The policy defines the rules of collecting and processing of personal data obtained by the Administrator both during the registration for an account in the Internet store, using the service and also in case of shopping without creating an account and in case of starting a newsletter subscription.
Personal data administrator
The personal data administrator is Tomasz Pacholczyk running the business activity under the name ACTIVESHOP Sp. z o.o., with headquarters in Wrocław, 8B Graniczna Street, building DC2A, 54-610 Wrocław, e-mail: firstname.lastname@example.org, phone: 71 725 41 71.
Legal basis and purpose of personal data processing
Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as GDPR).
Your personal data is processed in connection with:
the need to perform the contracts concluded by you with the Administrator, as well as actions taken prior to the conclusion of the referenced contracts at your request (Article 6(1)(b) GDPR),
the need to fulfil a legal obligation incumbent on the Administrator (Article 6(1)(c) GDPR),
Your consent to the processing of personal data for marketing purposes, including the sending of commercial information (Article 6(1)(a) GDPR),
the legitimate interest of the Administrator, for the purpose of marketing its own products and services, as well as securing and pursuing claims (Article 6(1)(f) GDPR).
Providing your personal data on the basis of the above points 1) and 3) is voluntary, however, refusal to provide the data will prevent you from concluding a contract with the Administrator or using the Shop and the services provided electronically by the Administrator.
You may at any time withdraw your consent to the processing of personal data for one or more purposes.
Disclosure of personal data
Your personal data will be made available to the relevant state authorities or third parties if such an obligation arises from generally applicable law.
The Administrator shall also disclose your personal data to the selected carrier or agent carrying out shipments on behalf of the Administrator for the purpose of delivery, as well as to the entity handling electronic payments or payment card payments, financial institutions providing credit for the purchase of goods or leasing, entities providing hosting/server services and IT entities maintaining the online store, entities providing legal and debt recovery services.
The Administrator protects your personal data in accordance with applicable laws and in accordance with the highest standards of security and data protection.
The Administrator ensures the security of personal data by implementing appropriate technical and organizational measures to prevent unlawful data processing and their accidental loss, destruction, and damage. The Administrator shall take all possible measures to ensure that personal data are:
correct and processed in a lawful manner,
obtained only for specified purposes and not further processed in a way incompatible with those purposes,
adequate, relevant and not excessive,
accurate and up-to-date,
not kept longer than necessary,
processed in accordance with the data subject's rights, including the right to object access,
not transferred without adequate protection.
Personal data sets are secured against access by third parties. Only persons authorized by the Administrator, trained in personal data protection and obliged to keep your personal data confidential are allowed to process your personal data.
Personal data storage period
Your personal data is processed for the period:
securing or asserting possible claims under the contract,
After-sales service of the contract (dealing with complaints),
to comply with legal obligations imposed on the Administrator (e.g. resulting from accounting and tax regulations),
to object, if the personal data is processed for marketing purposes on the basis of the Administrator's legitimate interest,
to withdraw consent, if the processing is based on previously granted consent, without affecting the legality of processing performed on the basis of consent before its withdrawal.
Rights of the data subject
You are entitled to request from the controller access to your personal data, rectification, erasure or restriction of processing, to data portability and to object to processing. You may also withdraw your previously given consent to the processing of your personal data at any time.
Right of access to data
At any time you can request information about which of your personal data are processed. You have the right to obtain the following information from the Controller:
about the purpose, scope and manner of processing of your personal data,
Since when your data is being processed,
about the source of your data,
about the recipients or categories of recipients to whom the data are disclosed.
The right to access, supplement, update and delete data
At your request, the Administrator will complete, update and correct your personal data, as well as suspend (temporarily or permanently) its processing or delete it if your data proves to be incomplete, outdated, untrue or collected in violation of the Act, or if it is no longer necessary for the purpose for which it was collected.
Right to object
If the Administrator processes your data for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing, including profiling, to the extent that the processing is related to such direct marketing. In order to exercise this right, you must submit an appropriate request to the Administrator at the e-mail address.
Right to lodge a complaint
You have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data violates the GDPR.
Change of personal data and updating of personal data
If your personal data changes, please update it yourself in your user account, if established, or notify the Administrator by phone, letter to the address of the company's registered office or by e-mail to the Administrator's e-mail address.
Right to withdraw consent
You have the right to withdraw your previously given consent to the processing of your personal data at any time.
In connection with making the contents of the website available, the Administrator uses the so-called "cookies", i.e. information recorded by the server on the end device of the user, which can be read by the server at each connection from that end device, may also use other technologies with functions similar or identical to cookies (information concerning cookies applies also to other similar technologies used in our website). Cookies are IT data, in particular text files stored in the end device of the user of elcartel.pl website. Cookies usually contain the domain name of the website they come from, the time of storing them on the end device and a unique number.
Purpose of using cookies
Cookies are used by the Administrator in order to:
adjusting the content of the website to the user's preferences and optimizing the use of the website; in particular, these files allow for recognition of the website user's device and for proper display of the website, adjusted to the user's individual needs,
creating statistics, which help to understand how the website users use the websites, which enables improving their structure and content
maintaining the session of the online store user (after logging in), thanks to which the user does not have to re-enter login and password on each subpage of the website,
to provide users with advertising content more suited to their interests.
Types of cookies
The Administrator may use the following types of cookies on the website of the online store:
"necessary" cookies that make it possible to use the services available on the website, e.g. authentication cookies used for services that require authentication on the website,
cookies used to ensure safety, e.g. used to detect misuse of authentication on the website,
cookies that make it possible to collect information about the way the website is used,
"functional cookies that make it possible to "remember" the user's selected settings and personalize the user's interface, e.g. with respect to the selected language or region of the user's origin, font size, website layout, etc,
"advertising" cookies, enabling you to provide users with advertising content more tailored to their interests.
Changing the settings for cookies
In many cases, software used to browse the Internet (web browser) by default allows you to store cookies on your terminal device. Store users can change their cookie settings at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the settings of the web browser or inform on their placement in the device of the website user each time. Detailed information on the possibility and methods of using cookies is available in the software settings (web browser). Failure to change the settings for cookies means that they will be placed on the user's terminal equipment and thus we will store information on the user's terminal equipment and gain access to this information.
Disabling cookies may cause difficulties in using some services in our online store, in particular those requiring logging. Disabling cookies does not prevent you from reading or viewing content placed in the online store, subject to those whose access requires logging in.
Cookies can be placed in the end device of the Internet store's user and then used by advertisers, research companies and providers of multimedia applications cooperating with the Administrator.
Collection of other data
Like most online stores, we collect information about the use of the online store by users and their IP addresses based on analysis of access logs. This information is used for technical purposes, related to the administration of the servers of our website, as well as for statistical purposes, for the analysis of demographics of users. Pursuant to the provisions of Article 18(6) of the Act of 18 July 2002 on electronic services and other applicable laws, we may be required to release information, including in particular the IP number of your computer, contained in access logs at the request of state authorities authorized by law for the purposes of their proceedings.