ONLINE STORE PRIVACY POLICY
www.klugarden.pl
The administrator of Personal Data on the website available at: www.klugarden.pl, hereinafter referred to as the Online Store, is UNIKAT sp. z o.o., Lipnowska 21a, 87 – 500 Rypin, KRS: 0000109132, NIP: 8921342248, REGON: 910945070, share capital 760000 PLN .00
Respecting your rights as subjects of personal data (data subjects) and respecting applicable law, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (General Data Protection Regulation), hereinafter referred to as the GDPR, the Act of May 10, 2018 on the protection of personal data (Journal of Laws 2018, item 1000, hereinafter referred to as the Act) and other relevant provisions on the protection of personal data, we undertake to maintain the security and confidentiality of the personal data obtained from you. All employees have been properly trained in the processing of personal data, and as the Personal Data Administrator, we have implemented appropriate safeguards as well as technical and organizational measures to ensure the highest level of personal data protection. We have implemented procedures and policies for the protection of personal data in accordance with the GDPR, thanks to which we ensure compliance with the law and reliability of data processing processes, as well as the enforcement of all rights you have as data subjects. Additionally, if necessary, we cooperate with the supervisory authority in the Republic of Poland, i.e. with the President of the Office for Personal Data Protection (hereinafter referred to as POPDP).
3.In our Online Store, we collect the following personal data:
a) name and surname – may be processed when, as users of our Online Store (including customers or potential customers), you provide them to us via e-mail, registration form, order form, contact form available in our Online Store, traditional mail or when contacted by phone, in order to take advantage of the offer of our Online Store, as well as in order to properly address the parcel containing the Product ordered by you and to provide other services to you,
b) address of residence or correspondence – is necessary for the correct shipment of the ordered Products; its indication is necessary when making purchases in our Store,
c) telephone number – may be processed in the event of telephone contact on your part (including as customers or potential customers), as well as when you provide it to us via e-mail, registration form, order form, contact form available on our website Online Store or traditional mail, in order to enable us to contact you in the event of such a need in connection with the shipment of the Product ordered by you, as well as to answer questions related to the offer of our Online Store,
d) e-mail address – may be processed when you, as users of our Online Store (including customers or potential customers), provide it to us in the event of contact via e-mail, registration form, order form or contact form available in our Online Store as well as via traditional mail or telephone contact; we send you an order confirmation via e-mail, we contact you in the event of such a need related to the execution of the order, as well as we answer questions related to the offer of our Online Store; if you have consented to the transfer of marketing content and you have become a subscriber to our newsletter, we will also send you commercial information several times a month,
e) Company name/NIP – we collect from entrepreneurs and persons who request an invoice and have a NIP number,
f) IP address of the device – information resulting from the general rules of connections made on the Internet, such as the IP address (and other information contained in system logs), are used for technical and statistical purposes, in particular to collect general demographic information (e.g. about the region from which the connection is made)
g) possibly other data may be collected as part of the conduct of specific matters or may be provided by you as users of our Online Store (including as customers or potential customers) via e-mail, contact form available in the Online Store, traditional mail or when contacting by phone.
4.Providing the data indicated in the preceding point is necessary in the cases indicated in the preceding point, including in particular:
a) in order to take advantage of the offer available in our Online Store by placing an order via the order form, including without the need to register (set up) an account in the Online Store,
b) in order to ship the Products ordered by you in our Online Store,
c) in order to answer your questions and enable contact via e-mail, contact form available in the Online Store, traditional mail or telephone contact,
d) for voluntary registration – setting up an account in our Online Store; in such a situation, we store the data provided by you to make it easier for you to use our Online Store in the future until you deregister (delete your account),
e) in order to provide the newsletter service (subscription) – if you want to be informed about interesting events and commercial offers, you can subscribe to our newsletter; joining the subscription is voluntary and you can unsubscribe at any time.
5.Our Online Store uses Cookies technology to adapt its functioning to your individual needs. Therefore, you may agree that the data and information entered by you will be remembered, thanks to which it will be possible to use them the next time you visit our Online Store without the need to re-enter them. Other site owners will not have access to this data and information. However, if you do not agree to personalize the Online Store, we suggest disabling cookies in the options of your web browser.
6.Each of you as a person using our Online Store has the option of choosing whether and to what extent you want to use our services and share information and data about yourself, to the extent specified in this Privacy Policy.
7.In accordance with the principle of minimization, we process only those categories of personal data that are necessary to achieve the purposes listed in point 3 and 4 above.
We process personal data for the period necessary to achieve the purposes listed in point 3 and 4 above.
8.Personal data may be processed for a longer period, if such an entitlement or obligation imposed on us as the Administrator results from specific legal provisions, from the Administrator’s legitimate interest referred to in point 10 lit. c below (i.e. for the period of limitation of claims or completion of relevant proceedings, if they were initiated during the period of limitation) or when the service we provide is continuous (e.g. newsletter subscription).
