Legal Notice on Processing of Personal Data and Privacy Policy
This document contains information relating to the Administrator's processing of personal data referred to in Article 13 of the RODO (REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)) and constitutes a form of making available to contractors MY WASH SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Sarnia 2, 15-509 Sobolewo, KRS: 0000732467, NIP: 966 212 09 08, REGON: 380263937 such information through the Service, and furthermore constitutes a Privacy Policy and defines the rules for storing and accessing information on the User's devices with the use of cookies, for the implementation of services provided electronically, requested by sklep.mywash.pl (i.e.: the Administrator within the meaning of paragraph 1(a) below).
(1) Whenever terms referred to in paragraphs (a) - (h) below are used in this document, they shall have the following meanings (Definitions):
(a) Administrator or Controller of personal data (including that provided by you through the Service) - means: MY WASH SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ SPÓŁKA KOMANDYTOWA, ul. Pińska 2, 15-379 Białystok, tel. 666120235, e-mail: Shop@mywash.pl
b) Cookies - means computer data, in particular small text files, recorded and stored on devices through which the User uses the Website.
c) Cookies of the Administrator - means Cookies placed by the Administrator, related to the provision of electronic services by the Administrator through the Service.
d) External Cookies - means Cookies placed by the Administrator's partners, through the website of the Service.
e) Service - means: the website under which the Administrator operates the Internet service, operating on the domain https://sklep.mywash.pl/ and its sub-domains.
f) Personal Data: any information about an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person; for the avoidance of doubt, Cookies constitute personal data and are subject to processing at the Administrator in the manner attributed to personal data;
g) Device - means an electronic device through which a User accesses the Service.
(h) User - means an entity using the Service.
(2) The Administrator, while processing your personal data, shall apply organizational and technical measures in accordance with the provisions of Polish law and in compliance with EU regulations, and shall take all necessary measures to secure your data against any violations, including against their accidental or unlawful destruction, loss, modification, unauthorized disclosure or against unauthorized access to personal data.
3 Processing of personal data general information
3.1 Purpose of processing your personal data and categories of data: Your personal data are processed by the Administrator, for the purpose of entering into and performing a contract for the provision of services to you, or the sale of goods, establishing, defending and asserting potential claims of the Administrator against you, as well as direct marketing, if you have consented to the processing of personal data in this regard. The subject of processing is your personal data in the category of contact data. A detailed designation of the purpose of processing of Cookies is described in Section 4.2.2 of this document.
3.2 Basis for processing your personal data, together with a description, if any, of the legitimate interests pursued by the Administrator: Your personal data is processed by the Controller on the basis of Article 6(1)(b) of the RODO, i.e.: the processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract. Another important aspect is the provision of Article 6(1)(c) of the RODO, i.e.: the processing is necessary for the fulfillment of a legal obligation incumbent on the Controller, these are, for example, laws that require the Controller to process data for tax and accounting purposes. Another important aspect is the provision of Article 6(1)(f) of the RODO, i.e.: the processing is necessary for the purposes of legitimate interests pursued by the Administrator or by a third party, this is, for example: the enforcement of receivables or the assertion of claims whether of the Administrator or its customers, marketing of our products or services.
3.3 Information about recipients of personal data: Your personal data may be transferred to recipients in order to fulfill the purposes listed in Section 3.1. to the extent that the data are necessary for the performance of tasks ordered by the data controller, if required by law or if the controller has another legal basis. Your personal data may be transferred to: to employees and associates of the Administrator who need to access the data to perform their duties, if they are persons authorized by the Administrator to use such data in the performance of their official duties; the data may also be transferred to authorized authorities, including common courts and the Supreme Court, Provincial Administrative Courts and the Supreme Administrative Court, public administration bodies or offices in a situation where the Administrator is required to do so by law, as well as, if necessary, may be made available to providers of legal, accounting, courier or postal services on behalf of the Administrator; to transport or forwarding companies, as well as to entities providing electronic payments, indicated on the Service Sites (TPAY electronic payment channel, operated by National Payment Integrator S. A. Andersa Square 3, 17th floor, 61-894 Poznań, if it is expedient for the Administrator to perform services for you, data in such case may also be transferred to other persons within your organization.
3.4 Information about the intention to transfer personal data to a third country: As a rule, the Administrator does not transfer Customer Personal Data to recipients located outside the European Economic Area. However, the transfer of Customer Personal Data outside the EEA may occur, and this may result only from the execution of orders from you. In the aforementioned cases, your Personal Data is protected by standard data protection clauses, which, in accordance with Article 46(2) of the RODO, provide adequate safeguards in case of data transfer to countries outside the EEA.
3.5 Information about the storage period of your personal data: Your personal data will be stored in connection with the provision of services by the Administrator to you for the period of performance of these services, but not less than until the statute of limitations in order to enable the Administrator to pursue any possible claims from you, as well as for the period for which the law, especially tax and accounting law, requires the Administrator to perform activities related to the processing of your data, such as archiving documents for accounting, bookkeeping or tax purposes.
3.6 Information about the right to access, rectify, erase personal data or limit processing, the right to object and the right to data portability: The Administrator shall allow access to one's own personal data (information about the data, a copy of the data); rectification of the data; deletion of the data (processed unjustifiably); restriction of processing (withholding of data operations or non-deletion of data - according to the request made); transfer of data to another data controller. To the extent that the basis for the processing of your personal data is Article 6(1)(f) of the RODO, you have the right to object to the processing of your personal data, in particular for the purpose of marketing the Administrator's products or services.
