Privacy policy

PRIVACY AND COOKIES POLICY

 

In fulfillment of the information obligation arising from Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Personal Data Administrator hereby informs:

 

  1. This Privacy Policy (hereinafter referred to as the "Policy") is addressed to Users and Customers using the website available at https://ekogram.pl (hereinafter referred to as the "Online Store") and specifies the type, scope, and purposes of data processing. The Policy is informative in nature and constitutes an integral part of the Online Store's Terms and Conditions. All terms used in the Policy with capital letters have the same meaning as assigned to them in the Online Store's terms and conditions, unless otherwise stated in this Policy.
  2. The administrator of personal data obtained from Users of the Online Store is the Seller, i.e., Mr. Michał Pelc conducting business under the name Michał Pelc ANAGRAM at ul. Wiarusa 3/3, 32-087 Zielonki, according to the entry in the Central Register and Information on Economic Activity of the Republic of Poland, NIP: 513-010-81-41, REGON: 121084300, contact phone number for online order service: +48 12 418 38 38, daily on Working Days from 7:00 AM to 3:00 PM (connection fee according to the operator's tariff used by the User); (hereinafter also referred to as the "Administrator").
  3. When placing an Order in the Online Store without Account registration, and/or registering an Account, and/or contacting the Administrator (by email, phone, or contact form), and/or using other services provided by the Administrator electronically (Account Password reminder, Product review, Product question, receiving email information about Products, recipes, videos, and marketing and commercial information, information about promotions in the Online Store) - the User provides the Administrator with their personal data (first and last name, address, email address, phone number, optionally company name, business address, NIP, IP address of the computer used by the User while using the Online Store).
  4. Purposes and activities of personal data processing:
    • Placing an Order without Account registration - providing data is voluntary but necessary for the execution of the Sales Agreement. Data provided during Order placement is used to fulfill the Sales Agreement concluded with the User, and the legal basis for their processing is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR"). The data will be processed by the Administrator for the period necessary to execute the Sales Agreement, however, the Administrator will continue to store the User's data for defense against potential claims related to possible withdrawal from the Sales Agreement, complaint handling, tax settlement purposes, which constitutes the Administrator's legitimate interest referred to in Article 6(1)(f) of GDPR.
    • Account registration - To avoid providing personal data with subsequent Orders, the User may register an Account. Providing data is voluntary but necessary for Account registration. Data provided during registration is used for Account maintenance and execution of Sales Agreements concluded by the Customer, and the legal basis for their processing is consent given by the User during Account registration (according to Article 6(1)(a) of GDPR). The data will be processed by the Administrator for the duration of Account maintenance unless the User earlier resigns from having it. Account resignation does not lead to data removal from the database. The Administrator will continue to store the User's data for defense against potential claims related to Account maintenance, in particular to demonstrate the User's consent for registration, which constitutes the Administrator's legitimate interest referred to in Article 6(1)(f) of GDPR.
    • User contact with the Administrator - When contacting via email, phone, or through the contact form available in the Contact section of the Online Store, the User provides the Administrator with their email address as the message sender address, their name and surname, contact phone number. Providing data is voluntary but necessary for the Administrator to establish contact with the User. The User's data is processed in this case for contact purposes based on activities requested and initiated by the User, and the legal basis for processing is Article 6(1)(b) of GDPR. The legal basis for data processing after contact completion is the legitimate purpose of correspondence archival for the needs of demonstrating its course in the future (Article 6(1)(f) of GDPR). Correspondence content may be archived, the Administrator cannot unequivocally determine when the correspondence will be deleted. The User has the right to demand presentation of correspondence history conducted with the Administrator (if it was archived), as well as demand its deletion, unless archiving is justified due to the Administrator's overriding interest, e.g., defense against potential claims from the User.
    • Using the Account Password reminder service - Providing data is voluntary but necessary for the execution of the electronic service agreement by the Administrator. Data provided by the User is used to remind the Account Password via email to the address provided by the User during Account registration, and the legal basis for their processing is the execution of the agreement concluded with the User, according to Article 6(1)(b) of GDPR. The data will be processed by the Administrator for the period necessary to execute the electronic service agreement. After agreement execution, the Administrator will continue to store the User's data for defense against potential claims regarding services provided electronically by the Administrator, complaint handling, which constitutes the Administrator's legitimate interest referred to in Article 6(1)(f) of GDPR.
    • Using the Product review service - When sending a Product review for Administrator's approval, the User provides their name and email address, which may contain the User's personal data. Providing data is voluntary but necessary for the execution of the electronic service agreement by the Administrator. Data provided by the User is used to place on the Product Page in the Online Store the User's subjective opinion about the Product along with a rating on a five-star scale, and the legal basis for their processing is the execution of the agreement concluded with the User, according to Article 6(1)(b) of GDPR. The data will be processed by the Administrator for the period necessary to execute the electronic service agreement, for the period of opinion placement on the Product Page. After agreement execution, the Administrator will continue to store the User's data for defense against potential claims regarding services provided electronically by the Administrator, complaint handling, which constitutes the Administrator's legitimate interest referred to in Article 6(1)(f) of GDPR.
    • Sending Product inquiry - When using the "Ask a question" form available on the Product Page, the User provides the Administrator with their name and email address, which may contain the User's personal data. Providing data is voluntary but necessary for the execution of the electronic service agreement by the Administrator. Data provided by the User is used to provide email response to the User's question about the Product, and the legal basis for their processing is the execution of the agreement concluded with the User, according to Article 6(1)(b) of GDPR. The data will be processed by the Administrator for the period necessary to execute the electronic service agreement. After agreement execution, the Administrator will continue to store the User's data for defense against potential claims regarding services provided electronically by the Administrator, complaint handling, which constitutes the Administrator's legitimate interest referred to in Article 6(1)(f) of GDPR.
