Privacy policy

Dear Customer!

We care about your privacy and want you to feel comfortable while using our services. Therefore, below we present you with the most important information about the rules of processing your personal data. This information has been prepared in accordance with the General Data Protection Regulation (GDPR).

PERSONAL DATA CONTROLLER ("Controller")

The controller of your personal data is: Kraina Tuptusia Aleksandra Macura, ul. Kozia 3/27, 43-300 Bielsko-Biała, NIP: 5472213295

PERSONAL DATA AND PRIVACY

If you intend to enter into an agreement with us, we may ask you to provide us with your personal data.

Purpose of processing:

• concluding and executing a sales contract (email, first name, last name, phone number, shipping address, data for VAT invoice or receipt),
• registration on the website (email, and optionally first name, last name, phone number, shipping address, data for VAT invoice or receipt),
• sending a newsletter with commercial information (email),
• direct marketing of offered services other than the newsletter,
• fulfilling claims related to concluded contracts,
• fulfilling legal obligations.

We may also process data to examine your satisfaction with our services.

Legal basis for data processing:

• performance of a sales contract / provision of services or actions taken at your request before the contract is concluded (Art. 6(1)(b) GDPR),
• creation of an account on the website of the controller (Art. 6(1)(b) GDPR),
• fulfillment of a legal obligation, e.g., related to accounting (Art. 6(1)(c) GDPR),
• your consent (e.g., marketing consent) (Art. 6(1)(a) GDPR),
• our legitimate interest, consisting of processing data to establish, pursue, or defend potential claims (Art. 6(1)(f) GDPR),
• our legitimate interest, consisting of processing data for direct marketing purposes (Art. 6(1)(f) GDPR),
• our legitimate interest, consisting of processing data for analytical purposes (e.g., satisfaction surveys), conducting direct marketing, and processing data for statistical purposes (Art. 6(1)(f) GDPR).

Providing data:

• Is voluntary, but in some cases necessary to conclude a contract due to the legal obligation of the data subject

Consequences of not providing data:

Depending on the purpose for which the data is provided:

• inability to make a purchase or register on the website,
• inability to receive information about promotions or special offers offered by the Controller.

Possibility of withdrawing consent:

• at any time

Processing of data until the withdrawal of consent remains lawful.

DATA RETENTION PERIOD

We will process your data only for the period for which we have a legal basis, i.e., until:

• the legal obligation requiring us to process your data ceases,
• the possibility of pursuing claims related to the concluded contract by the parties ceases, or
• you withdraw your consent to the data processing, if it was its basis, or
• your objection to the processing of your personal data is accepted - if your data was processed on the basis of the legitimate interest of the controller or for direct marketing purposes.

- depending on what applies in a particular case and what happens last.

DATA SECURITY

When processing your personal data, we use organizational and technical measures in accordance with applicable law, including encryption of the connection using an SSL certificate.

YOUR RIGHTS

You have the right to request:

• access to your personal data,
• correction of your personal data,
• erasure of your personal data,
• restriction of processing of your personal data,
• data portability to another controller.

You also have the right to object to the processing of your personal data:

• for reasons related to your particular situation – to the processing of your personal data based on Art. 6(1)(f) GDPR (i.e., the legitimate interests pursued by the controller),
• if personal data are processed for direct marketing purposes, to the extent that the processing is related to such direct marketing.

Contact us if you wish to exercise your rights regarding personal data.

If you believe that your data is processed unlawfully, you have the right to lodge a complaint with the supervisory authority.

EXTERNAL SERVICES / DATA RECIPIENTS

We use the services of external entities to which your data may be transferred. Below is a list of categories of recipients of your data:

• persons cooperating with us on the basis of civil law contracts, supporting our current operations,
• software provider necessary for running the online store,
• entity providing a mailing system,
• entity carrying out the delivery of goods,
• payment service providers, banks, financial institutions,
• provider of email services,
• public authorities - to the extent that the Controller is obliged to provide data.

CONTACT WITH THE CONTROLLER

Would you like to exercise your rights regarding personal data?
Or maybe you just want to ask something related to the processing of your data by us? Write to the email address: biuro@krainatuptusia.pl