POPRIVACY POLICY

1. This Privacy Policy sets out the rules for the processing of personal data obtained through the online store www.czemar.pl (hereinafter referred to as: ""Shop"").

2. The owner of the Store and the data administrator is Czemar z o. o. based in Wilków, ul. Kościelna 10, 46-113 Wilków, entered into the register of entrepreneurs of the National Court Register kept by the District Court in Opole, Commercial Division of the National Court Register under KRS number 0000605867, hereinafter referred to as Chemar.

3. Personal data collected by Czemar via the Store are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing the directive 95/46/EC (General Data Protection Regulation), also called GDPR.

 

§ 1

Type of data processed, purposes and legal basis

 

1. Czemar collects information about natural persons performing legal transactions not directly related to their activities, natural persons conducting business or professional activities on their own behalf and natural persons representing legal persons or organizational units that are not legal persons, to which the act grants legal capacity, conducting business activities on their own behalf. or professional, hereinafter collectively referred to as Clients.

2. Customers' personal data are collected in the event of:

1. registering an account in the Store, in order to create an individual account and manage this account. 

Legal basis: necessity to perform the contract for the provision of the Account service (Article 6(1)(b) of the GDPR);

2. placing an order in the Store in order to perform the contract. 

Legal basis: necessity to perform the contract (Article 6(1)(b) of the GDPR);

3. subscription to the information bulletin (Newsletter), in order to perform the contract, the subject of which is a service provided electronically. 

Legal basis – consent of the data subject to perform the contract for the provision of the Newsletter service (Article 6(1)(a) of the GDPR);

4. using the contact form service in the Store to perform a contract provided electronically. 

Legal basis: necessity to perform the contract for the provision of the contact form service (Article 6(1)(b) of the GDPR);

5. use the service, post an opinion in order to perform the contract, the subject of which is a service provided electronically. 

Legal basis – necessity to perform the contract for the provision of the service, post an opinion (Article 6(1)(b) of the GDPR).

3. When registering an account, the Customer provides:

1. name and surname, login, postal address, e-mail address.

4. When registering an Account in the Store, the Customer independently sets an individual password to access his account. The customer may change the password at a later time, according to the rules described in §5.

5. When placing an order in the Store, the Customer provides the following data:

1. e-mail adress;

2. first name and last name

3. Postal address

4. end

5. e-mail adress

6. Phone number

6. In the case of Entrepreneurs, the above scope of data is additionally extended by:

1. Entrepreneur's company;

2. number nip.

7. When using the Newsletter service, the Customer provides:

1. e-mail adress

8. If you use the contact form service, the Customer provides the following data:

1. e-mail adress;

2. first name and last name.

9. If you use the service, post a review, the customer provides the following data:

1. first name and last name.

10. When using the Store's website, additional information may be downloaded, in particular: the IP address assigned to the Customer's computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type.

11. Navigational data may also be collected from Customers, including information about links and references they decide to click or other activities undertaken in our Store. Legal basis – legitimate interest (Article 6(1)(f) of the GDPR), consisting in facilitating the use of services provided electronically and in improving the functionality of these services.

12. In order to determine, pursue and enforce claims, some personal data provided by the Customer as part of using the functionality in the Store may be processed, such as: name, surname, data regarding the use of services, if the claims result from the way in which the Customer uses the services, other data necessary to prove the existence of the claim, including the extent of the damage suffered. Legal basis – legitimate interest (Article 6(1)(f) of the GDPR), consisting in determining, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities.

13. The transfer of personal data to Czemar is voluntary in connection with concluded sales contracts or the provision of services via the Store's website, provided, however, that failure to provide the data specified in the forms in the Registration process makes it impossible to register and set up a Customer Account, and in the case of submitting ordering without Registering a Customer Account will make it impossible to place and process the Customer's order.

 

§ 2

Sharing or entrusting data and storage period

 

1. The Customer's personal data is transferred to service providers used by Czemar to run the Store, in particular to:

1. entities delivering Products,

2. payment system providers,

3. accounting office,

4. hosting providers,

5. software providers that enable business operations,

6. entities providing the mailing system,

7. software provider needed to run an online store.

2. Service providers to whom personal data are transferred, depending on contractual arrangements and circumstances, are either subject to Czemar's instructions regarding the purposes and methods of processing this data (processors) or independently determine the purposes and methods of their processing (controllers).

