory / debt collection services - these service providers are appointed individually in the event of a specific need.
- Provider of the newsletter sending service: IAI Sp. z o. o., al. Piastów 30, 71-064 Szczecin.
- Banking service provider: Getin Noble Bank SA, ul. Przyokopowa 33, 01-208 Warsaw.
- Provider of electronic payment services: IAI Sp. z o. o., al. Piastów 30, 71-064 Szczecin; PayPro SA ul. Kanclerska 15, 60-327 Poznań.
§10. ABSOLUTE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED
When we write about the rights related to the processing of your personal data, we refer to the rights described below. The possibility of exercising the following rights is independent of the legal basis for the processing of personal data.
Right to access data
You have the right to obtain confirmation from us as to whether we process personal data concerning you. If this is the case, you have the right to access this data, as well as receive additional information about:
- purposes of processing,
- categories of data concerned,
- recipients or categories of recipients to whom the data have been or will be disclosed, in particular about recipients in third countries or international organizations,
- if possible, the planned period of data storage, and if this is not possible, about the criteria for determining this period,
- the right to request us to rectify, delete or limit data processing, to object to such processing, as well as the right to lodge a complaint with the supervisory authority,
- the data source if your data has not been collected from you,
- automated decision making, including profiling and the rules for making them, as well as the significance and anticipated consequences of such processing for you.
Upon receipt of such a request, we are required to provide a copy of the personal data undergoing processing. If such a request is submitted electronically and if we do not receive any other objection, we will also provide the information electronically.
Right to rectify data
You have the right to request us to immediately rectify incorrect personal data concerning you. Taking into account the purposes of processing, you have the right to request that incomplete personal data be supplemented, including by providing an additional statement.
The right to delete data (to be forgotten)
You have the right to request us to delete your personal data immediately. We are then obliged to delete personal data without undue delay if one of the following circumstances applies:
- you have withdrawn your consent to the processing of your personal data and we have no other basis for their processing,
- you have filed an effective objection to the processing of your data,
- your personal data has been processed unlawfully,
- Your personal data must be deleted in order to comply with a legal obligation,
- Your data has been collected in relation to the offering of information society services.
Right to restriction of processing
You have the right to request us to restrict processing in the following cases:
- when you question the correctness of the data - for a period allowing us to verify its correctness,
- the processing is unlawful and you oppose the erasure of the data and request the restriction of their use instead,
- we no longer need personal data for the purposes of processing, but you need them to establish, assert or defend claims,
- you have objected to the processing of your data - until it is determined whether the legitimate grounds on our side override the grounds for your objection.
Automated decisions, including profiling
You have the right not to be subject to a decision which is based solely on automated processing, including profiling, and produces legal effects on you or similarly significantly affects you.
The law does not apply if this decision:
- is necessary for the conclusion or performance of a contract between you and us,
- is permitted by EU law or the law of the Republic of Poland and which provides for appropriate measures to protect your rights, freedoms and legitimate interests, or
- is based on your explicit consent.
Right to lodge a complaint
You have the right to lodge a complaint regarding the processing of your personal data to the supervisory body: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, tel. 22 531 03 00, fax. 22 531 03 01, e-mail: kancelaria@uodo.gov.pl.
§11. RELATIVE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED
When we write about the rights related to the processing of your personal data, we refer to the rights described below. The possibility of using them depends each time on the legal basis for the processing of personal data.
The right to withdraw consent to processing
Where we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time. Naturally, the withdrawal of the consent granted does not affect the lawfulness of the prior processing of personal data.
Right to data portability
You have the right to receive your personal data provided to us in a structured and commonly used machine-readable format. You also have the right to send this personal data to another administrator without any obstacles on our part, if the processing takes place:
- by consent or contract, and
- in an automated manner.
When exercising the right to data portability, you have the right to request that personal data be sent by us directly to another administrator, if technically possible. This right shall not adversely affect the rights and freedoms of others.
Right to object
In the event that we process your personal data pursuant to art. 6 point 1 lit. f) GDPR, you have the right to object to the processing of this data for reasons related to your particular situation.
Then we are no longer allowed to process this personal data, unless we can prove the existence:
- valid, legitimate grounds for processing, where these grounds must override your interests, rights and freedoms, or
- grounds for establishing, pursuing or defending claims.
Also, if you object to the processing of your personal data for direct marketing purposes, then we will not be able to process it for such purposes.
§12. COOKIES - INTRODUCTION
The Store's website uses cookies. These are commonly used, small files containing a string of characters that are sent and saved on the end device (e.g. computer, laptop, tablet, smartphone) used when visiting the Store. This information is sent to the memory of the browser used, which sends it back at the next visits to the website. We can categorize cookies according to three methods of division.
In terms of the purposes of using cookies, we distinguish between three categories:
- Necessary files - these files enable the proper operation of the website and its functionality, e.g. authentication or security cookies. Without saving them on your device, you will not be able to use the website.
