PRIVACY POLICY

Good morning!

If you've come here, it's a reliable sign that you appreciate your privacy. We understand this perfectly, which is why we have prepared for you this document, where you will find rules for the processing of personal data and the use of cookies and other tracking technologies in connection with the usage of the online store https://papusia.com

Formal information to begin with – the administrator of the store is Avar Marzena Rokosz Grzegorz Mieczkowski Spółka Cywilna, ul. Kościelna 5a/1, 55-080 Smolec, VAT ID 8961588553

If you have any doubts regarding the privacy policy, you can contact us at any time by sending a message to info@papusia.com

Abbreviated Version – Key information

We care about your privacy, but also about your time. That's why we have prepared for you a shortened version of the most important privacy policies.

·         By creating an account in our online store, editing your profile, placing orders, contacting us, subscribing to the newsletter and providing us with your personal data, we guarantee that your data will remain confidential, safe and not for disclosing to third parties without your explicit consent.

·         We entrust the processing of personal data only to verified and trusted entities providing services related to the processing of personal data

·         We use Google Analytics analytical tools that collect information about your page visits, such as the subpages you have viewed, the time you spent on the page, or the transitions between the individual subpages. For this purpose, Google LLC cookies for the Google Analytics service are used. As part of the mechanism for managing cookie settings, you have the option of deciding whether we will also be able to use marketing functions as part of the Google Analytics service.

·         We use marketing tools such as Facebook Pixel to target you. This involves the use of Facebook cookies. As part of cookie settings, you can decide whether you consent to our use of Facebook Pixel in your case or not.

·         We use Google AdWords remarketing tools. This involves the use of Google LLC cookies for the Google AdWords service. As part of the mechanism for managing cookie settings, you have the option of deciding whether we will be able to use Google AdWords in your case or not.

·         We belong to the Google AdSense advertising network. This involves the use of Google LLC cookies for the Google AdSense service. As part of the mechanism for managing cookie settings, you have the option of deciding whether we will be able to use personalized Google AdSense ads in your case.

·         We provide the opportunity to use social features such as sharing content on social networking sites and subscribing to a social profile. The use of these functions is associated with the use of cookies of social network administrators such as Facebook, Instagram.

·         We use cookies to make the store more comfortable, and store content tailored to your interests, needs and expectations.

If the above information is not sufficient for you, you will find further details below.

Personal data

The administrator of your personal data within the meaning of the personal data protection regulations is Avar Marzena Rokosz Grzegorz Mieczkowski Spółka Cywilna, ul. Kościelna 5a/1, 55-080 Smolec VAT ID 8961588553

The purposes, legal bases and period of processing of personal data are indicated separately in relation to each purpose of data processing (see the provisions below containing a detailed description of the different purposes of data processing).

Permissions. The GDPR grants you the following potential rights related to the processing of your personal data:

1) the right to access personal data,

2) the right to rectify personal data,

3) the right to delete personal data,

4) the right to limit the processing of personal data,

5) the right to object to the processing of personal data,

6) the right to transfer data,

7) the right to lodge a complaint with a supervisory authority,

8) the right to withdraw consent to the processing of personal data, if you have given such consent.

The rules related to the implementation of the indicated rights are described in detail in art. 16 - 21 GDPR. We encourage you to read these regulations. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and you will not be entitled to all the processing of your personal data. For your convenience, we have made an effort to indicate your rights as part of the description of individual personal data processing operations.

 

We emphasize that you always have one of the rights indicated above - if you believe that during the processing of your personal data we have violated the provisions on the protection of personal data, you have the opportunity to lodge a complaint to the supervisory body (the President of the Office for Personal Data Protection).

You can also always ask us to provide you with information about what data we have about you and for what purposes we process it. All you have to do is send an e-mail to info@papusia.com. However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. The e-mail address provided above can also be used if you have any questions related to the processing of your personal data.

We guarantee the confidentiality of any personal data provided to us. We ensure that all security and personal data protection measures required by the data protection regulations are taken. Personal data are collected with due diligence and are adequately protected from access by unauthorized persons. Personal data are processed exclusively within the European Union.

We entrust the processing of personal data to the following entities:

1.       LH.pl Sp. z o.o. ul. Pamiątkowa 2/56 61-512 Poznań NIP: 7831711517– to store data on the server,

2.       UAB “MailerLite”, a Lithuanian company at Jono Basanaviciaus str. 15, LT-03108, Vilnius, Lithuania to use the mailing system,

3.       Profus Arkadiusz Podniesiński, ul. Kościuszki 182, 59-220 Legnica – To use the services of an external accounting office.