3. Customers' personal data are stored only in the European Economic Area (EEA).

4. If the basis for the processing of personal data is the Customer's consent, then the Customer's personal data are processed by Czemar until the consent is revoked, and after the consent is withdrawn, for a period of time corresponding to the limitation period for claims that may be raised by Czemar and that may be raised against him.

5.  If the basis for data processing is the performance of a contract, then the Customer's personal data are processed for as long as it is necessary to perform the contract, and after that time for a period corresponding to the limitation period for claims.

6. Navigation data may be used to provide Customers with better service, analyze statistical data and adapt the Store to Customers' preferences, as well as administer the Store.

7. If the Customer subscribes to the newsletter (Newsletter) to his e-mail address, Czemar will send electronic messages containing commercial information about promotions and new products available in the Store.

8. If a request is made, Czemar provides personal data to authorized state authorities, in particular organizational units of the Prosecutor's Office, the Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications.

 

§ 3

Cookies

1. The store uses "cookies".

2. The installation of "cookies" is necessary for the proper provision of services on the Store's website. "Cookies" files contain information necessary for the proper functioning of the website, and they also enable the development of general statistics of website visits.

3. The website uses two types of "cookies": "session" and "permanent".

1. Session cookies are temporary files that are stored on the Service User's end device until logging out (leaving the website),

2. Persistent cookies are stored on the Customer's end device for the time specified in the "cookie" file parameters or until they are deleted by the Customer.

4. Czemar uses its own cookies to:

1. authenticating the Customer in the Store and ensuring the Customer's session in the Store (after logging in), thanks to which the Customer does not have to re-enter the login and password on each subpage of the Store;

2. analysis and research as well as audience audit, and in particular to create anonymous statistics that help understand how Customers use the Store Website, which allows improving its structure and content.

5. Czemar uses external cookies to:

1. Optimizing the process of using the website www.czemar.pl

2. Identifying how users use the website www.czemar.pl

6. The cookie mechanism is safe for the computers of the Store's customers. In particular, this way it is not possible for viruses or other unwanted software or malware to reach the Customer's computers. However, in their browsers, customers have the option of limiting or disabling access to cookies on their computers. If you use this option, you will be able to use the Store, except for functions that by their nature require cookies.

7. The store contains links and references to other websites. Czemar is not responsible for the privacy policies applicable to them.

 

§ 4

Rights of data subjects

 

1. The right to withdraw consent - legal basis: art. 7 sec. 3 GDPR.

1. The customer has the right to withdraw any consent given by Czemar.

2. Withdrawal of consent takes effect from the moment of withdrawal.

3. Withdrawal of consent does not affect the processing carried out by Czemar in accordance with the law before its withdrawal.

4. Withdrawal of consent does not entail any negative consequences for the Customer, but may prevent further use of services or functionalities that, according to the law, Czemar can only provide with consent.

2. The right to object to data processing - legal basis: art. 21 GDPR.

1. The customer has the right to object at any time - for reasons related to his particular situation - to the processing of his personal data, including profiling, if Czemar processes his data based on a legitimate interest, e.g. marketing of Czemar products and services, keeping usage statistics. individual functionalities of the Online Store and facilitating the use of the Online Store, as well as satisfaction surveys.

2. Resignation by e-mail from receiving marketing messages regarding products or services will mean the Customer's objection to the processing of his personal data, including profiling for these purposes.

3. If the Customer's objection turns out to be justified and Czemar has no other legal basis for processing personal data, the Customer's personal data will be deleted, to the processing of which the Customer has objected.

3. Right to erasure ("right to be forgotten") - legal basis: art. 17 GDPR.

1. The customer has the right to request the deletion of all or some personal data.

2. The customer has the right to request the deletion of personal data if:

• the personal data are no longer necessary in relation to the purposes for which they were collected or processed;

• withdrew specific consent, to the extent that personal data were processed based on his consent;

• has objected to the use of his data for marketing purposes;

• personal data are processed unlawfully;

• personal data must be deleted in order to comply with a legal obligation under Union law or the law of the Member State to which Czemar is subject;

• the personal data were collected in connection with the offering of information society services.

3. Despite the request to delete personal data in connection with raising an objection or withdrawing consent, Czemar may retain certain personal data to the extent that processing is necessary to establish, pursue or defend claims, as well as to fulfill a legal obligation requiring processing under the law. Union or the law of the Member State to which Czemar is subject. This applies in particular to personal data including: name, surname, e-mail address, which data is retained for the purposes of considering complaints and claims related to the use of Czemar services, or additionally the address of residence/correspondence address, order number, which data are retained for the purpose of considering complaints and claims related to concluded sales contracts or the provision of services.

