1. Information Clause on the processing of personal data held (RODO)
AE VINTAGE STORE
In connection with the entry into force from 25 May 2018 and the validity of the Act dated. August 29, 1997 on the protection of personal data (consolidated text of 13.06.2016, Journal of Laws of 2016 item 922) and in accordance with art. 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation ) we inform you of the rights to which you are entitled and for what purpose we process your personal data.
The administrator of personal data of Customers and Contact Persons is:
DEMO Tomasz Wysocki
Ul. Zwinis─╣awy 4C/7, 81-572 Gdynia
You can contact us by mail at 81-572 Gdynia, ul. Zwinis─╣awy 4C / 7, via e-mail to email@example.com, by phone on 501605305.
Objectives and legal grounds for the processing of personal data
Personal data collected by the Administrator of the Online Store are processed in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data and repeal of Directive 95 / 46 / EC (general regulation on data protection) (OJ L 119, p. 1), hereinafter referred to as: GDP.
Personal data collected by the Online Store is subject to legal protection in accordance with the provisions of the Act of 29.08.1997 on the protection of personal data (ie, Journal of Laws No. 101, item 926, as amended), the Act of July 18, 2002 on the provision of services electronically (ie, Journal of Laws of 2013, item 1422, as amended) and other legal provisions in force in the Republic of Poland.
The Administrator of the Online Store makes a special effort to protect the privacy and information provided to him regarding the Customers of the Online Store. The Administrator selects and applies appropriate technical measures, including programming and organizational measures, ensuring protection of the data being processed, in particular protecting data from unauthorized disclosure, disclosure, loss and destruction, unauthorized modification, as well as against their processing in violation applicable law.
The addressee of the possibility of using the Goods and Services available on the website are not children under 16 years of age. The personal data administrator does not plan to collect data on children under 16 years of age.
The personal data administrator processes your personal data for the following purposes and scope:
? take action before concluding the contract at your request (eg setting up an account), i.e. data provided in the online store registration form, i.e. e-mail address and password set, gender; if the Account is registered via an external authentication service (eg Google+, Facebook), we collect your first and last name, and if you register when purchasing Goods, we collect your name and data provided for the purpose of the order, such as the shipping address; in order to provide Services requiring the creation of Accounts such as: keeping order history, informing about the status of order processing, we process your data provided in the Account and when purchasing the Goods;
? carrying out activities aimed at concluding a commercial contract, including cases where the data of a person acting in the interest and on behalf of the Customer are required for the conclusion of the contract, we collect your name and data provided in order to fulfill the order, e-mail address, address data , payment details, shipping address;
? responding to inquiries related to the range of products offered by the Online Store, we process your name, e-mail address and contact details provided in order to provide commercial information;
? in order to provide Services that do not require the Account creation and purchase of Goods, ie browsing the Internet Store websites, the Products search, we process personal data about your activity in the Online Store, i.e. data about the goods you browse, data about your device session, operating system , browser, location and unique ID, IP address;
? in order to perform the contract for the sale of Goods (eg delivery of ordered Goods), we process personal data provided by you when purchasing Goods, such as your name, e-mail address, address details, payment details, and if you make a purchase through an Account , an additional password set;
? in order to use statistics of individual functionalities available in the Online Store, facilitate the use of the Online Store and ensure IT security of the Online Store, we process personal data about your activity in the Online Store and the amount of time spent on each subpage in the Online Store, your search history, location, IP address, device ID, data about your internet browser and operating system;
? in order to establish, investigate and enforce claims and defend against claims in court proceedings and other enforcement authorities, we may process your personal data provided when buying Goods or creating an Account and other data necessary to prove the existence of a claim or which result from legal requirement, court order or other legal procedure;
? in order to resolve complaints, complaints and requests, and answer customer questions, we process the personal data provided by you in the contact form, complaints and requests, or to answer questions in another form and some of the personal data provided by you in the Account as well as data regarding the order of the Goods and other services rendered by us which are the reason for the complaint, complaint or application and data contained in the documents attached to the complaints, complaints and applications;
? in order to market our Goods and Services and our clients and partners, including remarketing, for this purpose we process personal data provided by you when creating an Account and its updates, data about your activity in the Online Store, including orders that are registered and stored via cookies, in particular order history, search history, clicks in the Online Store, login and registration dates, history and your activity related to our communication with you. In the case of remarketing, we use data about your activity in order to reach you with our marketing messages outside of the Online Store and use for this purpose the services of external suppliers. These services consist in displaying our messages on websites other than the Online Store. Details on this subject can be found in the records regarding Cookies;
? in order to organize contests and loyalty programs, ie notifications about accumulated points, notifications about winning and advertising our offer, we use your personal data provided in the Account and when registering in a competition or loyalty program. Detailed information on this subject is provided each time in the participation conditions of a given competition or loyalty program;
? In order to directly marketing your own products and services or maintain business relations between the Customer and the Online Store, as part of your business activity, we use your personal data provided in the Account, address
? to test the market and opinions of us or our partners, i.e. information about the order, your data provided in the Account or when purchasing the Goods, e-mail address. Data collected as part of market research and opinion polls are not used by us for advertising purposes. The exact tips are given in the information about the questionnaire or in the place where you enter your details.
