twojpiernik.com
Privacy Policy
Privacy Policy Of The Website
Www.Twojpiernik.Com
§1General Provisions
The controller of the personal data collected through the website www.twojpiernik.com is K.T.B INVEST SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, entered into the Register of Entrepreneurs maintained by the District Court Poznań – Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register, under KRS No. 0001091992, share capital: PLN 5,000, registered office and correspondence address:
17C/1, 64-610 Międzylesie, Poland
NIP: 7812066582
REGON: 527964610
Email: office@twojpiernik.com
Phone: +48 575 233 560
(hereinafter referred to as the "Controller" or the "Service Provider").
The personal data collected by the Controller through the Website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR) and the Polish Consumer Rights Act of 30 May 2014.
Any capitalized terms used in this Privacy Policy shall have the meanings assigned to them in the Terms and Conditions of the Website www.twojpiernik.com.
§2Types Of Personal Data Processed, Purposes, And Scope Of Data Collection
1. Purposes of Processing and Legal Basis
The Controller processes Users' personal data in the following cases:
•Placing an Order through the Website, for the purpose of performing the Digital Content Supply Agreement or the Sales Agreement, pursuant to Article 6(1)(b) GDPR (performance of a contract).
•Registering a Customer Account, for the purpose of creating and managing an individual Customer Account, pursuant to Article 6(1)(b) GDPR (performance of the agreement for the provision of electronic services in accordance with the Terms and Conditions).
•Using the Review System, to enable Customers to express their opinions regarding Products purchased through the Website and the Sales Agreement concluded with the Seller, pursuant to Article 6(1)(f) GDPR (the Controller's legitimate interest).
2. Types of Personal Data Processed
Depending on the service used, the following personal data may be collected:
When placing an Order:
•first and last name;
•company name;
•email address;
•telephone number.
When creating a Customer Account:
•first and last name;
•company name;
•email address;
•telephone number.
When using the Review System:
•first and last name;
•email address.
3. Data Retention Period
The Controller stores personal data for the following periods:
•where processing is necessary for the performance of a contract, for as long as necessary to perform the contract and thereafter for the period corresponding to the applicable limitation period for legal claims. Unless otherwise provided by law, the limitation period is six (6) years, or three (3) years for periodic claims and claims related to business activities;
•where processing is based on the User's consent, until the consent is withdrawn and thereafter for the limitation period applicable to any legal claims that may be asserted by or against the Controller. Unless otherwise provided by law, this period is six (6) years, or three (3) years for periodic claims and claims related to business activities;
•where processing is based on the Controller's legitimate interest, for as long as that legitimate interest exists and thereafter for the applicable limitation period for legal claims. Processing on this basis shall cease if the data subject successfully objects to such processing.
4. Technical Data
While using the Website, additional technical information may be collected, including:
•the IP address assigned to the User's device;
•the external IP address of the Internet service provider;
•domain name;
•browser type;
•access time;
•operating system type.
5. Marketing Communications
Where the User has provided separate consent pursuant to Article 6(1)(a) GDPR, personal data may also be processed for the purpose of:
•sending commercial information electronically;
•making telephone calls for direct marketing purposes,
including personalized marketing based on profiling, provided that the User has given the appropriate consent.
6. Navigation Data
The Controller may also collect navigation data, including information about:
•links clicked by the User;
•pages visited;
•other activities performed within the Website.
The legal basis for such processing is the Controller's legitimate interest pursuant to Article 6(1)(f) GDPR, consisting of improving the functionality of the Website and facilitating the provision of electronic services.
7. Voluntary Provision of Data
Providing personal data is voluntary. However, failure to provide data required for a particular service may make it impossible for the Controller to provide that service.
8. Data Protection Principles
The Controller exercises particular care in protecting the interests of data subjects and ensures that personal data is:
•processed lawfully, fairly, and transparently;
•collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes;
•accurate, relevant, and limited to what is necessary in relation to the purposes for which it is processed;
•stored in a form permitting identification of data subjects for no longer than is necessary to achieve the purposes of processing.
§3Disclosure Of Personal Data
1.Users' personal data may be disclosed to service providers engaged by the Controller for the operation of the Website, including in particular:
•payment service providers;
•courier and shipping companies;
•accounting service providers;
•hosting providers;
•customer review and survey providers;
•software providers supporting the Controller's business operations;
•email and marketing system providers;
•providers of software necessary for the operation of the Website.
2.Depending on the contractual arrangements and the circumstances of processing, the service providers referred to above either:
•process personal data exclusively on behalf of and under the instructions of the Controller (data processors); or
•independently determine the purposes and means of processing (independent controllers).
3.Users' personal data is stored exclusively within the European Economic Area (EEA), subject to the provisions of §5 point 5 and §6 of this Privacy Policy.
