Privacy Policy
GENERAL PROVISIONS
This privacy policy of the Online Store is for informational purposes only, which means that it is not a source of obligations for Service Users or Customers of the Online Store.
The controller of personal data collected via the Online Store is KREM Anna Zalesińska, hereinafter referred to as the "Controller", which is both the Service Provider of the Online Store and the Seller.
The personal data of the Service Recipient and the Customer are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, OJ EU L 119, p. 1), the Act of 10 May 2018 on the protection of personal data (Journal of Laws 2018 item 1000) and the Act of 18 July 2002 on the provision of services by electronic means (Journal of Laws 2002 No. 144 item 1204).
The Administrator takes special care to protect the interests of data subjects, and in particular ensures that the data collected by him are processed in accordance with the law; collected for specified, lawful purposes and not subject to further processing incompatible with these purposes; factually correct and adequate in relation to the purposes for which they are processed and stored in a form which allows identification of data subjects for no longer than is necessary to achieve the purpose of processing.
All words, expressions and acronyms appearing on this website and beginning with a capital letter (e.g. Seller, Online Store, Electronic Service) should be understood in accordance with their definitions contained in the Online Store Regulations available on the Online Store website.
PURPOSE AND SCOPE OF DATA COLLECTION AND DATA RECIPIENTS
Each time, the purpose, scope, and recipients of data processed by the Administrator result from the actions taken by the Service User or Customer in the Online Store. For example, if the Customer chooses personal collection instead of courier delivery when placing an Order, their personal data will be processed for the purpose of concluding and fulfilling the Sales Agreement, but will not be shared with the carrier carrying out shipments on behalf of the Administrator.
Possible purposes of collecting personal data of Service Users or Customers by the Controller: conclusion and implementation of a Sales Agreement or an agreement for the provision of Electronic Services (e.g. Account); direct marketing of the Controller's own products or services.
Possible recipients of personal data of Customers of the Online Store: in the case of a Customer who uses the courier delivery method in the Online Store, the Administrator makes the collected personal data of the Customer available to a selected carrier or intermediary carrying out shipments on behalf of the Administrator; in the case of a Customer who uses the credit card payment method in the Online Store, the Administrator makes the collected personal data of the Customer available to a selected entity handling the above payments in the Online Store.
The Administrator may process the following personal data of Service Users or Customers using the Online Store: first name and last name; email address; contact telephone number; delivery address (street, house number, apartment number, postal code, city, country), residential/business address/registered office address (if different from the delivery address). In the case of Service Users or Customers who are not consumers, the Administrator may additionally process the company name and tax identification number (NIP) of the Service User or Customer.
Providing the personal data referred to in the point above may be necessary to conclude and execute a Sales Agreement or an agreement for the provision of Electronic Services in the Online Store. In each case, the scope of data required to conclude the agreement is indicated in advance on the Online Store website and in the Online Store Terms and Conditions.
COOKIES AND OPERATIONAL DATA
Cookies are small pieces of information in the form of text files, sent by the server and stored on the website visitor's side (e.g., on the hard drive of a computer, laptop, or smartphone's memory card – depending on the device the visitor uses to visit our Online Store). Detailed information about cookies, as well as the history of their creation, can be found here: http://pl.wikipedia.org/wiki/Ciasteczko.
The Administrator may process data contained in Cookies when visitors use the Online Store website for the following purposes: 1. identifying Service Users as logged in to the Online Store and showing that they are logged in; 2. remembering Products added to the cart to place an Order; 3. remembering data from completed Order Forms, surveys, or Online Store login details; 4. customizing the content of the Online Store website to the Service User's individual preferences (e.g., regarding colors, font size, page layout) and optimizing the use of the Online Store websites; 5. maintaining anonymous statistics showing how the Online Store website is used.
By default, most web browsers accept cookies by default. Everyone can specify the terms of use of cookies through their own web browser settings. This means, for example, that you can partially restrict (e.g., temporarily) or completely disable the ability to save cookies. However, this may affect some of the Online Store's functionalities (for example, it may be impossible to complete the ordering process via the Order Form due to the Products not being saved in the shopping cart during subsequent steps of the ordering process).
Your web browser's cookie settings are important for consenting to the use of cookies by our Online Store. In accordance with the regulations, such consent can also be expressed through your web browser settings. If you do not consent, you must change your web browser's cookie settings accordingly.
3. Detailed information on how to change cookie settings and how to delete them yourself in the most popular web browsers is available in the help section of your web browser and on the following websites (just click on the link): 1. in the Chrome browser 2. in the Firefox browser 3. in the Internet Explorer browser 4. in the Opera browser 5. in the Safari browser
The Administrator also processes anonymized operational data related to the use of the Online Store (so-called logs – IP address, domain) to generate statistics helpful in administering the Online Store. This data is aggregated and anonymous, meaning it does not contain any features that identify visitors to the Online Store. Logs are not disclosed to third parties.
