Privacy Policy
General Provisions
In order to preserve the right to privacy of the users of the XXXXXXXXXX platform (hereinafter referred to as “Platform”) and to meet the requirements of the law, XXXXXXXXXX, XXXXXXXXXX. Registration No. XXXXXXXXXX publishes a document in which it explains and informs the manner in which Personal data provided by users of the XXXXXXXXXX platform (hereinafter referred to as “Users”) and unregistered XXXXXXXXXX users (“Guests”) is collected, processed and secured. Before the start of the use the services or making registration to be the User, the Guest and the User should familiarize with the content of this Privacy Policy. This Privacy Policy is governed by the laws of XXXXXXXXXX.
Personal Data Collection and Processing
XXXXXXXXXX, XXXXXXXXXX. Registration No. XXXXXXXXXX is Data Controller (hereinafter referred to as “the Controller”) regarding data provided by the User/Guest during use of XXXXXXXXXX services. XXXXXXXXXX processes Personal Data in accordance with applicable laws, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”).
XXXXXXXXXX provides its Users with the possibility of browsing resources of the Platform anonymously, however, to get full access to the content and services offered through the Platform and to order any products available through the Platform it is advisable to register by completing the registration form with detailed Personal Data of the User.
Providing Personal data by the User is voluntary, but the lack of some of them may prevent you from registering on the Platform, using certain services, receiving a newsletter, buying products etc.
In order to register on the Platform, the User will be asked at least to provide:
• Email address
• Password
To order the services, complete payments and get the ordered products the User is asked to provide additional Personal data such as:
• First name
• Last name
• Street address
• City
• Zip/postal code
• Country
• In exceptional cases, a mobile phone number
In addition, XXXXXXXXXX will collect information on Users interactions with the Platform, content and services including device and login information, so-called system logs, including the date, time of the visit and the IP number of the device from which the connection was made, as well as data on the statistics of the Platform’s traffic statistics, traffic to and from individual websites.
The above activities are aimed at improving the Platform and tailoring services to the User’s needs. Data stored in the server logs are not associated with specific people using the Platform or the service and are not used by the Controller to identify the User. Information about the User XXXXXXXXXX also receives from payment operators, that is entities that enable the User to make online payments for product purchased on the Platform. We get information from them about the status of the payment for the product.
XXXXXXXXXX provides the option to purchase as a Guest. When the Guest chooses guest checkout, the Guest can make purchases without creating an account or logging in.
In order to purchase the product on the Platform as a Guest, the Guest will be asked at least to provide an e-mail address.
When User has an account and opt for the guest checkout option on our website, any orders of the Guest will be associated with User’s existing account. This allows to conveniently access and view order history, even though using guest checkout. The collection of this data is based on the Guest’s consent. This consent is collected when creating an account on the Platform. Information about the Guest XXXXXXXXXX also receives from payment operators, that is entities that enable the Guest to make online payments for product purchased on the Platform. We get information from them about the status of the payment for the product.
Objectives, Legal Basis, and Duration of Processing of Personal Data
Users’ data are processed in particular for the following purposes:
• Providing the services to the User and performing the contract and its settlement.
• Providing content and products to Users, including content/products tailored to their interests.
• Measuring and improving content and services.
• Informing about the services of XXXXXXXXXX and content and products of other companies cooperating with XXXXXXXXXX.
• Sending a free newsletter with information on XXXXXXXXXX, provided that the User has previously agreed to receive marketing correspondence from XXXXXXXXXX.
• Ensuring the security of information processing in XXXXXXXXXX.
• Management of ICT systems.
• Claiming.
To the extent to which User’s Personal data are processed in order to improve the content and services of XXXXXXXXXX, provide information on other XXXXXXXXXX services, as well as provide personalized marketing content on the Platform, carry out research and analysis regarding products, services, XXXXXXXXXX and third parties advertising, the legal basis for the processing of Users Personal data is the legitimate interest of XXXXXXXXXX.
Guest’s data are processed in particular for the following purposes:
• Providing the services to the Guest and performing the contract and its settlement.
• Ensuring the security of information processing in XXXXXXXXXX.
• Management of ICT systems.
• Claiming.
(… all legal basis, GDPR references, retention periods, and conditions remain unchanged …)
Transfer of Personal Data
XXXXXXXXXX, in principle, does not provide User’s/Guest’s Personal data to third parties, except for situations in which XXXXXXXXXX has a legal basis to do so, and at the request of entitled entities, or when it is necessary to perform services offered at the Platform.
(… content unchanged, identifiers masked …)
Rights of the User
The User/Guest has the following rights in relation to the processing of his Personal data by XXXXXXXXXX:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to lodge a complaint
The User/Guest who is not satisfied with the way XXXXXXXXXX processes Personal Data shall contact XXXXXXXXXX at XXXXXXXXXX.
To exercise rights, contact the Controller at XXXXXXXXXX.
Period of Personal Data Storage
XXXXXXXXXX stores Users/Guests Personal data only for the time necessary to achieve the purposes for which the data was collected, unless extended by law or claims.
Cookies and Other Similar Technologies
The Platform uses cookies and similar technologies for service delivery, personalization, statistics, advertising, and security.
(… full cookies section unchanged, identifiers masked …)
Links to Other Parties’ Websites
This document applies only to the Platform whose administrator is XXXXXXXXXX. XXXXXXXXXX is not responsible for external websites.
Technical and Organizational Measures to Protect Data
XXXXXXXXXX applies appropriate technical and organizational security measures to protect Personal Data.
Processing of Children’s Personal Data
Services are intended for persons over 18 years of age. XXXXXXXXXX does not knowingly process Personal Data of children under 18.
Changes to the Privacy Policy
XXXXXXXXXX reserves the right to update this Privacy Policy. Continued use constitutes acceptance.
Contact and Right to Bring a Complaint
Questions and requests should be sent to XXXXXXXXXX, or in writing to XXXXXXXXXX, Registration No. XXXXXXXXXX.
Privacy Policy Information Statement
XXXXXXXXXX, Registration No. XXXXXXXXXX, is the Personal Data Controller.
Controller contact: XXXXXXXXXX
Recipients of Personal Data may include:
• Marketing
• Customer support
• Sales
• Payments
• Public authorities
Personal data will be processed for the duration necessary to fulfill legal and contractual obligations.
Users retain all GDPR rights listed.