The Administrator of personal data of Store Users is Milena Bryła, running a business under the name MILENA BRYŁA, registered office in Warsaw (00-891), street Chłodna 11/612, VAT number: 6631806595, polish statistic identification number REGON: 386785170.
Users’ data that we collect is stored in the European Economic Area (“EEA”), but may also be transferred and processed in a country outside the EEA. In the case of transfers outside the EEA, the Administrator will use standard contractual clauses and the privacy shield.
PROCESSING OF PERSONAL DATA
The Administrator processes personal data in accordance with the provisions of the Regulation of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (hereinafter: “GDPR” ). To run the Store’s website, he applies the required technical measures to protect the personal data being processed and to protect personal data against unauthorized disclosure, takeover by unauthorized persons, processing in violation of the law and change, loss or destruction. Expressing consent to the processing of personal data by the Administrator is voluntary, however, the lack of consent to the processing of personal data for marketing purposes will prevent communication with the Customer. Withdrawal of consent does not affect the lawfulness of the processing that was carried out before its withdrawal.
The User has the right to ask the Administrator to obtain:
- Information on whether the data is being processed and other information, in particular about a breach of data protection;
- Access to data;
- Data rectification;
- Removal of data from the website;
- Data processing restrictions;
- Data portability;
- Object to data processing;
- Not to be subject to decisions based solely on automated processing (including profiling).
DATA PROCESSING PURPOSES
The Administrator processes Users’ personal data in order to properly perform contracts concluded as part of the Store, in particular to:
- Registering an Account in the Store;
- Implementation of the sales contract concluded on the terms described in the Terms and Conditions;
- Marketing of the Administrator’s Products and services, including sending, with prior consent, messages containing commercial information, in particular in the form of a Newsletter, in the form of a In Stock Notification based on the legitimate interest pursued by the Administrator (Article 6 (1) f of the GDPR) or on the basis of a separate consent (Article 6 (1) a of the GDPR).
- Sending commercial information by electronic means in accordance with art. 10 sec. 2 of the Act on the provision of electronic services of July 18, 2002 (i.e. Journal of Laws of 2017, item 1219 as amended) – on the basis of a separate consent.
Providing personal data by the User is voluntary, but necessary to make transactions within the Store. When the User subscribes to the Newsletter, electronic messages will be sent to his e-mail address containing commercial information about promotions and new Products available in the Store.
When placing an order in the Store, the User provides the following personal data:
- First name and last name;
- E-mail adress;
- Address data – home address, zip code, city;
- Phone number.
When using the Account service, the User provides the following personal data:
- First name and last name;
- E-mail adress;
In the case of using the Newsletter or the Waitlist (In Stock Notification) service, the User provides only his e-mail address.
Using the Google Analytics and Facebook Pixel services, the Administrator also collects the so-called operational data (not personal data) of Users visiting the Store’s website. The collected data is used to generate statistics and advertising services. The administrator collects data such as visits, navigation path and the scope of use of the Store’s functions by the User, the time of staying on the Store’s website, information on devices and browsers from which the User visits the Store, as well as geographic data and interests.
Operating data of the Store’s visitors may be used to conduct online advertising campaigns selected in accordance with the interests of the Users. These ads are displayed based on the User’s activity in the Store. For this purpose, the Administrator uses external advertising platforms, such as Facebook, Google, Instagram, etc., which adjust the User’s profile in their database to determine the optimal time and place to display the advertisement of interest to the User.
WHO WE SHARE YOUR PERSONAL DATA WITH
The Administrator provides Users’ personal data to postal operators and couriers in the field of parcel delivery, banks and entities providing payment services, providing legal and accounting services to the Administrator, and other entities entrusted by the administrator with the processing of personal data pursuant to art. 29 of the General Data Protection Regulation.
If the User uses the Newsletter service, the Administrator provides personal data to the Mailchimp platform (i.e. The Rocket Science Group LLC based in the United States) that supports the Newsletter service. Mailchimp is certified under the Privacy Shield.
DATE OF STORAGE OF DATA
Users’ data will be stored as long as it is necessary to perform the Administrator’s services or as long as required by law. Then the personal data will be deleted. The Administrator cannot delete the User’s data when there is a requirement to store data (tax and accounting regulations) or when there are other legal grounds for data storage, such as an ongoing contractual relationship.
RIGHT TO INFORMATION AND CANCELLATION OF CONSENT TO DATA PROCESSING
The User may request the Administrator in writing or by e-mail for free information on personal data collected and processed by the Administrator. He may also withdraw his prior consent to the processing of personal data and request the deletion of personal data. The administrator will then take the necessary steps to immediately and free of charge stop processing the User’s personal data and remove them from the databases, if possible. In this case, please contact us at: firstname.lastname@example.org or by post to the following address: ul. Chłodna 11/612, 00-891 Warsaw, Poland. In addition, the User has the right to lodge a complaint with the supervisory body, i.e. the President of the Office for Personal Data Protection.