ENG
Privacy Policy
We have prepared this document for you, in which you will find the rules for the processing of personal data and the use of cookies in connection with the use of the website: https://ingakasatkina.com
We collect and store all personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data and the repeal of Directive 95/46 / EC (hereinafter: "GDPR") and the Act of 18 July 2002 on the provision of electronic services
Personal data administrator
The administrator of Personal Data is EXTRADECOR Spółka z Ograniczoną Odpowiedzialnością, 191/193-3 Rolna str. Warsaw, 02729, Poland, registered in the Register of Entrepreneurs of the National Court Register by the District Court in Warsaw, Commercial Division of the National Court Register, under KRS number 0000737519, REGON 380624246, NIP 5213832307.
What kind of data we process
We process your personal data which you provide to us in particular in the order form or in the contact form or by subscribing to the newsletter or by sending us an e-mail, or by submitting a complaint or withdrawing from the contract. We also process your bank account number from which you will make a payment or on which we will make refunds. If you issue a VAT invoice, we also process the company name, address of residence or business address, NIP number. In addition, we also store your data regarding your behavior, including transactions, complaints, and history of correspondence and contacts with us, activities on our website and in the online store, our profiles on social networks, and our accounts on third-party websites (such as Dawanda.pl). These are data such as the products viewed, IP addresses or device identifiers, cookie data and locations, correspondence, and contacts. For the purposes of establishing, investigating and defending claims, we may also collect data regarding the PESEL number or NIP number and address of residence.
Objectives and basics of processing
Orders
When placing an order, you must provide the necessary information to complete the order, such as your name, mailing address, e-mail address, and telephone number. Providing data is voluntary, but necessary to place an order. The data provided to us in connection with the order is processed for the purpose of the contract (Article 6 (1) b), invoice (Article 6 (1) (c) of the GDPR), and invoice included in our accounting documentation (Article 6 (1) (c) of the GDPR) and for archival and statistical purposes (Article 6 (1) (f) of the GDPR Law). Data on orders will be processed for the time necessary to perform the contract, and then until the expiry of the period of limitation of claims under the contract. In addition, after this date, the data may still be processed by us for statistical purposes.
Newsletter
If you want to subscribe to the newsletter, you must give us your e-mail address via the subscription form to newsletter. Providing data is voluntary, but necessary to subscribe to the newsletter. The data provided to us when subscribing to the newsletter is used to send you a newsletter, and the legal basis for their processing is your consent (Article 6 (1) letter and GDPR) expressed when you subscribe to the newsletter. The data will be processed for the duration of the newsletter operation unless you cancel your receipt earlier, which will delete your data from the database. At any time, you can correct your data stored in the newsletter database, as well as request their removal, giving up receiving the newsletter.
Complaints and withdrawal from the contract
If you make a complaint or withdraw from the contract, you provide us with personal data contained in the content of the complaint or a statement of withdrawal, which includes your name, address, phone number, e-mail address, bank account number. Providing data is voluntary but necessary to make a complaint or withdraw from the contract. The data provided to us in connection with the submission of a complaint or withdrawal from the contract are used to carry out the complaint procedure or the procedure for withdrawing from the contract (Article 6 (1) (c) of the GDPR). The data will be processed for the time necessary to carry out the complaint procedure or the withdrawal procedure. Complaints and statements about withdrawal from the contract may also be archived for statistical purposes.
E-mail contact.
By contacting us via e-mail, including by sending an inquiry via the contact form, you give us your e-mail address as the sender's address. In addition, you can also include other personal information in the body of the message. Providing data is voluntary, but necessary to make contact. Your data is processed in this case in order to contact you, and the basis for processing is art. 6 par. 1 lit. a GDPR, or your consent resulting from initiating contact with us. The legal basis for processing after the end of contact is the justified purpose of archiving correspondence for internal needs (Article 6 (1) (c) of the GDPR).
Data Recipients
Your data may be processed by our subcontractors, that is, entities whose services we use to process data and provide services to you or perform orders in the online store, in particular:
a) to our employees and associates who must have access to the data to be able to carry out our obligations or actions on behalf of you;
b) entities processing, on our behalf, your personal data and participating in the performance of our activities:
- to store personal data on the server;
- in order to use the mailing system in which your data are processed, if you subscribed to the newsletter;
- in order to handle the shipping process, under which your data necessary for the delivery of the order is processed;
- in order to use the services of courier companies that deliver your order to you;
- in order to use IT support, and manage websites, in connection with which the entity providing support may have access to your personal data collected as part of the website or store;
- in order to make refunds or to ensure the operation of a direct debit service;
- in order to provide consultancy, audit, legal, tax, and accounting services.
