Chapter I.

General provisions

  1. This Privacy Policy sets out the rules for the processing of personal data of current and potential customers of the Store, people visiting the purequeen.pl website (“Users”) and the rights of Users related to it, it contains information about the Personal Data Administrator, as well as the use of cookies.
  2. Users’ personal data is protected by PQ Group Sp. z o.o. in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection) (Official Journal EU.L.2016.119.1), Corrections to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on free movement of such data and the repeal of Directive 95/46 / EC (general regulation on data protection) (Journal of Laws UE.L.119 of 4.5.2016) and the Act of May 10, 2018 on the protection of personal data (Journal of Laws No. U. of 2018, item 1000, as amended).
  3. This Privacy Policy is supplemented by the regulations of websites managed on behalf of PQ Group Sp. z o.o. and information received by the User during the implementation of deliveries and services, subscriptions (newsletter), contests, promotional campaigns, attached to contact forms, etc. The legal basis for the processing of Users’ personal data, all rights of persons whose personal data relates, as well as the rules for processing such data, remains the Regulation, Corrigendum to the Regulation and the Act, indicated in sec. 2.

Chapter II

Basic concepts

  1. Personal data administrator – PQ Group Sp. z o.o. with headquarters in Żukówka, at ul. Łąki 135, 05-870 Żukówka, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court in Warsaw, 14th Commercial Division of the National Court Register, under KRS number: 0000891225, NIP: 1182221953, REGON: 388549998, with a share capital of PLN 5,000
  2. GDPR – Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (Journal of Laws No. EU.L.2016.119.1) and the correction to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95 / 46 / EC (general regulation on data protection) (Journal of Laws UE.L.119 of 4.5.2016).
  3. Newsletter – an electronic form of a newsletter (magazine) sent by e-mail to subscribers, which includes, inter alia, information about the Store’s offer, promotions and competitions organized by the Administrator.
  4. Act – the Act of May 10, 2018 on the protection of personal data (Journal of Laws of 2018, item 1000, as amended).

Chapter III

Purpose of processing personal data

  1. Performing a contract to which the User is a party or taking action at the request of the User, before concluding the contract, including:
  1. registering and creating an individual account ahis account,
  2. conclusion of the contract, its performance, making the necessary settlements, exercising the right to withdraw from the contract,

– which is the fulfillment of the condition of lawfulness of data processing, as specified in art. 6 sec. 1 lit. b GDPR, as necessary to perform the contract
.

  1. Fulfillment of obligations under the law, in connection with the performance of the contract with the User, which is the fulfillment of the condition of compliance with the law of data processing, as specified in art. 6 sec. 1 lit. c GDPR.
  2. Establishing, pursuing and enforcing claims arising from a contract to which the User is a party, which is the fulfillment of the condition of lawfulness of data processing, as specified in art. 6 sec. 1 lit. f GDPR, as necessary for the purposes of the legitimate interests pursued by the Administrator.
  3. User satisfaction research and marketing promoting the Administrator and its products and services, including sending the newsletter, which is the fulfillment of the condition of compliance with the law of data processing, as specified in art. 6 sec. 1 lit. f GDPR, as necessary for the purposes of the legitimate interests pursued by the Administrator.

Chapter IV

Consent to the processing of personal data

  1. Providing personal data by the User means a voluntary, specific, conscious and unambiguous demonstration of will, allowing the processing of personal data concerning him, to the extent necessary for the performance of the contract or service by the Administrator.
  2. Lack of consent to the processing of personal data for marketing or satisfaction survey purposes does not affect the performance of the contract or service by the Administrator.
  3. The Administrator processes the following personal data of the User: name and surname, contact telephone number, address for correspondence and delivery of the product or service, e-mail address, as well as other personal data, if necessary and legally justified.
  4. Providing personal data of a natural person other than the User in the order form, as the recipient of the products or services ordered by the User, constitutes the User’s declaration that he has the consent of that natural person, for the processing of his personal data by the Administrator, in order to deliver products or services to the User.

