Shopping Cart
The Policy is addressed to users of the Online Store's website.
The Policy describes the rules for collecting and using user data, which is collected directly from them or via cookies and similar technologies.
Data Controller and Contact Details
The controller of data collected in connection with the use of the Website is MH Projekt Monika Hubisz, with its registered office at ul. Hermesa 8 lok. 1, 80-299 Gdańsk, e-mail office@feraw.eu. For matters related to the processing of your data by the Controller, you can contact us using the above address details.
Scope of Collected Data
1. The Website allows you to contact the Controller and provide him/her with your identification and contact data, as well as data related to the content of the message.
2. The Controller collects data related to your activity, such as time spent on the site, search terms, number of subpages viewed, date and source of visit.
Type of Personal Data Processed
The Controller may process the User's personal data: name and surname, date of birth, residential address, e-mail address, telephone number, Tax Identification Number (NIP).
Source of Data
1. If you have contacted the Controller, the data was provided directly by you.
2. If your data was provided in connection with a matter being handled by the person who directed that matter to the Controller, then that person is the source of the data. In such case, the Controller receives identification, address data and data related to the matter, such as a description of the matter.
Purpose and Legal Basis for Processing Personal Data
Your data may be processed for the purpose of:
• analyzing network traffic, ensuring security within the Website and adapting content to users' needs based on the Controller's legitimate interest (Art. 6(1)(f) GDPR);
• responding to questions asked, providing the requested offer and conducting correspondence to handle the matter, based on your consent and the Controller's legitimate interest, which is fulfilling users' requests (Art. 6(1)(a) and (f) GDPR).
Right to Withdraw Consent
You may withdraw your consent to the processing of contact data at any time by contacting the Controller. Withdrawal of consent may hinder or prevent contact with you.
Obligation or Voluntariness of Providing Data
1. Providing data by you for purposes related to handling the matter is voluntary but necessary. Failure to provide such data may hinder or prevent the matter from being processed.
2. Providing data necessary for static analysis of Website users is voluntary. You may use the so-called incognito mode to browse the site without sharing information about your visit to the Website with the Controller. Using incognito mode, and thus not providing data, does not affect the ability to use the Website.
Rights under the GDPR regarding Processed Data
You have the right to:
* request from the Controller access to your data, as well as to receive a copy of it (Art. 15 GDPR);
* request from the Controller rectification or correction of data (Art. 16 GDPR) – in relation to a request for data rectification when you notice that the data is incorrect or incomplete;
* request from the Controller erasure of data (Art. 17 GDPR);
* request from the Controller restriction of processing (Art. 18 GDPR) – e.g., if you notice that the data is incorrect, you may request restriction of processing of your data for a period allowing us to verify the correctness of this data);
* lodge a complaint regarding the processing of your personal data by the Controller to the President of the Personal Data Protection Office.
All requests regarding information about data or its processing can be submitted to the email address: office@feraw.eu
Recipients of Your Personal Data
Recipients of your personal data may only be entities authorized to receive it under the law. Furthermore, your data may be shared with couriers, postal operators, hosting provider, mail server provider.
Data Retention Period
Your personal data will be stored until the withdrawal of consent or until the matter is concluded, and subsequently until the expiry of the limitation period for claims of the parties related to its execution.
Data related to network traffic analysis collected via cookies and similar technologies may be stored until the cookie expires. Some cookies never expire, therefore the data retention period will be equivalent to the time necessary for the controller to achieve the purposes related to data collection, such as ensuring security and analyzing historical data related to site traffic.
Transfer of Data to a Third Country or International Organisation
Your data will not be transferred to third countries or international organisations.
Use of Cookies and Similar Technologies
The Website allows for the collection of information about the user via cookies and similar technologies, the use of which is usually associated with the installation of this tool on the user's device (computer, smartphone, etc.). This information is used to remember the user's decisions (choice of font, contrast, policy acceptance), maintain the user's session (e.g., after logging in), remember the password (with consent), collect information about the user's device and their visit to ensure security, but also to analyze visits and adapt content.
Information obtained via cookies and similar technologies is not combined with other data of Website users, nor is it used to identify them by the Controller.
