-
GENERAL PROVISIONS
- The administrator of personal data collected through the website https://dazer.store/ is DAZER SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, registered office address: Gen. Romualda Traugutta 143 / 1B, 50-419 Wrocław, Poland, mailing address: , registered in the business register under KRS number: 0001161360, tax ID (NIP): 8993019545, statistical number (REGON): 541176444, with share capital of 5,000 PLN, email address: [email protected] hereinafter referred to as the “Administrator”, who is also the Service Provider. Location of business activity: Gen. Romualda Traugutta 143 / 1B, 50-419 Wrocław, Poland, mailing address: Gen. Romualda Traugutta 143 / 1B, 50-419 Wrocław, Poland, NIP: 8993019545, REGON: 541176444, email address: [email protected], hereinafter called the “Administrator”.
- Personal data collected by the Administrator via the website is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), as well as the Polish Personal Data Protection Act of 10 May 2018.
-
TYPES OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION
- Purpose of Processing and Legal Basis. The Administrator processes personal data via the website https://dazer.store/ in the following cases:
- Types of Personal Data Processed. The Administrator processes the following categories of users’ personal data:
- First and last name,
- Address (residence),
- Email address,
- Phone number,
- Data Retention Period. Users’ personal data are stored by the Administrator:
- If the legal basis for processing data is contract performance, for as long as necessary to perform the contract and thereafter for the statute of limitations period. Unless specified otherwise by law, the limitation period is six years, and for claims regarding periodic payments and business-related claims – three years.
- If the legal basis for processing data is consent, for as long as the consent is valid and, after withdrawal, for the statute of limitations period of claims that the Administrator may assert or that may be asserted against them. Unless specified otherwise by law, the limitation periods are as above.
- While using the website, additional information may be collected, including: the IP address assigned to the user’s device or the external IP address of the Internet provider, domain name, browser type, access time, operating system type.
- Navigation data may also be collected, including information about links or references the user clicks or other activities on the website. The legal basis for this processing is the legitimate interest of the Administrator (Art. 6(1)(f) GDPR), consisting in facilitating the use of electronic services and improving their functionality.
- Providing personal data by the user is voluntary.
- Personal data may also be processed automatically through profiling, if the user consents under Art. 6(1)(a) GDPR. Profiling involves assigning a profile to a person for decision-making or analyzing/predicting preferences, behaviors, and attitudes.
- The Administrator takes particular care to protect the interests of data subjects and ensures that data collected are:
- processed lawfully,
- collected for specified, lawful purposes and not further processed incompatibly with those purposes,
- accurate and adequate relative to the purposes of processing, and stored in a form permitting identification only as long as necessary to achieve processing purposes.
-
DISCLOSURE OF PERSONAL DATA
- Users’ personal data may be disclosed to service providers used by the Administrator for running the website. Depending on contractual arrangements and circumstances, such providers either process data under the Administrator’s instructions (data processors) or determine purposes and means of processing themselves (data controllers).
- Users’ personal data are stored exclusively within the European Economic Area (EEA).
-
RIGHT TO CONTROL, ACCESS, AND CORRECT PERSONAL DATA
- The data subject has the right to access their personal data and the right to rectify, delete, restrict processing, data portability, object, and withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Legal basis for user requests:
- Access to data – Art. 15 GDPR
- Rectification – Art. 16 GDPR
- Erasure (“right to be forgotten”) – Art. 17 GDPR
- Restriction of processing – Art. 18 GDPR
- Data portability – Art. 20 GDPR
- Objection – Art. 21 GDPR
- Withdrawal of consent – Art. 7(3) GDPR
- To exercise these rights, send a relevant email to: [email protected].
- The Administrator shall comply with or refuse the request without undue delay, no later than within one month of receipt. If due to complexity or number of requests compliance within one month is not possible, the Administrator will fulfill the request within two additional months and inform the user within one month of receiving the request about the extension and reasons.
- If the processing of personal data violates GDPR provisions, the data subject has the right to lodge a complaint with the President of the Personal Data Protection Office.
-
COOKIES
- The Administrator’s website uses “cookies”.
- The use of cookies is necessary for proper service delivery on the website. Cookies contain information necessary for website functioning and allow generating general visit statistics.
- The following types of cookies are used: session and persistent
- Session cookies are temporary files stored on the user’s device until logout (leaving the site).
- Persistent cookies remain on the user’s device for a set time or until deleted.
- The Administrator uses own cookies to better understand user interactions with the website, collecting data on usage, referral sources, visit counts, and duration. These do not register personal data but are used for statistical purposes.
- The user has the right to manage cookie access via browser settings. Detailed information on managing cookies is available in the browser’s help or settings.
-
FINAL PROVISIONS
- The Administrator applies technical and organizational measures to protect processed personal data appropriately against risks, especially to prevent unauthorized disclosure, access, unlawful processing, alteration, loss, damage, or destruction.
- The Administrator provides technical safeguards against unauthorized acquisition or modification of personal data transmitted electronically.
- Matters not regulated by this Privacy Policy are governed by GDPR and other applicable Polish laws.