For the Owner of this website, protecting the personal data of Users is a matter of utmost importance. They make every effort to ensure that Users feel safe when providing their personal data while using the website.
A User is an individual, a legal entity, or an organizational unit without legal personality, granted legal capacity by law, using electronic services available through the website.
This privacy policy explains the principles and scope of processing the User’s personal data, the rights to which they are entitled, as well as the obligations of the data controller, and also informs about the use of cookies.
The Administrator uses the most advanced technical means and organizational solutions to ensure a high level of protection of personal data and to secure it against unauthorized access.
I. DATA CONTROLLER
The data controller is the entrepreneur Mrs. Joanna Pyrskała, conducting business under the name: ARTÉ FORM DESIGN JOANNA PYRSKAŁA, located at: ul. Hagera 41/303, 41-800 Zabrze, NIP: 5532379675 (hereinafter referred to as the “Owner”).
II. PURPOSE OF PROCESSING PERSONAL DATA
The Administrator processes the User’s personal data for the following purposes:
This means that the data is required primarily for:
registering on the website;
entering into a contract;
settling payments;
delivering the goods or services ordered by the User;
using the User’s consumer rights (e.g., withdrawal from the contract, warranty);
subscribing to the Newsletter.
The User may also consent to receiving information about new products and promotions, which will cause the Administrator to process personal data for the purpose of sending commercial information to the User about new products, services, promotions, or sales.
Personal data is also processed to fulfill the legal obligations imposed on the data controller and to perform tasks in the public interest, including tasks related to security, defense, or tax documentation storage.
Personal data may also be processed for direct marketing of products, securing and pursuing claims, or protection against claims of the User or a third party, as well as marketing services and products of third parties or non-direct marketing of the controller’s own products and services.
III. TYPE OF DATA
The Administrator processes the following personal data, which is necessary for:
registering on the website:
first and last name;
email address;
making purchases on the website:
first and last name;
gender;
delivery address;
phone number;
email address;
Optional data provided by the User:
date of birth;
PESEL number (if requesting an invoice);
NIP number (if requesting an invoice for a business).
In the case of withdrawing from the contract or accepting a complaint, where the refund is directly made to the User’s bank account, information regarding the bank account number will also be processed to complete the refund.
IV. LEGAL BASIS FOR PROCESSING PERSONAL DATA
Personal data is processed in accordance with the provisions of the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016, on the protection of individuals concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Official Journal of the EU L 119, 4.5.2016, pp. 1-88, hereinafter referred to as the “GDPR”.
The Administrator processes personal data only after obtaining the User’s consent, expressed at the time of registration on the website or when confirming a transaction made on the website.
Giving consent to process personal data is completely voluntary, but failure to provide it makes it impossible to register on the website and make purchases through the website.
V. RIGHTS OF THE USER
The User may at any time request information from the Administrator about the scope of processing their personal data.
The User may at any time request the correction or rectification of their personal data. The User can also do this themselves after logging into their account.
The User may at any time withdraw their consent to the processing of their personal data, without giving a reason. A request not to process data may apply to a specific processing purpose, such as withdrawing consent for receiving commercial information or to all processing purposes. Withdrawing consent for all processing purposes will result in the deletion of the User’s account on the website, along with all previously processed personal data. Withdrawal of consent does not affect actions already taken.
The User may at any time request, without providing a reason, that the Administrator delete their data. A request for deletion of data will not affect actions already taken. Deletion of data means the simultaneous deletion of the User’s account, along with all previously stored and processed personal data.
The User may at any time object to the processing of personal data, either regarding all personal data processed by the Administrator or only in a limited scope, e.g., regarding processing for a specific purpose. An objection will not affect actions already taken. Filing an objection will result in the deletion of the User’s account, along with all previously stored and processed personal data.
The User may request the limitation of the processing of personal data, either for a specific period or without time limitation, but in a specific scope, which the Administrator will be obliged to comply with. This request will not affect actions already taken.
The User may request that the Administrator transfer their personal data to another entity. To do so, they should submit a request to the Administrator, specifying which entity (name, address) should receive the data and which specific data the User wants to be transferred. After the User confirms their request, the Administrator will send the personal data to the indicated entity electronically. Confirmation of the User’s request is necessary to ensure the security of the User’s personal data and to verify that the request is from the authorized person.
The Administrator will inform the User about the actions taken before the expiration of one month from receiving any of the requests listed in the previous points.
VI. DATA PROCESSING BY THIRD PARTIES
The Administrator may entrust the processing of personal data to cooperating entities, to the extent necessary to complete transactions, such as preparing the ordered goods and delivering shipments, or sending commercial information from the Administrator (the latter applies to Users who have consented to receiving commercial information).
Aside from the purposes indicated in this Privacy Policy, the User’s personal data will not be made available to third parties or transferred to other entities for the purpose of sending marketing materials from third parties.
The User’s personal data is not transferred outside the European Union.
This Privacy Policy complies with the provisions of Article 13(1) and (2) of the GDPR.
VII. COOKIES
The website uses cookies or similar technology (collectively referred to as “cookies”) to collect information about the User’s access to the website (e.g., via computer or smartphone) and their preferences. They are used for purposes such as advertising and statistical analysis, as well as to improve the User experience.
