RULES OF PERSONAL DATA PROCESSING
Information on processing personal data and your rights related thereto according to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR). Spirit of Gdańsk spółka z ograniczoną odpowiedzialnością with its registered office in Gdańsk, ul. Długie Pobrzeże 21, 80-888 Gdańsk
INFORMATION FOR USERS OF THE CONTROLLER’S PORTAL
- Personal Data Controller
The Controller of personal data shall be Spirit of Gdańsk spółka z ograniczoną odpowiedzialnością, ul. Długie Pobrzeże 21, 80-888 Gdańsk, Poland, entered into the Register of Entrepreneurs of the National Court Register by the District Court Gdańsk-Północ in Gdańsk, VII Commercial Department of the National Court Register under KRS No 0000886185, NIP: 5833421892, REGON: 388257149, authorised capital of PLN 20,000.00, e-mail: firstname.lastname@example.org, phone No: +48 58 301-88-78 and 58 301-12-44. The personal data Controller may be contacted both by e-mail to the e-mail address provided and by regular mail or phone.
- Where do we have your personal data from?
We have received your personal data directly from you when you completed an order form and opened an account on the website of https://www.goldwasser.pl/goldwasser-sklep
. When filling in the order form and creating an electronic account on the portal, we ask for basic information, including a name, a date of birth, a NIP number, an e-mail address, a mailing address and a phone number. Such data make it possible to open an account on the portal and place orders and thus execute sale agreements for goods offered by the Controller. When you fill in an order form and open an electronic account in the above-mentioned portal, you make an agreement with us on rendering e-services. The agreement is one of legal bases that allows processing your personal data according to law, namely in accordance with art. 6(1)(b) GDPR. The indicated personal data shall be processed by us also for the fulfilment of our legal duties, e.g. issuing and keeping VAT invoices and accounting documents, handling complaint proceedings, etc. We will use data necessary to fulfil legal obligations when:
- fulfilling duties, e.g. issuing invoices,
- when applicable laws impose on us the duty to store data, e.g. tax data.
A legal basis for storing the above-mentioned personal data for the purpose given therein shall be art. 6(1)(c) GDPR, which indicates that personal data processing is in accordance with law if processing is necessary to fulfil a legal obligation of the Controller. Personal data provided shall be also processed by us for the following purposes:
- enforcing claims, and
- direct marketing.
A legal basis for processing the above-mentioned personal data for the above-mentioned purpose shall be art. 6(1)(f) GDPR, which indicates that personal data processing is in accordance with law if processing is necessary for legitimate interests pursued by the Controller.
- Are you obliged to give us your persona data?
It is not necessary to give us your personal data in order to place an order in our online store and execute an agreement with us. An order may be placed also without opening an account. Nevertheless, opening an account in our online store will facilitate placing orders and our contacts, if any, with you.
- Why do we process your personal data?
Your personal data shall be processed by the Controller for the proper and professional execution of the agreement made with you and its performance as well as to take actions that you may require before the execution and fulfilment of an order (a sale agreement). Such data shall be necessary, among other, to issue relevant accounting documents due to the rendered service or ordered goods, to contact you or your appointed representative, to inform you about the provision of a service or any changes and dates of providing services. We may process your personal data also in order to fulfil legal obligations imposed in applicable regulations and for purposes that result from legitimate interests pursued by the Controller.
- To whom can we transfer your personal data?
We may transfer your personal data to processors acting on our order, including our subcontractors (e.g. accounting services), mail operators, IT service providers as well as entities authorised to obtain data based on applicable laws, e.g. courts or prosecution services; nevertheless, only in case such authorities make a relevant demand based on applicable law.
- What are your rights in relation to personal data disclosed?
You have the right to require the Controller to provide you with access to your personal data, to rectify or delete them, limit their processing or make an objection to processing your personal data as well as to transfer your personal data. In every case you have the right to make a complaint against processing your personal data by the Controller to a competent supervisory authority. You shall have the right to withdraw your consent to processing data given to the Controller for the purpose of sending commercial and marketing information, without affecting the conformity to law of processing before the withdrawal of the consent.
