PRIVACY POLICY

INFORMATION CLAUSE ON PERSONAL DATA PROCESSING

COOKIE POLICY

I GENERAL INFORMATION

1. This privacy policy applies to the processing of personal data of Buyers who place Orders on the Shop and individuals visiting the Shop.

2. The Administrator of your personal data is: Produkcja Handel Doradztwo Mateusz Ludwiniak, registered in the Central Register and Information on Economic Activity (CEIDG) maintained by the Minister responsible for the economy, NIP /Tax Identification Number/ 8222213344, REGON /National Business Registry Number/ 141829976 (hereinafter referred to as the "Administrator").

3. You can contact the Administrator by phone at +48 (22) 783 80 22 (from 8:00 am to 4:00 pm) or via email at sklep@steki.pl.

4. The Administrator is responsible for processing personal data and declares adherence to the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and the free movement of such data, repealing Directive 95/46/EC ("GDPR").

5. The Administrator states that appropriate technical and organisational measures are applied to protect personal data processing against unauthorised access, legal breaches, alteration, loss, damage, or destruction.

II PURPOSE, LEGAL BASIS, AND PERIOD OF PERSONAL DATA PROCESSING

1. [Conclusion of a sales contract]. In the event where Buyers purchase goods, place orders, or make an inquiry in any form, the data provided will be processed to prepare and conclude a sales contract.

Legal basis: Article 6(1)(b) GDPR (processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract) and Article 6(1)(c) GDPR (compliance with legal obligations imposed on the Administrator, particularly tax and accounting regulations).

Processing period: Data will be stored for 6 years from the date of the contract.

Scope of data: Name, address, contact details, payment information.

1. [Account creation in the Shop] Personal data provided in connection with registration and the creation of an individual account in the Shop will be processed to create and maintain the account, manage purchase history, and conduct transactions via the Shop’s website.

Legal basis: Article 6(1)(b) GDPR (processing is necessary for the performance of an electronic services contract for managing the Buyer’s individual account).

Processing period: Data will be processed until the User deletes their individual account.

Scope of data: Name, address, contact details, payment information, purchase history.

1. [Contact with the Administrator] In connection with communication with the Shop (email, phone, chat), the Administrator processes the personal data provided by Users to respond to inquiries about products and services.

Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Administrator in contacting Shop Users and answering their questions).

Processing period: Data will be deleted within 30 days of resolving the matter or answering the query.

Scope of data: Name and email address or phone number, depending on the method of contact.

1. [Newsletter]. The Administrator processes the User's email address for the purpose of providing electronic services in the form of sending newsletters. Details regarding personal data processing for newsletter recipients are described in the Newsletter Terms and Conditions.

2. [Marketing].Only after receiving separate consent, shall personal data be processed to send authorised marketing information about the Administrator’s goods and services and to conduct sales analyses and improve Shop functionality.

Legal basis: Article 6(1)(a) GDPR (consent given by the data subject for one or more specified purposes) or Article 6(1)(f) GDPR (processing necessary for the legitimate interests of the Administrator in marketing and advertising the Shop’s activities).

Processing period: Data will be processed until consent is withdrawn or an objection is raised.

Scope of data: Name, address, contact details, IP address, device location.

1. [Pursuing Claims]. Personal data may also be used by the Administrator to pursue legitimate claims or defend against claims made against the Administrator, including in potential court proceedings.

Legal basis: Article 6(1)(f) GDPR (processing necessary for the legitimate interests of the Administrator in protecting and enforcing their rights).

Processing period: Data will be processed for 6 years or for the duration of the court proceedings in which the Administrator is involved.

Scope of data: Name, address, contact details, payment information.

 III INFORMATION ON RECIPIENTS OF PERSONAL DATA

1. Where necessary, your personal data may be shared with the following categories of entities:

   1. Authorised persons, employees, and associates who need access to data to perform their duties,

   2. Providers of IT systems and entities providing IT-related services,

   3. Entities providing HR, accounting, customer service quality assessment, market analysis, debt collection, legal, and recovery services,

   4. Couriers and delivery services,

   5. Operators of electronic payment systems and banks, for the purpose of payment processing,

   6. Authorities authorised to access your personal data under legal provisions.

2. The Administrator ensures the highest level of security for your personal data. Where data is shared with third parties for processing on our behalf, this will be done under a data processing contract unless legal provisions remove the need for such an contract (e.g., when sharing data with authorised authorities).

3. Your personal data will not be transferred to third countries or international organisations and will not be processed automatically.

IV RIGHTS OF DATA SUBJECTS

1. In relation to the processing of personal data, you have the following rights:

   1. The right to access to your data, as well as the right to rectify, delete, or restrict its processing.

   2. The right to data portability.

   3. The right to request the deletion of personal data, except where its processing is necessary to fulfil a legal obligation imposed on the Administrator.

   4. The right to object to the processing of personal data for purposes arising from the Administrator's legitimate interests.

   5. The right to withdraw consent for the processing of personal data at any time, where processing is based on consent. Withdrawal takes effect from the moment the Administrator receives the statement of withdrawal.

   6. The right to lodge a complaint with the President of the Personal Data Protection Office if the processing of personal data violates GDPR regulations.

2. Providing your personal data is voluntary but necessary to initiate contact with the Administrator for purposes related to making purchases in the Shop.

 V COOKIE POLICY

1. The Shop's website uses cookies, web analysis services, and selected social media plugins.

2. Cookies are text files sent to and stored on the User's end device, allowing the recognition of Users’ preferences and tailoring the website's functionality to their needs.

3. The Shop uses the following types of cookies:

   1. Session cookies - Stored on the device until the browser session ends, after which they are permanently deleted. Using session cookies does not allow for the collection of personal data or other confidential information about the User.

   2. Persistent cookies - Stored on the device until deleted by the User. Ending the browser session or switching off the device does not remove them. These cookies do not collect personal data or any confidential information from the User's device. They are primarily used to store website preferences or favourite products. 

   3. Technical cookies - Essential files required for the proper use of the website and its functionalities. 

   4. Analytical cookies - Provide information about how Users interact with the Shop, such as data on visited subpages, selected or viewed products, and time spent on the site. These cookies do not collect personal data and do not identify Users as specific individuals. 

4. The Shop may also use external cookies that monitor User activity on other websites, enabling the Shop to share its marketing materials on other sites and through various communication channels.

5. Cookies used by the Shop include:

1. The Shop uses cookies primarily to tailor the content of the Shop's website to the preferences of the buyer, remember selected settings and personalise the Shop’s interface, maintain user sessions after logging into the Shop, ensure the security and reliability of the Shop and adequately protect Buyers’ data.

2. Users can delete cookies at any time using the available features in their web browser or independently change their cookie settings to specify the conditions under which cookies are stored on their device and how they access it. 

3. Blocking or restricting the use of cookies may affect certain functionalities of the Shop.

4. The Shop and its partners use the following tools and solutions for analytical and marketing purposes:

   1. Google Analytics cookies - Used by Google to analyse how users interact with the Shop, creating statistics and reports. Detailed information is available at: https://www.google.com/intl/pl/policies/privacy/partners.

   2. Google Tag Manager - Allows management of analytical tools using GTM tags. Detailed information is available at: https://policies.google.com/privacy
      
      
   3. Facebook Pixel - Enables the measurement of advertising campaign effectiveness carried out by the Shop on Facebook. Detailed information is available at: https://pl-pl.facebook.com/help/443357099140264?helpref=about_content.