document created on 10.06.2023 at 08:54

Privacy Policy

The controller of personal data responsible for their processing is:
ATMA Ewa Lewandowicz, Kopań, No. 76b, Darłowo, postal code 76-150, email: ewabernady@gmail.com

Thank you for your interest in our online store. The protection of your privacy is very important to us. Below you will find detailed information regarding the handling of your data.

1. Access data and hosting

Our websites can be visited without providing personal data. Each time a website is accessed, the server automatically saves only so-called server logs, e.g. the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting internet service provider (so-called access logs), and documents the page access. These data are analysed solely to ensure the proper functioning of our website and to improve our offering. The above serves, in accordance with Art. 6(1)(f) GDPR, to safeguard our legitimate interest in the optimal and correct presentation of our websites and offering. All access data are deleted within seven days of the end of your visit to the website.

Hosting

Hosting services and the display of the website are partially provided on our behalf by our service providers as part of data processing entrustment. Unless otherwise stated in this privacy policy, all access data and data collected through the forms provided for this purpose on our website will be processed on their servers. If you have any questions regarding our service providers and the basis of our cooperation with them, please contact us. You will find our contact details in the section “Our contact details and your rights”.

2. Collection and processing of data for the purposes of contract performance and contact

2.1 Data processing for the purposes of contract performance

We collect personal data when you provide it to us by placing your order or contacting us (e.g. via a contact form or email). Mandatory fields are marked as such because they relate to data that is necessary for the performance of the contract or for handling the matter about which you are contacting us. Without providing this data, the order cannot be completed or you cannot contact us. Which data is collected results directly from the forms into which the data is entered.

We use the data you provide in accordance with Art. 6(1)(b) GDPR for the performance of the contract and to respond to your enquiries (including enquiries regarding the processing of warranty or guarantee claims and in relation to the obligation to inform about necessary updates). Further information on the processing of your data, in particular regarding the transfer of data to our service providers for the purposes of order fulfilment, payment and delivery, can be found in subsequent sections of this privacy policy. After the contract has been fulfilled, the processing of your data will be restricted, and after the expiry of the retention periods required under tax and accounting regulations, the data will be deleted (Art. 6(1)(c) GDPR), unless you have given your explicit consent (Art. 6(1)(a) GDPR) to the further use of this data for other purposes, or we reserve the right to further use of the data in cases permitted by law, of which we will inform you in this privacy policy.

2.2 Data processing for contact purposes

As part of customer communication, we process personal data in order to handle your enquiries (Art. 6(1)(b) GDPR). You provide this data to us voluntarily when contacting us (e.g. via a contact form or email). Mandatory fields are marked as such because they relate to data that is necessary for handling the enquiry. Which data is collected results directly from the forms into which the data is entered. After your enquiry has been fully processed, your data will be deleted, unless you have given your explicit consent (Art. 6(1)(a) GDPR) to the further use of this data for other purposes, or we reserve the right to further use of the data in cases permitted by law, of which we will inform you in this privacy policy.

3. Data processing for the purpose of delivery

For the performance of the contract (Art. 6(1)(b) GDPR), we may transfer your data to the shipping company selected by you during the order process, which has been commissioned to deliver the ordered products.

4. Data processing for the purpose of payment

For the purpose of processing payments in our online store, we cooperate with external service providers handling electronic online payments and transfer your data to the payment service provider selected by you during the order process. The above serves the performance of the contract (Art. 6(1)(b) GDPR).

Data processing for fraud prevention and payment optimisation

In certain situations, we may transfer additional information to our service providers, which may be used by them together with the information necessary to process the payment. These service providers act on our behalf as data processors and provide us with services in the area of fraud prevention and payment process optimisation (e.g. invoicing, analysis of rejected payments, accounting support). In accordance with Art. 6(1)(f) GDPR, this serves the realisation of our legitimate interests in protection against fraud and abuse and in effective payment management.

5. Cookies and similar technologies
General information

To make visiting our website more attractive and to enable you to use its key functions, we use technological tools for this purpose, including so-called cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the browser session ends, i.e. after you close the browser (so-called session cookies). Other cookies are stored on your end device and allow us to recognise your browser on your next visit to the website (so-called persistent cookies). We use technologies that are absolutely necessary to ensure the proper and optimal use of the essential functions of our website (e.g. shopping cart function). These technologies process data such as your IP address, the time of your visit to the website, information about the device and browser, as well as information about the use of our website (e.g. about the contents of the shopping cart). In accordance with Art. 6(1)(f) GDPR, this serves the realisation of our legitimate interest in the optimal presentation of our offering.