The user has the option to set their browser to block certain types of cookies and other technologies, for example by specifying that only those necessary for the correct display of the site will be allowed. By default, most browsers allow the use of all cookies, but the user can change these settings at any time, and can also delete already installed cookies. Each browser allows this through one of the options available in settings or preferences.
The user also has the option to use the so-called incognito mode, which blocks the possibility of collecting data about their visit.
Using the site without changing browser settings, i.e., with default acceptance of cookies and similar technologies, means consent to their use for the purposes specified above. The Controller does not use the obtained information for marketing purposes.
PROFILING IN THE ONLINE STORE
The GDPR imposes on the Controller the obligation to inform about automated decision-making, including profiling, referred to in Art. 22(1) and (4) of the GDPR, and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. With this in mind, the Controller provides in this section of the privacy policy information regarding possible profiling.
The Controller may use profiling in the Online Store for direct marketing purposes, but decisions made on its basis by the Controller do not concern the conclusion or refusal to conclude a Sales Agreement or the ability to use Electronic Services in the Online Store. The effect of using profiling in the Online Store may be, for example, granting a discount to a given person, sending them a discount code, reminding them about unfinished purchases, sending a proposal for a Product that may correspond to the interests or preferences of a given person, or proposing better terms compared to the standard offer of the Online Store. Despite profiling, the person freely decides whether they want to use the discount or better terms received in this way and make a purchase in the Online Store.
Profiling in the Online Store involves the automatic analysis or prediction of a person's behavior on the Online Store's website, e.g., by adding a specific Product to the cart, viewing the page of a specific Product in the Online Store, or by analyzing the history of past purchases made in the Online Store. A condition for such profiling is that the Controller has the personal data of the given person in order to be able to subsequently send them, for example, a discount code.
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
INFORMATION FROM THE PERSONAL DATA ADMINISTRATOR PREPARED BASED ON ART. 13(1) AND (2) OF THE GENERAL DATA PROTECTION REGULATION (GDPR)
In connection with the entry into force and the necessity to apply Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation"), the owner of the internet domain presents the following information regarding the principles of processing your personal data.
1. The website processes your personal data for the following purposes:
a) realization of services offered on the website,
b) transferring your personal data to ING Bank Śląski S.A. (the "Bank") in connection with
the Bank providing the Online Store with the service of making available infrastructure for handling internet payments (legal basis: Art. 6(1)(f) of the Regulation).
handling and settlement by the Bank of payments made by Online Store customers via the internet using payment instruments (legal basis: Art. 6(1)(f) of the Regulation).
for the purpose of verifying by the Bank the proper performance of agreements concluded with the Online Store, in particular ensuring the protection of payers' interests in connection with complaints lodged by them (legal basis: Art. 6(1)(f) of the Regulation).
c) transferring your personal data to Twisto Polska sp. z o.o. in connection with the possibility of proposing payment for the purchased goods or services by Twisto Polska sp. z o.o. under a commission agreement covering the "Buy with Twisto" purchase formula and making this purchase formula available by the Online Store, as well as the purpose of verifying by Twisto Polska Sp. z o.o. the proper performance of such commission agreements (legal basis: Art. 6(1)(f) of the Regulation).
4. In connection with the processing of personal data for the purposes specified in section 2, your personal data may be made available by the Online Store to other recipients or categories of recipients of personal data, which may include:
a) ING Bank Śląski S.A.
b) Twisto Polska sp. z o.o.
- Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, NIP (Tax ID): 676-248-20-64, KRS (National Court Register No.): 0000537197 – for the purpose of using the edrone.me mailing system, used for sending newsletters,
- Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, NIP (Tax ID): 676-248-20-64, KRS (National Court Register No.): 0000537197 – for marketing purposes solely for the needs of an email, sms, social media campaign launched or indicated by the Controller using the edrone system.
Information regarding the online dispute resolution system based on Art. 14(1) ODR (Online Dispute Resolution):
The European Commission provides consumers with the possibility to resolve disputes in online trade according to Art. 14(1) ODR (Online Dispute Resolution) on one of the platforms. The platform (http://ec.europa.eu/consumers/odr) serves as a place where consumers can try to reach out-of-court settlements in disputes arising from purchases and service agreements online.