PRIVACY AND COOKIES POLICY
When fulfilling the information obligation imposed under Art. 13. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on the protection of data), the Personal Data Administrator hereby informs:
1. This Privacy Policy (hereinafter referred to as the "Policy") is addressed to users using the online store available in the domain https://www.herraton.com/ (hereinafter referred to as the "Online Store") and specifies the type, scope, ways of using the data and securing personal data. The policy is informative and constitutes an integral part of the Regulations of the Online Store. All terms used in the Policy written with a capital letter have the same meaning as assigned to them in the regulations of the Online Store, unless otherwise stated in this Policy.
2. The administrator of personal data obtained from people using the Online Store is the Seller, i.e. Mrs. Mariola Lagiewska running a business under the name Mariola Lagiewska, Sulechowska 1 street, room 500, 65-001 Zielona Gora, NIP: 611-250-06-91, REGON 081042969, contact phone: +48 609 261 854 (connection fee according to the operator's tariff), (hereinafter also referred to as "Administrator").
3. The User by placing an Order in the Online Store without registering an Account, and / or registering an Account, and / or logging in to the Account using the data provided on the Facebook, Google+ or Twitter social network, and / or by contacting the Seller (by e-mail or by phone) , and / or using other services provided by the Seller electronically available in the Online Store, described in detail in Chapter III of the Online Store regulations, and / or by subscribing to the newsletter - provides the Administrator with his personal data (name and surname, nickname from the website from which uses by logging in to the Account, address, e-mail address, telephone number, or company name, business address, NIP, IP address of the computer used by the User when using the Online Store).
4. Purposes and activities of personal data processing:
4.1. placing an Order without registering an Account - providing data is voluntary, but necessary to perform the Contract for the sale and delivery of the Order or send the ticket by e-mail to the e-mail address provided by the Ordering Party. The data provided when placing the Order is used to implement the Sales Agreement concluded with the User, and the legal basis for their processing is art. 6 sec. 1 lit. b) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on the protection of data) (hereinafter referred to as the "GDPR Regulation"). The data will be processed by the Administrator for the period necessary to perform the Sales Agreement, however, the Administrator will still store the User's data in order to defend against any claims related to a possible withdrawal from the Sales Agreement, consideration of complaints, for the purposes of tax settlements, which is the Administrator's legitimate interest, about which referred to in Art. 6 sec. 1. lit. f) GDPR Regulations;
4.2. Account registration - the User, in order not to provide personal data during subsequent purchases, may register the Account. Providing data is voluntary, but necessary to register the Account, the User may also use the data provided on the Facebook, Google+ or Twitter social network when registering the Account. The data provided during registration (name and surname, nickname from another website, e-mail address) are used to maintain the Account and perform the Sales Agreements concluded by the Ordering Party, and the legal basis for their processing is the consent given by the User when registering the Account (in accordance with art. section 1 letter a) of the GDPR Regulation). The data will be processed by the Seller for the duration of the Account, unless the Online Store User resigns from having it earlier. However, resignation from the Account does not lead to the deletion of data from the database. The Administrator will still store the User's data in order to defend against any claims related to maintaining the Account, in particular to demonstrate the User's consent to registration, which is the Administrator's legitimate interest referred to in art. 6 sec. 1. lit. f) GDPR Regulations;
4.3. contact of the user of the Online Store with the Administrator - by contacting the User via e-mail or by phone, the User provides the Administrator with his e-mail address as the sender's address, possibly his name and contact telephone number. Providing data is voluntary, but necessary for the Administrator to contact the User of the Online Store. In this case, the User's data is processed for the purpose of contact on the basis of activities requested and initiated by the User, and the legal basis for processing is art. 6 sec. 1 lit. b) GDPR Regulations. The legal basis for data processing after the end of the contact is the justified purpose of archiving correspondence for the purpose of showing its course in the future (Article 6 (1) (f) of the GDPR Regulation). The content of the correspondence may be archived, the Administrator is not able to clearly determine when the correspondence will be deleted. The User of the Online Store has the right to demand the presentation of the history of correspondence with the Administrator (if it was archived), as well as demand its removal, unless the archiving is justified due to the overriding interest of the Administrator, e.g. defense against potential claims on the part of the User The online store;
4.4. using the service to remind the Account Password - providing the data is voluntary, but necessary for the performance of the contract for the provision of electronic services by the Seller. The data provided by the User is used to remind the User of the Account Password by e-mail, and the legal basis for their processing is the performance of the contract concluded with the User, in accordance with art. 6 sec. 1 lit. b) GDPR Regulations. The data will be processed by the Administrator for the period necessary to perform the contract for the provision of electronic services. After the performance of the contract, the Administrator will still store the User's data in order to defend against any claims regarding the services provided by the Seller electronically, considering complaints, which is the Administrator's legitimate interest referred to in art. 6 sec. 1. lit. f) GDPR Regulations;
4.5. sending the newsletter - the user of the Online Store who wants to subscribe to the newsletter, to receive information about events, meetings, competitions by e-mail from the Administrator, must provide his e-mail address via the subscription form for the newsletter. Providing an email is voluntary, but necessary to subscribe to the newsletter. The data provided when subscribing to the newsletter is used only to send the User by e-mail to the address indicated by him in the form of a newsletter, and the legal basis for their processing is the consent given by the User - in accordance with art. 6 sec. 1 lit. a) GDPR Regulations. The data will be processed by the Administrator for the duration of the newsletter, unless the Online Store user resigns from receiving it. However, unsubscribing from the newsletter does not lead to the deletion of data from the database. The Administrator will still store the User's data in order to defend against any claims related to sending the newsletter, in particular to demonstrate the User's consent to receive the newsletter, which is the Administrator's legitimate interest referred to in art. 6 sec. 1. lit. f) GDPR Regulations. The user may at any time unsubscribe from the newsletter by clicking on the dedicated link in each message or by simply contacting the Administrator.
