Cookies policy

PRIVACY POLICY & COOKIES POLICY

from 25 May 2018

Personal Data Administrator:

Sylwia Ciekot, running a business by name: P.P.H. ”hebe” SYLWIA CIEKOT with company based in Częstochowa, Aleja Niepodległości 34 lok. 9,

42-216 Częstochowa, NIP:9491889162;

 

§ 1

General Provisions

1. Personal Data Administrator:

Sylwia Ciekot, running a business by name: P.P.H. ”hebe” SYLWIA CIEKOT with company based in Częstochowa, Aleja Niepodległości 34 lok. 9,

42-216 Częstochowa, NIP:9491889162;

2. The protection of personal data is carried out in accordance with the requirements of generally applicable law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter: GDPR), and their storage takes place on secured servers.

3. For the interpretation of terms contained in this document, a glossary of the Store's Regulations is used, available on the website www.nife.pl, or as described in this Privacy Policy (if it results directly from the description).

4. We respect the right to privacy and care for data security. For this purpose, among others, secure communication encryption protocol (SSL).

5. Personal data provided in the form on the website of the Personal Data Administrator www.nife.pl are treated as confidential and are not visible to unauthorized persons.

 

§ 2

The scope and purpose of personal data processing

1. Seller –Sylwia Ciekot running a business by name: P.P.H. ”hebe” SYLWIA CIEKOT with company based in Częstochowa, Aleja Niepodległości 34 lok. 9, 42-216 Częstochowa, NIP:9491889162 is the Administrator of the Customer's Personal Data. This means that if the Customer has an Account (Customer Account) on our website www.nife.pl, we process such customer data as: name and surname, e-mail address, telephone number, home address, and delivery address.

2. Seller –Sylwia Ciekot running a business by name: P.P.H. ”hebe” SYLWIA CIEKOT with company based in Częstochowa, Aleja Niepodległości 34 lok. 9, 42-216 Częstochowa, NIP:9491889162, is also the Administrator of Personal Data of people subscribed to the newsletter and people who have agreed to receive marketing / commercial information and people who have consented to profiling.

3. Personal data is processed:

a) in accordance with the provisions on the protection of personal data,

b) in accordance with the implemented Privacy Policy,

c) to the extent and for the purpose necessary to establish, shape the content of the contract, change or terminate it and its proper implementation (legal basis the provision of art.6 par.1 lit.b) GDPR),

d) to the extent and for the purpose necessary to fulfill the legal obligations incumbent on the Personal Data Administrator (legal basis the provision of Article 6 paragraph 1 point c) of the GDPR),

e) to the extent and for the purpose necessary for the purposes of the legitimate interests pursued by the Personal Data Administrator and the processing does not violate the interests or fundamental rights and freedoms of the Customer (legal basis the provision of Article 6 paragraph 1 point f) of the GDPR),

f) to the extent and for the purpose consistent with the consent expressed by the Customer, if he subscribed to the newsletter (legal basis the provision of art.6 par.1 lit.a) RODO),

g) to the extent and for the purpose consistent with the consent expressed by the Customer, if he has expressed a desire to receive marketing / commercial information (legal basis the provision of art.6 par.1 lit.a) RODO),

h) to the extent and for the purpose consistent with the consent expressed by the Customer, if he has expressed a desire to profil (the legal basis of Article 6 paragraph 1 point a) of the GDPR).

4. Personal data is stored for the period necessary to achieve the purposes described above, wherein:

a) in the event of performance of a concluded contract - for a period until the end of its implementation, and after that time - for the period and to the extent required by law or to secure any claims, and in the event of the Customer's consent to data processing after the contract has expired - to the time of withdrawal of this consent,

b) in the scope of fulfilling legal obligations incumbent on the Personal Data Administrator in connection with his business activity and performance of concluded contracts - for the period until these obligations are fulfilled by the Personal Data Administrator,

c) in the scope of internal administrative purposes of the Personal Data Administrator - for a period of time until the legitimate interests of the Personal Data Administrator constituting the basis for processing are fulfilled or until the Customer objects,

d) in the scope of sending the newsletter, receiving marketing / commercial information and profiling - for a period until the Customer withdraws his consent for such processing.


