Privacy policy

PRIVACY POLICY of 25 May 2018 Personal Data Controller: Teresa Podgórska, conducting business activity under the company name: P.P.H. “Terra Styl” Teresa Podgórska with its registered office in Michałów-Reginów, Warszawska 34, Michałów-Reginów 05-119. NIP: 5361021090, REGON: 010838528.

§ 1

General Provisions

1. Personal Data Controller is Teresa Podgórska, conducting business activity under the company: P.P.H. “Terra Styl” Teresa Podgórska with its registered office in Michałów-Reginów, Warszawska 34, Michałów-Reginów 05-119. NIP: 5361021090, REGON: 010838528.

2. The protection of personal data is carried out in accordance with the requirements of generally applicable law, in particular with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), and their storage takes place on secure servers.

3. For the interpretation of terms contained in this document, the Terms and Conditions glossary is used, available at www.nife.pl, or as described in the Privacy Policy (if it results directly from the description).

4. We respect the right to privacy and care about data security. For this purpose, we use, among other things, a secure socket layer protocol (SSL).

5. The personal data provided in the form on the website of the Personal Data Controller www.terrastyll.pl are treated as confidential and are not visible to unauthorized persons.

§ 2

Scope and purpose of the processing of personal data

1. Seller – Teresa Podgórska, conducting business activity under the business name: P.P.H. “Terra Styl” Teresa Podgórska with its registered office in Michałów-Reginów, Warszawska 34, Michałów-Reginów 05-119. NIP: 5361021090, REGON: 010838528, is the Controller of the Customer’s Personal Data. This means that if the Customer has an Account (Customer’s Account) on our website www.terrastyll.pl, we process such Customer’s data as: name and surname, e-mail address, telephone number, address of residence, delivery address.

2. Seller – Teresa Podgórska, conducting business activity under the name of a company: P.P.H. “Terra Styl” Teresa Podgórska with its registered office in Michałów-Reginów, Warszawska 34, Michałów-Reginów 05-119. NIP: 5361021090, REGON: 010838528, is also the Personal Data Controller of persons signed up for the newsletter and persons who agreed to receive marketing/commercial information and persons who agreed to the profiling.

3. Personal data are processed:

a) in accordance with the provisions on the protection of personal data;

b) in accordance with the implemented Privacy Policy;

c) in the scope and for the purpose necessary to establish, shape the content of the agreement, change or terminate it and its proper performance (legal basis: Article 6(1)(b) GDPR);

d) in the scope and for the purpose necessary for the fulfilment of the legal obligations incumbent upon the Personal Data Controller (legal basis: Article 6(1)(c) of the GDPR);

e) in the scope and for the purpose necessary for the purposes resulting from legally justified interests pursued by the Personal Data Controller and the processing does not violate the interests or fundamental rights and freedoms of the Customer (legal basis: Article 6(1)(f) of the GDPR);

f) in the scope and for the purpose consistent with the consent given by the Customer, if signed up for the newsletter (legal basis: Article 6(1)(a) GDPR);

g) in the scope and for the purpose consistent with the consent given by the Customer, if the Customer expressed a will to receive marketing/commercial information (legal basis: Article 6(1)(a) of the GDPR);

h) in the scope and for the purpose consistent with the consent given by the Customer, if the Customer expressed a will for profiling (legal basis: Article 6(1)(a) GDPR).

4. Personal data are stored for the period necessary to achieve the purposes described above, however:

a) in the case of performance of the concluded agreement – for the period until the end of its performance, and after that time – for the period and to the extent required by law or to secure possible claims, and in the case of consent for data processing by the Customer after the expiry of the agreement – until the withdrawal of this consent;

b) in the scope of fulfilling legal obligations incumbent on the Personal Data Controller in connection with the business activity conducted by the Controller and the performance of concluded agreements –for the period until such obligations are fulfilled by the Personal Data Controller;

c) in the scope of internal administrative purposes of the Personal Data Controller –for the period until the legally justified interests of the Personal Data Controller being the basis for processing are fulfilled or until the Customer raises an objection;

d) in the scope of sending a newsletter, receiving marketing/commercial information and profiling – for the period until the Customer’s withdrawal of consent for such processing.

