1. The administrator of your personal data collected via the website is FASARDI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, KRS: 0000586525, referred to in this document as the "Administrator".
The Administrator processes your personal data in accordance with the provisions of this Policy and applicable provisions on the protection of personal data , including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as "GDPR";
2. Please direct any questions regarding the processing of your personal data to the Administrator.
Administrator's contact details:
FASARDI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
address: ul. Topolowa 17, 95-030 Starowa Góra KRS no.: 0000586525
email contact: rodo@fasardi.com
Correspondence details:
ul. Warszawska 44/50 95-200, Pabianice
3. The following personal data are processed within the website:
1) registered users of the website who can purchase the offered goods under the functionality of the user account,
2) unregistered persons purchasing the offered goods in the FASARDI store,< br>3) people who use the newsletter shipping option,
4) other people who leave their personal data, including people who contact us via
through available information exchange channels.
We collect only the personal data that are necessary to achieve a specific purpose (the purpose and basis for processing are specified in points 4a-4d of this Privacy Policy).
1
4a. Processing of personal data in connection with registering an account and logging in to the
store website.
On our website, you can register your account and then, after logging in, make purchases as registered users. While maintaining the highest security standards for the processing of your personal data, we would like to point out that in the process of registering and logging in to our store, as well as in order to use the functionality provided by the status of a registered user of the website (including making purchases as a registered user), we process the personal data provided by you in the following purposes and on the basis of the following legal provisions:
● conclusion and implementation of a contract for the provision of services consisting in enabling the creation and management of an account or taking actions at the customer's request before concluding the contract - the legal basis for the processing of this data is Art. 6(1)(a) b GDPR, i.e. processing is necessary to conclude and perform the contract;
● possibility of implementing the process of selling goods, booking goods or taking other actions at your request before making a purchase (possibility of making a purchase and delivering goods) - legal basis for processing this data is art. 6(1)(a) b GDPR, i.e. processing is necessary to conclude and perform the sales contract;
● in the case of making a purchase in order to accept and process returns of goods - the legal basis for the processing of this data is Art. 6 section 1 letter b,c GDPR, i.e. processing is necessary to fulfill the legal obligations of the Administrator and to implement the provisions of the contract;
● receiving and considering complaints regarding the account - the legal basis for the processing of this data is Art. 6(1)(a) b,c GDPR, i.e. processing is necessary to fulfill the legal obligation imposed on the Administrator and to fulfill the obligations arising from the concluded contract for the provision of services,
● ensuring the possibility of taking part in the competition and fulfilling the obligations arising from the promise made in the event of winning in the competition - the legal basis for processing is Art. 6 section 1 letter f GDPR, i.e. our legitimate interest;
● we undertake direct marketing activities - the legal basis for the processing of this data is Art. 6(1)(a) f, i.e. the legitimate interest of the Administrator, which consists in adapting the displayed advertising content;
● possible pursuit of claims against the registered user of the account - the legal basis for the processing of this data is Art. 6(1)(a) f, i.e. processing is necessary for the purposes of the legitimate interest of the Administrator;
● fulfilment of legal obligations arising from regulations, e.g. tax and accounting - the legal basis for the processing of this data is Art. 6 section 1 letter c, i.e. processing is necessary to fulfill the obligations arising from the legal provisions applicable to the Administrator,
● conducting correspondence with Customers, including responding to Customers' messages - the legal basis for the processing of this data is Art. 6(1)(a) f, i.e. processing is necessary for the purposes of the Administrator's legitimate interest,
● for analytical and statistical purposes - the legal basis for the processing of this data is Art. 6 section 1 letter b, i.e. the legitimate interest of the Administrator, which consists in analyzing the behavior and activity of registered users, as well as their preferences, which is aimed at improving the quality and adequacy of the functionalities used and the services we provide.
All personal data is provided voluntarily, however, refusing to provide it results in the inability to create an account and use its functionalities.
