- This document defines the rules for using the online store available at https://www.jlove.pl/, which is run by J Concept Joanna Majerska, ul. K. Górskiego 2, 81 - 304 Gdynia, NIP (tax identification number): 5832619681, REGON: 191849224 in the field of personal data protection.
- In connection with the entry into force on May 25, 2018 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (Journal of Laws UE L 119 p. 1), the so-called GDPR - we undertake to respect your right to privacy on the Internet and to make every effort to properly secure all personal data provided. At the same time, we emphasize that the website www.fajneceny.pl ("Website") can be viewed without providing your personal details.
Personal data controller
- J Concept Joanna Majerska, ul. K. Górskiego 2, 81 - 304 Gdynia, NIP (tax identification number): 5832619681, REGON: 191849224 e-mail: firstname.lastname@example.org telephone: 698 004 022
Data Protection Officer
- The administrator has not appointed the Data Protection Officer, but undertakes to take appropriate measures to protect against unauthorized access or disclosure of data to third parties. In case of any doubts related to the processing of personal data, please contact the Administrator using the above-mentioned data.
Purposes and legal basis for data processing, legitimate interest in processing
- conclusion and performance of contract / contracts, including providing transaction support, solving problems and fulfilling customer requests that you address to us - because processing is necessary for the conclusion and performance of the contract / contracts (Article 6 (1) (b) of the GDPR),
- providing services by electronic means and sending commercial information - on the basis of the customer's consent (Article 6 (1) (a) of the GDPR in conjunction with Article 10 (2) of the Act on the provision of electronic services),
- direct marketing of products or services, including making contact, presenting an offer, conducting measurements and analyzes, including profiling (i.e. using personal data to create a profile in terms of products and services that the customer may be interested in), saving data in cookies and collecting data from websites and mobile applications - based on the customer's consent (Article 6 (1) (a) of the GDPR in conjunction with Article 172 of the Telecommunications Law),
- fulfillment of legal obligations imposed on the Administrator under EU or Polish law (e.g. towards the President of the Office of Competition and Consumer Protection, tax offices) - because processing is necessary to meet legal requirements (Article 6 (1) (c) of the GDPR),
- ensuring the handling of payment services, ensuring the security of services provided electronically, handling customer requests, e.g. via the contact form, in a situation where they are not directly related to the performance of the contract,
- debt collection, conducting court, administrative and mediation proceedings, data storage for archival purposes and ensuring accountability (compliance with legal obligations) in order to establish, investigate or defend against claims, data archiving (Article 6 (1) (f) of the GDPR ).
Who and where can the Administrator transfer your data to?
- Personal data will be accessed, apart from employees, proxies and members of the Administrator's bodies, by persons and entities ensuring the operation, maintenance and service of IT systems and solutions used by the Administrator.
- Depending on the nature of the case, the Administrator may transfer personal data only to the following entities:
- entities cooperating with the Administrator and providing the Administrator with services necessary in the course of its activities, in particular entities providing the Administrator with accounting, accounting, financial, legal or tax consultancy services - where such entities process data on the basis of an agreement with the administrator and only in accordance with administrator's commands.
- public authorities, including courts, at their justified request.
- the courier company dealing with the delivery, if it is necessary for the delivery of ordered goods.
- payment service providers for the purpose of making payments
Transferring data outside the European Economic Area or to international organizations
- Personal data will not be transferred outside the European Economic Area or to international organizations.
Information on the period of data storage
- The period of data storage by the Administrator will depend on the purpose of their processing.
- In the event that the data is processed by the Administrator in order to perform the contract or in order to fulfill other obligations for the client by the Administrator, the Administrator will store personal data for the period necessary for their performance and until the expiry of the limitation period for any mutual claims related to such obligations
- Data storage may be necessary longer for the purposes of tax obligations - in this case, the deletion will take place immediately after the expiry of the limitation period for tax obligations related to the obligation
- In the event that the data is processed by the Administrator due to the necessity of processing for purposes arising from the legitimate interests of the Administrator, the Administrator will store personal data for the period necessary to achieve the goals arising from such interests, and for the purpose of direct marketing for a period of the existence of a legitimate interest in marketing, unless the customer exercises his right and object to the processing of this data for marketing purposes. In this case, the Administrator may store data for the period of limitation of mutual claims resulting from legal provisions, if the processing of such data is necessary to establish or pursue claims, as well as to defend against such claims.
