COODO.PL ONLINE SHOP PRIVACY POLICY
1. GENERAL PROVISIONS
2. DATA COLLECTION PURPOSE AND SCOPE AND DATA RECIPIENTS
3. COOKIES AND OPERATIONAL DATA
4. BASIS FOR DATA PROCESSING
5. RIGHT TO CONTROL, ACCESS AND MODIFY THE DATA
6. FINAL PROVISIONS
1. GENERAL PROVISIONS
1.1. This Privacy Policy of the Online Shop has an informative character, which means that it is not a source of reference for the requirements of the Service Users or Customers of the Online Shop.
1.2. The administrator of personal data collected via the Online Shop is BEATA MIROS run by Beata MIROS who is conducting business activity under the registered name of BEATA MIROS MANUFAKTURA which is entered in the CEIDG (Central Registration and Information on Business) of the Republic of Poland kept by the minister in charge of the economy, having: an address of the principal place of business and address for service: ul. Puławska 138A/2 02-624 Warszawa, NIP 7811743997, REGON 362409438, email: office@coodo.pl. - hereinafter referred to as ‘Administrator, being also the Service Provider and Seller of the Online Store.
1.3. Personal data of the Service User and the Customer are processed in accordance with the Personal Data Protection Act of 29th August 1997 (Journal of Laws 1997, No 133, item. 883 as amended) (hereinafter: Personal Data Protection Act) and Act and the provision of electronic services of 18th July 2002 (Journal of Laws of 2002, No. 144, item. 1204, as amended).
1.4. The Administrator takes special care to protect the interests of the persons, whom they concern, in particular ensures that collected data is processed in accordance with the law; collected for specified, legitimate purposes and not subjected to further processing incompatible with those purposes; substantially relevant and adequate in relation to the purposes for which they are processed and stored in a form which permits identification of the persons whom they concern, for a no longer period than it is necessary to achieve the purpose of processing.
1.5. All words, phrases and acronyms appearing on this website and beginning with a capital letter (e.g. Seller, Online Store, Electronic Service) should be understood in accordance with their definition contained in these Regulations available on the website of the Online Shop.
2. DATA COLLECTION PURPOSE AND SCOPE AND DATA RECIPIENTS
2.1. Each time, the purpose, scope and data recipients processed by the Administrator ensues from the actions taken by the Service User or the Customer of the Online Shop. For example, if the Customer chooses personal collection of the goods instead of courier delivery while placing an order, Customer’s personal data will be processed in order to conclude and implement the Sale Agreement, but will no longer be available to the carrier executing the delivery on behalf of the Administrator.
2.2. Possible purpose of collecting personal data of the Service Users or Customers by the Administrator:
2.2.1. conclusion and implementation of the Sale Agreement or agreement for the provision of Electronic Services (e.g. Account).
2.2.2. direct marketing of own products or services of the Administrator.
2.2.3. expression of the Customer’s opinion about the concluded Sale Agreement.
2.3. possible recipients of the Customers’ personal data of the Online Shop:
2.3.1.in case of a Customer who uses the mail or courier delivery method in the Online Shop, the Administrator provides collected personal data of the Customer to a particular selected carrier or intermediary executing the delivery on behalf of the Administrator.
2.3.2. In the case of a Customer who agreed to express an opinion about the concluded Sale Agreement, the Administrator provides collected personal data of the Customer to a particular selected operator supervising the online survey system opining the Sale Agreements in the Online Shop.
2.4. The administrator may process the following personal data of the Service Users or Customers using the Online Shop: name and surname; e-mail address; phone number; delivery address (street, house number, apartment number, postal code, city, country), address of residence/business registered address/business seat (if it is different than the delivery address), gender, date of birth. In case of the Service Users or Customers who are not consumers the Administrator can also process the company name and tax identification number (NIP) of the Service User or Customer.
2.5. Providing personal data referred to in paragraph above may be necessary for the conclusion and implementation of the Sale Agreement or agreement for provision of Electronic Services in the Online Shop. Each time the scope of information required conclude an agreement is prior indicated on the website of the Online Shop and in the Online Shop Regulations.
3. COOKIES, OPERATIONAL DATA AND GOOGLE ANALYTICS
3.1. Cookies (cookies files) are small pieces of text information in the form of text files sent by a server and stored on the side of the visitor of the Online Shop (e.g. on the hard drive, laptop, on the smartphone memory card - depending on what device is used when visiting the Online Shop). Detailed information on Cookies, as well as the history of their formation can be found, among others, here: https://pl.wikipedia.org/wiki/Ciasteczko. 3.2. The administrator can process the data contained in Cookies files while they are used by the visitors of the Online Shop for the following purposes:
3.2.1. identification of the Customers as logged in in the Online Shop and showing the status of being logged;
3.2.2. memorizing the products added to the cart in order to place orders;
3.2.3. memorizing the data of filled Order Forms, online surveys or login data to the Online Shop;
3.2.4. customizing the content of the Online Shop to the individual preferences of the Customer (e.g. the color, font size, page layout) and optimizing the use of the website of the Online Shop;
3.2.5. keeping anonymous statistics showing how the Online Shop may be used;
3.2.6. studying the characteristics of visitor behavior by analyzing their actions (repeated visits to the sites, keywords, etc.) in order to create their profiles and provide them with advertisements that match their predicted interests, even when they visit other websites in the Google Display Network, Inc. (remarketing)
3.3. By default, most web browsers available on the market implicitly accepts saving cookies. Everyone has the ability to determine the conditions for the use of cookies by setting one’s own web browser. This means that it is possible to e.g. partially reduce (e.g. temporarily) or completely disable the ability to save cookies - in the latter case, however, it may affect some functionality of the Online Shop (for example, it might be impossible for the path of Orders to pass via the Order Form due to lack of memorization of the Products in the shopping cart during the subsequent steps of submitting an order).