All entities entrusted with the processing of personal data guarantee the use of appropriate measures for the protection and security of personal data required by law.

User's account. When creating a user account, you must enter your email address and define an account password. Providing data is voluntary, but necessary to open an account. As part of editing your user profile, you can provide further information about yourself, i.e. your name, billing address and shipping address. Providing this data is completely voluntary. You can have an account without providing these further details. In this situation, when placing an order you will have to enter this data manually.

The data entered by you as part of the user account is processed solely for the purpose of maintaining the account and providing you the opportunity to use it. Providing data in the user's account is designed to help you place orders in the store by automatically submitting data to the order form.

The legal basis for the processing of your personal data as part of your user account is the implementation of the account maintenance contract, which you conclude on the basis of the store's regulations - art. 6 clause 1 lit. b GDPR.

The data collected in the user's account are processed as part of the Prestashop system and stored on a server provided by LH.pl Sp. z o.o. ul. Pamiątkowa 2/56 61-512 Poznań NIP: 7831711517

Your data will be processed as part of your account as long as you have a user account. After deleting the account, your data will be deleted from the database, except for data about orders placed.

You can access your personal data processed as part of the account at any time by logging into your user account. After logging in to your account, you can modify your data at any time, as well as delete it, except for data about orders placed. You can also decide to delete your account at any time.

In relation to the data collected in the user's account, you also have the right to transfer data referred to in art. 20 GDPR.

Placing an order. When placing an order, you must provide the data necessary to complete the order, i.e. name, surname, billing address, delivery address, e-mail address, telephone number. Providing data is voluntary, but necessary to place an order.

The data provided to us in connection with the order is processed for the purpose of fulfilling the order (art.6 par.1 lit.b RODO), issuing an invoice (art.6 par.1 lit.c RODO), including the invoice in our accounting documentation (art. 6 para. 1 letter c of the GDPR) and for archival and statistical purposes (art.6 para. 1 letter f of the GDPR).

The data collected in the user's account are processed as part of the Prestahop system and stored on a server provided by LH.pl Sp. z o.o. ul. Pamiątkowa 2/56 61-512 Poznań NIP: 7831711517

If you have a user account, your order will be visible within the account's order history.

Each order is documented with an invoice. The invoice is forwarded to the accounting office Profus Arkadiusz Podniesiński, ul. Kościuszki 182, 59-220 Legnica

Orders are also recorded in our internal database for archival and statistical purposes.

Data on orders will be processed for the time necessary to complete the order, and then until the expiry of the limitation period for claims under the contract. In addition, after this deadline, the data may still be processed by us for statistical purposes. Also remember that we have an obligation to store invoices with your personal data for a period of 5 years from the end of the tax year in which the tax obligation arose.

In the case of order data, you cannot rectify this data after the order has been processed. You also can not object to data processing and demand the deletion of data until the expiry of the limitation period for claims under the contract. Similarly, you cannot oppose the processing of data and demand the deletion of data contained in invoices. After the expiry of the limitation period for claims arising from the concluded contract, you may object to the processing of your data by us for statistical purposes, as well as demand the removal of your data from our database.

In relation to data on orders, you also have the right to transfer data referred to in art. 20 GDPR.

Invoice. If, in connection with the order, we issue you an invoice, we will process your personal data to this end to the extent necessary to issue the invoice. The legal basis for processing your data in this case is to fulfil the legal obligation to issue an invoice. In addition, all invoices issued are included in the accounting records, so your data will naturally be processed as part of this documentation for the period of time required by law.

Returns and complaints. If you withdraw from the contract concluded through the store or make a complaint about the purchased products, you provide us with the data contained in the withdrawal form or in the complaint form, and we process this data for the purpose of executing Withdrawal procedure or complaint procedure.

The legal basis for processing your data is in this case the fulfilment of our legal obligations in connection with the withdrawal procedure or the complaint procedure.

Withdrawal forms and complaint forms are archived by us. The withdrawal from the contract or the lodging of a complaint is also recorded in the shop system.

Newsletter. If you want to subscribe to the newsletter, you must provide us your email address via the newsletter subscription form.

The data provided to us during the subscription to the newsletter are used to send you the newsletter, and the legal basis for their processing is your consent (art.6 par.1 lit.a RODO) expressed when subscribing to the newsletter.

The data is processed as part of the Mailchimp mailing system and stored on a server provided by LH.pl Sp. z o.o.