5. The Administrator may also use the personal data of the Online Store User for the purpose of execution by others incumbent on him as the personal data administrator, e.g. to pursue claims arising from Sales Agreements concluded via the Online Store, to issue an invoice or other accounting document, to make tax settlements, based on Article. 6 sec. 1 lit. f) and art. 9 sec. 2 lit. h) Regulations of the GDPR - for the periods of limitation of claims, specified in legal provisions.
6. The administrator informs that the user of the Online Store has the right to transfer data at any time, the right to access the content of personal data and the possibility of correcting, rectifying, objecting to data processing, and the consent granted to data processing may be withdrawn by the user at any time. moment. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal. The administrator may refuse to delete the user's personal data if there are reasons resulting from legal provisions. The user also has the right to lodge a complaint regarding the processing of personal data to the President of the Office for Personal Data Protection. The rules related to the implementation of the indicated rights are described in detail in Art. 15 - 21 of the GDPR Regulation, the rights of the Online Store User indicated in this point are not absolute and will not be entitled to the User in relation to all activities of processing his personal data. Data of Users and Ordering Parties will not be subject to automated decision making, including profiling. The data is not transferred outside the European Economic Area.
7. The rules related to the implementation of the indicated rights of the User are described in detail in art. 15 - 21 of the GDPR Regulation:
7.1. the right to delete data - the so-called "The right to be forgotten" (Article 17 of the GDPR Regulation): The User has the right to request the deletion of all or some personal data if: a) personal data are no longer necessary for the purposes for which they were collected or processed,
b) personal data is processed unlawfully,
c) personal data must be removed in order to comply with the legal obligation provided for in the law of the European Union or the law of the Member State to which the Administrator is subject,
d) the personal data has been collected in relation to the offering of information society services. Despite the request to delete personal data, in connection with the objection, the Administrator may retain certain personal data to the extent that processing is necessary to establish, assert or defend claims, as well as to fulfill a legal obligation requiring processing under the law. This applies in particular to personal data including: name, surname, e-mail address, which data are kept for the purpose of considering complaints and claims related to the use of the services of the Personal Data Administrator.
7.2. the right to limit data processing (Article 18 of the GDPR Regulation): The User has the right to demand that the processing of his personal data be restricted. Submitting a request, pending its consideration, prevents the use of certain functionalities or services, the use of which will involve the processing of data covered by the request. The User has the right to request the restriction of the use of personal data in the following cases:
a) when he questions the correctness of his personal data - then the Administrator limits their use for the time needed to verify the correctness of the data, but no longer than for 7 days,
b) when the processing of data is unlawful, and instead of deleting the data, the user requests the restriction of their use,
c) when personal data are no longer necessary for the purposes for which they were collected or used, but they are needed by the user to establish, assert or defend claims, d) when he has objected to the use of his data - then the restriction takes place for the time needed to consider whether - due to the special situation - the protection of the interests, rights and freedoms of the User outweighs the interests that the Administrator performs when processing the User's personal data.
7.3. the right to access data (Article 15 of the GDPR Regulation): The User has the right to obtain confirmation from the Administrator whether he processes personal data, and if so, the user has the right to:
a) get access to your personal data,
b) obtain information about the purposes of processing, categories of personal data processed, recipients or categories of recipients of these data, the planned period of storage of the User's data or the criteria for determining this period (when it is not possible to specify the planned period of data processing), about the rights of the User under GDPR Regulations and the right to lodge a complaint with the supervisory authority, about the source of this data, about automated decision making, including profiling, and about the security measures applied in connection with the transfer of such data outside the European Union;
c) obtain a copy of your personal data.
