Cookie Policy

PRIVACY POLICY

I. PRIVACY POLICY. COOKIE FILES (COOKIES)

1. The Store does not automatically collect any information, except for the information contained in cookies.

2. Cookies (so-called "ciasteczka") are IT data, in particular text files, which are stored on the Store User's end device and are intended for using the Store's websites. Cookies usually contain the name of the website they come from, the storage time on the end device, and a unique number.

3. The entity placing cookies on the Store User's end device and obtaining access to them is the Store operator.

4. Cookies are used for: adjusting the content of the Store's websites to the User's preferences and optimizing the use of websites; in particular, these files allow for the recognition of the Store User's device and the appropriate display of the website, tailored to their individual needs; creating statistics that help understand how Store Users use the websites, which allows for the improvement of their structure and content.

5. Within the Store, two basic types of cookies are used: "session" (session cookies) and "persistent" (persistent cookies). "Session" cookies are temporary files stored on the User's end device until they leave the website or turn off the software (web browser). "Persistent" cookies are stored on the User's end device for the time specified in the cookie parameters or until they are deleted by the User.

6. The following types of cookies are used within the Store:

   • "Necessary" cookies, enabling the use of services available within the Store, e.g., authentication cookies used for services requiring authentication within the Store; cookies used to ensure security, for example, used to detect fraud in the field of authentication within the Store;

      

      

   • "Performance" cookies, enabling the collection of information on how the Store's websites are used;

      

      

   • "Functional" cookies, enabling "remembering" the settings selected by the User and personalizing the User interface, e.g., in terms of the selected language or region the User comes from, font size, website appearance, etc.;

      

      

   • "Advertising" cookies, enabling the provision of advertising content more tailored to the User's interests.

7. In many cases, the software used to browse websites (web browser) by default allows the storage of cookies on the User's end device. Store Users may change their cookie settings at any time. These settings can be changed in particular to block the automatic handling of cookies in the web browser settings or to inform about each instance of them being placed on the Store User's device. Detailed information about the possibilities and ways of handling cookies is available in the software (web browser) settings.

8. The Store operator informs that restrictions on the use of cookies may affect some of the functionalities available on the Store's websites.

    

    

9. Cookies placed on the Store User's end device may also be used by advertisers and partners cooperating with the Store operator.

    

    

10. More information about cookies is available at www.wszystkoociasteczkach.pl or in the "Help" section of the web browser menu.

II. PERSONAL DATA

1. The administrator of personal data is:

   Crafdeco sp. z o.o.

   Nowy Świat 1

   33-130 Radłów

   NIP: 8733298040

   REGON: 529538939

2. You can contact the Administrator by phone, via e-mail sent to [email protected], or by mail at the address: Nowy Świat 1, 33-130 Radłów.

3. In connection with the User's use of the Store, the following data may be collected and processed: name (names) and surname, login (nick), e-mail address, residence address, delivery address if different from the residence address, NIP number for the purpose of obtaining the proper accounting document, and payment data.

4. Personal data will be processed by the Administrator based on and for the purpose of:

   a. concluding and implementing the sales contract for the ordered goods, including the consideration of claims related to complaints (legal basis - Art. 6(1)(b) of the GDPR),

   b. delivering the goods to the Customer for which the Customer has placed an order (legal basis - Art. 6(1)(f) of the GDPR),

   c. issuing a document confirming the transaction of the sale of goods (legal basis - Art. 6(1)(c) of the GDPR),

   d. recording the transaction in the Store's computer accounting system for the period required by law and storing personal data in the computer accounting system to ensure the history of commercial transactions made by the Store (legal basis - Art. 6(1)(b) of the GDPR),

   e. adapting, measuring, and improving the Store's services (legal basis - Art. 6(1)(f) of the GDPR).

5. With additional consent granted by the Customer, the collected personal data may also be used for promotional and marketing purposes, including, in particular, presenting the Store's commercial offer and other marketing information related to the Store (legal basis - Art. 6(1)(f) of the GDPR).

6. In the case of subscribing to the newsletter and consenting to receive it during the registration or ordering process (consenting to receive commercial information by electronic means) - (legal basis - Art. 6(1)(a) of the GDPR), it is only necessary to provide an e-mail address to which commercial information from the Administrator will be sent. The Customer may unsubscribe from receiving such information at any time by logging into their account in the Store or clicking the unsubscribe link in the footer of each newsletter.

7. Personal data is transferred, based on separate data entrustment agreements, to the extent necessary to entities providing and supporting the Store's online service system. Furthermore, the data provided during the ordering process is also processed by the following entities in the specified scope: name and surname, address, telephone, and e-mail indicated as the delivery address are transferred to postal operators and courier companies in the form of a label/waybill which is also an order for the delivery of the shipment (legal basis - Art. 6(1)(b) of the GDPR). Depending on the selected type of shipment, data is transferred to:

   a. DPD courier company

   b. inPost courier company and InPost Parcel Lockers (Paczkomaty)

   c. Poczta Polska (Polish Post)

8. Personal data is transferred, based on separate data entrustment agreements, to the extent necessary to payment operators involved in the sales transaction.

9. The recipient of personal data will be external entities processing data on behalf of the Administrator based on entrustment agreements (e.g., hosting provider, accounting firm, auditing firm, law firm) - legal basis - Art. 6(1)(f) of the GDPR.

10. Personal data will not be transferred to a third country or an international organization.

11. Collected personal data will be stored for the period of performance of services provided by the Administrator and for the period resulting from generally applicable law applicable to the services provided and administrative and tax obligations.

12. The Customer's personal data will not be the basis for automated decision-making or profiling.

13. In connection with the processing of personal data by the Administrator, the Customer has the following rights:

    a. the right to information on what personal data concerning the Customer is processed by the Administrator and to receive a copy of this data,

    b. the right to request the rectification of incorrect or outdated data,

    c. the right to request the deletion of data,

    d. the right to transfer data to another administrator,

    e. the right to object.

14. The Customer has the right to lodge a complaint with the President of the Office for Personal Data Protection when they consider that the processing of personal data violates generally applicable law.

15. The Administrator informs that the Customer is not obliged to provide their personal data; however, refusal to provide them will prevent the proper performance of the services specified in the Regulations and benefits resulting from the contract concluded between the Store and the Customer.

16. Collected data is carefully protected in accordance with applicable regulations. The Administrator makes every effort to provide the stored data with an appropriate level of security.