Administrator – personal data controller;
RODO – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance);
Shop – an online shop located at the address of the Website;
Website – website located at -www.cottonmoose.shop.pl;
User – a person using the Shop and its functionality, including a person who has registered a User Account, placed an Order, made a purchase in the Shop, uses the Newsletter service or visits the Website, browses its contents or contacts the Administrator in any way.
The administrator shall inform and explain that:
providing personal data by the User is voluntary, but the lack of consent for processing the data by the Administrator will prevent the Administrator from providing services electronically and placing orders in the Shop and their execution, as well as the return of ordered goods or their complaint;
to place an Order, the User must fill in the Form and provide certain personal data; The provision of personal data indicated in the Form is voluntary, but necessary to place an Order;
to register a User Account, the User must provide the personal data specified at the time of registration; The provision of personal data is voluntary, but necessary to register a User Account;
to use the Newsletter, the User must provide an e-mail address, which may constitute personal data; providing the e-mail address is voluntary, but necessary to use the Newsletter;
providing personal data for marketing purposes is voluntary.
PERSONAL DATA CONTROLLER.The Administrator of personal data is Rafał Znyk, Cottonmoose Shop Rafał Znyk with its registered office in Częstochowa at 88 Wilsona Street, 42-202 Częstochowa, NIP 6692335078, REGON 381460918. The User may contact the Administrator by mail to the address indicated in the previous sentence or by e-mail: firstname.lastname@example.org.
Administrator shall ensure the security of personal data entrusted by the User, including the prevention of illegal data processing and access to it by unauthorized persons. The personal data is processed by the Administrator in accordance with the applicable laws.
THE PURPOSE, SCOPE AND BASIS OF THE PROCESSING. THE DURATION OF DATA STORAGE.Administrator processes the following personal data of the Users: first name (or forenames), surname (or surnames), addresses: residence, correspondence, delivery, business activity or seat, company name, telephone number, bank account number, e-mail address (e – mail), NIP and REGON number. The Administrator does not process special categories of personal data within the meaning of RODO.
The recipients of personal data processed by the Administrator may be:
persons whose data are processed;
persons authorised by the Administrator to process data (in particular the Administrator’s employees or associates);
entities providing services or other activities related to the Administrator’s business activity (in particular, electronic payment services, carriers delivering parcels, entities providing advertising, marketing and accounting services);
entities authorised under generally applicable law.
The purpose and legal basis for the Administrator’s processing of the data results from the User’s consent, performance of the contract or general legal regulations (Article 6 RODO). The Administrator processes data for the following purposes:
submission and acceptance of the Order and confirmation of receipt;
concluding and performing contracts with Users, including their payment and shipping;
return the ordered Products, withdraw from the contract or process complaints;
issuing and storing invoices and accounting documents;
provision of electronic services, including User Account and Newsletter services;
to establish, defend and assert rights and claims;
marketing its own services and goods;
the fulfilment of obligations arising from generally applicable laws, including to secure information in the event of the need to demonstrate proper, lawful action.
Personal data stored on the basis of the User’s consent will be kept until the withdrawal of consent;
personal data will be stored until the statute of limitations on claims under the contract or the obligation to store data under the law expires;
personal data processed on the basis of the Administrator’s legitimate interest shall be stored until there is a legitimate interest of the Administrator to process personal data for a specific purpose (the data shall not be processed if the User raises a legitimate objection to such processing and the Administrator fails to prove the existence of valid, legally justified grounds for processing or grounds for establishing, pursuing or defending claims);
data and information stored in connection with cookie technology will be stored until the files are deleted using the settings of your browser or other device.
THE RIGHT OF ACCESS TO AND CORRECTION OF DATA. When entrusting his personal data to the Administrator, the User has at any time the right to access and correct this data, in particular, he is entitled to demand that its content be corrected, supplemented, deleted or restricted. The personal data provided by the User in his or her individual User Account may be corrected and edited by the User at any time. The User may also apply to the Administrator with a request to delete the User Account.
User is entitled to request the transfer of data concerning him at any time. The data transfer involves the receipt of personal data in a structured, commonly used machine-readable format. The User has the right to send this personal data to another Administrator without any obstacles from the Administrator. The user has the right to demand that the personal data be sent by the Administrator directly to another administrator, if technically possible.
User is entitled to object to the processing of personal data concerning him for reasons relating to his particular situation. The Administrator is no longer permitted to process this personal data unless he can demonstrate that there are valid, legitimate grounds for processing overriding the interests, rights and freedoms of the User or grounds for establishing, pursuing or defending claims. If the User’s personal data is processed for the purposes of direct marketing, the User has the right to object at any time to the processing of personal data concerning him for the purposes of such marketing, to the extent that the processing is related to such direct marketing.
The user is entitled at any time to withdraw his consent to the processing of personal data, which does not affect the lawfulness of the processing that was carried out on the basis of his consent before its withdrawal.
The user is entitled at any time to lodge a complaint with the supervisory body dealing with the protection of personal data (President of the Office for Personal Data Protection, https://uodo.gov.pl/).
By using the Website, the User agrees to store a cookie on the device which the User uses while browsing the Website. In the absence of such consent, it is necessary to change the settings of the Internet browser for cookies accordingly, which the User may do at any time (see point 18).
User data will not consist of automated decision making, including profiling.
Administrator does not transfer or plan to transfer Users’ data outside the EEA.