The basis for data processing is the legitimate interest of the Data Administrator (Article 6 paragraph 1 point f) of the RODO)
2. Categories of relevant personal data
The personal data administrator processes the following categories of relevant personal data:
? contact details;
? data on the activity in the Online Store;
? order data in the Online Store;
? data on complaint complaints and applications;
? data on marketing services.
3. Voluntary personal data
Providing the personal data required by you above is voluntary and is not a statutory or legal requirement, however, it is a condition for the provision of personal data by the Administrator via the Online Store.
4. Information about the data source
Your personal data and contact persons The administrator obtains in the majority of cases directly from the interested person, who provides his basic data when contacting the Administrator's sales representatives. Such information may be delivered to the Administrator: in writing by sending mail to the Administrator's address, sent via e-mail in order to establish business contacts or product inquiries with a request for reply or by phone, by contacting representatives of the Administrator.
The Administrator may obtain data from publicly available information, such as the National Court Register or the relevant CEIDG database (Central Register and Information on Business Activity), the Central Statistical Office (GUS), company websites, in the scope of data published in an explicit manner.
5. Data processing time
Personal data will be processed for the period necessary to carry out orders, services, marketing activities and other services performed for the customer. Personal data will be removed in the following cases:
? when the data subject asks for their removal or withdraws their consent;
? when the data subject does not take action for more than 10 years (inactive contact);
? after obtaining information that the stored data is out of date or inaccurate.
Some data in the field of: e-mail address, name and surname, may be stored for the next 3 years for evidence purposes, consideration of complaints, complaints and claims related to services provided by the Online Store - these data will not be used for marketing purposes.
Data concerning orders for Goods and paid services, contests and loyalty programs will be stored for a period of 5 years from the date of delivery of the order.
We store data regarding non-logged customers for a period of time corresponding to the life cycle of cookies stored on the devices or until they are deleted by the Customer in the Customer's device.
Your personal data regarding preferences, behaviors and selection of marketing content can be used as a basis for automated decisions to determine the sales possibilities of the Online Store.
Personal data of Clients or Contact Persons can be processed in an automated manner (profiling), however, it will not cause any legal effects to them or in a similar way significantly affect the situation of Clients or Contact Persons.
Profiling of personal data by the Administrator is based on the processing of customer data or contact persons in an automated and manual manner, by using them to evaluate some information about the customer or contact persons, in particular to offer our products and services, including matching them to the needs of customers or Contact persons.
7. Recipients of personal data
We provide your personal data to the following categories of recipients:
? state authorities, such as the prosecutor's office, the Police, GIODO, the President of UOKiK, if they ask for it.
8. The rights of the data subject
Based on the RODO, you have the right to:
? requesting access to your personal data;
? requesting the correction of your personal data;
? request removal of your personal data;
? requests to limit the processing of personal data;
? object to the processing of personal data;
? requests for moving personal data.