9.The source of the Personal Data processed by the Administrator is you, i.e. the data subjects.
10.10.The legal basis for the processing of your personal data is:
a) 6 sec. 1 letter b of the GDPR, i.e. the necessity to perform the contract to which you are a party, or to take action at your request before concluding the contract, or
b) 6 par. 1 lit. c GDPR, i.e. the necessity to fulfill the legal obligations incumbent on the Administrator, or
c) 6 para. 1 letter f of the GDPR, i.e. the legitimate interest of the Administrator, which is to determine, pursue or defend claims until their limitation period or until the completion of relevant proceedings, if they were initiated during this period, or
d) 6 par. 1 lit. a GDPR, i.e. your consent to the processing of personal data for specific purposes, when other legal grounds for the processing of personal data do not apply – e.g. in the case of the provision of a newsletter service.
11.Your personal data is not transferred to a third country or an international organization within the meaning of the GDPR. In the event that personal data is transferred to a third country or an international organization, you will be informed in advance and the Administrator will apply the necessary safeguards referred to in Chapter V of the GDPR.
12.We do not share any personal data with third parties without the express consent of the data subject. Personal data without the consent of the data subject may be made available only to public law entities, i.e. authorities and administration (e.g. tax authorities, law enforcement authorities and other entities authorized by generally applicable laws).
13.Personal data may be entrusted for processing to entities processing such data on our behalf as the Personal Data Administrator. In such a situation, as the Personal Data Administrator, we conclude a personal data processing agreement with the processing entity. The processing entity processes the entrusted personal data only for the needs, to the extent and for the purposes indicated in the entrustment agreement referred to in the preceding sentence. Without entrusting your personal data for processing, we would not be able to conduct our business as part of the Online Store or deliver parcels with ordered Products to you. As the Personal Data Administrator, we entrust personal data for processing to the following entities:
a) providing hosting services for the website on which our Online Store operates,
b) providing postal, courier and transport services – in order to deliver parcels with ordered Products,
c) providing us with other services that are necessary for the current functioning of the Online Store.
14.Personal data are not subject to profiling by us as the Administrator within the meaning of the provisions of the GDPR.
15.In accordance with the provisions of the GDPR, each person whose personal data we process as the Personal Data Administrator has the right to:
a) being informed about the processing of personal data referred to in art. 12 GDPR,
b) access to your personal data referred to in art. 15 GDPR,
c) correcting, supplementing, updating, rectifying personal data referred to in art. 16 GDPR,
d) deletion of data (right to be forgotten), referred to in art. 17 GDPR,
e) restriction of processing referred to in art. 18 GDPR,
f) transfer of data referred to in art. 20 GDPR,
g) object to the processing of personal data, as referred to in art. 21 GDPR,
h) in the case of the legal basis referred to in point 10 lit. d above – the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal,
i) not to be subject to profiling referred to in art. 22 in relation to joke. 4 point 4 GDPR,
j) lodging a complaint to the supervisory body (i.e. to the President of the Office for Personal Data Protection), referred to in art. 77 of the GDPR, taking into account the rules of using and exercising these rights under the provisions of the GDPR.
16.If you want to exercise your rights referred to in the preceding point, please use the appropriate tabs in the Online Store, which allow you to delete your account and data collected in our Online Store, or please send a message by e-mail to the e-mail address or in the form in writing to the correspondence address referred to in point 17 below.
17.All inquiries, applications and complaints regarding the processing of personal data by the Administrator, hereinafter referred to as Submissions, should be sent to the following e-mail address: kontakt@klugarden.pl or in writing to the following address: ul. UNIKAT Sp. z o.o., Lipnowska 21a, 87-500 Rypin
18.The content of the Application should clearly indicate:
a) data of the person or persons to whom the Report relates,
b) the event that is the reason for the Report,
c) present their requests and the legal basis for these requests,
d) indicate the expected manner of settling the matter.
19.Each identified case of a security breach is documented, and in the event of one of the situations specified in the provisions of the GDPR or the Act, the data subjects and, if applicable, PUODO are informed about such a breach of the provisions on the protection of personal data.
20.All capitalized words have the meaning given to them in the Regulations of our Online Store, unless otherwise stated in this Privacy Policy.
21.The provisions of this Privacy Policy apply to the extent possible, respectively, to all persons with whom we are in legal relations and for whom we are also the Administrator of their personal data, including in particular our Clients and Contractors.
22.In matters not covered by this Privacy Policy, the relevant provisions of generally applicable law shall apply. In the event of non-compliance of the provisions of this Privacy Policy with the above provisions, these provisions shall prevail.
processed in accordance with the law,
collected for specified, lawful purposes and not subjected to further processing incompatible with these purposes,
factually correct and adequate in relation to the purposes for which they are processed and stored in a form that allows the identification of the persons they concern, no longer than it is necessary to achieve the purpose of processing.
