Privacy policy of the online store

Privacy policy of the online store PrimaveraFurniture.pl

CONTENTS:

  1. GENERAL PROVISIONS
  2. THE GROUNDS FOR DATA PROCESSING
  3. THE PURPOSE, BASIS, PERIOD AND SCOPE OF DATA PROCESSING IN THE ONLINE SHOP
  4. DATA RECIPIENTS IN THE ONLINE SHOP
  5. PROFILING IN AN ONLINE SHOP
  6. THE RIGHTS OF THE DATA SUBJECT
  7. COOKIES IN THE INTERNET SHOP, EXPLOITATION DATA AND ANALYTICS
  8. FINAL PROVISIONS

 

  1. GENERAL PROVISIONS 1.1 This Online Store Privacy Policy is for information purposes only, which means that it does not constitute a source of obligations for the Users or Customers of the Online Store. The Privacy Policy contains first of all the principles concerning the processing of personal data by the Administrator in the Internet Shop, including the basis, purposes and scope of personal data processing and the rights of data subjects, as well as information on the use of cookies and analytical tools in the Internet Shop.

1.2 The Administrator of personal data collected through the Online Shop is Primavera Furniture Sp. z o.o. with its registered office in Dąbrówka Mała 18a, 11-010 Barczewo. NIP:739-35-68-496, REGON:280141002. You can contact him as follows:

  • by post to the address of the administrator’s registered office: Primavera Furniture Sp. z o.o. 11-010 Barczewo, Dąbrówka Mała 18 A.
  • by e-mail: info@primaverafurniture.pl

With respect to the processing of your personal data by Primavera by Furniture Sp. z o.o., including the exercise of your rights by Primavera Furniture Sp. z o.o., you may contact the Data Protection Officer (DPO) Adam Malinowski appointed by Primavera Furniture Sp. z o.o., as follows:

  • by post to the address of the administrator’s registered office: Primavera Furniture Sp. z o.o. 11-010 Barczewo, Dąbrówka Mała 18 A. With the reference ‘Data Protection Officer‘.
  • by e-mail: iodo@primaverafurniture.pl

1.3 Personal data in the Online Shop are processed by the Administrator in accordance with applicable law, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as “the GDPR” or “the GDPR Regulation”. Official text of the GDPR Regulation: https://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679

1.4 The use of the Online Shop, including shopping, is voluntary. Similarly, the provision of personal data by the Client or the Client using the Online Shop is voluntary, subject to two exceptions: (1) conclusion of agreements with the Administrator – failure to provide personal data necessary to conclude and perform a Sales Agreement or an agreement for the provision of an Electronic Service with the Administrator in the cases and to the extent indicated on the website of the Online Shop and in the Terms and Conditions of the Online Shop and in this Privacy Policy shall result in the impossibility to conclude such an agreement. In such a case, providing personal data is a contractual requirement and if the data subject wishes to conclude a given agreement with the Administrator, he or she is obliged to provide the required data. (2) statutory obligations of the Administrator – providing personal data is a statutory requirement resulting from generally binding legal regulations imposing on the Administrator the obligation to process personal data (e.g. processing data for the purpose of keeping tax or accounting books) and failure to provide such data will prevent the Administrator from performing such obligations.

1.5 The Administrator shall take special care to protect the interests of persons to whom the personal data processed by him/her relate, and in particular shall be responsible and shall ensure that the data collected by him/her are: (1) lawfully processed; (2) collected for specified, lawful purposes and not subject to further processing incompatible with those purposes; (3) substantially correct and adequate in relation to the purposes for which they are processed; (4) stored in a form allowing identification of the data subjects no longer than is necessary to achieve the purpose of the processing; and (5) processed in a manner ensuring adequate security of personal data, including protection against unlawful or illegal processing and accidental loss, destruction or damage, by appropriate technical or organisational means.