7.4. the right to rectify data (Article 16 of the GDPR Regulation): The User has the right to request the Administrator to immediately rectify his / her personal data that is incorrect. Taking into account the purposes of processing, the data subject has the right to request supplementing incomplete personal data, including by submitting an additional statement, sending a request to the Administrator.
8. The Administrator also hereby informs that he never transfers, sells or lends the collected personal data of Users and Ordering Parties to third parties other than those indicated in this
Policy, unless with the express consent or at the request of the User, or at the request of state authorities authorized by law. in connection with pending proceedings (e.g. courts, law enforcement agencies, Trade Inspection).
9. The Administrator processes personal data provided by the User of the Online Store in a manner consistent with the scope of the consent granted by the User and legal requirements, including the provisions of the GDPR Regulation, in particular, protects Users' personal data against disclosure to unauthorized persons, loss or damage, and also guarantees the confidentiality of any provided information. him personal data.
10. The online store uses "cookies", which are used to identify the browser when using the online store, so that you know what page to display. Cookies do not contain any personal data. By entering the website of the Online Store, certain information may be placed on the User's computer, which may take the form of a "cookie". Detailed and most up-to-date information on this subject can be found directly on the manufacturer's website http://www.google.pl/intl/pl/policies/technologies/types/
11. Cookies are small files consisting of a string of letters and characters, saved on a computer via the Internet when visiting a given Product Page presented in the Online Store. Cookies are used by the Online Store only to better adapt the Online Store website to the individual preferences of the User. In addition, cookies used in the Online Store may serve the following purposes:
a) ensuring the proper operation and improvement of the functionality of the Online Store - "cookies" allow you to remember information that has been provided by the User, eg Login, login data indicated on social networking sites Facebook, Google + or Twitter, which the User uses to register the Account;
b) improving the efficiency and optimizing the operation of the Online Store - "cookies" enable reading information on how Users navigate the Online Store, from which location the Online Store is used, and thus help to improve its operation;
c) targeting informational and promotional content - cookies are used to automatically adjust the content of the Online Store to the User's needs;
d) to prevent sending spam.
12. Information collected and generated by "cookies" in the Online Store do not allow for the personalization and identification of the User, and as a result of their use, no personal data of the Online Store User is stored.
13. "Cookies" used in the Online Store are safe and have no harmful effect on the User's computer. By using the Online Store, the User agrees to the use of "cookies" in accordance with this Policy. The user may at any time change the way cookies are used by the browser, including blocking or deleting those that come from the Online Store. In most web browsers, you can delete, delete cookies from your computer's hard drive, block all sent cookies or set a warning before saving such files on your hard drive. For this purpose, please refer to the user manual or help topics of the web browser you are using. The process of controlling and deleting cookies may differ depending on the browser used. Restricting the use of "cookies" may affect some of the functionalities of the Online Store.
14. The administrator uses statistical analysis of traffic in the Online Store offered by Google Analytics (Google Inc. based in the USA). The administrator does not provide the operator of this service with personal data, but only anonymised information. The service is based on the use of cookies on the User's end device. In terms of information about the User's preferences collected by the Google advertising network, the User may view and edit the information resulting from cookies using the tool: https://www.google.com/ads/preferences/ Information on the ways in which Google uses data from the Online Store are available at https://policies.google.com/technologies/partner-sites
15. The online store also contains links to other websites not administered by the Administrator of personal data (e.g. Facebook, Google+, Twitter), so he cannot be held responsible for the content of these pages or for the level of privacy protection provided by the administrators of these pages. The Administrator also informs that this Policy applies only to the Online Store and that after switching to other websites, it is recommended that the User reads the relevant privacy policy before providing his personal data there. By deciding to go to such websites and visiting them, the User does so at his own risk.
16. The administrator is entitled to make changes to this Policy for important reasons (e.g. change in the law, change in the functioning of the Online Store). In the event of changes, the User will be notified at least 14 days in advance before the changes come into force - appropriate information about the changes to the Policy will be posted in the Online Store, and the User subscribing to the newsletter and / or having an Account - will receive information about the change in the Policy. also by e-mail. In the event of non-acceptance of the amended Policy, the User has the right to terminate the Policy, and thus refuse to leave his personal data.
17. The User is requested to immediately notify the Administrator of any breaches of security related to the use of the Online Store which he finds. In the event of any questions, comments, request