- For the implementation of the legitimate interests of the Administrator, including replying to a message, question, complaint or suggestion of the client, the Administrator may store data for the period necessary to answer or settle the matter with which the Administrator was asked, while the Administrator may extend this period by a period limitation of mutual claims in order to establish or pursue claims, as well as to defend against such claims.
- In the event that the data is processed by the Administrator due to the legal obligation imposed on the Administrator, the Administrator will store this data as long as the Administrator has a proper legal obligation. If the data is necessary to document economic events for accounting purposes, the data in this regard will be stored by the Administrator as long as the Administrator's legal obligation to have a document of these events exists.
Information about your rights
- The right to access data
- the right to request access to personal data, in particular information on whether the Administrator processes personal data and on the scope of data held by the Administrator,
- the purposes of data processing or categories of data recipients,
- the planned period of data storage,
- your personal data rights,
- information about the sources of data obtained by the Administrator,
- the right to obtain a copy of the data, with the proviso that obtaining the first copy of the data is free of charge and obtaining each subsequent copy may involve a reasonable fee, taking into account the administrative costs of preparing such a copy of the data.
- The right to rectify data
- the right to request immediate rectification of incorrect data or, taking into account the purposes of processing, supplementing incomplete data.
- The right to delete data (the right to be forgotten), if one of the following circumstances applies:
- personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- an effective objection to the processing has been made;
- the personal data has been processed unlawfully;
- personal data must be deleted in order to comply with a legal obligation;
- the consent to the processing of personal data has been withdrawn and the personal data has been processed on the basis of such consent and there is no other legal basis for their processing.
- you cannot exercise the right to delete data, among others if such data are necessary to establish or pursue claims or defend against claims.
- The right to limit data processing in the following cases:
- Questioning the correctness of personal data - for a period allowing for the verification of the correctness of such data
- the processing is unlawful and the request to limit their use;
- personal data are no longer needed by the Administrator but they are needed by the client to establish, investigate or defend against claims;
- in the event of an objection - until it is determined whether the legally justified grounds on the part of the Administrator override the grounds of objection.
- Right to data portability
- The right to receive personal data in a structured, commonly used and machine-readable format that was provided to the Administrator
- the right to send personal data to another administrator without hindrance from the Administrator, if:
- the processing takes place on the basis of your consent or on the basis of an agreement with you and at the same time;
- the processing is carried out in an automated manner.
- how much is technically possible.
- The right to object to data processing
- you can object at any time - for reasons related to your particular situation - to the processing of data, if the legal basis for processing is the legitimate interest of the Administrator.
- As a result of the objection, the Administrator will cease to process personal data, unless it demonstrates the existence of valid legally valid grounds for processing, overriding the client's interests, rights and freedoms, or grounds for establishing, pursuing claims or defending against claims.
- If personal data is processed for direct marketing purposes, you can object to such processing at any time, including profiling, without the need to show reasons related to your particular situation, and the Administrator is obliged to immediately stop such processing.
- The right to lodge a complaint with the supervisory authority
- the right to lodge a complaint to the President of the Personal Data Protection Office if the processing of personal data violates the law in this regard.
Information whether providing personal data is a statutory or contractual requirement or a condition for concluding a contract and about the lack of obligation to provide data
- All personal data is provided voluntarily.
- Depending on the situation, providing certain data may be a condition for concluding a contract with the Administrator or a condition for the Administrator to start providing services:
- Providing the address data is necessary, for example, to complete the order.
- Providing a phone number may be necessary to use additional services, such as making an appointment.
- Providing your name and surname (name), address and tax identification number may be a statutory requirement and necessary to prepare documentation for tax purposes.
- In the case of sending messages or requests to the Administrator (e.g. for sending an offer), providing contact details is not a statutory or contractual requirement or a condition for concluding a contract, however, providing the required data is necessary to enable the Administrator to respond.
Information on the consequences of not providing data
- Failure to provide specific information may prevent the conclusion of a contract with the Administrator, using additional services, receiving correct tax documents from the Administrator, receiving an offer from the Administrator or a reply to a message addressed to the Administrator, submitting a complaint, complaint, intervention or change of order instructions to the Administrator.
Information on the use of data for automated decision-making, including profiling
- personal data will not be used for automated decision making, including profiling.