Chapter V

Recipients of personal data

  1. The Administrator may transfer the User’s personal data to other entities, if it is necessary for the purposes indicated in Chapter III of this Privacy Policy, including:
  1. in the case of payments made by bank transfer, electronic transfer or other non-cash payments – entities carrying out such financial operations,
  2. to the extent necessary for the delivery of a product or service – entities providing such services,
  3. entities supporting the Administrator in ICT, accounting, legal and other similar processes necessary for the proper delivery of the product or service to the User, as well as to fulfill the legal obligations incumbent on the Administrator.
  1. The administrator transfers personal data, indicated in point 16, to entities authorized to receive personal data on the basis of legal provisions, decisions of a public administration authority or a court judgment.

Chapter VI

Period of personal data storage

  1. The Administrator may store the User’s personal data until the expiry of the period of limitation of any civil law claims, but no longer than 6 years.
  2. The Administrator stores the User’s personal data for the period resulting from the provisions of tax law or other normative acts, specifying the limitation periods for public-law obligations or required by law.
  3. If the basis for the processing of personal data is the User’s consent, the Administrator processes his personal data until the consent is withdrawn. However, the Administrator may process the User’s personal data also after the consent is withdrawn, until the expiry of the limitation periods for claims that may be raised against him, specified in the provisions of law.

Chapter VII

Cookies

  1. A cookie file is a short text sent to the web browser by the website that the User is visiting at the moment. It allows this website to remember information about browser settings, thanks to which the next visit of the User on this website is more effective, facilitating logging into the Administrator’s services.
  2. The administrator may process the data contained in cookies for the purpose of:
  1. adjusting the functionality provided by the Administrator to the User’s expectations, including advertising content,
  2. keeping statistics without identifying a person (anonymous),
  3. filling in order forms,
  4. identification of the logged in User,
  5. placement, in the so-called the basket, information about ordered products, services, payments or delivery.
  1. At any time, the User may change the web browser settings regarding cookies in such a way as to block the automatic handling of these files or inform about their every placement in the end device.
  2. The administrator may use cookies to present to the User the so-called banner advertising, i.e. advertising in the form of graphics, after clicking on which, the User will be transferred to the Administrator’s website or landing page.
  3. Restricting the use of cookies may affect some functionalities and hinder the User’s access to the products and services offered by the Administrator.

Chapter VIII

Profiling

  1. As part of the processing of the User’s personal data, the Administrator may perform profiling:
  1. on the basis of the User’s consent – in order to select offers of products or services or advertisements offered by the Administrator, in terms of the User’s needs and the profile assigned on this basis,
  2. without the User’s consent – based on the Controller’s legitimate interest in the processing of cookies, in order to adapt the content of marketing messages placed on the Controller’s websites and on other websites visited by the User, to the User’s preferences and interests, based on data such as: visits to websites and clicks as part of individual website functionalities, login and registration dates, data on the use of individual Administrator’s services.

Chapter IX

User rights

  1. The right to withdraw consent to the processing of personal data (Article 7 of the GDPR).
  2. The right to access your personal data and receive a copy of it (Article 15 of the GDPR).
  3. The right to rectify (correct) your personal data (Article 16 of the GDPR).
  4. The right to delete personal data in a situation where data processing does not take place in order to fulfill the obligation resulting from the law (Article 17 of the GDPR).
  5. The right to limit the processing of personal data (Article 18 of the GDPR).
  6. The right to transfer personal data (Article 20 of the GDPR).
  7. The right to object to the processing of personal data (Article 21 of the GDPR).
  8. The right to lodge a complaint with the President of the Personal Data Protection Office, to the following address: Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

Final Provisions

  1. In matters not covered by the Regulations and the Privacy Policy, the provisions of Polish law shall apply.
  2. The Administrator, upon request, will provide the User with one copy of his personal data subject to processing. For all subsequent copies, it may charge a fee commensurate with the incurred administrative costs. If the user requests a copy by electronic means and unless otherwise indicated, the copy will also be provided to him in a commonly used electronic form.
  3. The administrator may make changes to the Privacy Policy at any time. The user with a registered account will be asked to confirm that he / she has read the Privacy Policy in its changed form, before placing the first order, made after the Administrator has changed the content of the Privacy Policy.
  4. In matters of protection of natural persons, in connection with the processing of personal data by the Administrator, you can contact the Data Protection Officer at kontakt@purequeen.pl or at the Administrator’s office.