PRIVACY POLICY OF THE wikome.PL ONLINE STORE
1. DEFINITIONS
1.1. Administrator - WIKOME.PL Piotr Perlak, 37-311 Wola Zarczycka 291c, NIP: REGON:
1.2. Personal data - all information relating to a natural person identified or identifiable by one or more specific factors determining the physical, genetic, economic, cultural or social identity, including the user's device IP, location data, internet identifier and information collected via files cookie.
1.3. Policy - Privacy Policy.
1.4. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and the repeal of Directive 95/46 / EC.
1.5. Website - an online store run by the Administrator available at www.wikome.pl
1.6. User - any natural person visiting the www.wikome.pl website or using one or more services or functionalities provided by the Administrator described in this Privacy Policy.
2. DATA PROCESSING IN CONNECTION WITH THE USE OF wikome.PL
In connection with the User's use of the Website www.wikome.pl, the Administrator collects data to the extent necessary to provide individual services offered on the website and information about the User's activity on the Website. The following regulations describe the detailed rules and purpose of processing personal data collected when using the wikome.pl website by the User.
3. OBJECTIVES AND LEGAL BASIS FOR DATA PROCESSING ON THE Wikome.PL WEBSITE USING THE wikome.PL WEBSITE
3.1. Personal data of all users using the wikome.pl website (including the IP address or other identifiers and information collected via cookies or other similar technologies) and who are not registered users (i.e. persons who do not have a profile on the website) are processed by the administrator:
3.1.1. in order to provide electronic services in the scope of making the content collected on the wikome.pl website available to Users, sharing contact forms - then the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR);
3.1.2. in order to handle purchases made by users without registering on the wikome.pl website - then the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR);
3.1.3. in order to handle user complaints - then the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR);
3.1.4. for statistical and analytical purposes - then the legal basis for processing is the Administrator's legitimate interest (Article 6 (1) (f) of the GDPR) consisting in analyzing the Users' activity and preferences in order to improve the functionalities of the website and the services provided on the wikome.pl website;
3.1.5. in order to possibly establish and pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Administrator of the wikome.pl website (Article 6 (1) (f) of the GDPR) consisting in the protection of his rights;
3.1.6. for marketing purposes of the Administrator of the wikome.pl website and other entities, in particular related to the presentation of behavioral advertising - the rules for the processing of personal data by the Administrator for marketing purposes are described in the "MARKETING" section of the substantive privacy policy User's activity on the wikome.pl website, including its personal data are recorded in system logs (a special computer program used to store a chronological record containing information about events and activities related to the IT system used for the provision of services by the Administrator of the wikome.pl website). Information collected in the logs processed in connection with the provision of services. The administrator of the wikome.pl website also processes them for technical purposes, in particular, the data may be temporarily stored and processed to ensure the security and proper functioning of IT systems, e.g. in connection with the backup of the wikome.pl website, tests of changes in IT systems, detecting irregularities or protecting against abuse and attacks.
REGISTRATION ON wikome.PL
3.2. Persons who register on the wikome.pl website are asked to provide the data necessary to create and operate the account. In order to facilitate service, the User may provide additional data, thereby consenting to their processing. Such data can be deleted at any time. Providing data marked as mandatory is required to set up and operate an account, and failure to do so results in the inability to create an account on the wikome.pl website. Providing other data is voluntary.
3.3. Users' personal data are processed:
3.3.1. in order to provide services related to the operation and maintenance of an account on the wikome.pl Website - the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR), and in the scope of optional data - the legal basis for processing is consent ( Article 6 (1) (a) of the GDPR);
3.3.2. for statistical and analytical purposes - the legal basis for processing is the Administrator's legitimate interest (Article 6 (1) (f) of the GDPR) consisting in conducting analyzes of Users' activity on the wikome.pl website and the manner of using the account, as well as their preferences in order to improve the applied functionalities;
3.3.3. in order to possibly establish and pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Administrator of the wikome.pl website (Article 6 (1) (f) of the GDPR) consisting in the protection of his rights.
3.3.4. for marketing purposes of the Administrator of the wikome.pl website and other entities - the rules for the processing of personal data for marketing purposes are described in the "MARKETING" section.
3.4. If the user of the wikome.pl website places any personal data of other persons on the Website (including their name, address, telephone number or e-mail address), they may do so only on condition that the provisions of applicable law and personal rights of these persons are not violated.
PLACING ORDERS
3.5. Placing an order (purchase of goods or services) by the User of the wikome.pl Website involves the processing of his personal data. Providing data marked as mandatory is required in order to accept and service the order, and failure to do so results in the lack of its implementation. Providing other data is voluntary.