Consent to receive commercial information by electronic means, which you may receive as part of correspondence conducted in response to a message sent to the Administrator, constitutes consent to receive commercial information within the meaning of the Act of July 18, 2002 on the provision of electronic services (Journal of Laws U. 2002 No. 144, item 1204). Due to the above, the Administrator
2
obtains consent to the above activities from persons with whom correspondence is conducted. We apply all requirements related to the collection of consents specified in the GDPR and the above-mentioned Act to this consent.
Similarly, consent to receive commercial information, including automatic calling systems, e.g. text messages sent by the Administrator, constitutes consent provided for in Art. 172 of the Act of 16 July 2004, Telecommunications Law. The requirements of the GDPR also apply to this consent.
4b. Purchasing goods and processing complaint or return forms
You can purchase the goods we offer via our website. You can also make purchases as unregistered users of the website. While maintaining the highest security standards for the processing of your personal data, we would like to point out that in the process of making purchases in our store, we process the personal data provided by you for the following purposes and on the basis of the following legal provisions:
● the customer purchases the goods we offer, including the process of placing an order as well as its implementation and shipment to the ordered address - the legal basis for the processing of this data is Art. 6 section 1 letter b GDPR, i.e. processing is necessary to perform the contract;
● receipt and consideration of complaints - the legal basis for the processing of this data is Art. 6(1)(a) c GDPR, i.e. processing is necessary to perform the contract;
● acceptance and processing of returns of goods - the legal basis for the processing of this data is Art. 6 section 1 letter b,c GDPR, i.e. processing is necessary to fulfill the legal obligations incumbent on the Administrator and implement the provisions of the concluded contract;
● ensuring the possibility of taking part in the competition and fulfilling the obligations arising from the promise made in the event of winning the competition - legal basis processing is Art. 6 section 1 letter f GDPR, i.e. our legitimate interest;
● we undertake direct marketing activities - the legal basis for the processing of this data is Art. 6(1)(a) f, i.e. the legitimate interest of the Administrator, which consists in adapting the displayed advertising content;
● possible pursuit of claims against the registered user of the account - the legal basis for the processing of this data is Art. 6(1)(a) f, i.e. processing is necessary for the purposes of the legitimate interest of the Administrator;
● fulfilment of legal obligations arising from regulations, e.g. tax and accounting - the legal basis for the processing of this data is Art. 6 section 1 letter c, i.e. processing is necessary to fulfill the obligations arising from the legal provisions applicable to the Administrator,
● conducting correspondence with Customers, including responding to Customers' messages - the legal basis for the processing of this data is Art. 6(1)(a) f, i.e. processing is necessary for the purposes of the Administrator's legitimate interest,
● for analytical and statistical purposes - the legal basis for the processing of this data is Art. 6 section 1 letter b, i.e. the legitimate interest of the Administrator, which consists in analyzing the behavior and activity of registered users, as well as their preferences, which is aimed at improving the quality and adequacy of the functionalities used and the services we provide.
Consent to receive commercial information by electronic means, which you may receive as part of correspondence conducted in response to a message sent to the Administrator, constitutes consent to receive commercial information within the meaning of the Act of July 18, 2002 on the provision of electronic services (Journal of Laws U. 2002 No. 144, item 1204). Due to the above, the Administrator
3
obtains consent to the above activities from persons with whom correspondence is conducted. We apply all requirements related to the collection of consents specified in the GDPR and the above-mentioned Act to this consent.
Similarly, consent to receive commercial information, including automatic calling systems, e.g. text messages sent by the Administrator, constitutes consent provided for in Art. 172 of the Act of 16 July 2004, Telecommunications Law. The requirements of the GDPR also apply to this consent.
4c. Conducting correspondence with website users
The Administrator processes your personal data in accordance with applicable regulations in order to conduct correspondence in response to sending a message via the contact form or other correspondence exchange channels (e-mail, correspondence via traditional mail). Everyone sending a message to the Administrator and providing him with appropriate personal data provides them voluntarily, taking into account the fact that failure to provide them may result in the Administrator's inability to prepare a response to the inquiry and send a possible offer.