1.6 Taking into account the nature, extent, context and purposes of the processing and the risk of any violation of the rights or freedoms of natural persons with varying degrees of probability and seriousness of threat, the Administrator shall implement appropriate technical and organisational measures to ensure that the processing is carried out in accordance with this Regulation and to demonstrate this. These measures shall be reviewed and updated as necessary. The Administrator applies technical measures to prevent unauthorised persons from obtaining and modifying personal data sent electronically.

1.7 All words, expressions and acronyms used in this privacy policy and starting with a capital letter (e.g. Seller, Online Shop, Electronic Service) shall be understood in accordance with their definition contained in the Regulations of the Online Shop available on the websites of the Online Shop.

2. THE GROUNDS FOR DATA PROCESSING

 2.1 The Administrator shall be entitled to process personal data if – and to the extent to which – at least one of the following conditions is met: (1) the data subject has consented to the processing of his/her personal data for one or more specified purposes; (2) the processing is necessary for the performance of the contract to which the data subject is a party or for taking action at the request of the data subject prior to the conclusion of the contract; (3) the processing is necessary for the fulfilment of a legal obligation incumbent on the Administrator; or (4) processing is necessary for the purposes of legitimate interests pursued by the Adminstrator or by a third party, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data prevail over those interests, in particular where the data subject is a child.

2.2 Processing of personal data by the Administrator shall require each time at least one of the grounds specified in 2.1 Privacy Policy. Specific grounds for the processing of personal data of Shop Users and Customers by the Administrator are indicated in the next section of the Privacy Policy – in relation to the given purpose of personal data processing by the Administrator.

  1. THE PURPOSE, BASIS, PERIOD AND SCOPE OF DATA PROCESSING IN THE ONLINE SHOP

3.1 Each time the purpose, basis, period and scope of personal data processed by the Administrator results from actions taken by a given Customer or Client in the Online Shop. For example, if the Customer decides to make purchases in the Online Shop and chooses to personally collect the purchased Product instead of a courier shipment, his personal data will be processed in order to perform the concluded Sales Agreement, but will no longer be made available to the carrier carrying out the shipment on behalf of the Administrator.

3.2 The Administrator may process personal data in the Internet Shop for the following purposes, on the following basis, in the following periods and in the following scope:

  1. Purpose of data processing: Execution of a Sales Agreement or an agreement to provide an Electronic Service or taking action at the request of the data subject prior to the conclusion of the aforementioned agreements.
    Legal basis for processing and duration of data retention: Article 6 (1) (b) of the GDPR Regulation (performance of contract) Data shall be kept for the period necessary for the performance, termination or other termination of the contract. Scope of data processing: Maximum scope: name and surname; e-mail address; contact telephone number; delivery address (street, house number, apartment number, post code, town, country), address of residence/business activity/situation (if different from delivery address).
  2. Purpose of data processing: Direct marketing.
    Legal basis for processing and duration of data retention: Article 6(1)(f) of the GDPR Regulation (legitimate interest of the Adminstrator). The data shall be stored for the period of the existence of a legitimate interest pursued by the Administrator but not longer than the period of the statute of limitations of claims against the data subject due to the Administrator’s business activity. The statute of limitations is specified by the law, in particular the Civil Code (the basic statute of limitations for claims related to conducting business activity is three years, and for sales contracts two years). The Adminstrator may not process data for the purpose of direct marketing in the event of an effective objection in this respect by the data subject. Scope of data processing: E-mail address.
  3. Purpose of data processing: Marketing

Legal basis for processing and storage period of data: Article 6(1)(a) of the GDPR Regulation (consent). Data shall be stored until the data subject withdraws his or her consent to the further processing of his or her data for this purpose. Scope of data processing: Name, e-mail address.