§ 3
Customer rights

1. Any person whose personal data relates to has the right to:

a) access to data pursuant to art. 15 GDPR - at any time, the Data Subject has the right to request the Personal Data Administrator to provide information whether personal data concerning him are being processed, and if so, he has the right to access these

data or obtaining a copy thereof. The Personal Data Administrator is obliged to provide relevant information without excessive fees and without undue delay. The deadline for the Administrator to complete the request is one month, but no longer than three months - in complex cases

(due to the complexity of the request or the number of requests), counting from the date of receipt of the request;

b) rectification of data based on art. 16 GDPR - at any time, the Data Subject has the right to request the Personal Data Administrator to rectify his personal data if he finds any irregularities in his personal data collected by that Administrator;

c) restrictions on data processing pursuant to art. 18 GDPR - at any time, in the situation described in the provisions on the protection of personal data, the Data Subject may request the Personal Data Administrator to limit data processing. If such a request is justified, these data will be processed by the Personal Data Administrator and undertaking any operations other than storage will require that person's separate consent, unless the processing is necessary to protect the claims or rights of another person or due to important reasons public interest;

d) the right to object pursuant to art. 21 GDPR - in the case of valid, legally justified grounds, the Data Subject may lodge an objection to the Personal Data Administrator against the processing, citing the supremacy of his interests, rights and freedoms over the purpose of data processing;

e) the right to be forgotten pursuant to art. 17 GDPR - at any time, in the situation described in the provisions on the protection of personal data, the Data Subject may request the Personal Data Administrator to delete his personal data immediately, and the Personal Data Administrator is obliged to delete this data without undue delay;

f) the right to data portability pursuant to art. 20 GDPR - at any time, the Data Subject has the right to request the Personal Data Administrator to receive in the structured, commonly used machine-readable format his personal data processed in an automated manner based on his consent or in connection with performance of the contract;

g) the right to lodge a complaint to the supervisory body art. 77 GDPR - if the Data Subject recognizes that the processing of personal data by the Personal Data Administrator violates the provisions of the GDPR, the Data Subject shall have the right to lodge a complaint with the supervisory authority;

h) the right to withdraw consent - in the case in which data processing takes place on the basis of art. 6 clause 1 lit. a) GDPR, i.e. consent to the processing of personal data, the Data Subject has the right to request the Personal Data Administrator at any time and withdraw his consent to the processing of his personal data. Withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal.

2. Contact with the person supervising the processing of personal data at the Personal Data Administrator is possible:

a) by e-mail: sklep@nife.pl,
b) by telephone number: +48 535 123 772 
c) by traditional post mail to seat of Seller: P.P.H. ”hebe” SYLWIA CIEKOT Aleja Niepodległości 34 lok. 9, 42-216 Częstochowa.

3.We reserve the right to process the personal data of the Ordering Party after termination of the contract or withdrawal of consent only to the extent of the need to assert any claims before a court or if national or EU regulations or international law require us to retain data.

4. The Seller has the right to disclose the Customer's personal data and other data that he processes to entities authorized under applicable law (e.g. law enforcement authorities).

5. The Seller does not provide personal data outside the European Economic Area.

6. We have implemented data encryption and we have introduced access control, thanks why we minimize the effects of a possible breach of personal data security.

7. Personal data is processed only by persons authorized by us or the processor, with whom we closely cooperate and with whom we are bound by a contract for entrusting the processing of personal data.


§ 4
Cookies files

1. The website www.nife.pl uses cookies. These are small text files sent by the web server and stored by the browser computer software. When the browser reconnects with the site, the site recognizes the type of device the client connects to. Parameters allow reading the information contained therein only to the server that created them. Cookies therefore facilitate the use of previously visited websites.

2. The information collected relates to the IP address, type of browser used, language, type of operating system, Internet service provider, time and date information, location and information sent to the website via the contact form.

3. The collected data are used to monitor and check how customers use our websites to improve the functioning of the website, providing more efficient and trouble-free navigation. We monitor customer information using the Google Analitics tool, which records customer behavior on the site.

4. Cookies identify the customer, which allows him to tailor the content of the website he uses to his needs. By remembering his preferences, he allows to tailor ads targeted to him. We use cookies to guarantee the highest standard of convenience for our website, and the collected data is used only inside our company to optimize operations.

5. We use the following cookies on our website:

a) "necessary" cookies, enabling the use of services available on the website, e.g. authentication cookies used for services requiring authentication as part of the website,

b) cookies used to ensure security, e.g. used to detect fraud in the field of authentication on the website,

c) "performance" cookies, enabling the collection of information on the use of website pages,

d) "functional" cookies, enabling "remembering" the settings selected by the Customer and personalizing the Customer interface, e.g. in terms of the language or region of the Customer's origin, font size, website appearance, etc.,

e) "advertising" cookies, enabling delivery of advertising content more tailored to the client's interests.

6. The customer can at any time disable or restore the option of collecting cookies by changing the settings in the web browser. Instructions on how to manage cookies are available in individual web browsers, such as: Internet Explorer, Mozilla Firefox, Chrome, Opera, Safari, etc.