§4Data Subject Rights
1.Every data subject has the right to:
•access their personal data;
•rectify inaccurate or incomplete personal data;
•request the erasure of personal data ("right to be forgotten");
•request the restriction of processing;
•receive their personal data in a structured, commonly used, and machine-readable format (data portability);
•object to the processing of their personal data;
•withdraw their consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
2.The legal basis for the above rights is as follows:
•Right of access – Article 15 GDPR;
•Right to rectification – Article 16 GDPR;
•Right to erasure ("right to be forgotten") – Article 17 GDPR;
•Right to restriction of processing – Article 18 GDPR;
•Right to data portability – Article 20 GDPR;
•Right to object – Article 21 GDPR;
•Right to withdraw consent – Article 7(3) GDPR.
3.To exercise any of the above rights, the User may contact the Controller by email at:
office@twojpiernik.com
4.Upon receiving a request, the Controller shall respond without undue delay and, in any event, no later than one (1) month from receipt of the request. Where the request is particularly complex or numerous requests have been received, the Controller may extend this period by an additional two (2) months. In such a case, the User will be informed within one month of receiving the request of the extension and the reasons for the delay.
5.If the data subject believes that the processing of their personal data violates the GDPR, they have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) or with the competent supervisory authority in their country of residence within the European Union.
§5Cookies
1.The Website uses cookies.
2.Cookies are necessary for the proper functioning of the Website and the services provided through it. Cookies contain information required for the correct operation of the Website and also enable the compilation of general statistics concerning Website traffic.
3.The Website uses two types of cookies:
•Session Cookies – temporary cookies stored on the User's device until the User logs out or leaves the Website.
•Persistent Cookies – cookies stored on the User's device for the period specified in the cookie parameters or until they are deleted by the User.
4.The Controller uses its own cookies to better understand how Users interact with the Website. These cookies collect information regarding:
•the manner in which the Website is used;
•the referring website;
•the number of visits;
•the duration of visits.
This information does not identify individual Users and is used solely for statistical purposes.
5.The Controller also uses third-party cookies for the collection of anonymous statistical data through Google Analytics (provided by Google LLC).
6.Cookies may also be used by advertising networks, in particular Google, to display advertisements tailored to the User's interests and browsing behaviour. Such cookies may record information regarding navigation paths and time spent on individual pages.
7.The User may decide how cookies are used by:
•selecting the categories of cookies they consent to when the cookie banner appears upon entering the Website;
•changing the settings of their web browser.
Detailed information regarding cookie management is available in the settings of the User's browser.
§6Additional Services Related To User Activity
1.The Website uses social media plugins ("plugins") provided by social networking services.
2.When a User visits a page on www.twojpiernik.com containing such a plugin, the User's browser establishes a direct connection with the servers of Facebook and Instagram.
3.The content of the plugin is transmitted directly from the respective provider to the User's browser and integrated into the Website. Through this integration, the provider receives information that the User has visited www.twojpiernik.com, even if the User does not have an account with that provider or is not currently logged in.
4.This information, including the User's IP address, is transmitted directly to the provider's servers (some of which may be located in the United States) and stored there.
5.If the User is logged into one of the above social media services while visiting the Website, the provider may associate the visit with the User's social media profile.
6.If the User interacts with a plugin, for example by clicking the "Like" or "Share" button, the relevant information is transmitted directly to the provider and stored by that provider.
7.Detailed information regarding the purposes, scope, and methods of processing personal data by these providers, as well as Users' rights and available privacy settings, can be found in their respective privacy policies:
•Facebook: https://www.facebook.com/policy.php
•Instagram: https://help.instagram.com/155833707900388
8.If the User does not wish social media providers to associate information collected during visits to www.twojpiernik.com with their social media account, the User should log out of the relevant social media service before visiting the Website.
9.Users may also prevent social media plugins from loading entirely by using appropriate browser extensions, such as script-blocking tools (e.g. NoScript).
10.The Controller also uses Google Ads remarketing tools. This involves the use of Google cookies related to the Google Ads service. Through the Website's cookie management mechanism, Users may decide whether they consent to the use of Google Ads cookies. These cookies are provided by Google LLC (Google Inc.), whose servers may be located in the United States.
§7Final Provisions
1.The Controller implements appropriate technical and organizational measures to ensure a level of security appropriate to the risks associated with the processing of personal data and the nature of the data processed. In particular, the Controller protects personal data against unauthorized access, disclosure, loss, destruction, alteration, or processing in violation of applicable law.
2.The Controller applies appropriate technical safeguards to prevent unauthorized persons from obtaining or modifying personal data transmitted electronically.
3.Matters not regulated by this Privacy Policy shall be governed by the provisions of the General Data Protection Regulation (GDPR) and all other applicable provisions of Polish law.