Personal data of persons who have provided personal data via a completed contact form or via a message via another correspondence exchange channel are processed in order to establish contact, respond to the submitted inquiry, conduct further correspondence and possibly present an offer in the area covered by the topic of the conducted conversations (only and exclusively after your prior request to present such an offer and your consent to receive a commercial offer electronically).
Personal data to the extent indicated above are processed pursuant to Art. 6 section 1 letter f GDPR
- in order to pursue a legitimate interest in sending a response to your inquiry and conducting direct marketing activities.
Consent to receiving commercial information by electronic means, which you may receive as part of correspondence conducted in response to a message sent to the Administrator constitutes consent to receive commercial information within the meaning of the Act of July 18, 2002 on the provision of electronic services (Journal of Laws 2002, No. 144, item 1204). Due to the above, the Administrator obtains consent to the above activities from persons with whom correspondence is conducted. We apply all requirements related to the collection of consents specified in the GDPR and the above-mentioned Act to this consent.
Similarly, consent to receive commercial information, including automatic calling systems, e.g. text messages sent by the Administrator, constitutes consent provided for in Art. 172 of the Act of 16 July 2004, Telecommunications Law. The requirements of the GDPR also apply to this consent.
4d. Subscription to the newsletter and direct marketing used by the Administrator
The Administrator processes your personal data in accordance with applicable regulations in order to enable you to subscribe and use the Newsletter option. After subscribing to the newsletter, we will process your personal data pursuant to Art. 6 section 1 letter f GDPR - in order to pursue a legitimate interest in conducting direct marketing activities.
4
We would like to inform you that all other direct marketing activities will be undertaken by the Administrator on the basis of Art. 6 section 1 letter f GDPR.
Consent to receive commercial information by electronic means, which you may receive as part of correspondence conducted in response to a message sent to the Administrator, constitutes consent to receive commercial information within the meaning of the Act of July 18, 2002 on the provision of electronic services. (Journal of Laws 2002, No. 144, item 1204). Due to the above, the Administrator obtains consent to the above activities from persons with whom correspondence is conducted. We apply all requirements related to the collection of consents specified in the GDPR and the above-mentioned Act to this consent.
Similarly, consent to receive commercial information, including automatic calling systems, e.g. text messages sent by the Administrator, constitutes consent provided for in Art. 172 of the Act of 16 July 2004, Telecommunications Law. The requirements of the GDPR also apply to this consent.
5. The scope of personal data processed by the Administrator may include the following personal data of the person who provided them directly to the Administrator, in particular:
● name and surname,
● e-mail address,
● number telephone number,
● shipping details,
● user's IP address,
● other voluntarily provided personal data that will be provided to us as part of the directed
messages to the Administrator.
6. Providing Personal Data is voluntary, but may be necessary to use
specific functionalities of the store.
7. Persons whose personal data are processed by the Administrator have the following rights:
● The right to request access to their data;
● The right to request correction of previously provided data;
● The right to request deletion previously provided data;
● The right to limit the processing of previously provided data;
● The right to request the transfer of previously provided data;
5
● The right to object to the processing of data. WHAT ARE THE RIGHTS?
The right to access your data and the possibility of receiving a copy thereof (you will be provided with a copy of your personal data if you previously request its provision, for which a reasonable fee may be charged resulting from administrative costs),
The right to rectify the processed data (you have the right to request the immediate rectification of incorrect personal data, and, taking into account the purposes of processing, you have the right to request the completion of incomplete personal data, including by submitting an additional statement),
The right to request deletion of processed data (you have the right to request immediate deletion of data when:
o personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
if you withdraw your consent, which is the basis for data processing,
if you object to the processing and there are no objections
overriding legitimate grounds for their processing,
o the data are processed unlawfully,
o the data should be deleted in order to comply with the legal obligation
provided for in Polish or European law).