  1. Purpose of data processing: The Customer’s opinion on the concluded Sales Agreement. Legal basis for processing and duration of data retention: Article 6(1)(a) of the GDPR Regulation. Data shall be stored until the data subject withdraws his or her consent to the further processing of his / her data for this purpose. Scope of data processing: E-mail address.
  2. Purpose of data processing: Keeping books of accounts. Legal basis for processing and duration of data retention: Article 6(1)(c) of the GDPR Ordinance in conjunction with Article 74(2) of the Accounting Act of 30 January 2018. (Journal of Laws of 2018, item 395). The data is stored for the period required by the law to require the Administrator to keep tax books (until the expiry of the statute of limitations on tax liability, unless otherwise provided by tax laws) or accounting books (5 years from the beginning of the year following the financial year to which the data refer). Scope of data processing: Name and surname; address of residence/business/situation (if different from the delivery address), company name and tax identification number (NIP) of the Customer or Customer.
  3. Purpose of data processing: Determine, enforce or defend claims which may be raised by the Administrator or which may be raised against the Administrator. Legal basis for processing and duration of data retention: Article 6(1)(f) of the GDPR Regulation. The data shall be stored for the period of the existence of a legitimate interest pursued by the Administrator, but not longer than the period of the statute of limitations of claims against the data subject due to the Administrator’s business activity. The statute of limitations is specified by the law, in particular the Civil Code (the basic statute of limitations for claims related to conducting business activity is three years, and for sales contracts two years). Scope of data processing: Name; contact telephone number; e-mail address; delivery address (street, house number, apartment number, post code, city, country), address of residence/business/seat (if different from delivery address). In the case of Customers or Clients who are not consumers, the Administrator may additionally process the company name and tax identification number (NIP) of the Customer or Client.
  1. DATA RECIPIENTS IN THE ONLINE SHOP

4.1 For the proper functioning of the Online Shop, including the performance of concluded Sales Agreements, it is necessary for the Administrator to use the services of external entities (such as software providers, couriers or payment service providers). The Administrator uses only the services of such processing entities, which provide sufficient guarantees of implementation of appropriate technical and organizational measures so that the processing meets the requirements of the GDPR Regulation and protects the rights of data subjects.

4.2 Data transfer by the Administrator does not take place in any case and not to all recipients or categories of recipients indicated in the privacy policy – the Administrator transfers data only when it is necessary to achieve the purpose of personal data processing and only to the extent necessary to achieve it. For example, if the Customer uses personal collection, his / her data will not be passed on to a carrier cooperating with the Administrator.

4.3 Personal data of the Clients and Customers of the Online Shop may be transferred to the following recipients or categories of recipients:

4.3.1. carriers / forwarders / courier brokers – in the case of a Customer who uses in the Online Shop the method of delivery of the Product by mail or courier mail, the Administrator shall make the collected personal data of the Customer available to a selected carrier, forwarder or intermediary carrying out shipments on behalf of the Administrator to the extent necessary to carry out the delivery of the Product to the Customer.

4.3.2. entities handling electronic payments or payment cards – in the case of a Customer who uses the method of electronic payment or payment card in the Internet Shop, the Administrator shall make the collected personal data of the Customer available to a selected entity handling the above payments in the Internet Shop on the order of the Administrator to the extent necessary to handle the payment made by the Customer.

4.3.3. creditors/leasers – in the case of a Customer who uses the payment method in the Online Shop in the installment or leasing system, the Administrator shall make available the collected personal data of the Customer to a selected lender or lessor servicing the above payments in the Online Shop on the order of the Administrator to the extent necessary to service the payment made by the Customer.

4.3.4. suppliers of opinion polls system – in the case of a Customer who has agreed to express an opinion on a concluded Sales Agreement, the Administrator shall make the collected personal data of the Customer available to a selected entity providing a system of opinion polls on concluded Sales Agreements in the Online Shop on behalf of the Administrator to the extent necessary to express the opinion of the Customer using the opinion polls system.

4.3.5. service providers providing the Administrator with technical, IT and organizational solutions enabling the Administrator to conduct business activity, including the Online Shop and Electronic Services provided through it (in particular the computer software provider for running the Online Shop, e-mail and hosting provider and software provider for managing the company and providing technical assistance to the Administrator) – the Administrator shall make the collected personal data of the Client available to a selected supplier acting on his / her behalf only in the case and to the extent necessary to achieve a given purpose of data processing in accordance with this privacy policy.