3.6. Personal data is processed:
3.6.1. in order to fulfill the order placed - the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR); in the scope of optional data, the legal basis for processing is consent (Article 6 (1) (a) of the GDPR);
3.6.2. in order to fulfill the statutory obligations incumbent on the Administrator of the wikome.pl website, resulting in particular from tax regulations and accounting regulations - the legal basis for processing is the legal obligation (Article 6 (1) (c) of the GDPR);
3.6.3. for statistical and analytical purposes - the legal basis for processing is the Controller's legitimate interest (Article 6 (1) (f) of the GDPR) consisting in conducting analyzes of Users' activity on the wikome.pl website, as well as their purchasing preferences in order to improve the functionalities used;
3.6.4. in order to possibly establish and pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Administrator of the wikome.pl website (Article 6 (1) (f) of the GDPR) consisting in the protection of his rights.
CONTACT FORMS
3.7. The administrator of the wikome.pl website provides users with the possibility of contacting him using electronic contact forms. Using the form requires providing personal data necessary to contact the User and answer the inquiry. The User may also provide other data to facilitate contact or service the inquiry. Providing data by the user marked as mandatory is required in order to accept and handle the inquiry, and failure to do so results in the Administrator's inability to handle it. Providing other data is voluntary.
3.8. Personal data is processed:
3.8.1. in order to identify the sender and handle his inquiry sent via the form provided on wikome.pl - the legal basis for processing is the necessity of processing to perform the contract for the provision of the service (Article 6 (1) (b) of the GDPR);
3.8.2. for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in keeping statistics of inquiries submitted by Users via the wikome.pl website in order to improve its functionality.
4. MARKETING
4.1. The administrator of the wikome.pl website processes Users' personal data in order to carry out marketing activities, which may include:
4.1.1. displaying advertising content to the User that is not tailored to his preferences (contextual advertising);
4.1.2. displaying to the User marketing content corresponding to his interests (behavioral advertising);
4.1.3. sending e-mail notifications to the user about interesting offers or content, which in some cases contain commercial information;
4.2. In order to carry out marketing activities, the Administrator of the wikome.pl website uses profiling in some cases. This means that thanks to the automatic processing of user data, the Administrator evaluates selected factors relating to natural persons in order to analyze their behavior or create a forecast for the future.
CONTEXTUAL ADVERTISING
4.3. The administrator of the wikome.pl website processes Users' personal data for marketing purposes in connection with directing contextual advertising to Users (i.e. advertising that does not match the User's preferences). The processing of personal data takes place then in connection with the implementation of the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR).
BEHAVIORAL ADVERTISING
4.4. The administrator of the wikome.pl website processes Users' personal data, including personal data collected via cookies and other similar technologies, for marketing purposes in connection with targeting behavioral advertising to Users (i.e. advertising that is tailored to the User's preferences). The processing of personal data then also includes profiling of Users. The use of personal data collected through this technology for marketing purposes, in particular in the promotion of services and goods of third parties, is based on the legitimate interest of the administrator and only on condition that the User has consented to the use of cookies. Consent to the use of cookies may be expressed through the appropriate configuration of the browser, and may also be withdrawn at any time, in particular by clearing the cookie history and disabling cookies in the user's browser settings.
4.5. This consent may be withdrawn at any time.
DIRECT MARKETING
4.6. If the User has consented to receive marketing information via e-mail and other means of electronic communication, the User's personal data will be processed for the purpose of sending such information. The basis for data processing is the legitimate interest of the Administrator of the wikome.pl website consisting in sending marketing information within the limits of the consent granted by the User. The user has the right to object to the processing of data for the purposes of direct marketing, including profiling. The data will be stored for this purpose for the duration of the legitimate interest of the Administrator of the wikome.pl website, unless the User objects to receiving marketing information.
5. SOCIAL NETWORK
The administrator of the wikome.pl website processes the personal data of Users visiting the profiles of the Administrator of the wikome.pl website run in social media (Facebook, Instagram, Twitter, Google +,). These data are processed only in connection with keeping the profile, including to inform Users about the Administrator's activity and to promote various types of events, services and products, as well as to communicate with users through the functionalities available on social media. The legal basis for the processing of personal data by the Administrator of the wikome.pl website for this purpose is its legitimate interest (Article 6 (1) (f) of the GDPR) consisting in promoting its own brand and building and maintaining a brand-related community.
6. PERIOD OF PROCESSING OF PERSONAL DATA
6.1. The period of data processing by the Administrator of the wikome.pl website depends on the type of service provided and the purpose of processing. As a rule, the data is processed for the duration of the service or the performance of the order, until the consent is withdrawn or an effective objection to data processing is submitted in cases where the legal basis for data processing is the legitimate interest of the Administrator of the wikome.pl website.
6.2. The period of data processing may be extended if the processing is necessary to establish and assert any claims or defend against them, and after that time only if and to the extent that it will be required by law. After the expiry of the processing period, the data is irreversibly deleted or anonymized.