    • Using the service of receiving information about Products, recipes, videos, marketing and commercial information, promotion information in the Online Store from the Administrator via email - A User who wants to receive information about Products, recipes, videos, marketing and commercial information, promotion information in the Online Store via email from the Administrator must check the appropriate checkbox with consent during Order placement or Account registration. Providing data is voluntary but necessary to receive messages via email. Data provided to the Administrator is used to send the User information ordered by them. The legal basis for data processing is consent given by the User, according to Article 6(1)(a) of GDPR. The data will be processed by the Administrator for the duration of the Administrator's email sending to the User unless the User earlier resigns from receiving it. Resignation from receiving emails does not lead to data removal from the database. The Administrator will continue to store the User's data in the mailing system for defense against potential claims related to sending information to the User via email, in particular to demonstrate the User's consent for receiving them, which constitutes the legitimate interest of the personal data administrator referred to in Article 6(1)(f) of GDPR.
  5. The Administrator informs that the User has, at any time, the right to data portability, right to access personal data content and the possibility to correct, rectify, object to data processing, and the consent for data processing can be withdrawn by the User at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The Administrator may refuse to delete personal data if there are premises resulting from legal provisions. The User also has the right to file a complaint regarding personal data processing to the President of the Personal Data Protection Office. The rights indicated in this point are not absolute and will not be available to the User in relation to all processing activities of their personal data. Users' data will not be subject to automated decision-making, including profiling. Data is not transferred outside the European Economic Area.
  6. The rules related to the implementation of the indicated User rights have been described in detail in Articles 15-21 of GDPR.
  7. The Administrator hereby also informs that it never transfers, sells, or lends collected personal data of Users to third parties other than those indicated in this Policy and the Online Store's terms and conditions, unless with explicit consent or at the User's request, or at the request of state authorities authorized by law in connection with ongoing proceedings (e.g., courts, law enforcement agencies, Trade Inspection).
  8. The Administrator processes personal data provided by the User in accordance with the scope of permission granted by the User and legal requirements, including GDPR provisions, in particular protects Users' personal data against unauthorized access, loss, or damage, guaranteeing also confidentiality of all personal data provided to it.
  9. The Online Store uses "cookies" files that serve to identify the browser when using the Online Store to know which page to display. Cookies do not contain any personal data. When entering the Online Store website, certain information may be placed on the User's computer, which may take the form of a "cookie" file. Detailed and most current information on this subject can be found directly on the manufacturer's website http://www.google.pl/intl/pl/policies/technologies/types/
  • Cookies" files are small files consisting of a string of letters and characters, saved on the computer by the internet during visiting a given Product Page presented in the Online Store. Cookie files are used in the Online Store solely to better adapt the website to individual User preferences. Moreover, "cookies" files may be used for the following purposes:
  1. ensuring proper operation and improving Online Store functionality - "cookies" files enable remembering information provided by the User, e.g., remembering Login, remembering shopping cart contents;
  2. improving performance and optimizing Online Store operation - "cookies" files enable reading information about how Users navigate the website, and thus help improve its operation;
  3. targeting informational and promotional content - "cookies" files aim to automatically adapt the Online Store content to User needs;
  4. for spam prevention purposes.
  • Information collected and generated by "cookies" files in the Online Store does not allow for User personalization and identification, and as a result of their use, no User personal data is stored.
  • Cookies" files used in the Online Store are safe and have no harmful effect on the User's computer. By using the Online Store, the User agrees to use "cookies" files in accordance with this Policy. The User can change the way of using "cookies" files through the browser at any time, including blocking or removing those that come from the Online Store. In most internet browsers, you can delete, erase "cookies" files from the computer's hard drive, block all sent "cookies" files or set a warning before saving such files on the disk. For this purpose, please refer to the operating instructions or help topics of your internet browser. The process of controlling and deleting "cookies" files may vary depending on the browser used. Limiting the use of "cookies" files may affect some functionalities available in the Online Store.
  • The Administrator uses statistical analysis of traffic on the website through Google Analytics (Google Inc. based in the USA). No User personal data is transferred to this service operator, only anonymized information. The service is based on the use of cookies in the User's end device. In terms of information about User preferences collected by the Google advertising network, the User can view and edit information resulting from "cookies" files using the tool: https://www.google.com/ads/preferences/ Information about how Google uses data from the Online Store is available at the link https://policies.google.com/technologies/partner-sites
  • The Online Store website may also contain links to other websites not administered by the Administrator (e.g., Facebook, Twitter, Pinterest, etc.), therefore it cannot be responsible either for the content of these sites or for the degree of privacy protection implemented by the administrators of these sites. The Administrator also informs that this Policy applies only to the Online Store and that after moving to other sites, it is recommended that the User familiarize themselves with the privacy policy appropriate for that site before providing their personal data there. By deciding to go to such sites and visit them, the User does so at their own risk.
  • The Administrator is entitled to make changes to this Policy for important reasons (e.g., change in law, change in Order placement rules in the Online Store). In case of changes, the User will be notified at least 14 days before the changes take effect - appropriate information about changes in the Policy will be placed in the Online Store, and a User with an Account or newsletter subscription will also receive information about the Policy change via email. In case of non-acceptance of the changed Policy, the User has the right to terminate the Policy, and thus refuse to continue leaving their personal data.
  • The User is asked to immediately notify the Administrator of any security violations related to the use of the Online Store found by them via email at: kontakt@ekogram.pl

 

Kraków, October 27, 2022