- Analytical files - these files allow you to monitor the opened websites, traffic sources, time spent on the website. Without saving them, the use of the website functionality will not be limited.
- Advertising files - these files enable the display of personalized advertisements within the area of the website or outside it. Without saving them, the use of the website functionality will not be limited.
- Social media files - these files allow you to display the fanpage in the area of the website, as well as to like it. Without saving them, the use of the website functionality will not be limited.
- Google Maps files - these files enable the display of maps available as part of the Google Maps service. Without saving them, the maps cannot be displayed.
In terms of their validity period, we distinguish between two categories of cookies:
- session files - existing until the end of the session,
- persistent files - existing after the end of the session.
In terms of the entity administering cookies, we distinguish:
- our cookies,
- third party cookies.
§13. DATA ADMINISTRATOR'S COOKIES
The cookies we administer allow you to:
- access authentication,
- keeping session after logging in,
- securing the Store against hacker attacks,
- "remembering" by the browser the content of fields completed in forms (optional),
- "remembering" by the browser items added to the cart.
Thanks to this, the use of the Store's functionality becomes easier and more enjoyable.
§14. THIRD PARTY COOKIES
The use of third party cookies is subject to the privacy and cookie policy of these entities.
GOOGLE
We use cookies administered by Google Inc. 1600 Amphitheater Pkwy, Mountain View, CA 94043, United States as part of the services:
- Google Ads - advertising files used to conduct and evaluate the quality of advertising campaigns carried out using the Google Ads service,
- Google Analytics - analytical files, used to study the behavior and traffic of users and to compile traffic statistics,
- Google Maps - they allow you to store information about the user, which allows you to use the map functionalities available as part of the Google Maps service. Google Inc. can track the user's location,
Collected by Google Inc are anonymous and collective. In particular, they do not contain identifying features (understood as personal data) of Store users. By using the above-mentioned services, we collect data such as the sources of acquiring users visiting the Store, as well as the manner of their behavior on the Store's website, information about the devices and browsers they use, IP address, domain, demographic data (age, gender), interests and data. geographical.
More information on this subject can be found here: https://policies.google.com/technologies/cookies?hl=pl
FACEBOOK
We use files administered by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, United States:
- Functional cookies used by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, United States. These files can be used to connect your account on an external Facebook social network with your account in the Store. These files can also be used to process on Facebook your activities performed with the use of the "Share" or "Like" buttons. Processing of these activities may be public.
- Advertising pixel tags, used by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, United States. These are elements published in digital content and enable the recording of information, e.g. about the activity carried out on the website, as well as the evaluation of the effectiveness of advertisements. Facebook Inc. pixel tag management is possible via Facebook in its user panel
More information on this subject can be found here: https://www.facebook.com/policies/cookies/
LinkedIn
We use files administered by LinkedIn Corporation, 1000 West Maude Avenue Sunnyvale, CA 94085, United States. These files can be used to connect your account on an external social network LinkedIn with your account in the Store. These files can also be used to process your activities on LinkedIn. Processing of these activities may be public.
The use of third party cookies is subject to the privacy and cookie policy applied by these entities. The current rules of third parties in this respect can be found on the above-mentioned websites and here: https://www.e-regulapii.pl/biuletyn/polityki-prywatnosci-i-plikow-cookies/.
§15. CONSENT TO THE USE OF COOKIES AND THE MANAGEMENT OF THEM
With the exception of essential cookies, their processing is based on the user's consent.
Consent to the processing of cookies is voluntary and may be withdrawn at any time. However, it should be remembered that the lack of consent to the use of certain cookies may limit the use of the Store and its functionality, and even prevent it from being used.
Consent to the processing of cookies may take place:
- by means of the software settings installed on the telecommunications end device used by the user,
- by using the button containing a declaration of consent to the processing of cookies or confirmation of reading its terms,
- with the settings available in the website area.
§16. CRAFT MEMORY
When you use the Store's website, we may automatically use the cache installed on your device. As part of the local memory, it is possible to store data intersessionally, i.e. between subsequent visits to the Store's website. The purpose of using the cache is to accelerate the use of the Store by eliminating the situation in which the same data would be repeatedly downloaded from the Store, thus burdening the user's internet connection. The cache can also store data such as login password.
§17. LINKS TO OTHER WEBSITES OR SOFTWARE
The Store may contain links to other websites or software. We are not responsible for the rules of compliance with the privacy policy and the processing of cookies on these websites or in this software. We recommend that you read the privacy and cookie policies of these websites or software after entering them or before installing them.
§18. CHANGES TO THE PRIVACY POLICY AND COOKIES
- The privacy and cookie policy shall enter into force on the date of publication on the Store's website.
- Changing the Privacy Policy and cookies is done by publishing its new content on the Store's website.
- We publish information about the change in the Privacy and Cookie Policy in the area of the Store's website no later than 3 days before the effective date of its new wording.