- You have the right to make an objection
You have the right to make an objection at any time, due to your special situation, against processing your personal data by the Controller, when such data are processed due to the fulfilment of a public interest purpose or within the public authority allocated to the data Controller and if personal data are processed for a purpose that results from legitimate interests pursued by the Controller or by a third party, including profiling on such a basis. If a reasonable objection is made, the Controller shall not be entitled to process such data any more, unless he proves legitimate bases for processing, superior to the interests, rights and freedoms of the data subject or the bases for determining, filing or defending claims. If your personal data are stored for the purpose of direct marketing, you shall have the right to object at any time to processing your personal data for such marketing, including profiling, within the scope in which processing involves direct marketing. This right may be exercised with an objection sent to the address of the registered office of the Controller or with an e-mail.
- Transferring data to third countries or international organizations
Personal data shall not be transferred to any third countries or international organizations or outside the European Economic Area.
- How long will we process your personal data?
Personal data shall be processed for the term of the agreement executed with us and after its termination for the fulfilment of our legal obligations. Upon terminating the agreement, your personal data shall be stored until the limitation of claims or until the expiry of the obligation to store personal data resulting from applicable laws, including the obligation to keep accounting and financial documents.
- Automated decision-taking and profiling
Personal data shall not be subject to automated decision-taking or profiling.
or information about services rendered by the personal data Controller attributed to key words indicated by the personal data Controller. By using Google AdWords, the personal data Controller may verify the efficiency of advertisements ordered from Google, which enables us to match our offer to search results. Cookies that concern AdWords are saved on a computer of a website user. In this manner, only statistical information about the displayed advertisement is obtained. The personal data Controller may process data served in cookies as a result of using the website of the personal data Controller by visitors for auto-saving and auto-completion of a form available on the website of the Controller, adapting the content of the website to individual preferences of the person visiting the website of the Controller, and keeping anonymised statistics that present the use of the Controller’s website. Data recorded in cookies are collected on servers used by Google, including in the territory of the United States. In case of activating the functionality of anonymization of an IP address when using the website of the Controller, the IP address will be shortened already in the member states of the European Union or other states being a party to the Agreement on the European Economic Area. Only in exceptional instances will a full IP address be transferred to the United States and will be shortened. Browsers and devices have the functionality of default acceptance of cookies. Using such a device or browser one may determine the conditions for using cookies, i.e. it is possible to partly or completely limit the option to save cookies with the browser or device. The application of limitations in saving cookies may hinder or prevent the use of the website of the personal data Controller. Giving a consent by a person who uses the website of the Controller to presenting dedicated advertisements, offers and promotions (discounts) adapted to his preferences may be withdrawn at any time, however without affecting the conformity to law of processing based on the consent before its withdrawal. Transferring data from a device that visits the website of the Controller to Google Analytics and Google AdWords using cookies may be blocked by a user by downloading a plug-in to the website available on the website of Google. Detailed information about the rules of the above-mentioned services may be found at: www.google.com/intl/pl/policies/privacy/partners/. Depending on purposes and a legal basis of processing personal data collected by cookies, they may be stored for a period indicated in the above sections. Collected cookies that concern a person who visits a website may be stored until an objection is made. The personal data Controller is authorised to delete such data, if they are not used for marketing purposes for the period of 3 years, unless regulations oblige the Controller to store such data for a longer period. Some of the data may be stored for longer in order to make claims or defend against claims by the Controller until the limitation of such claims according to applicable regulations in this respect. A change of information about personal data processing. We will provide a notice of every change of this personal data processing information by placing a new version on the website https://www.goldwasser.pl/goldwasser-sklep
with a new applicable date. Kind regards,
Spirit of Gdańsk sp. z o.o.