The data will be processed for the duration of the newsletter, unless you unsubscribe from it earlier, which will delete your data from the database.

You can correct your data saved in the newsletter database at any time, as well as request their removal by unsubscribing from the newsletter. You also have the right to transfer data referred to in art. 20 GDPR.

Complaints and withdrawal from the contract. If you make a complaint or withdraw from the contract, you provide us with personal data contained in the content of the complaint or statement of withdrawal from the contract, which includes your name, address, telephone number, e-mail address, bank account number.

The data provided to us in connection with the submission of a complaint or withdrawal from the contract is used to implement the complaint procedure or the procedure for withdrawing from the contract (Article 6 paragraph 1 point c of the GDPR).

The data will be processed for the time necessary to complete the complaint or withdrawal procedure. Complaints and statements of withdrawal from the contract may also be archived for statistical purposes.

In the case of data contained in complaints and declarations of withdrawal from the contract, you are not able to rectify this data. You also can not object to data processing and demand the deletion of data until the expiry of the limitation period for claims under the contract. After the expiry of the limitation period for claims arising from the concluded contract, you may, however, object to the processing of your data by us for statistical purposes, as well as demand the removal of your data from our database.

E-mail contact. By contacting us via email, including sending an inquiry via the contact form, you naturally provide us with your email address as the sender's address. In addition, you can also include other personal data in the message.

In this case, your data is processed in order to contact you, and the basis for processing is art. 6 clause 1 lit. and GDPR, i.e. your consent resulting from initiating contact with us. The legal basis for post-contact processing is the legitimate purpose of archiving correspondence for internal purposes (Article 6 (1) (c) of the GDPR).

The content of correspondence may be archived and we are not able to clearly determine when it will be deleted. You have the right to request the history of correspondence with you (if it has been archived), as well as to request its removal, unless its archiving is justified due to our overriding interests, e.g. defense against potential claims on your part.

Cookies and other tracking technologies

Our store, like almost all other websites, uses cookies to provide you with the best experience of using the store.

Cookies are small text information stored on your terminal device (e.g. computer, tablet, smartphone) that can be read by my electronic system.

Cookies allow us to:

·         Ensure the proper functioning of the store you expect

·         Remember your login to your user account every visit to the store,

·         Remember your settings during and between shop visits,

·         Improve the speed and safety of your store use

·         Allow you to share content on social networks,

·         Allow you to play content from third-party services,

·         Improve the features available to you in the store

·         Use marketing tools,

·         Target personalized ads to you.

See below for more details.

Consent to Cookies. The first time you visit the website, you will see information about the use of cookies. By accepting and closing this information, you agree to the use of cookies in accordance with the provisions of this privacy policy. You can always withdraw your consent by deleting cookies and changing the settings of cookies in your browser. Please note, however, that disabling cookies may cause difficulties in using the site, as well as from many other websites that use cookies.

Own Cookies. Cookies can be divided into personal and third-party files. As for our own cookies, we use them for the proper operation of the store, and in particular for the following purposes:

·         Proper operation of the cart and the order process,

·         Determine whether you are logged in or not,

·         Remembering your Login

·         Acceptance of the terms and the marketing consent.

Third party Cookies. Our store, like most modern websites, uses features provided by third-party services such as Facebook and YouTube.

Using a widget that allows you to share content on social media sites, it connects to the acceptance of cookies of Facebook and other social media sites.

Third party Cookies are also used for remarketing and in the statistical activities referred to below.

Cookies used for statistical purposes. We use cookies to track store statistics, such as the number of visitors to the store, the type of operating system and Web browser used to browse the store, the time spent in the store, the visited shop subpages, etc. We use Google Analytics in this respect. The information collected in this respect is completely anonymous and does not allow your identification.

The Marketing. We use cookies to conduct remarketing activities that involve providing you with ads that encourage you to return to the site or take advantage of promotions, discounts, etc. We also use Facebook Pixel to target Facebook ads to you.

Additional tracking tools. Thestore'S engine is equipped with a plugin allowing you to observe you as a visitor to the store and save the history of recently visited items.

Server logs

Using the store involves submitting queries to the server where the store is stored. Each query addressed to the server is saved in the server logs.

Logs include m.in. Your IP address, server date and time, internet browser information and operating system you are using. Logs are saved and stored on the server.

Data stored in server logs are not associated with specific people using the site and are not used by us for the purpose of your identification.

Server logs are only supporting material for administering the site and their contents are not disclosed to anyone other than those authorized to administer the server.