4. The right to limit data processing - legal basis: art. 18 GDPR.

1. The customer has the right to request restriction of the processing of his personal data. Submitting a request, until it is considered, prevents the use of certain functionalities or services, the use of which will involve the processing of the data covered by the request. Czemar will not send any messages, including marketing ones.

2. The customer has the right to request restriction of the use of personal data in the following cases:

• when you question the accuracy of your personal data - then Czemar limits their use for the time needed to check the accuracy of the data, but no longer than 7 days;

• when the data processing is unlawful and instead of deleting the data, the Customer requests restriction of their use;

• when personal data are no longer necessary for the purposes for which they were collected or used, but they are needed by the Customer to establish, pursue or defend claims;

• when he has objected to the use of his data - then the limitation is for the time needed to consider whether - due to the special situation - the protection of the interests, rights and freedoms of the Customer outweighs the interests pursued by the Administrator by processing the Customer's personal data.

5. The right to access data - legal basis: art. 15 GDPR.

1. The Customer has the right to obtain from the Administrator confirmation whether personal data is processed, and if this is the case, the Customer has the right to:

• access your personal data;

• obtain information about the purposes of processing, categories of personal data processed, about the recipients or categories of recipients of this data, the planned period of storage of the Customer's data or about the criteria for determining this period (when determining the planned period of data processing is not possible), about the rights of the Customer under the GDPR, and about the right to lodge a complaint with the supervisory authority, about the source of this data, about automated decision-making, including profiling, and about the safeguards used in connection with the transfer of this data outside the European Union;

• obtain a copy of your personal data.

6. The right to rectify data - legal basis: art. 16 GDPR.

1. The Customer has the right to request the Administrator to immediately correct any incorrect personal data concerning him/her. Taking into account the purposes of processing, the data subject has the right to request that incomplete personal data be completed, including by submitting an additional statement, sending the request to the e-mail address in accordance with §6 of the Privacy Policy.

7. Right to data portability - legal basis: art. 20 GDPR.

1. The Customer has the right to receive his personal data that he provided to the Administrator and then send them to another personal data administrator of his choice. The Customer also has the right to request that personal data be sent by the Administrator directly to such an administrator, if technically possible. In such a case, the Administrator will send the Customer's personal data in the form of a file in the CSV format, which is a commonly used, machine-readable format that allows the received data to be sent to another personal data administrator.

8. If the Customer exercises the right resulting from the above rights, Czemar complies with the request or refuses to comply with it immediately, but no later than within one month after receiving it. However, if - due to the complexity of the request or the number of requests - Czemar will not be able to meet the request within a month, it will meet it within the next two months by informing the Customer within one month of receiving the request - about the intended extension of the deadline and its reasons.

9. The customer may submit to Czemar complaints, inquiries and requests regarding the processing of his personal data and the exercise of his rights.

10. The customer has the right to request Czemar to provide copies of standard contractual clauses by submitting the inquiry in the manner indicated in §6 of the Privacy Policy.

11. The customer has the right to lodge a complaint with the President of the Office for Personal Data Protection regarding a violation of his rights to the protection of personal data or other rights granted under the GDPR.

 

§ 5

Data safety

 

1. Czemar applies technical and organizational measures to ensure protection of processed personal data appropriate to the threats and categories of data protected, and in particular protects data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of applicable regulations and change, loss, damage or destruction.

2. Czemar provides appropriate technical measures to prevent unauthorized persons from obtaining and modifying personal data sent electronically.

3. In matters not covered by this Privacy Policy, the provisions of the GDPR and other relevant provisions of Polish law shall apply accordingly.

4. If the Customer who has an account in the Store has lost the access password in any way, the Online Store allows you to generate a new password. Czemar does not send password reminders. The password is stored in an encrypted form, making it impossible to read. To generate a new password, please provide your e-mail address in the form available under the "Forgot your password" link provided next to the account login form in the Store. The Customer will receive an e-mail to the e-mail address provided during registration or saved in the last change of the account profile, containing a redirection to a dedicated form available on the Store's Website, where the Customer will be able to set a new password.

5. Czemar never sends any correspondence, including electronic correspondence, asking for login details, in particular the access password to the Customer's account.

 

§ 6

Changes to the Privacy Policy

 

1. The Privacy Policy may change, about which Czemar will inform customers 7 days in advance.

2. Please send questions regarding the Privacy Policy to: sklep@czemar.pl