4.3.6. providers of accounting, legal and advisory services providing the Administrator with accounting, legal or advisory support (in particular accounting office, law firm or debt collection company) – the Administrator shall make the collected personal data of the Client available to a selected provider acting on its behalf only in the case and to the extent necessary to achieve a given purpose of data processing in accordance with this privacy policy.

  1. PROFILING IN AN ONLINE SHOP

5.1 The GDPR Regulation imposes on the Administrator the obligation to inform about automated decision making, including profiling referred to in Article 22(1) and (4) of the GDPR Regulation, and – at least in these cases – important information about the principles of making such decisions, as well as about the significance and expected consequences of such processing for the data subject. With this in mind, the Administrator provides in this section of the Privacy Policy information about possible profiling.

5.2 The Administrator may use profiling in the Internet Shop for the purposes of direct marketing, but the decisions made on its basis by the Administrator do not concern the conclusion or refusal to conclude a Sales Agreement or the possibility of using Electronic Services in the Internet Shop. The effect of using profiling in the Internet Shop can be e.g. granting a discount to a given person, sending them a discount code, reminding them about unfinished purchases, sending them a proposal for a Product that may correspond to their interests or preferences or offering better conditions compared to the standard offer of the Internet Shop. Despite profiling, it is up to you to decide whether you would like to take advantage of the discount or better terms and conditions and make a purchase in the Online Shop.

5.3 Profiling in the Internet Shop consists in an automatic analysis or forecast of a given person’s behaviour on the website of the Internet Shop, e.g. by adding a specific Product to a basket, browsing the website of a specific Product in the Internet Shop or by analysing the previous history of purchases made in the Internet Shop. The condition of such profiling is that the Administrator has the personal data of a given person in order to be able to send him/her a discount code.

5.4 The data subject shall have the right not to be subject to a decision which is based solely on automated processing, including profiling, and has legal effects or a similar material impact on the data subject.

5.5 The site contains links to Instagram Social Media accounts, Facebook Messenger, Pinterest. The Company uses Social Media services to provide the latest information about the operation of its Shop, blog posts, events and more. Using them is voluntary and may require an account created by the User. Social Media collect their own cookies and operate on the basis of their own Privacy Policies, which I recommend you read. The Shop is not responsible for their actions.

  1. THE RIGHTS OF THE DATA SUBJECT

6.1 Right of access, rectification, restriction, deletion or transfer – the data subject has the right to demand from the Administrator access to his / her personal data, rectify them, delete them (“the right to be forgotten”) or limit the processing and has the right to object to the processing and has the right to transfer his / her data. Detailed conditions for the exercise of the aforementioned rights are specified in Articles 15-21 of the Ordinance of the Minister of Agriculture and Rural Development.

6.2 Right to withdraw consent at any time – the person whose data are processed by the Adminstrator on the basis of the consent given (pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR Regulation) shall have the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal.

6.3 Right to lodge a complaint to the supervisory authority – a person whose data are processed by the Administrator has the right to lodge a complaint to the supervisory authority in the manner and manner specified in the provisions of the Ordinance of the Republic of Poland and the Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Office for the Protection of Personal Data.

6.4 Right of objection – the data subject shall have the right to object at any time, on grounds relating to his or her particular circumstances, to the processing of personal data relating to him or her based on Article 6(1)(e) (public interest or tasks) or (f) (legitimate interest of the adminstrator), including profiling pursuant to those provisions. The Adminstrator shall in that case no longer be allowed to process such personal data unless he proves that there are compelling legitimate grounds for the processing, overriding interests, rights and freedoms of the data subject or grounds for establishing, pursuing or defending claims.

6.5 Right to object to direct marketing – if personal data are processed for the purposes of direct marketing, the data subject has the right at any time to object to the processing of personal data concerning him/her for the purposes of such marketing, including profiling, to the extent that the processing is related to such direct marketing.