The administrator of personal data without undue delay - and in any case within one month of receiving the request - provides you with information about the actions taken in connection with the request you have made. If necessary, the monthly deadline may be extended by another two months due to the complexity of the request or the number of requests.
In any event, the Personal Data Administrator will inform you of such extension within one month of receiving the request, stating the reasons for the delay.
9. The right of access to personal data (Article 15 of the GDPR)
You have the right to obtain from the Administrator personal information whether your personal data is processed.
If the Administrator processes your personal data, you have the right to:
? access to personal data;
? obtaining information about the purposes of processing, categories of personal data being processed, recipients or categories of recipients of this data, the planned period of storage of your data or criteria for determining this period, about your rights under the REDO and the right to lodge a complaint with the supervisory authority, about the source these data on automated decision-making, including profiling and safeguards applied in connection with the transfer of these data outside the European Union;
? obtain copies of your personal data.
If you want to request access to your personal data, please submit your request to: firstname.lastname@example.org.
10. The right to rectify personal data (Article 16 of the GDPR)
If your personal data is incorrect, you have the right to request the Administrator to immediately correct your personal data.
You also have the right to request the Administrator to supplement your personal data.
If you want to request the correction of personal data or their supplementation, please submit your request to: email@example.com.
If you have registered in the Online Store, you can correct and complete your personal data after logging in to the Online Store.
11. The right to delete personal data, so-called "The right to be forgotten" (Article 17 of the RODO)
You have the right to request from the Administrator personal data to delete your personal data when:
? Your personal data has ceased to be necessary for the purpose for which it was collected or otherwise processed;
? you withdrew your specific consent to the extent to which personal data was processed based on your consent;
? Your personal data has been processed unlawfully;
? you have objected to the processing of your personal data for the purpose of direct marketing, including profiling, to the extent to which the processing of personal data is related to direct marketing;
? you objected to the processing of your personal data in connection with the processing necessary to perform the task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by the Administrator personal data or a third party.
Despite submitting a request to delete personal data, the Personal Data Administrator may process your data further in order to determine, assert or defend claims, about which you will be informed / informed.
If you want to request removal of your personal data, please submit your request to: firstname.lastname@example.org.
12. The right to submit a request to limit the processing of personal data (Article 18 of the RODO)
You have the right to request a restriction to the processing of your personal data when:
? you question the correctness of your personal data - the personal data administrator will limit the processing of your personal data for a period of time to check the correctness of this data;
? when the processing of your data is illegal, and instead of deleting personal data, you request to limit the processing of your personal data;
? Your personal information is no longer needed for processing, but it is needed to establish, assert or defend your claims;
? when you have filed an objection to the processing of your personal data - until it is determined that the legitimate interests of the Administrator of personal data override the grounds indicated in your objection.
If you want to request a restriction on the processing of your personal data, please submit your request to: email@example.com.
13. The right to object to the processing of personal data (Article 21 of the GDPR)
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
? processing necessary to perform a task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by the Administrator, personal data or a third party;
? processing for direct marketing purposes.
If you want to object to the processing of your personal data, please submit your request to: firstname.lastname@example.org.
14. The right to request the transfer of personal data (Article 20 of the RODO)
You have the right to receive from the Administrator personal data of your personal data in a structured, commonly used machine-readable format and send them to another administrator of personal data.
You can also request that the Personal Data Administrator send your personal data directly to another administrator (if it is technically possible).
If you want to request the transfer of your personal data, please submit your request to: email@example.com.
15. The right to withdraw consent
You can withdraw your consent to the processing of your personal data at any time.
Withdrawal of consent to the processing of personal data does not affect the lawfulness of processing made on the basis of your consent before its withdrawal.
If you want to withdraw your consent to the processing of your personal data, please submit your request to: firstname.lastname@example.org.
16. Complaint to the supervisory body
If you believe that the processing of your personal data violates the RODO, you have the right to submit a complaint to the supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged infringement was committed.
In Poland, the supervisory body within the meaning of the RODO is the Inspector General for Personal Data Protection (GIODO).