(1) For the Owner of this website, the protection of Users’ personal information is of utmost importance. It makes great efforts to ensure that Users feel secure in entrusting their personal information when using the website.
(2) A user is an individual, a legal entity or an organizational unit without legal personality, which is granted legal capacity by law, using electronic services available on the website.
(3) This privacy policy explains the principles and scope of processing of the User’s personal data, his/her rights, as well as the obligations of the administrator of such data, and also informs about the use of cookies.
(4) The Administrator shall use state-of-the-art technical measures and organizational solutions to ensure a high level of protection of the processed personal data and safeguards against unauthorized access.
I. PERSONAL DATA CONTROLLER
The administrator of the personal data is Ms. Natalia Drzewiecka, conducting business under the name Spalone Studio – Natalia Drzewiecka, based in Kujawsko-Pomorskie Province, Inowrocław County, Złotniki Kujawskie Municipality, 2 Różana Street, 88-126 Tuczno, NIP: 5562812898, REGON: 540176778 (hereinafter referred to as the “Owner”).
Spalone Studio online store, available at the following web address www.spalonestudio.pl, is run by the Owner and is the main sales platform for the products offered. The Owner processes personal data in accordance with applicable laws, ensuring the security and confidentiality of the entrusted data.
II. PURPOSE OF PERSONAL DATA PROCESSING
(1) The Administrator processes the User’s personal data in order to:
for the purpose of handling purchases made without registration on this website – in which case the legal basis for processing is the necessity of processing for the performance of the contract (Article 6(1)(b) of the DPA);
2 This means that the data is needed in particular for
a. conclusion of the contract;
b. making settlements;
c. delivery of goods ordered by the User or performance of services;
(3) The User may also agree to receive information on news and promotions, which will also cause the administrator to process personal data, in order to send the User commercial information regarding, among other things, new products or services, promotions or sales.
(4) Personal data shall also be processed in fulfillment of legal obligations, incumbent on the data controller and the performance of tasks, in the public interest, among others, to perform tasks, related to security and defense or storage of tax records.
(5) Personal data may also be processed for the purposes of direct marketing of products, securing and asserting claims or protecting against claims by the User or a third party, as well as marketing of services and products of third parties or marketing of our own, which is not direct marketing.
III. TYPE OF DATA
(1) The administrator processes the following personal data, the provision of which is necessary to:
a. making purchases through the website:
– Name;
– gender;
– delivery address;
– phone number;
– e-mail address;
b. Data provided by the User optionally:
– Date of birth;
– PESEL number (if an invoice is requested);
– Tax ID number (if an invoice is requested for an entrepreneur).
IV. LEGAL BASIS FOR PROCESSING PERSONAL DATA
(1) Personal data shall be processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4.5.2016, p. 1-88, hereinafter referred to as the “RODO Regulation“.
(2) The Administrator shall process personal data only after obtaining the User’s prior consent at the time of confirming the transaction made on the website.
(3) Consent to the processing of personal data is completely voluntary, however, the absence of consent makes it impossible to make purchases, through the website.
V. USER’S RIGHTS
(1) The user may at any time request information from the controller about the scope of processing of personal data.
(2) You may at any time request the correction or rectification of your personal data.
(3) The User may withdraw his/her consent to the processing of his/her personal data at any time, without giving any reason. The request not to process the data may concern a specific purpose of processing indicated by the User, e.g. withdrawal of consent to receive commercial information, or concern all purposes of data processing. Withdrawal of consent as to all processing purposes will result in the User’s account being deleted from the website, along with all the User’s personal data previously processed by the administrator. The withdrawal of consent will not affect the activities already performed.
(4) The user may at any time request, without stating a reason, that the administrator delete his data. The request for deletion of data will not affect the activities performed so far. Deletion of data means simultaneous deletion of the User’s account, together with all personal data stored and processed by the administrator to date.
(5) The User may at any time object to the processing of personal data, both with respect to all personal data processed by the administrator of the User’s personal data, as well as only to a limited extent, e.g. as to the processing of data for a specifically indicated purpose. The objection will not affect the activities performed so far. Raising an objection will result in the deletion of the User’s account, together with all personal data stored and processed to date, by the administrator.
(6) You may request a restriction of the processing of personal data, whether for a certain period of time or without a time limitation, but to a certain extent, which the controller will be obliged to comply with. This request will not affect the activities performed so far.
(7) The User may request that the administrator transfer to another entity, the processed personal data of the User. For this purpose, he should write a request to the administrator, indicating to which entity (name, address) the User’s personal data should be transferred and what specific data the User wishes the administrator to transfer. After the User confirms his request, the administrator will transfer, in electronic form, to the indicated entity, the User’s personal data. Confirmation of the request by the User is necessary for the security of the User’s personal data and to be sure that the request comes from an authorized person.
(8) The Administrator shall inform the User of the action taken, before the expiration of one month after receiving one of the requests listed in the preceding paragraphs.
VI. ENTRUSTING DATA PROCESSING TO OTHER ENTITIES
(1) The administrator may entrust the processing of personal data to entities cooperating with the administrator to the extent necessary for the implementation of the transaction, e.g. for the preparation of the ordered goods and delivery of shipments or transmission of commercial information, originating from the administrator (the latter applies to Users who have agreed to receive commercial information).
(2) Other than for the purposes indicated in this Privacy Policy, personal data of Users, will not be shared in any way with third parties, or transferred to other entities, for the purpose of sending marketing materials of these third parties.
(3) Personal data of website users are not transferred outside the European Union.
(4) This Privacy Policy complies with the provisions under Article 13(1) and (2) of the RODO Regulation.
VII. COOKIES PLICKS
(1) The website uses cookies or similar technology (hereinafter collectively referred to as“cookies“) to collect information about the User’s access to the website (e.g. via computer or smartphone) and his preferences. They are used, among other things, for advertising and statistical purposes and to customize the website to the User’s individual needs.
(2) Cookies are pieces of information that contain a unique reference code, which the website sends to the User’s device, in order to store, and sometimes track information, about the device used. They usually do not allow to identify the User’s person. Their main purpose is to better tailor the website to the User.
(3) Some of the cookies present on the website are available only for the duration of a given web session and expire when the browser is closed. Other cookies are used to remember the User who is recognized on the website when they return to it. They are then retained before a longer period of time.
4 The cookies used on this website are:
essential cookies used by Woocommerce for order processing: deleted after session ends
5. all cookies, occurring on the website, are determined by the administrator.
6 All cookies used by this website comply with the applicable laws of the European Union.
7 Most Users and some mobile browsers automatically accept cookies. If the User does not change the settings, cookies will be stored in the memory of the device.
(8) You may change your preferences, regarding the acceptance of cookies, or change your browser so that you can receive an appropriate notification each time the cookie function is set. To change your cookie acceptance settings, adjust the settings in your browser.
9. it is worth remembering that blocking or deleting cookies may prevent full use of the website.
10. cookies will be used for necessary session management, including:
a. Create a special login session for the User of the website so that the website remembers that the User is logged in and their requests are delivered in an efficient, secure and consistent manner;
b. Recognizing the User who has visited the website before, which allows us to identify the number of unique users who have used the website and allows us to make sure that the website has enough capacity for the number of new users;
c. Recognizing whether a website visitor is registered on the website;
d. Recording information from the User’s device, including: cookies, IP address, and information about the browser used, in order to be able to diagnose problems, administer and track Site Usage;
e. Customize elements of the layout or content of the website;
f. To collect statistical information about how Users use the Site, in order to be able to improve the Site and determine which areas of the Site are most popular with Users.