7. USER RIGHTS
7.1. Data subjects have the following rights:
7.1.1. The right to information about the processing of personal data - on this basis, the person making such a request, the administrator of the wikome.pl website provides information on the processing of personal data, including, in particular, the purposes and legal grounds for processing, the scope of data held, entities to which personal data is disclosed and the planned date of their removal;
7.1.2. The right to obtain a copy of the data - on this basis, the administrator of the wikome.pl website provides a copy of the processed data regarding the person submitting the request;
7.1.3. The right to rectify - on this basis, the administrator of the wikome.pl website removes any inconsistencies or errors regarding the personal data being processed, and supplements or updates them if they are incomplete or have changed;
7.1.4. The right to delete data - on this basis, you can request the deletion of data, the processing of which is no longer necessary to achieve any of the purposes for which it was collected;
7.1.5. The right to limit processing - on this basis, the administrator of the wikome.pl website ceases to carry out operations on personal data, with the exception of operations for which the data subject has consented and their storage, in accordance with the adopted retention rules, or until the reasons for limiting processing cease to exist. data (e.g. a decision of the supervisory authority will be issued, allowing for further data processing);
7.1.6. The right to transfer data - on this basis, to the extent that the data is processed in connection with the concluded contract or consent, the administrator of the wikome.pl website issues data provided by the data subject in a format that allows them to be read by a computer. It is also possible to request that this data be sent to another entity - provided, however, that there are technical possibilities in this regard, both on the part of the Administrator of the wikome.pl website and that other entity;
7.1.7. The right to object to the processing of data for marketing purposes - the data subject may at any time object to the processing of personal data for marketing purposes, without the need to justify such objection;
7.1.8. The right to object to other purposes of data processing - the data subject may at any time object to the processing of personal data on the basis of the legitimate interest of the Administrator of the wikome.pl website (e.g. for analytical or statistical purposes or for reasons related to the protection of property). The objection in this respect should contain a justification.
7.1.9. The right to withdraw consent - if the data is processed on the basis of consent, the data subject has the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before the consent was withdrawn;
7.1.10 Right to complaint - if it is found that the processing of personal data violates the provisions of the GDPR or other provisions on the protection of personal data, the data subject may submit a complaint to the President of the Personal Data Protection Office.
7.2. An application regarding the exercise of data subjects' rights may be submitted:
7.2.1. in writing to the following address: WIKOME.PL Piotr Perlak, 37-311 Wola Zarczycka 291c.
7.2.2. by e-mail to the following address: wikome.pl@wikome.pl.
7.3. The application should, if possible, precisely indicate what the request concerns, i.e. in particular:
7.3.1. what right does the person submitting the application want to use (e.g. the right to receive a copy of the data, the right to delete the data, etc.);
7.3.2. what processing process the request concerns (e.g. use of a specific service, activity on a specific website, receiving a newsletter containing commercial information to a specific e-mail address, etc.);
7.3.3. what processing purposes the request relates to (e.g. marketing purposes, analytical purposes, etc.).
7.4. If the administrator of the wikome.pl website is unable to determine the content of the request or identify the person submitting the application based on the submitted application, he will ask the applicant for additional information.
7.5. User reports will be answered within one month of receipt. If it is necessary to extend this period, the Administrator of the wikome.pl website will inform the applicant about the reasons for such extension.
7.6. The answer will be given to the e-mail address from which the application was sent, and in the case of applications sent by letter, by regular mail to the address indicated by the applicant, unless the content of the letter indicates a desire to receive feedback to the e-mail address.
8. DATA RECIPIENTS
8.1. In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of IT systems, entities such as banks and payment operators, entities providing accounting and legal services, couriers (in connection with the implementation of the order)
8.2. The Administrator reserves the right to disclose selected information about the User to the competent authorities or third parties who submit a request for such information, based on an appropriate legal basis and in accordance with applicable law.
9. TRANSFER OF DATA OUTSIDE EEA
9.1. The level of personal data protection outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the administrator of the wikome.pl website transfers personal data outside the EEA only when it is necessary and with an adequate level of protection, primarily through:
9.1.1. cooperation with entities processing personal data in countries for which a relevant decision of the European Commission has been issued;
9.1.2. use of standard contractual clauses issued by the European Commission;
9.1.3. application of binding corporate rules approved by the competent supervisory authority;
9.1.4. in the event of data transfer to the USA - cooperation with entities participating in the Privacy Shield program, approved by a decision of the European Commission.
9.2. The administrator of the wikome.pl website always informs about the intention to transfer personal data outside the EEA at the stage of their collection.
10. SECURITY OF PERSONAL DATA
10.1. The administrator of the wikome.pl website conducts a risk analysis on an ongoing basis to ensure that personal data is processed by him in a safe manner - ensuring, above all, that only authorized persons have access to the data and only to the extent that it is necessary due to the tasks they perform. The administrator of the wikome.pl website makes sure that all operations on personal data are registered and performed only by authorized employees and associates.
10.2. The administrator takes all necessary steps to ensure that its subcontractors and other cooperating entities guarantee the application of appropriate security measures in each case when they process personal data on behalf of the Administrator.
11. CONTACT DETAILS
Contact with the Administrator of the wikome.pl website is possible via the e-mail address wikome.pl@wikome.pl or the correspondence address WIKOME.PL Piotr Perlak, 37-311 Wola Zarczycka 291c.
12. CHANGE OF THE PRIVACY POLICY
The policy is verified on an ongoing basis and updated if necessary.