PRIVACY POLICY
Online Store www.ilnomestyle.com
TABLE OF CONTENTS
-
General Provisions
-
Personal Data Controller
-
Scope and Purposes of Data Processing
-
Legal Basis for Data Processing
-
Data Recipients
-
Data Transfer Outside the European Economic Area
-
Profiling
-
Data Subject Rights
-
Cookies and Analytical Tools
-
Final Provisions
1. GENERAL PROVISIONS
-
This Privacy Policy is for informational purposes only. It describes the principles of processing personal data of users of the online store operating at www.ilnomestyle.com (hereinafter referred to as the "Store").
2. PERSONAL DATA CONTROLLER
The personal data controller is:
Aleksandra Kuzmenko,
NIP 5214011185
e-mail: info@ilnomestyle.com
(hereinafter: "Controller").
The Controller has not appointed a Data Protection Supervisor. Contact is possible at the following e-mail address: info@ilnomestyle.com.
3. SCOPE AND PURPOSES OF DATA PROCESSING
-
The Controller processes personal data for the following purposes:
-
fulfillment of orders and sales contracts,
-
handling complaints,
-
managing the Customer's account,
-
sending marketing information (if consent was given),
-
bookkeeping,
-
claim pursuit and defense,
-
statistical and analytical purposes.
-
The scope of processed data includes:
-
name and surname,
-
email address,
-
phone number,
-
delivery address,
-
company details and Tax Identification Number (NIP) (for entrepreneurs).
4. LEGAL BASIS FOR DATA PROCESSING
Data are processed on the basis of:
-
necessity for the performance of the contract (Article 6, paragraph 1, letter b of the GDPR),
-
legal obligations incumbent on the Controller (Article 6, paragraph 1, letter b of the GDPR). 1 letter c GDPR),
-
user's consent (Art. 6 paragraph 1 letter a GDPR),
-
legitimate interest of the Controller (Art. 6 paragraph 1 letter f GDPR).
5. DATA RECIPIENTS
Data may be shared with:
-
courier companies,
-
electronic payment operators,
-
IT service providers,
-
accounting, legal, and consulting firms,
-
systems for sending surveys or opinions.
6. DATA TRANSFER OUTSIDE THE EEA
Data may be transferred to countries outside the European Economic Area (e.g., the USA), in particular in connection with the use of Google and Facebook services.
The transfer takes place on the basis of standard contractual clauses approved by the European Commission.
7. PROFILING
The Administrator may profile data for the following purposes:
-
displaying personalized advertisements,
-
offering discounts and offers tailored to your interests.
Decisions made on the basis of profiling have no legal effect and do not significantly affect the user.
8. DATA SUBJECT RIGHTS
You have the right to:
-
access your data,
-
rectify it,
-
delete it ("right to be forgotten"),
-
restrict processing,
-
data portability,
-
objection to processing,
-
withdraw consent at any time,
-
lodging a complaint with the President of the Personal Data Protection Office.
Contact regarding the exercise of rights: info@ilnomestyle.com
9. COOKIES AND ANALYTICAL TOOLS
The store uses cookies for the following purposes:
-
ensuring the proper functioning of the website,
-
keeping statistics,
-
personalizing content and ads,
-
analyzing user behavior (e.g., Google Analytics, Facebook Ads).
You can change cookie settings in your browser.
10. FINAL PROVISIONS
The Store may contain links to other websites that have their own privacy policies.
The Administrator reserves the right to change this Policy. Users will be notified of any changes via the Store's website.
11. RECIPIENTS OF DATA IN THE ONLINE STORE
-
For the proper functioning of the Online Store, including the execution of concluded Sales Agreements, the Controller must use the services of external entities (such as a software provider, courier, or payment processor). The Controller only uses the services of processors who provide sufficient guarantees to implement appropriate technical and organizational measures so that the processing meets the requirements of the GDPR Regulation and protects the rights of data subjects.
-
Using the website requires the processing of the customer's personal data, including: name, surname, telephone number, email address, and residential address. Data will be processed by www.ilnomestyle.com to the extent necessary to conclude and execute the contract. The customer has the right to access and correct their data. Providing data is voluntary, yet necessary to use the website.