3.4. Internet browser settings regarding cookies are relevant with regard to consent to the use of cookies by our Online Store - in accordance with the legal regulations such consent may also be expressed through the web browser settings. In the absence of such express consent the web browser settings regarding cookies should be appropriately changed.
3.5. Specific details on changing the settings for cookies and their removal from the most popular web browsers are available in the help section of the web browser and on the following pages (just click the link):
• Chrome
• Firefox
• Internet Explorer,
• Opera
• Safari
3.6. The administrator also processes anonymous performance data related to the use of the Internet Store (IP address, domain) to generate statistics to assist in the administration of the online shop. These data are anonymous and aggregate, i.e., Do not contain identifying characteristics of visitors to our Site Shop. These data are not disclosed to third parties.
3.7. The data collected are processed in the framework of these services in a way anonymised (these are called. Operating data that prevent the identification of individuals) to generate statistics to assist in the administration of the online shop. These data are anonymous and aggregate, i.e., Do not contain identifying characteristics of visitors to our Site Shop. These data are not disclosed to third parties.
3.8. Administrator using these services in the Internet Shop collects data such as the source and medium of acquiring the Customers and the manner of their behavior on the online store, information on
devices and browsers that visit the site, IP and domain, geographic data, data related to contracts (cart and its value), and demographic information (age, gender) and interest.
3.9. Detailed information about the principles on which the operation of Google Analytics and Universal Analytics, including the principles of data collection and processing are available here: How Google uses data when you use websites or applications of our partners (www.google.com/intl/pl/policies / privacy / partners /).
4. BASIS FOR DATA PROCESSING
4.1. Providing personal data by the Service User or the Customer is voluntary, however, failure to provide personal data indicated on the website of the Online Shop and in the Online Shop Regulations necessary for the conclusion and implementation of the Sale Agreement or agreement for the provision of Electronic Services shall result in the inability to conclude that agreement.
4.2. The basis for processing of personal data of the Service User or the Customer is a need to implement the agreement in which is the Service User or the Customer a party to or to take actions on request of the Service User or the Customer before its conclusion. In case of data processing for the purposes of direct marketing of one’s own products or services of the administrator the basis for such processing is (1) the prior consent of the Service User or the Customer or (2) the fulfillment of legitimate objectives pursued by the Administrator (in accordance with Article 23, para. 4 of the Act on Personal Data Protection - the legitimate objectives shall be understood, in particular, as direct marketing of the Administrator’s own products or services).
4.3. In case of data processing in order to express the opinion of the Customer included in the Sale Agreement the basis for such processing is the consent of the Service User or the Customer.
5. RIGHT TO CONTROL, ACCESS AND MODIFY THE DATA
5.1. The Service User or the Customer has the right to access their personal data and modify them.
5.2. Every person has the right to control the processed data included in the data files of the Administrator of the person concerned, in particular the right to: request to supplement, update or modify personal data, temporary or permanent suspension of their processing or their removal if they are incomplete, outdated, incorrect or collected in a way that violates the law or if they are no longer necessary for the purpose for which they were collected.
5.3. If the Service User or the Customer gives consent to data processing for direct marketing of own products or services of the Administrator, the consent may be revoked at any time.
5.4. If case the Administrator intends to process or processes data of the Service User or the Customer in order for direct marketing of own products or services of the Administrator, the person concerned is also entitled to (1) file a written, justified request to cease data processing due to a particular situation or to (2) object to the data processing.
5.5. In order to exercise the rights referred to above one may contact the Administrator by sending an appropriate message in writing or by e-mail to the address indicated at the beginning of this privacy policy.
6. FINAL PROVISIONS
6.1. The Online Shop may contain links to other websites. The Administrator advises that after passing on the other websites the consumer should accustom with their policy statements. This privacy policy applies only to this Online Shop.
6.2. The Administrator uses technical and organizational measures to ensure the protection of the processed personal appropriately to the risks and category of data being protected, in particular protects data against their unauthorized disclosure, acquisition by an unauthorized person, processing with the violation of existing regulations, against their modification, loss, damage or destruction.
6.3. The Administrator provides the following respective technical measures to prevent the acquisition and modification of the electronically transmitted personal data by unauthorized persons:
6.3.1. Securing a the data files against unauthorized access.
6.3.2. Access to the account only after providing an individual username and password.
English