In addition, we also use technological tools in order to fulfil legal obligations to which we are subject (e.g. in order to demonstrate that consent has been obtained for the processing of your personal data), as well as for the purposes of web analytics and online marketing. Further information on this, including the appropriate legal bases for data processing, can be found in subsequent sections of this privacy policy.

In the help menu of your web browser, you will find explanations on how to change cookie settings. These are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have given us your consent to the use of certain technological tools (Art. 6(1)(a) GDPR), it may be withdrawn by you at any time. To withdraw your consent, please contact us at the contact address indicated in the section “Our contact details and your rights”.

6. Use of cookies and similar technological tools for the purposes of web analytics and marketing

Insofar as you have given your consent thereto (Art. 6(1)(a) GDPR), we use the cookies and other similar technological tools of third-party service providers indicated below on our website. After the processing purpose has been fulfilled and the use of the given technological tool has ended, the data collected through the use of these tools will be deleted. The consent given may be withdrawn by you at any time. Detailed information regarding the possibility of withdrawing consent and your right to object can be found in the section “Cookies and similar technologies”. Further information can be found on the websites of the individual service providers. If you have questions about our service providers and the basis of our cooperation with them, please contact us. You will find our contact details in the section “Our contact details and your rights”.

6.1 Use of Google services

We use the technological tools of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) indicated below. Information automatically collected by Google technologies about the use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on the Standard Contractual Clauses adopted by the European Commission. Where, in the context of the use of Google technological tools, your IP address is processed, the IP anonymisation function ensures that your address is truncated before being stored on Google servers. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there. Unless otherwise specified for the individual Google technologies described in this privacy policy, data processing takes place on the basis of a joint controllership agreement concluded with Google in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in Google’s privacy policy.

Google Analytics

For the purposes of analysing the use of our website, we use Google Analytics – a web analytics tool provided by Google, which automatically processes your data (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website) and creates pseudonymised user profiles based on this data. Cookies may be used for this purpose. Your IP address is generally not combined with other data collected by Google. Data processing within the Google Analytics service takes place on the basis of a data processing agreement concluded with Google.

Google Maps

For the visual presentation of geographical information, Google Maps will store and process information about how you use the maps and individual functions, including, for example, your IP address and location data. We have no influence over this data processing by Google.

Google reCAPTCHA

In order to protect against spam and to prevent abuse and misuse of our online forms (e.g. by malicious bots), our website integrates the Google reCAPTCHA tool, which processes your data (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website) and, based on this data, performs an analysis of your use of our website using JavaScript scripts and cookies. The personal data you enter in the individual form fields on our pages will not be read or stored.

Google Fonts

In order to ensure a consistent presentation of content on our websites, our website integrates the “Google Fonts” script, which processes your data (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website). We have no influence over this data processing by Google.

YouTube Video Plugin

For the integration of third-party content via the YouTube video plugin – when playing a video, the following data is processed by Google: IP address, time of visit, information about the user’s device and browser.

6.2 Use of Facebook services
Facebook Pixel

We use the Facebook Pixel tool provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The scope of the Facebook Pixel functionalities used by us is indicated below. The Facebook Pixel automatically collects and stores data (your IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website, e.g. visiting the website or subscribing to the newsletter). Pseudonymised user profiles are then created on the basis of this data.
For this purpose, when you visit our website, the Facebook Pixel saves a cookie on your device, which uses a pseudonymised Cookie ID to enable automatic recognition of your browser when visiting other websites. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of websites, in particular for advertising personalisation purposes. Information automatically collected by Facebook technologies about the use of our website is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. The European Commission has not issued an adequacy decision for the USA. Insofar as the transfer of data to the USA lies within our responsibility, our cooperation is based on the Standard Contractual Clauses of the European Commission. Further information on data processing by Facebook can be found in Facebook’s privacy policy.

Facebook analytics tools

Within the framework of the Facebook Business tools – based on data collected via the Facebook Pixel code regarding your use of our website, statistics on user activity on our website are created. Data processing by Facebook takes place on the basis of a data processing agreement. The analysis of data (statistics on website usage) serves to optimise and make our website more attractive.