-
The Controller does not transfer data in every case and not to all recipients or categories of recipients indicated in the privacy policy. The Controller transfers data only when it is necessary to achieve the given purpose of personal data processing and only to the extent necessary to achieve it. For example, if the Customer uses personal pickup, their data will not be transferred to a carrier cooperating with the Controller.
-
The personal data of Service Users and Customers of the Online Store may be transferred to the following recipients or categories of recipients:
-
carriers / forwarders / courier brokers – In the case of a Customer who uses the Online Store to have the Product delivered by post or courier, the Administrator makes the Customer's collected personal data available to the selected carrier, forwarder, or intermediary handling shipments on behalf of the Administrator, to the extent necessary to complete the delivery of the Product to the Customer.
-
entities handling electronic or payment card payments – in the case of a Customer who uses the Online Store to have the Product delivered by electronic or payment card, the Administrator makes the Customer's collected personal data available to the selected entity handling these payments in the Online Store on behalf of the Administrator, to the extent necessary to process the payment made by the Customer.
-
lending entities/lessors – In the case of a Customer who uses the installment or leasing payment method in the Online Store, the Administrator makes the collected personal data of the Customer available to the selected lender or lessor handling the above payments in the Online Store at the request of the Administrator, to the extent necessary to process the payment made by the Customer.
-
opinion survey system providers – In the case of a Customer who has agreed to express an opinion on the concluded Sales Agreement, the Administrator makes the collected personal data of the Customer available to a selected entity providing a system of opinion surveys on concluded Sales Agreements in the Online Store at the request of the Administrator, to the extent necessary for the Customer to express an opinion using the opinion survey system.
-
Service providers supplying the Administrator with technical, IT, and organizational solutions enabling the Administrator to conduct business activities, including the Online Store and the Electronic Services provided through it (in particular, computer software providers for operating the Online Store, email and hosting providers, and software providers for managing the company and providing technical support to the Administrator) – The Controller shares the Customer's collected personal data with a selected provider acting on its behalf only in the event and to the extent necessary to achieve a given data processing purpose in accordance with this privacy policy.
-
providers of accounting, legal, and advisory services providing the Controller with accounting, legal, or advisory support (in particular, an accounting office, law firm, or debt collection agency) – the Controller shares the Customer's collected personal data with a selected provider acting on its behalf only in the event and to the extent necessary to achieve a given data processing purpose in accordance with this privacy policy.
12. PROFILING IN AN ONLINE STORE
-
The GDPR Regulation imposes on the Controller the obligation to provide information on automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR Regulation, and – at least in these cases – meaningful information on the principles governing its making, as well as the significance and envisaged consequences of such processing for the data subject. With this in mind, the Administrator provides information regarding possible profiling in this section of the privacy policy.
-
The Administrator may use profiling in the Online Store for direct marketing purposes, but the decisions made on its basis by the Administrator do not concern the conclusion or refusal to conclude a Sales Agreement or the ability to use Electronic Services in the Online Store. The effect of using profiling in the Online Store may be, for example, granting a discount to a given person, sending a discount code, reminding them about unfinished purchases, sending a Product proposal that may suit the interests or preferences of a given person, or offering better terms compared to the standard offer of the Online Store. Despite profiling, a given person freely decides whether they want to use the discount or better terms received and make a purchase in the Online Store.
-
Profiling in the Online Store involves the automatic analysis or forecasting of a given person's behavior on the Online Store website, e.g., by adding a specific Product to the cart, viewing a specific Product page in the Online Store, or by analyzing the previous purchase history in the Online Store. The condition for such profiling is that the Controller has the personal data of the individual in question so that it can then send them, for example, a discount code.
-
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or significantly affects them in a similar manner.
13. RIGHTS OF THE DATA SUBJECT
-
Right to access, rectify, limit, erase, or transfer – the data subject has the right to request from the Controller access to their personal data, rectification, erasure (the "right to be forgotten"), or limitation of processing, and has the right to object to processing, as well as the right to transfer their data. Detailed conditions for exercising the above-mentioned rights are set out in Articles 15-21 of the GDPR.
-
Right to withdraw consent at any time – If the data subject is processed by the Controller on the basis of consent (pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR), he or she has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
-
Right to lodge a complaint with a supervisory authority – the data subject is entitled to lodge a complaint with a supervisory authority in the manner and procedure specified in the provisions of the GDPR and Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Personal Data Protection Office.