3.7 Information on the right to withdraw consent to the processing of personal data processed pursuant to Article 6(1)(a) RODO and Article 9(2)(a) RODO: with regard to personal data processed pursuant to Article 6(1)(a) RODO, i.e. when the data subject has given his/her consent to the processing of his/her personal data for one or more specified purposes, as well as with regard to personal data processed pursuant to Article 9(2)(a) RODO, i.e. when: the data subject has given his or her explicit consent to the processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, or data concerning that person's health, sexuality or sexual orientation for one or more specific purposes, you are entitled to withdraw your consent to the processing of such personal data at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
3.8 Information about automated decision-making, including profiling, as referred to in Article 22 (1) and (4) of the RODO, and relevant information about the modalities of such decision-making, as well as the significance and anticipated consequences of such processing for the data subject: decisions that affect you are not made by automated means, nor is profiling as referred to in Article 22 (1) and (4) of the RODO;
3.9 Information about the voluntariness of providing personal data: The provision of your personal data is voluntary in the case of the conclusion of an agreement for the provision of services or the sale of goods by the Administrator, nevertheless, without the provision of such data it may not be possible for the Administrator to provide services (due to their nature) and it may not be possible to issue and provide you with a document confirming the performance of a service, the issuance of goods, or payment for a service or goods or a document constituting an invoice. In the case of marketing of services provided by the Administrator, your provision of personal data is voluntary.
3.10 Information about the right to lodge a complaint to a supervisory authority: You have the right to lodge a complaint to the supervisory authority dealing with the protection of personal data - the President of the Office for Personal Data Protection.
4 Sharing of data, including personal data with the Administrator through the Service.
4.1 If you intend to use the forms, made available in the Service in order to obtain information from the Administrator (vide 4.1.1. below), or in order to order services, provided by the Administrator or to purchase Goods offered by the Administrator (vide 4.1.2. below), you will be asked to provide personal data, respectively:
4.1.1. in the scope of your: name, surname, city in which you have your registered office or place of residence, and e-mail address, telephone number, as well as the content of your inquiry in the "message content" field;
4.1.2. regarding your surname and forenames; address of residence; delivery address, if different from the address of residence, e-mail address; telephone number, company (designation of the entrepreneur, including the name of the entrepreneur who is a legal entity), if you are an entrepreneur, Tax Identification Number, if you are an entrepreneur;
4.2 The Service uses so-called Cookies, and the following provides detailed information in this regard.
4.2.1 Types of Cookies used
4.2.1.1 Cookies used by the Administrator are safe for the User Device. In particular, by this means, it is not possible for viruses or other unwanted software or malware to enter the Users' Devices. These cookies allow to identify the software used by the User and customize the Service individually for each User. Cookies usually contain the name of the domain from which they originate, the time they are stored on the Device and the assigned value.
4.2.1.2 The Administrator uses two types of cookies:
Session cookies: they are stored on the User's Device and remain there until the session of a given browser ends. The stored information is then permanently deleted from the Device's memory. The mechanism of session cookies does not allow the collection of any personal data or any confidential information from the User's Device.
Persistent cookies: they are stored on the User's Device and remain there until they are deleted. Ending the session of a given browser or switching off the Device does not delete them from the User Device. The mechanism of persistent cookies does not allow the collection of any personal data or any confidential information from the User Device.
4.2.1.3 The User has the option to restrict or disable access of cookies to his Device. If you use this option, the use of the Website will be possible, except for functions that by their nature require cookies.
4.2.2 Purposes for which cookies are used
4.2.2.1 The Administrator uses Administrator Cookies for the following purposes:
- Service configuration and implementation of processes necessary for the full functionality of the websites - to recognize the device of the User of the Service and, accordingly, display the website, adapted to his/her individual needs; - to remember the data needed for the use of the website.
- Analysis and research, as well as audience auditing - creation of anonymous statistics that help to understand how the Service Users use the websites of the Service, which makes it possible to improve their structure and content.
To ensure the security and reliability of the Website.
4.2.2.2 The Service Administrator uses External Cookies for the following purposes:
presenting multimedia content on the Service's websites, which are downloaded from an external website;
collection of general and anonymous statistical data through Google Analytics analytical tools (administrator of external cookies: Google Inc. based in the USA);
presentation of advertisements tailored to the User's preferences using an online advertising tool - to collect general and anonymous data for the implementation of advertising campaigns through remarketing lists in the Google AdWords advertising system (administrator of external cookies: Google Inc - based in the USA). Users visiting the main page and sub-pages of the Website - are then added to remarketing lists, which allow to present them with advertising content in the search network and in the Google advertising network. The user is active on the remarketing list for a period of 45 to 90 days;
logging into the service using the jump service;
use of interactive features to popularize the service through social networks;
to present opinions on the Service's websites, which are downloaded from an external website;
use of functions to facilitate communication through the Service's website, which are downloaded from an external website.
4.3 Possibilities to determine the conditions for storing or accessing Cookies
4.3.1 The User may independently and at any time change the settings for Cookies, specifying the conditions for their storage and access by Cookies to the User's Device. The User may change the settings referred to in the preceding sentence by means of the settings of the Internet browser or by means of the configuration of the service. These settings can be changed, in particular, in such a way as to block the automatic handling of cookies in the settings of your web browser or inform you of the placement of cookies on your device each time. Detailed information about the possibility and methods of handling cookies is available in the settings of your software (web browser).
Below we present how you can change the settings of your web browsers regarding the use of cookies:
4.3.2 You may delete Cookies at any time using the available functions in the browser you use.
4.3.3 Restricting the use of Cookies may affect certain functionalities available on the Website.