Facebook Ads (advertising management)

Facebook Ads enables us to advertise our website on Facebook and other platforms. We set the parameters of a given advertising campaign. Facebook is responsible for the precise execution and, in particular, for the decision to display a given advertisement to individual users. Unless otherwise specified for the individual functions and tools, data processing takes place on the basis of a joint controllership agreement in accordance with Art. 26 GDPR. Joint responsibility is limited to the collection of data and their transfer to Facebook Ireland. This does not include the subsequent processing of data by Facebook Ireland.

Based on the pseudonymised Cookie ID saved by the Facebook Pixel and the collected information on user activity on our website, we create personalised advertising via the Facebook Pixel Remarketing function.

7. Social media

7.1 Social media plugins: Facebook (Meta)

Our website uses so-called social media plugins (buttons). These plugins are available via an HTML link, which ensures that when you visit our website containing such plugins (buttons), no automatic, direct connection is established with the servers of the operator of the given social media service. After clicking one of the buttons (plugins), a new window of your browser will open displaying the page of the given social media service, where you can approve the use of the given button, e.g. “Like” or “Share”.

7.2 Our activity on social media portals: Facebook

If you have given your consent in this regard to the given social media portal (Art. 6(1)(a) GDPR), when visiting our account/profile on the above-mentioned social media portals, your data will be automatically collected and stored for the purposes of web analytics and marketing. Pseudonymised user profiles are created on the basis of this data. They may be used, for example, to place so-called personalised advertisements within and outside the social media portals, which are likely to correspond to your interests. Cookies are usually used for this purpose.
Detailed information regarding the processing and use of your data by the individual social media portals, as well as information about your rights and options for configuring privacy settings, and contact details for making enquiries, are described in the privacy policies of the individual social media services linked below. Should you need assistance in this regard, you can also contact us.

Facebook (by Meta) is a social media service offered by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). Information automatically processed regarding your activity and the way you use our fan page on the Facebook (by Meta) service is generally transmitted to the server of Meta Platforms Ireland, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on the Standard Contractual Clauses adopted by the European Commission. Data processing within the framework of visits to the fan page on the Facebook (by Meta) service takes place in accordance with Art. 26 GDPR on the basis of joint controllership arrangements, which are available here. Further information on the processing of your personal data within the framework of visits to the fan page on Facebook (information on the page statistics function) is available here.

8. Our contact details and your rights

8.1 Your rights

Data subjects have the following rights:

in accordance with Art. 15 GDPR: the right to obtain information about data processing to the extent specified in this article;
in accordance with Art. 16 GDPR: the right to rectification of your inaccurate or incomplete personal data;
in accordance with Art. 17 GDPR: the so-called “right to be forgotten”, i.e. the right to erasure of your personal data stored by us, insofar as their further processing is not necessary:
for exercising the right to freedom of expression and information;
for compliance with a legal obligation;
for reasons of public interest;
for the establishment, exercise or defence of legal claims;
in accordance with Art. 18 GDPR: the right to restriction of processing of personal data, insofar as:
the accuracy of the personal data is contested by you;
the processing is unlawful and you oppose their erasure;
we no longer need the personal data, but they are needed by you for the establishment, exercise or defence of legal claims;
you have objected to the processing pursuant to Art. 21;
in accordance with Art. 20 GDPR: the right to receive the data provided to us in a structured, commonly used and machine-readable format and to transmit them to another controller;
in accordance with Art. 77 GDPR: the right to lodge a complaint with a supervisory authority (the President of the Personal Data Protection Office “UODO”).
Right to object

If, as described in this privacy policy, we process personal data in order to safeguard our legitimate interests, you may object to the processing of your data for this purpose – with effect for the future. If the processing takes place for direct marketing purposes, you may exercise your right to object at any time. If the processing takes place for other purposes, the right to object is available to you only on grounds relating to your particular situation.

After you exercise your right to object, we will not continue to process your personal data, unless we demonstrate compelling legitimate grounds for the processing which override your interests and rights, or where the processing of data serves the establishment, exercise or defence of legal claims.

The preceding sentence does not apply where the data processing is carried out for direct marketing purposes. In such a case, upon your objection, we will always cease further processing of your personal data.

8.2 Contact us

If you have any questions regarding the collection, processing and use of your personal data, as well as in the case of requests for information, rectification, restriction of processing or erasure of data, and for the purpose of withdrawing consents given or objecting to the use of certain data, please contact the data controller indicated at the beginning of this privacy policy directly.