§3

Customer’s rights

1. Every data subject has a right to:

a) access to data pursuant to Article 15 GDPR – at any time the data subject shall have the right to obtain information from the Personal Data Controller as to whether or not personal data concerning him or her are being processed and, if so, the right to have access to such data or to obtain a copy thereof. The Personal Data Controller is obliged to provide relevant information without excessive fees and without undue delay. The deadline for the Controller to fulfil the request shall be one month, but not longer than three months – in complicated cases (due to the complicated nature of the request or the number of requests), from the date of receiving the request;

b) rectification of data pursuant to Article 16 GDPR – at any time the data subject shall have the right to request the Personal Data Controller to rectify personal data concerning him or her, if irregularities are found in the personal data collected by the Controller;

c) restriction of data processing pursuant to Article 18 GDPR – at any time, in the situation described in the provisions on personal data protection, the data subject may request the Personal Data Controller to restrict the data processing. If such a request is justified, the data shall be processed by the Personal Data Controller, and undertaking any operations other than storage shall require the separate consent of that data subject, unless the processing is necessary for the protection of claims or rights of another person or for important reasons of public interest;

d) right to object pursuant to Article 21 GDPR – in case of important, legally justified grounds, the data subject may object to the processing carried out by the Personal Data Controller, claiming the primacy of his or her interests, rights and freedoms over the purpose of data processing;

e) right to be forgotten pursuant to Article 17 GDPR – at any time, in the situation described in the provisions on the protection of personal data, the data subject may request the Personal Data Controller to immediately delete the personal data concerning him or her and the Personal Data Controller is obliged to delete the data without undue delay;

f) right to data portability pursuant to Article 20 GDPR – at any time the data subject has the right to request the Personal Data Controller to provide him or her with personal data in a structured, commonly used machine-readable format processed automatically on the basis of his or her consent or in connection with the performance of the agreement;

g) right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR – in case the data subject considers that the processing of personal data by the Personal Data Controller violates the regulations of GDPR, the data subject has the right to lodge a complaint with a supervisory authority;

h) right to withdraw consent – in the case when data processing is based on the provision of Article 6(1)(a) GDPR, i.e. consent to the processing of personal data, the data subject has the right at any time to approach the Personal Data Controller and withdraw given consent to process his or her personal data. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

2. Contact with the person supervising the processing of personal data at the Personal Data Controller is possible:

a) by e-mail at the e-mail address: terrastyll.online@gmail.com;

b) by telephone: +48 533 600 280;

c) by mail to the address of the Seller’s registered office: P.P.H. “Terra Styl” Teresa Podgórska, Warszawska 34, Michałów-Reginów 05-119.

2. Contact with the person supervising the processing of personal data at the Personal Data Controller is possible:

a) by e-mail at the e-mail address: terrastyll.online@gmail.com;

b) by telephone: +48 533 600 280;

c) by mail to the address of the Seller’s registered office: P.P.H. “Terra Styl” Teresa Podgórska, Warszawska 34, Michałów-Reginów 05-119.

3. We reserve the right to process the Customer’s personal data after termination of the agreement or withdrawal of consent only to the extent necessary to pursue possible claims in court or if national or EU regulations or international law oblige us to retain data.

4. Seller has the right to make the Customer’s personal data and other data that it processes available to entities authorized under the relevant law (e.g. law enforcement agencies).

5. Seller does not make personal data available outside the European Economic Area.

6. We have implemented data encryption and access control, thanks to

we minimize the consequences of a possible personal data security breach.

7. Personal data are processed by persons exclusively authorized by us or by processors with whom we closely cooperate and with whom we are bound by a personal data processing contract.

§ 4

Cookies

1. The website www.terrastyll.pl uses cookies. These are small text files sent by a web server and stored by the browser’s computer software. When the browser reconnects to the website, the website recognizes the type of device from which the customer connects. Parameters allow the information contained in them to be read only to the server that created them. Cookies therefore facilitate the use of previously visited websites.

2. The collected information concerns the IP address, browser type, language, operating system type, internet service provider, time and date information, location and information sent to the website via the contact form.

3. The data are collected to monitor and verify how customers use our websites, to improve the operation of the site, to provide more efficient and seamless navigation. We use Google Analytics to track customer information and record customer behavior on the website.

4. Cookies identify the Customer so the content of the website can be adjusted to her or his needs. By remembering the Customer’s preferences, it enables to direct the appropriate advertisements. We use cookies to ensure the highest standard of convenience on our site, and the collected data are used only within our company to optimize operations.

5. We use the following cookies on our website:

a) “necessary” cookies, enabling the use of services available on the site, e.g. authenticating cookies used for services requiring authentication as part of the service;

b) cookies used to ensure security, e.g. used to detect fraud in the scope of authentication within the website,

c) “performance” cookies, which enable collecting information on the use of the website;

d) “functionality” cookies, enabling “remembering” the settings selected by the Customer and personalization of the Customer’s interface, e.g. in the scope of a selected language or region from which the Customer comes, font size, appearance of the website, etc.;

e) “advertising” cookies, enabling the delivery of advertising content to the Customer, more adjusted to his or her interests.

6. Customer at any time has the ability to disable or restore the option of collecting cookies by changing the settings in the Internet browser. Instructions for managing cookies are available in individual web browsers, such as: Internet Explorer, Mozilla Firefox, Chrome, Opera, Safari etc.