Privacy policy
PRIVACY POLICY
PRIVACY POLICY OF THE CarduelisArt.com ONLINE STORE We care about your privacy and security, which is why we provide you with information below about how we process your personal data and the cookies used by our Store. This information has been prepared in accordance with the GDPR, i.e. the General Data Protection Regulation.
WHO IS THE ADMINISTRATOR OF MY PERSONAL DATA?
The administrator of personal data collected through the Online Store www.carduelisArt.com is Carduelis Monika Czyżewska, ul. Słoneczna 16, 05-410 Józefów, NIP 5321883862, REGON 369281450, address of business: ul. Słoneczna 16, 05- 410 Józefów, address for service: ul. Słoneczna 16, 05-410 Józefów, e-mail address: [email protected]. Hereinafter referred to as the Administrator.
WHO CAN I CONTACT ABOUT THE PROCESSING OF MY PERSONAL DATA?
If you require information regarding the processing of your personal data by Carduelis Monika Czyżewska, please contact us by email at: [email protected].
ON WHAT BASIS IS MY PERSONAL DATA PROCESSED?
Personal data in the Online Store is processed by the Administrator in accordance with applicable law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as “GDPR” or “GDPR Regulation.” Official text of the GDPR: http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679.
The controller shall take particular care to protect the interests of the data subjects whose personal data are processed by him, and in particular shall be responsible for and ensure that the data collected by him are: processed lawfully; collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes; factually correct and adequate in relation to the purposes for which they are processed; stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
HOW IS MY DATA COLLECTED?
We use your personal data because you have decided to make purchases in our online store www.carduelisArt.com or you have agreed to receive commercial information by electronic means to the e-mail address provided about the Store's offer or you have otherwise provided us with your data using the Store's website. The Store operates on the basis of the Terms and Conditions, which you can read here.
WHAT PERSONAL DATA IS PROCESSED?
We process your first name, last name, phone number, email address, and home address.
FOR WHAT PURPOSE AND ON WHAT BASIS DO WE PROCESS YOUR PERSONAL DATA?
PURPOSE 1:
To perform the contracts concluded with you for the sale of goods from the Store and to confirm the performance of our obligations.
BASIS FOR PROCESSING:
The contract concluded with the Administrator by accepting the Store's terms and conditions. The following data is necessary to complete the order: first name, last name, residential address, phone number, and email address.
PURPOSE 2:
Conducting complaint processes or pursuing claims/defending against claims.
BASIS FOR PROCESSING:
The Administrator's obligation under the law regarding warranty for defects in sold goods. Providing data in the complaint form is mandatory for the proper consideration of your complaint.
PURPOSE 3:
If you give your separate consent by ticking the appropriate checkbox or by voluntarily subscribing to the newsletter, we will send commercial information about goods offered for sale in the Store, including promotional offers, to the e-mail address you provide.
BASIS FOR PROCESSING:
Your consent, which is not mandatory and may be withdrawn at any time by contacting us using the details provided above or by clicking on the link at the bottom of each email containing commercial information.
IS IT MANDATORY TO PROVIDE MY PERSONAL DATA?
It is not mandatory to consent to receiving commercial information in the form of a newsletter, however, in order to properly perform the service of selling and delivering the purchased goods, we need the personal data listed above.
TO WHOM IS MY PERSONAL DATA TRANSFERRED?
Your data is transferred solely for the purpose of properly performing the service:
If you have chosen courier delivery, we transfer your data to our partner InPost Sp. z o.o.
If you have chosen online payment, we transfer the necessary data to Stripe.
Our online store platform is WordPress, and your data will be transferred to this entity for the purpose of fulfilling your order.
We may also share your personal data with other entities from the above categories with whom we establish cooperation.
Accounting, legal, and consulting service providers providing the Administrator with accounting, legal, or consulting support. The Administrator shares the collected personal data of the Customer with a selected provider acting on its behalf only in cases and to the extent necessary to achieve a specific data processing purpose in accordance with this privacy policy.
IS MY DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?
Due to the fact that we use the services of various entities, your personal data may be transferred outside the European Union. We assure you that in such a case, the transfer of data will be based on an appropriate agreement between Carduelis Monika Czyżewska and that entity, containing standard data protection clauses adopted by the European Commission.
HOW LONG WILL MY PERSONAL DATA BE PROCESSED?
We will process the personal data you provide for the period necessary to perform the sales contract, as well as your complaints, confirm the performance of our obligations, and pursue or defend against claims that may be brought against us.
WHAT ARE MY RIGHTS IN RELATION TO THE PROCESSING OF MY PERSONAL DATA?
The right to information on how your personal data is processed.
Please contact us by email at: [email protected].
The right to access and update your data.
The right to access and update your data.
The right to delete your data. Please contact us by email at: [email protected].
Please note, however, that this is not an absolute right and we may refuse to delete your data if we have a legal basis for processing it, e.g. for the purpose of pursuing a claim.
The right to lodge a complaint with a supervisory authority. The supervisory authority in Poland is the President of the Personal Data Protection Office.