PRIVACY POLICY
Chapter I.
General provisions
- This Privacy Policy sets out the rules for the processing of personal data of current and potential Store Customers, visitors to SYLVECO Piela Radosław websites or individual brand pages (hereinafter collectively “Users”) and Users’ rights related thereto, contains information regarding the Personal Data Administrator, as well as the use of files cookie.
- Users’ personal data is protected by SYLVECO Radoslaw Piela in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95/46 / EC (general regulation on data protection) (Journal of Laws EU.L.2016.119.1), Corrigendum to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of persons physical in connection with the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (general regulation on data protection) (Journal of Laws EU.L.119 of 4.5.2016) and the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2018, item 1000, as amended).
- This Privacy Policy is supplemented by the regulations of websites managed on behalf of SYLVECO and information received by the User during the implementation of deliveries and services, subscriptions (newsletter), competitions, promotional campaigns, attached to contact forms, etc. The legal basis for the processing of Users’ personal data, all rights of persons to whom personal data relate, as well as the rules for processing such data, remains the Regulation, Corrigendum to the Regulation and the Act referred to in paragraph 2.
Chapter II
Basic concepts
- Personal data administrator – SYLVECO Piela Radosławwith its registered office at: 36-004 Łąka, Łąka 260F, Poland; NIP: 5170031261; REGON: 691782680 (hereinafter – Administrator or SYLVECO)
- GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (Journal of Laws UE.L.2016.119.1) and corrigendum to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95 / 46 / EC (general regulation on data protection) (Journal of Laws EU.L.119 of 4.5.2016).
- Newsletter – an electronic form of a newsletter (magazine) sent via e-mail to subscribers, in which, among other things, information about the Store’s offer, promotions and competitions organized by the Administrator is posted.
- Act – the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2018, item 1000, as amended).
Chapter III
The purpose of processing personal data
- Performance of the contract to which the User is a party or of taking action at the User’s request before concluding the contract, including:
- registration and creation of an individual account and management of this account,
- conclusion of the contract, its performance, making the necessary settlements, exercising the right to withdraw from the contract,
– which is the fulfilment of the condition of lawfulness of data processing specified in art. 6 clause 1 lit. b GDPR, as necessary to perform the contract.
- Fulfilment of obligations arising from legal provisions in connection with the performance of the contract with the User, which is the fulfilment of the condition of lawfulness of data processing specified in art. 6 clause 1 lit. c GDPR.
- Determining, pursuing and enforcing claims arising from the contract to which the User is a party, which constitutes the fulfilment of the condition of lawfulness of data processing specified in art. 6 clause 1 lit. f RODO, as necessary for the purposes of legitimate interests pursued by the Administrator.
- User satisfaction survey and marketing promoting the Administrator and his products and services, including sending a newsletter, which is a condition of compliance with the law of data processing set out in art. 6 clause 1 lit. f RODO, as necessary for the purposes of legitimate interests pursued by the Administrator.
Chapter IV
Consent to the processing of personal data
- Providing personal data by the User means a voluntary, specific, conscious and unequivocal demonstration of will, allowing the processing of personal data concerning him, to the extent necessary for the implementation of the contract or service by the Administrator.
- Lack of consent to the processing of personal data for marketing purposes or satisfaction surveys does not affect the implementation of the contract or service by the Administrator.
- The Administrator processes the following personal data of the User: name and surname, contact telephone number, correspondence address and delivery of the product or service, e-mail address, as well as other personal data, if it is necessary and legally justified.
- Providing personal data of a natural person other than the User in the order form, as the recipient of the products or services ordered by the User, constitutes the User’s statement that he has the consent of that natural person to process his personal data by the Administrator in order to provide the User with products or services.