-
Right to object – the data subject has the right to object at any time – on grounds relating to his or her particular situation – to the processing of personal data concerning him or her based on Article 6(1)(e) (public interest or task) or (f) (legitimate interest of the controller), including profiling based on these provisions. In such a case, the Controller is no longer permitted to process such personal data unless it demonstrates compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subject, or grounds for establishing, pursuing, or defending legal claims.
-
Right to object to direct marketing – If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing.
-
In order to exercise the rights referred to in this section of the privacy policy, you can contact the Controller by sending an appropriate message in writing or by email to the Controller's address indicated at the beginning of the privacy policy or by using the contact form available on the Online Store website.
14. COOKIES IN THE ONLINE STORE, OPERATIONAL DATA AND ANALYTICS
-
Cookies are small pieces of information in the form of text files, sent by the server and stored on the website of the Online Store visitor (e.g., on the hard drive of a computer, laptop, or smartphone's memory card – depending on the device the visitor uses to visit our Online Store). Detailed information about cookies, as well as the history of their creation, can be found, among others, here. here: http://pl.wikipedia.org/wiki/Ciasteczko.
-
The Administrator may process data contained in Cookies when visitors use the Online Store website for the following purposes:
-
identifying Service Users as logged in to the Online Store and showing that they are logged in;
-
remembering Products added to the cart for the purpose of placing an order Orders;
-
remembering data from completed Order Forms, surveys, or login details to the Online Store;
-
adapting the content of the Online Store website to the individual preferences of the Service Recipient (e.g., regarding colors, font size, page layout) and optimizing the use of the Online Store websites;
-
maintaining anonymous statistics showing how the Online Store website is used;
-
remarketing, i.e., researching the behavior of visitors to the Online Store through anonymous analysis of their activities (e.g., repeated visits to specific pages, keywords, etc.) in order to create their profile and deliver advertisements tailored to their anticipated interests, also when they visit other websites in the Google Inc. and Facebook Ireland Ltd. advertising network;
-
By default, most web browsers available on the market accept cookies by default. Everyone can specify the terms of use of cookies through their own web browser settings. This means that, for example, you can partially limit (e.g., temporarily) or completely disable the ability to save cookies – In the latter case, however, this may affect some of the Online Store's functionalities (for example, it may be impossible to complete the Order process via the Order Form due to the Products not being remembered in the cart during subsequent steps of placing the Order).
-
The browser's cookie settings are important for consenting to the use of cookies by our Online Store – in accordance with the regulations, such consent can also be expressed through the browser's settings. If you do not consent, please change your browser's Cookie settings accordingly.
-
Detailed information on changing Cookie settings and deleting them yourself in the most popular web browsers is available in the help section of your web browser and on the following websites (just click the appropriate link):
in the Chrome browser
in the Firefox browser
in the Internet Explorer browser
in the Opera browser
in the Safari browser
in the Microsoft Edge browser
-
The Administrator may use Google Analytics and Universal Analytics services provided by Google Inc. in the Online Store. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA. These services help the Administrator analyze traffic in the Online Store. The collected data is processed as part of the above services in an anonymous manner (these are so-called operational data that prevent personal identification) to generate statistics helpful in administering the Online Store. This data is aggregated and anonymous, i.e. it does not contain any identifying features (personal data) of visitors to the Online Store. By using the above services in the Online Store, the Administrator collects data such as the sources and means of acquiring visitors to the Online Store and their behavior on the Online Store website, information about the devices and browsers they use to visit the website, IP and domain, geographic data, demographic data (age, gender), and interests.
-
It is possible for a given person to easily block the sharing of information about their activity on the Online Store website with Google Analytics. For this purpose, you can install a browser add-on provided by Google Inc., available here: https://tools.google.com/dlpage/gaoptout?hl=pl.
-
The Administrator may use the Facebook Ads service provided by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) in the Online Store. This service helps the Administrator measure the effectiveness of advertisements and learn what actions visitors to the Online Store take, as well as display tailored advertisements to them. Detailed information about how Facebook Ads works can be found at can be found at the following website address: https://www.facebook.com/business/ads.
15. FINAL PROVISIONS
-
The Online Store may contain links to other websites. The Administrator encourages you to review the privacy policies established there after visiting other websites. This privacy policy applies only to the Administrator's Online Store.