However, the above will not apply in a situation where the processing of your data is necessary for:
to exercise the right to freedom of expression and information,
to comply with a legal obligation requiring processing pursuant to
European law or Polish law,
to establish, pursue or defend claims.
Right to restrict data processing
You are entitled to request restriction of processing in the following situations:
o when you question the accuracy of the data (for a period enabling its accuracy to be checked),
when the processing is unlawful,
when the Administrator no longer needs personal data for processing purposes,
but they are necessary for the data subject to establish, investigate or
defense claims,
in the event of an objection to processing (until it is determined whether
the legitimate grounds on our part override those of the objection).
The right to transfer data (to another data controller or directly to you within the scope specified in Article 20 of the GDPR - in a structured, commonly used, machine-readable format,
The right to object (you have the right to object at any time to the processing of data for direct marketing purposes, including possible profiling; in this situation, the Administrator will not be entitled to process your data, unless the Administrator demonstrates the existence of:
p>
for compelling legitimate grounds for processing, which override your interests, rights and freedoms or
the basis for establishing, pursuing or defending the Administrator's claims.
8. The data subject has the right to lodge a complaint with the supervisory authority if it is found that his or her rights are not properly respected and implemented. Before that, we recommend that you send correspondence to the Administrator's e-mail address provided above.
9. The administrator stores personal data for the period necessary to fulfill the purpose for which they are collected, i.e. for the following periods:
6
● for the period necessary to complete the placed order or meet other requests of the store user,
● for the time necessary to conduct correspondence with the Administrator as part of an inquiry submitted via the contact form,
● for the duration of marketing activities or until the objection to further data processing for marketing purposes is expressed,
● other deadlines resulting from legal provisions (applies to data necessary to fulfill our legal obligations).
We would like to inform you that the Administrator processes data to the extent necessary to achieve the above-mentioned processing purposes. If there is more than one purpose, the appropriate storage period is a longer period.
In the future, the Administrator may be entitled to process personal data for the period necessary to pursue another legally justified interest (e.g. possible debt collection).
The administrator will not be entitled to further process personal data if the data subject withdraws consent to the provision of services electronically. However, the above will not affect the legality of the current processing of personal data.
10. The administrator processes personal data in a way that ensures their integrity and confidentiality.
11. We may entrust your personal data to other entities with which we cooperate to provide our services OR make them available to other entities to which we are obliged to provide personal data under the law.
When entrusting personal data to our subcontractors, we always do so on the basis of personal data entrustment agreements concluded with them. These entities may process your personal data to the extent necessary to perform specific tasks. As the administrator of your personal data, we ensure the correct processing of personal data also by these entities, for which we take full responsibility.
We would like to point out that we may entrust your personal data to entities with which we cooperate in the following areas:
- IT area (the provider of the private cloud we use is Amazon Web Services, and system migration and cloud management services are provided to us by the entity UNITY Spółka Akcyjna, which is an AWS partner),
- accounting services,
- marketing services (we use tools supporting our marketing from the Google or Facebook package),
- legal services or entities providing specialized debt collection services,
- other entities whose services we use to fulfill our obligations arising from from legal provisions.
12. We would like to inform you that your personal data may be transferred by us to third countries, i.e. outside the European Union and the European Economic Area. This is due to the fact that when providing our services we use tools such as Amazon Web Services (private cloud), Google (including Google Analytics) or Facebook.
7
We would like to inform you that in each of these situations we always appropriate personal data transfer mechanisms are used, based on a decision of the European Commission guaranteeing the security of personal data processing in a specific country or maintaining the so-called standard contractual clauses, binding corporate rules or other legal instruments aimed at maintaining the GDPR standards we apply.