Chapter V
Recipients of personal data
- The Administrator may transfer the User’s personal data to other entities if it is necessary to achieve the purposes set out in Chapter III of this Privacy Policy, including:
- in the case of payments made by bank, electronic transfer or other non-cash payments – to entities carrying out such financial operations,
- to the extent necessary to provide the product or service to entities providing such services,
- entities supporting the Administrator in ICT, accounting, legal and other similar processes necessary for the correct implementation of the product or service delivery to the User, as well as to meet the legal obligations incumbent on the Administrator.
- The administrator provides personal data, indicated in point 16, to entities authorized to receive personal data on the basis of legal provisions, decisions of a public administration body or a court decision.
Chapter VI
Period of storage of personal data
- The Administrator may store User’s personal data until the expiry of the limitation period of any civil law claims, however, not longer than 6 years.
- The Administrator stores the User’s personal data for a period resulting from tax law or other normative acts, specifying the limitation periods for public law obligations or required by law.
- If the basis for the processing of personal data is the User’s consent, the Administrator processes his personal data until the consent is withdrawn. However, the Administrator may process the User’s personal data also after withdrawal of consent, until the expiry of the limitation periods for claims that may be raised against him, as defined by law.
Chapter VII
Cookies
- A cookie is a short text sent to a web browser by a website that the User is currently visiting. It allows this website to remember information about browser settings, thanks to which the User’s next visit to this website is more effective, making logging in to the Administrator’s services easier.
- The administrator may process the data contained in cookie files in order to:
- adjusting the functionalities provided by the Administrator to the User’s expectations, including advertising content,
- keeping statistics, without identifying the person (anonymous),
- filling out order forms,
- identification of the logged in User,
- placing in so-called basket, information about ordered products, services, payments or delivery.
- At any time, the User may change the settings of the web browser regarding cookies in such a way as to block the automatic handling of these files or inform about each time they are placed in the end device.
- The Administrator may use cookies to present the User with the so-called banner advertising, i.e. advertising in the form of graphics, after clicking on which, the User will be transferred to the Administrator’s website or landing page.
- Restricting the use of cookies may affect some functionalities and hinder the User’s access to the products and services offered by the Administrator.
Chapter VIII
Profiling
- As part of processing User’s personal data, the Administrator may profile:
- based on the User’s consent – in order to select offers for products or services or advertisements offered by the Administrator, in terms of the User’s needs and the profile assigned on this basis,
- without the User’s consent – based on the Administrator’s legitimate interest in the processing of cookies in order to adapt the content of marketing messages placed on the Administrator’s websites and on other websites visited by the User to the User’s preferences and interests, on based on data such as visits to websites and clicks as part of individual website functionalities, login and registration dates, data on the use of individual Administrator services.
Chapter IX
User Rights
- The right to withdraw consent to the processing of personal data (Article 7 GDPR).
- The right to access your personal data and receive a copy of it (art. 15 GDPR).
- The right to rectify (amend) your personal data (Article 16 GDPR).
- The right to delete personal data if the data is not processed in order to fulfill the obligation arising from a legal provision (Article 17 of the GDPR).
- The right to limit the processing of personal data (Article 18 GDPR).
- The right to transfer personal data (Article 20 GDPR).
- The right to object to the processing of personal data (Article 21 GDPR).
- The right to lodge a complaint to the President of the Office for Personal Data Protection, to the following address: Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.
Final Provisions
- In matters not covered in the Regulations and in the Privacy Policy, the provisions of Polish law shall apply.
- The Administrator, on request, will provide the User with one copy of his personal data subject to processing. For any subsequent copies, he may charge a fee appropriate to the administrative costs incurred. If the user requests a copy electronically and unless otherwise stated, the copy will also be provided to him in a commonly used electronic form.
- The administrator may make changes to the Privacy Policy at any time. The User who has a registered account will be asked to confirm that he or she has read the Privacy Policy in its amended form, before placing the first order made after the Administrator changes the content of the Privacy Policy.
- In matters of protection of natural persons, in connection with the processing of personal data by the Administrator, you can contact the Data Protection Inspector at rodo@sylveco.pl or at the Administrator’s office.