Privacy Policy
§ 1
General provisions
- This Privacy Policy sets out the rules for the acquisition, processing and security of personal data of the Customers of the online store lilaseb.shop (hereinafter: “Store”).
- The administrator of customers’ personal data is: Lila&Seb Global Trade Company Sebastian Kosiak, based in Piekary Slaskie, at ul. Gwiżdża 11, 41-710 Ruda Śląska, NIP 6342463060, REGON 240977944 (hereinafter referred to as the “Administrator”).
- Direct contact with the Administrator can be obtained at the telephone number: +48 530 362 526, e-mail: lilaseb.shop@gmail.com.
§ 2
Scope, purposes and legal basis for processing personal data
- Personal data collected by the Administrator through the Store are processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), hereinafter RODO.
- For the sake of security of the entrusted data, the Administrator has developed internal procedures and recommendations to prevent data from being made available to unauthorized persons. Their performance is constantly monitored and checked for compliance with relevant legal acts.
- Personal Data is processed on the basis of the consent expressed by the Customer and in cases where the law authorizes the Administrator to process personal data on the basis of the provisions of the law or for the purpose of performance of the contract concluded between the parties.
- Personal data is processed for the following purposes:
a/ registering an account with the Online Store, in order to create and manage an individual account. Legal basis: necessary for the performance of the account service contract (Article 6(1)(b) of the DPA);
b/ placing an order in the Online Store, in order to execute the sales contract. Legal basis: necessary for the performance of the sales contract (Article 6(1)(b) of the DPA);
c/ to make complaints and withdrawal from the contract in order to implement the complaint procedure or withdrawal procedure. Legal basis: necessary to fulfill a legal obligation incumbent on the controller (Article 6(1)(c) of the DPA). - Personal data that will be processed in the mentioned in paragraph. 7 objectives:
a/ e-mail address and the ID established by the Customer;
b/ name, surname;
c/ gender and date of birth;
d/ postal code and city;
e/ street including house/apartment number;
f/ telephone number;
g/ in the case of Entrepreneurs, additionally: the Entrepreneur’s company and Tax Identification Number. - The Administrator processes personal data voluntarily provided by Customers and automatically collected data on the manner of use of the Online Store (including tools used to use the Online Store) also in accordance with Art. 6 paragraph 1(f) RODO, i.e.. due to the legally justified purposes carried out by the Administrator, and in particular for the purpose of direct marketing of the Administrator’s products, as well as for the purpose of optimizing, improving and personalizing the functions of the Online Store and for the purpose of creating statistics. The controller shall ensure that such processing will not violate the rights and freedoms of data subjects. This applies to data in particular:
a/ IP address,
b/ type of operating system,
c/browser type/type.
§ 3
Recipients of data
- The Customer’s personal data is transferred to service providers and subcontractors used by the Administrator in the operation of the Online Store:
a/ hosting providers – for the purpose of storing personal data on the server,
b/ store software suppliers – for the use of the store system in which personal data is processed,
c/ providers of sms communication system – in order to use the system under which personal data are processed for the purpose of sending sms messages related to the execution of the order
d/ courier companies – in order to use the services of courier companies that deliver orders to the Customer,
e/ IT companies – for the purpose of technical support
f/ other subcontractors who cooperate with us in operating the Store. - All entities to which the Administrator entrusts the processing of personal data shall guarantee the application of appropriate measures for the protection and security of personal data required by law.
- The indicated entities are provided with personal data, depending on the agreement.
§ 4
Cookies
- The store uses small files, called cookies. These are small text-number files that are saved by the ICT system in the Customer’s ICT system (on the computer, phone or other device of the Customer from which the connection with the Store was made) while browsing the Store and allow for subsequent identification of the Customer in case of reconnection with the Store from the device (e.g. computer, phone) on which they were saved.
- Cookies collect data on the Customer’s use of the Store, and their main purpose is to facilitate the Customer’s use of the Store’s Website, to customize the Website to the needs and expectations of a given Customer, and to study Customer traffic within the Online Store.
- In the Store, cookies include:
a/ cookies with data entered by the customer (session ID) for the duration of the session (user input cookies);
b/ authentication cookies used for services that require authentication for the duration of the session (authentication cookies);
c/ security cookies, such as those used to detect authentication abuse (user centric security cookies);
d/ multimedia player session cookies (e.g. flash player cookies), for the duration of the session (multimedia player session cookies);
e/ persistent cookies used to personalize the User interface for the duration of the session or slightly longer (user interface customization cookies),
f/ cookies used to remember the contents of the shopping cart for the duration of the session (shopping cart cookies);
g/ cookies used to monitor website traffic, i.e. data analytics, including Google Analytics cookies (these are files used by Google to analyze how the User uses the Online Store, to create statistics and reports on the functioning of the Online Store). Data analytics, including Google Analytics cookies (these are files used by Google to analyze how the User uses the Online Store, to create statistics and reports on the functioning of the Online Store). Detailed information on the scope and principles of data collection in connection with this service can be found at the following link: https://www.google.com/intl/pl/policies/privacy/partners. - The administrator also uses cookies for marketing purposes, among others. in connection with targeting customers with behavioral advertising. For this purpose, the Administrator stores information or accesses information already stored in the Client’s telecommunications terminal device (computer, phone, tablet, etc.). The use of cookies and personal data collected through them for marketing purposes, in particular to promote the services and goods of third parties, requires the consent of the Client. This consent can be expressed through the appropriate configuration of the browser, and can be withdrawn at any time, in particular by clearing the history of cookies and disabling cookies in the browser settings.
§ 5
Customer rights related to the processing of personal data
- The Administrator processes the Customer’s personal data for the time it takes to achieve the designated purpose. After this period, the customer’s personal data will be irreversibly deleted or destroyed.
- Each Customer to whom the data relates has the right to:
a/ information on the processing of personal data
b/ withdrawal of consent to data processing
c/ access to data,
d/ rectification of data,
e/ deletion of data,
f/ restriction of data processing,
g/ data portability
h/ the right to object to data processing,
i/ the right to file a complaint with the supervisory authority. - Cancellation or objection to the processing of personal data for the purposes of registration and account maintenance in the Online Store is made by sending an e-mail to the following address lilaseb.shop@gmail.com. Once you revoke your consent or object, your personal data will no longer be used for these purposes. The Customer may change/complete his/her personal data by making direct changes after logging into his/her account on the Online Store or by sending a request from the Customer’s registered e-mail address on the Online Store to the following address lilaseb.shop@gmail.com.
- The customer has the right to lodge a complaint with the President of the Office for Personal Data Protection if he believes that the processing of his personal data violates the RODO.
- Contact with the person who supervises the processing of personal data in the Service Provider’s organization is possible by e-mail at the following address: lilaseb.shop@gmail.com.
- The Customer’s personal data are not transferred either to Third Countries, i.e. outside the European Economic Area (EEA) or outside international organizations.
§ 6
Final provisions
- The Administrator reserves the right to update or change individual provisions of this privacy policy without prior notice. Therefore, it is advisable for the customer to check our privacy policy each time before using our offer, in order to familiarize themselves with the current version in case of possible changes and updates.
- In matters not covered by this Privacy Policy, the provisions of the Civil Code and relevant laws of Poland and the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 shall apply. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC.