You can learn more about the processing of personal data by Amazon Web Services (AWS) here:
→ https://aws.amazon.com/compliance/gdpr-center/
You can learn more about the processing of personal data by Google here:
→ https://policies.google.com/privacy?fg=1
You can learn more about the processing of personal data by Facebook here:
→ https://www.facebook.com/privacy/explanation
13. We would like to inform you that the Administrator may process your personal data by performing the so-called profiling. We explain that profiling involves any automated processing of personal data enabling the assessment of personal factors of a natural person, and in particular to analyze or forecast specific scenarios. We also indicate that we may collect and analyze your personal data in order to direct appropriate advertising, which is helpful for us as part of our marketing activities. In this way, we pursue our legitimate interest. At the same time, we would like to inform you that this profiling is fully consistent with the provisions of law due to the fact that we guarantee compliance with the rights and freedoms of persons subject to profiling by implementing appropriate safeguards to ensure the protection of the data of profiled persons.
We would like to point out that you have the right to object to such action on our part. For this purpose, please read point. 7 of this Privacy Policy.
14. General information about cookies:
1) We would like to inform you that the Administrator stores cookies. We use cookies to adapt the website to the needs of users and for statistical purposes. Cookies may be necessary for the proper operation of our online store.
2) Using our website and our store means that they will be stored on the device you are using. You can change your browser settings at any time.
3) "Cookies" should be understood as IT data, in particular text files, stored on end-user devices (such as computers, telephones or tablets), sent via websites. These files make it possible to recognize the user's device and properly display a website tailored to its individual preferences, enable the display of the website in the user's language "remembered" by these files, as well as the use of other website settings selected by the user. "Cookies" usually contain the name of the website they come from, their storage time on the end device and a unique number. They are also used to create anonymous, aggregated statistics that help understand how the user uses websites, which allows improving their structure and content, excluding personal identification of the user. Cookies also help ensure the refinement and smooth operation of websites, including testing their performance.
Cookies are divided into:
● Session cookies - this type of files identify the user of the store/website during an ongoing visit. Thanks to them, it is possible to log in safely to our store and are necessary to handle the purchasing process. Session cookies are stored in volatile memory and are not saved in permanent memory (e.g. hard drive). After closing the application or web browser, session cookies are automatically deleted.
● Permanent cookies – files that have a specified expiration time. Thanks to them, the use of frequently visited websites becomes more user-friendly (e.g. remembering the selected location and language).
5) The administrator of the store uses technologies that store data on the end device to ensure the proper operation of the store. The Administrator may also use functionality similar to cookies, and the information presented also applies to these technologies. The administrator may also use "cookies" to adapt the website to user preferences and to create statistics.
6) How to delete/block cookies?
The cookies used are primarily intended to make it easier for the visitor to use
7)
the store and our website, for example, by "remembering" the information once provided , so that she does not have to provide them every time, and they also serve to adapt their content, including the presented advertisements, to her preferences. Cookies are also used to increase the usability and personalization of the content of the store and website, including presenting, creating, granting and implementing advertisements, offers or promotions (discounts) dedicated to a given visitor in accordance with his or her interests (applies only if he or she is of age and has expressed his or her consent). consent to such action).
How to delete / block cookies?
The visitor can change the way cookies are used by managing
the consents expressed within the privacy settings on our website or through the browser or website, including blocking or deleting those that come from the store and other websites. To do this, you need to change your browser or application settings. The removal method varies depending on the web browser you use. Information on how to delete cookies should be available in the "Help" tab of the selected web browser. Deleting cookies is not the same as deleting personal data obtained via cookies by the Administrator. We refer to this process in the relevant content within this Privacy Policy.
8) What are the consequences of deleting or blocking cookies? Restricting the use of cookies on a given device prevents or significantly impedes the proper use of the store, for example it may result in the lack of
possibility of maintaining a login session.
We would like to point out that cookies generally do not store personal data that would allow identification of the customer. However, we would like to point out that if such a possibility arises, the information contained in this Privacy Policy relating to the principles of personal data processing applies accordingly to cookies.
The user may not consent to the collection of his/her data using cookies by changing the web browser settings. If no changes are made, it is presumed that the user has consented to the use of cookies by the website. 15. The Administrator reserves the right to change this document.