BASIS FOR DATA PROCESSING
1. Providing personal data by the Service User or Customer is voluntary, however failure to provide the personal data indicated on the website of the Online Store and in the Regulations of the Online Store, which are necessary for the conclusion and implementation of the Sales Agreement or the agreement for the provision of Electronic Services, results in the inability to conclude such agreement.
The basis for processing the personal data of a Service Recipient or Customer is the need to perform a contract to which they are a party or to take steps at their request prior to entering into the contract. In the case of data processing for direct marketing of the Administrator's own products or services, the basis for such processing is (1) the prior consent of the Service Recipient or Customer or (2) the fulfillment of legally justified purposes pursued by the Administrator (in accordance with Article 23, Section 4 of the Personal Data Protection Act, legally justified purposes include, in particular, direct marketing of the Administrator's own products or services).
The personal data obtained will be transferred to data processors that provide services to KREM Anna Zalesińska.
THE RIGHT TO CONTROL, ACCESS AND CORRECT YOUR DATA
The Service Recipient or Customer has the right to access and correct their personal data.
Every person has the right to control the processing of data concerning them, contained in the Administrator's data set, and in particular the right to: request the supplementation, updating, rectification of personal data, temporary or permanent suspension of their processing or their deletion if they are incomplete, outdated, untrue or have been collected in violation of the Act or are no longer necessary to achieve the purpose for which they were collected.
If the Service User or Customer grants consent to the processing of data for the purpose of direct marketing of the Administrator's own products or services, the consent may be withdrawn at any time.
If the Controller intends to process or processes the data of the Service Recipient or Customer for the purpose of direct marketing of the Controller's own products or services, the data subject is also entitled to (1) submit a written, reasoned request to cease processing of his or her data due to his or her special situation or to (2) object to the processing of his or her data.
In order to exercise the rights referred to above, you can contact the Administrator by sending an appropriate message in writing or by e-mail to the Administrator's address indicated at the beginning of this privacy policy.
FINAL PROVISIONS
The Online Store may contain links to other websites. The Administrator encourages users to review the privacy policies posted there after visiting other websites. This privacy policy applies only to this Online Store.
The Administrator applies technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of data subject to protection, and in particular protects data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of applicable regulations, and alteration, loss, damage or destruction.
The Administrator provides the following technical measures to prevent unauthorized persons from obtaining and modifying personal data sent electronically:
Securing the data set against unauthorized access.
Access to the Account is only possible after providing an individual login and password.
SSL certificate.
GDPR
COOKIES:
The Service Provider's website uses cookies. Failure to change browser settings by the Service User constitutes consent to their use. Installing cookies is necessary for the proper provision of services on the website. Cookies contain information necessary for the proper functioning of the website, particularly those requiring authorization. The website uses the following types of cookies: Session cookies. Session cookies are temporary files that are stored on the Service User's end device until they log out (leave the website). The User has the right to control the access of cookies to their computer by selecting them in their browser window. Detailed information about the possibilities and methods of managing cookies is available in the software (web browser) settings.
SALE :
The controller of the Customer's personal data is KREM Anna Zalesińska with its registered office in Częstochowa at ul. Mościckiego 16/24; Providing personal data by the Customer is voluntary, but is a condition for making a purchase; the Customer has the right to access their data and to rectify, delete, and limit its processing.
The data provided will be processed pursuant to Article 6(1)(b) and (c) of the General Data Protection Regulation; Your personal data will be transferred to entities processing data on our behalf and to companies delivering parcels; Your personal data will be stored until the expiry of the limitation period for claims arising from the concluded contract or for the period required by separate provisions regarding tax and accounting obligations – whichever period ends later; You have the right to lodge a complaint with the President of the Personal Data Protection Office.
In order to exercise the rights, the data subject may send an appropriate e-mail to the following address: hello@kremconcept.com.
NEWSLETTER:
Providing personal data is voluntary, but it is a condition for receiving the newsletter; the Customer has the right to access the content of their data and to rectify, delete, limit processing, the right to transfer data, the right to withdraw consent at any time without affecting the lawfulness of processing.
The data provided will be processed pursuant to Article 6 paragraph 1 point a) and in accordance with the General Data Protection Regulation for the purpose of sending the newsletter; The Customer's personal data will be transferred to an entity processing data on our behalf outside the EEA based on a decision of the European Commission; The Customer's personal data will be stored until the Customer unsubscribes from the newsletter; The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office; In order to exercise these rights, the data subject may send an appropriate e-mail to: hello@kremconcept.com.
RECRUITMENT PROCESSES:
Providing your personal data is voluntary and is a condition for participating in recruitment; You have the right to access, rectify, erase, and restrict the processing of your data. The data provided will be processed pursuant to Article 6(1)(b) and (c) of the GDPR. Personal data will be transferred to entities processing data on our behalf; Personal data will be stored until you withdraw your consent to participate in the recruitment process or the recruitment process is completed; You have the right to lodge a complaint with the President of the Personal Data Protection Office; To exercise your rights, the data subject may send an appropriate email to: hello@kremconcept.com.