6.6 In order to exercise the rights referred to in this point of the Privacy Policy, the Administrator or the Inspector for Personal Data Protection may be contacted by sending an appropriate message in writing or by e-mail to the address of the Administrator or the Inspector for Personal Data Protection indicated at the beginning of the Privacy Policy or using the contact form available on the website of the Internet Shop.

  1. COOKIES IN THE INTERNET SHOP, EXPLOITATION DATA AND ANALYTICS

7.1 What are cookies?

Cookies are small text files containing a string of characters that can be placed on your computer or mobile device to uniquely identify your browser or device. We reserve the right to use cookies, pixels and local storage to deliver, secure and explore products, services and advertising.

7.2 What are cookies used for?

Cookies and other technologies provide a website or service with information about whether it has ever visited a particular computer or mobile device before. These technologies may then be used to deliver products, services and advertisements to help us understand how you use the site or service, to improve your navigation between pages, to remember your preferences and to fundamentally improve your use of our services. Cookies can also help to ensure that marketing campaigns targeted at you via the Internet are better tailored to your interests.

7.3.Why does PrimaveraFurniture.com use cookies and other technologies?

We use cookies, pixels, local storage and similar technologies to display content relevant to you, to improve the way you use our products, and to better protect Primaverafurniture.pl and our users. We may use these technologies to provide you with easy-to-use services to help you navigate the site and use its features, such as accessing secure areas and storing information to help Primaverafurniture.pl respond faster. We may use these technologies to collect information about how you use our site, such as which pages you visit most often and whether you receive error messages from certain pages. We use these technologies to remember your choices (e.g. your username, language or region) and to tailor the service to provide you with improved features and content. You can also use cookies to remember changes in the size of text, fonts and other parts of the pages that you can customize to suit your needs. Primaverafurniture.pl and our advertising partners can use these technologies to deliver ads tailored to your interests. These technologies remember that your device has visited a website or service and may also track your device’s browsing activity on sites other than Primaverafurniture.com. Such information may be shared with organisations outside Primaverafurniture.co.uk, such as advertisers or networks of advertisers, to deliver advertising and to help measure the effectiveness of advertising campaigns. *We may use such technologies to learn, improve and research products and services.

7.4 How long are cookies stored on my device?

The length of time a cookie is stored on your computer or mobile device depends on whether it is a ‘persistent’ or a ‘session’ cookie. Session files remain on your computer only until you stop using your browser. Fixed files are stored on your computer or mobile device until they expire or are deleted.

7.5 Internal and external cookies

Internal cookies are Primaverafurniture.co.uk’s cookies, while external cookies are cookies that another party places on your device via our website. External cookies may be placed on your device by someone who provides services to Primaverafurniture.co.uk, for example, to help us understand how we use our service. External cookies may also be placed on your device by our business partners so that we can use them to advertise our products and services to you anywhere on the Internet.

7.6 How to control cookies and other data collection mechanisms

If you want to modify your cookie settings, please use the appropriate settings for your websites and browsers (usually found in the “Help”, “Tools” or “Edit” menus). Please note that if you disable cookies and other technologies in your browser settings, you may not be able to access certain parts of our site and the rest of our site may not function properly.

For more information on how advertisers can influence advertisers’ users to collect and use information about their interactions with various websites and services, please visit their organisation’s websites: Network Advertising Initiative at https://www.networkadvertising.org/managing/opt_out.asp, Digital Advertising Alliance at https://www.aboutads.info/ or European Digital Advertising Alliance at https://youronlinechoices.eu/.

  1. FINAL PROVISIONS

The Online Shop may contain links to other websites. The Administrator encourages the user to read the privacy policy of other websites after going to other websites. This privacy policy applies only to the Administrator’s Internet Shop. The Administrator reserves the right to change the Privacy Policy, which may be affected by the development of Internet technology, possible changes in the law on personal data protection. Users will be informed of any changes in a visible and understandable way.                                                                              In case of any doubts concerning any of the provisions of the Privacy Policy, please contact the Administrator or the Inspector of Personal Data Protection at the addresses given in the Privacy Policy.