Permissions
The GDPR grants you the following potential rights related to the processing of your personal data:
1) the right to access personal data;
2) the right to rectify personal data;
3) the right to delete personal data;
4) the right to limit the processing of personal data;
5) the right to raise objections regarding the processing of personal data against
- a) we process your personal data for marketing purposes, i.e. for the purposes of advertising campaigns and other marketing activities, including the so-called profiling (eg if you do not want, for example, offers or advertisements for our products, but after receiving the above-mentioned objection, we should stop processing your data for marketing purposes);
- b) we process your personal data for the purposes of the so-called legitimate interest pursued by us, other than marketing, for reasons related to your particular situation, but if you submit such an objection to us, we will no longer be able to process your personal data further unless we demonstrate the existence of valid legitimate grounds for processing that will take precedence over Your interests, rights and freedoms or grounds for establishing, investigating or defending claims;
6) the right to data transfer;
7) the right to withdraw consent to the processing of personal data, if you have given such consent.
The rules related to the implementation of the indicated powers are described in detail in art. 16 - 21 GDPR. We encourage you to read these regulations. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and you will not be entitled to any processing of your personal data. In addition, if you believe that in the processing of your personal data we have committed an infringement of the provisions on the protection of personal data, you have the possibility to file a complaint to the supervisory body, ie the President of the Office for Personal Data Protection. You can also always ask us to provide you with information about what data we have about you and for what purposes we process it. Just send a message to: ingakasat@gmail.com
Security
We guarantee the confidentiality of all personal data provided to us. We ensure that all security measures and personal data protection required by the personal data protection regulations are taken. Personal data is collected with due diligence and properly protected against access by unauthorized persons.
Cookies
Like almost all service providers, when you visit our website or use our offers, we use cookies, web beacons, or similar technologies. Cookies are small text information stored on your terminal device (eg computer, tablet, smartphone) that can be read by our teleinformation system (own cookies) or the ICT system of third parties (third-party cookies). Some cookies we use are deleted after the end of the web browser session, i.e. after it's closing (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you access the site (persistent cookies).
Consent to cookies
During the first visit to the website you are shown information about the use of cookies. Thanks to a special tool you have the possibility to manage cookies from the page. In addition, you can always change cookie settings from your browser or delete cookies at all. Browsers manage cookie settings in various ways. In the auxiliary browser menu you will find explanations of changing cookie settings.
Remember that disabling or limiting the use of cookies may cause difficulties in using our website, as well as from many other websites that use cookies.
Own cookies
We use our own cookies to ensure the website works properly, in particular, the ordering process and logging in to the user's account.
Third party cookies
Our website, like most of today's websites, uses functions provided by third parties, which involves the use of cookies from third parties.
Google Analytics
We use the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We implement activities in this area based on our legitimate interest in the production of statistics and their analysis in order to optimize our websites. Google Analytics automatically collects information about your use of our site. The information collected in this way is usually transmitted to a Google server in the United States and stored there. Due to the IP anonymisation that we have activated, your IP address is shortened before forwarding. Only in exceptional cases, the full IP address is forwarded to a Google server in the United States and shortened there. Due to the fact that Google LLC has a registered office in the USA and uses technical infrastructure located in the USA, he joined the EU-US-Privacy Shield program to ensure an adequate level of protection of personal data required by a European provision. Under the agreement between the US and the European Commission, the latter has found an adequate level of data protection for companies certified by Privacy Shield. If you are interested in the details related to the processing of data within Google Analytics, we encourage you to read the explanations prepared by Google: https://support.google.com/analytics/answer/6004245.
Social plugins
In addition, our site uses plugins and other social tools provided by social networking sites, such as Facebook, Instagram, Twitter, Google, Pinterest. By displaying our website containing such a plugin, your browser will establish a direct connection to social network administrators (service providers) servers. The content of the plugin is forwarded by a given service provider directly to your browser and integrated with the website. Thanks to this integration, service providers receive information that your browser has displayed our website, even if you do not have a profile with your service provider or if you are not logged in at the same time. This information (along with your IP address) is sent by your browser directly to the server of a given service provider (some servers are located in the USA) and stored there. If you have logged in to one of the social networking sites, then this service provider will be able to directly assign a visit to our website to your profile in a given social network.
The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and your rights in this area and the possibility of making settings to protect your privacy are described in the privacy policy of individual service providers.
a) Facebook - https://www.facebook.com/legal/FB_Work_Privacy;
b) Instagram - https://help.instagram.com/519522125107875?helpref=page_content,
c) Twitter - https://twitter.com/en/privacy,
d) Google - https://policies.google.com/privacy?hl=en,
e) Pinterest - https://policy.pinterest.com/en/privacy-policy.
If you do not want social networking sites to assign data collected during the visit to our website directly to your profile in a given website, then before you visit our website you have to log out of this site. You can also completely prevent loading on the plugin page using the appropriate extensions for your browser, e.g. blocking scripts.
Changes to the privacy policy
We are changing for you for the better, so in the future it may happen that we will find even better ways to protect your data. Then we will be forced to update our privacy policy, which we will of course inform.