PRINCIPLES OF PERSONAL DATA PROCESSING BY Świat Supli
General information
We attach great importance to the protection of your personal data and its handling in accordance with the relevant legal provisions, in particular in accordance with the General Data Protection Regulation of 27 April 2016 ("GDPR"). Our goal is to provide you with full information and control in the processing of your data by us and to provide you with tools that allow you to exercise your rights under the law. Below we present information on how we process your personal data, how we care about their security and with whom we share it. If you have additional questions about how we use your personal data, please write to us at the e-mail address provided: biuro@promaker.pl
How we obtain your data
We use your personal data because you have decided to make purchases in our online store www.promaker.eu ("Store") or you have otherwise provided us with your data using the Store's website. The Store operates on the basis of the Regulations, which you can read in our Regulations.
Who is the Administrator of your personal data?
The data administrator is Świat Supli Paweł Lisowski Stołeczna 2 /102 Białystok, entered into the Central Register and Information on Economic Activity kept by the Minister of Economy NIP 5422947954, Internet mail address biuro@promaker.pl phone 506 629 648 (standard fee according to the price list of the relevant operator)
How do we process your personal data?
-
In order to perform the contracts concluded with you for the sale of goods from the Store - the basis for the processing of your data will be in this case the contract concluded with the Administrator by accepting the Store's regulations. In this respect, we will require the largest amount of data from you, but only to the extent necessary to perform the sales contract and deliver the purchased goods to you; providing your personal data for this purpose is not mandatory, but necessary for the performance of the contract,
-
In order to maintain your account on the Store's website - the basis for the processing of your data will be in this case the contract concluded with the Administrator by creating an account and accepting the Store's regulations. Creating an account in the Store will also allow you to access the data provided by you, including the history of your purchases, and exercise certain rights related to data processing; providing your personal data for this purpose is not mandatory, but necessary for the performance of the contract,
-
In order to carry out complaint processes - in this case, the basis for processing is the Administrator's obligation resulting from the provision of law regarding the warranty for defects of the sold item,
-
If you give your separate consent, we will send to the e-mail address provided by you commercial information regarding the goods offered for sale in the Store, including promotional offers – in this case, the basis for processing is your consent, which is not mandatory and you can withdraw it at any time by contacting the data provided above or by clicking on the link, which we send in each e-mail containing commercial information Withdrawal of consent does not affect the correctness of data processing in the period before its withdrawal.
-
In order to send you individualized marketing messages on the Store's website, e.g. in the form of a suggestion to purchase goods using profiling. The messages will be prepared based on the analysis of your purchases – the basis for the processing of your data in this case will be the legitimate interest of the Administrator consisting in the marketing of goods offered in the Store, both the Administrator's own goods and suppliers,
-
For statistical purposes for the internal needs of the Administrator – in this case, the basis for processing will be the legitimate interest of the Administrator consisting in collecting information enabling the development of activities and adapting services to the needs of The Store users.
-
In order to confirm the performance of our obligations and to pursue claims or defend against claims that may be directed against us, prevent or detect fraud – the basis for the processing of your data in this case will be the legitimate interest of the Administrator, which is the protection of rights, confirmation of the performance of obligations and obtaining due remuneration from the Administrator's clients.
We focus on the transparency of our processing of your personal data. If you have any questions about the process or the rules for their processing, please contact us. We process your data in accordance with the law, ensuring that it remains up-to-date and correct. Therefore, from time to time we will remind you of the need to update your data by sending a message to the e-mail address provided by you. Your personal data will not be processed for the purpose of automated decision-making without your consent.
Is the provision of personal data mandatory?
It is up to you to decide whether and what data you provide to us, but remember that when making purchases in the Store, providing certain data will be mandatory to perform the sales contract, because without them we will not be able to fulfill your order. Failure to provide the data required by us results in the failure to place an order. It is not obligatory for you to agree to receive commercial information to the e-mail address provided or telephone number provided for the implementation of the concluded contract for the sale of Goods. If you give such consent, you will be able to withdraw it at any time.
How long will we process your personal data?
-
Necessary for the performance of the sales contract, as well as your complaint claims, as well as confirmation of the performance of our obligations and pursuing claims or defending against claims that may be directed against us – but not longer than 10 years from the date of providing us with your data,
-
In the event that you submit a request to delete your account in the store, we may process your data during the period necessary to confirm the performance of our obligations and to pursue claims or defend against claims that may be directed against us – but not longer than 10 years from the date of providing us with your data.
How do we secure your data?
We use a number of IT and organizational security measures aimed at minimizing the risk of data leakage, destruction, disintegration, such as: firewall system, anti-virus and anti-spam security systems, internal access procedures, data processing and disaster recovery, as well as a backup system operating on many levels. Our Store provides a very high level of security thanks to the use of Web application firewall (WAF) and a security system against DDoS attacks, we use a high level of encryption of the HTTPS / SSL connection in accordance with accepted best practices, we cooperate with a carefully selected hosting service provider that has certificates in the field of ISO 9001 quality management and AQAP-2110 requirements, as well as an information security management certificate according to the ISO / IEC standard 27001. Remember, however, that the use of the Internet always carries the risk of certain security incidents, but we assure you that thanks to the implemented procedures for regular reviews of IT systems and their updates and active monitoring of critical points of the system, we want to reduce this risk as much as possible.
What are your rights in connection with the processing of your data by us?
The data administrator is Świat Supli Paweł Lisowski Stołeczna 2/102 Białystok, entered into the Central Register and Information on Economic Activity kept by the Minister of Economy NIP 5422947954, Internet mail address biuro@swiatsupli.pl, telephone 506629648 (standard fee according to the price list of the relevant operator)
How long will we process your personal data?
-
The right to information on how your personal data is processed – if you have questions about whether and how we process your data, please contact us using the contact form provided on this website or by sending information to the biuro@lovestoryonline.pl, we will be happy to answer them,
-
The right to access and update data – you always have access to your personal data in your account in the Store. There you can edit the data provided to us and update it. If you have not created an account in the Store, please contact us via the contact form on this page or write to our Data Protection Officer with a request to access your data – we will provide you with information that your data we process and update it at your request,
-
On the terms set out in the GDPR, you also have the right to:
-
Deletion of data – if you want us to stop processing your data, you can delete your account in the Store or submit such a request to us. Remember, however, that this is not an absolute right and we may refuse to delete your data for which we have a basis for processing it (e.g. fulfillment of a legal obligation or pursuing claims or defending against claims that may be directed against us),
-
Requests to limit the processing of your data,
-
Object to the processing of your data, if the basis for processing is the legitimate interest of the Administrator or the performance of tasks in the public interest,
-
Withdrawal of consent, if the data is processed on the basis of your consent,
-
Data portability, if the processing is based on a contract or your consent.
You can exercise all the above rights by contacting us using the contact form provided here :)
In what time will you get an answer from Us?
We will try to fulfill your requests as soon as possible and answer the questions received regarding your data. In any case, you should receive a message from us no later than within 30 days from the date of receipt of your request. Within this period, we will provide you with an answer or inform you about the extension of the deadline and explain the reasons. If we have doubts as to whether you are making a specific request, we may ask a few additional questions to verify your identity.
Information on the authority competent to lodge a complaint
If you believe that we process your personal data unlawfully, you can also lodge a complaint with the President of the Office for Personal Data Protection.