Clause for customers of the online store
under Art. 13 GDPR (provided when collecting data from the data subject)
Respecting your privacy and ensuring that you know how your personal data is processed, we present a set of the most important information related to the EU Regulation 2016/679, known as the General Data Protection Regulation (“GDPR”):
PERSONAL DATA ADMINISTRATOR
The administrator of your personal data is Piotr Czarczyński, who runs a business under the name AZETX with its registered office at ul. Jana Pawła II 81, 62-510 Konin, NIP: 6651766025, REGON: 310272017. Contact e-mail: email@example.com.
CONTACT DETAILS OF THE DATA PROTECTION OFFICER
You can contact us in all matters related to the protection of personal data
with the Data Protection Inspector by sending an e-mail to the following address: firstname.lastname@example.org.
OBJECTIVES AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Please be advised that your personal data may be processed for the following purposes:
a) conclusion and performance of a sales contract in connection with the implementation of an order in the online store pursuant to art. 6 statute. 1 letter. b GDPR – processing is necessary to take steps before concluding the contract and perform the contract b) fulfill the legal obligations incumbent on the administrator in the relationship with keeping accounting and tax documentation pursuant to art. 6 statute. 1 letter. c GDPR resulting from the Act of September 29, 1994 on accounting, the Act of February 15, 1992 on corporate income tax, the Act of March 11, 2004 on tax on goods and services c) debt recovery, based on the legitimate interest of the administrator – art. 6 statute. 1 letter f of the GDPR, which is maintaining financial liquidity d) pursuing claims and defending against claims based on the legitimate interest of the administrator – art. 6 statute. 1 letter. f GDPR, which is to defend the company’s interests and caring for her good name, e) sales analyzes and statistics based on the legitimate interest of the administrator – art. 6 statute. 1 letter f GDPR, which is striving to improve sales processes and adapting the offer to customer needs, f) ensuring security, including the detection and combating of abuse, based on the legitimate interest of the administrator – art. 6 statute 1 letter f GDPR, which is preventing security incidents and ensuring the quality of services provided, g) considering complaints in connection with the implementation of the sales contract on the basis of the legitimate interest of the administrator – art. 6 statute. 1 letter f GDPR, which is taking care of the quality of services provided and meeting the provisions of the contract, h) researching the market of customer behavior and preferences and improving the functioning of the store’s website for the purpose of improving the quality of services provided by the Administrator based on your consent (Article 6 (1) (a) of the GDPR) for cookie technology by setting parameters browsers, i) sending commercial information by sending a newsletter on the basis of your consent – art. 6 statute 1 letter. a GDPR.
TIME WHEN WE PROCESS YOUR PERSONAL DATA
Your personal data will be processed for the following period:
a) personal data processed in order to conclude and perform the sales contract – until the end of the contract, b) personal data resulting from tax documentation – a maximum of 5 years from the end of the calendar year in which the tax payment deadline expired, c) personal data processed for the purpose of pursuing claims and defending against claims – until the claims are time-barred or until an effective objection is raised, d) personal data processed for the purpose of debt collection – until full settlement, e) personal data processed for the purpose of considering complaints – 1 year from considering the complaint, f) personal data processed for the purpose of analysis and sales statistics – 2 years from making purchases in the store, g) personal data processed to ensure security – 1 year from making purchases in the store, h) personal data processed in order to research the market of customer behavior and preferences and improve the functioning of the store’s website – until the consent is withdrawn by changing the browser settings, i) personal data processed for the purpose of sending the newsletter – until the consent is withdrawn.
CATEGORIES OF DATA RECIPIENTS
The recipients of the data may be entities from the following categories:
a) entities cooperating with the administrator providing advisory and legal services, b) entities authorized under applicable law (in particular courts
and state authorities);
c) entities providing IT services as well as e-mail and website hosting, acting on behalf of the administrator, d) entities providing postal and courier services acting on behalf of the administrator, e) banks and other financial institutions in connection with the execution of receivables under the agreement f) entities providing accounting and bookkeeping services to the administrator g) entities providing audit, control and debt collection services that provide services to the administrator. h) owners of social networking sites (e.g. facebook), i) wholesalers carrying out orders for the administrator, j) entities providing direct marketing services to the administrator.
Due to the fact that we process your personal data, you have the right to:
1) request access to your personal data,
2) request rectification of your personal data,
3) requests to delete or limit the processing of your personal data,
4) transfer of personal data (which is processed on the basis of a contract).
RIGHT TO OBJECT
In addition, you have the right to object to the processing of personal data in the cases specified in art. 21 GDPR.
RIGHT TO WITHDRAW CONSENT
You have the right to withdraw your consent to the processing of your personal data
at any time without affecting the lawfulness of processing based on consent before its withdrawal (i.e. pursuant to Article 6 (1) (a) of the GDPR). The consent may be withdrawn via the e-mail address: email@example.com or in writing to the Administrator’s address. In the event of consent to the cookie technology, such consent may be withdrawn by changing the web browser settings.
RIGHT TO BRING A COMPLAINT
If you believe that your personal data is processed contrary to the legal requirements, you have the right to lodge a complaint with the supervisory body, which is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, https: //www.uodo. gov.pl/).
INFORMATION ON THE REQUIREMENT OR VOLUNTARY PROVISION OF DATA
AND CONSEQUENCES OF FAILING THEM
With regard to the processing of personal data in order to fulfill the legal obligations incumbent on the administrator, the obligation to provide data is a statutory requirement. For other purposes, providing personal data is voluntary, but it is necessary for the conclusion and implementation of the contract, or the proper provision of services.
Providing personal data on the basis of consent is voluntary and does not affect the implementation of the sales contract, however, it is necessary to be able to provide newsletter services. Refusal to provide data in this case will not have negative consequences and will not affect the entire purchasing process in the store.