privacy policy
-
The administrator of personal data collected via the Store is the Seller (hereinafter referred to as the "Administrator"). Data protection is carried out in accordance with the requirements of generally applicable legal provisions, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. data and repealing Directive 95/46/EC (hereinafter referred to as "GDPR").
-
The Administrator applies appropriate technical and organizational measures to ensure the protection of processed personal data, in particular it protects personal data against disclosure to unauthorized persons, loss and damage. Communication between the Store and Customers is secured with the SSL encryption protocol on pages containing personal data.
-
The Buyer's personal data are processed by the Administrator on the basis of:
- art. 6 section 1 letter a) GDPR in order to maintain an account in the n2studio.pl Online Store, through which orders can be placed,
- art. 6 section 1 letter b) GDPR in order to process placed orders,
- art. 6 section 1 letter c) GDPR, when data processing is necessary to fulfill obligations under the law regarding data storage periods, including, among others: obligations arising from, e.g., Art. 74 of the Act of September 29, 1994 on Accounting (Journal of Laws No. 121, item 591, as amended). -
The Customer's personal data are processed by the Administrator in order to provide and promote the Store's services, in particular:
-
conclusion and implementation of the sales contract (placement and execution of orders),
-
setting up and managing an account,
-
making transactions,
-
issuing invoices,
-
customer service,
-
considering submitted complaints and handling returns,
-
matching ads according to previously viewed content,
-
conducting research and analysis of the Website, including in terms of the functioning of the platform,
-
for the purposes of direct marketing of the Administrator's goods and services, including, in particular, the provision of a voluntary free newsletter service containing commercial information within the meaning of the Act of July 18, 2002 on the provision of electronic services (consolidated text: Journal of Laws No. 144, item 1204, as amended) .),
-
conducting promotional campaigns, loyalty programs and competitions,
-
explaining the circumstances of unauthorized use of services provided by the Administrator,
-
performing obligations arising directly from applicable law.
-
-
The above means that the Administrator transfers the Customer's data to external entities supporting the process of concluding and implementing the Sales Agreement, including in particular courier companies, the online hosting service provider of the Store, providers of analytical services, data storage, retargeting, affiliate networks and entities intermediating in payment settlement. In such a case, these entities are not authorized to use the data on their behalf, but only for the needs of the Administrator and the Store.
-
The Administrator may provide third parties with anonymized data that does not identify a specific Customer and is used to improve the content displayed in the Store, adjust advertisements and reach the Customer outside the Store.
-
The administrator may process personal data in the following scope: name and surname, delivery address, e-mail address, contact telephone number, address of residence (entrepreneur's registered office), bank account number. In the case of entrepreneurs, the Administrator may additionally process the company name and tax identification number (NIP) of the Customer.
-
The Administrator may also process operational data regarding the IP address of the Customer's devices for technical and statistical purposes and to improve the functionality of the Store.
-
Providing personal data by the Customer is necessary to make a purchase. Providing personal data is not obligatory, but failure to provide them will make it impossible to make purchases. The basis for processing the above data for direct marketing purposes is the prior consent of the Customer or the fulfillment of legally justified purposes pursued by the Administrator.
-
In terms of the legal basis based on consent (Article 6(1)(a), the Buyer's personal data will be processed until the Buyer withdraws the consent. The Buyer has the right to withdraw consent to the processing of personal data at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.
-
In terms of legal bases not based on consent (Article 6(1)(b) and Article 6(1)(c) of the GDPR), the Customer's personal data will be processed for the duration of the contract and thereafter until the limitation period for claims arising from this contract expires or the obligations imposed on it are fulfilled. legal provisions.
-
The customer has the right to access his personal data, rectify it, delete it or limit processing, as well as the right to transfer data and the right to object to processing.
-
The Customer has the right to object to data profiling - the Customer may request the Administrator to disable profiling (personalization) of the Store's offer and related marketing activities.
-
The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office if he/she considers that the processing of the Customer's personal data violates applicable law.
-
If the Customer exercises the right to access his or her personal data, rectify it, delete it, limit its processing, object to its processing, request data transfer or not be subject to a decision based solely on automated data processing - without undue delay, no later than within one month of receiving the request by the Administrator, information will be provided about the actions taken in connection with the Customer's request.
-
The User may contact the person supervising the processing of personal data by the Administrator electronically at the following e-mail address: contact@n2studio.pl.
-
The Administrator reserves the right to refuse to delete the Customer's data if their retention is required by applicable law or necessary to fulfill claims.
-
The Administrator may process IT data contained in cookies, in particular text files, which are stored on the end device of the Store user. Cookies are used for various purposes, which can be divided into the following types:
-
functional (storing data related to the forms available in the Store, in particular the registration form and order form, as well as basket data),
-
security (authentication, including identification of the logged in user, ensuring transaction security),
-
personalization (verification and adaptation of the functionality and appearance of the Store to the preferences of visitors),
-
statistics (creating statistics for the Seller's needs, including cooperation with external entities),
-
marketing (use of display advertising based on Google Analytics within the scope of the remarketing service. The user can block the Analytics service for display advertising and customize advertisements in the Google advertising network via the Advertising Preferences Manager on Google websites). Cookies indicated in section 18 belonging to types a) and b) are necessary for the user to use the full functionality of the Store. They collect and store the following personal data related to the Customer: name, surname, encrypted password, e-mail address associated with the Customer's account. Visitors to the Store's websites have the right not to accept the use of cookies. In such cases, some functionalities of the Store may have limited operation.
5. The visitor has the option of expressing the lack of such consent, for example by disabling the option of saving cookies in the web browser settings.