Privacy Policy

YEDA Kupcy Bławatni

1. Privacy Policy

The privacy policy is a set of rules aimed at informing customers about all aspects of the process of obtaining, processing and protecting their personal data. We also explain the principles and purposes of obtaining such data. These processes are based on applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of the Directive 95/46 / EC and the Act of May 10, 2018 on the protection of personal data.

2. Definitions

Administrator - YEDA Kupcy Bławatni Turlejski i Wychowałek Sp. j. [general partnership] with headquarters in Wrocław.

Personal data - all information about a natural person identified or identifiable by one or more specific factors determining the physical, physiological, genetic, psychological, economic, cultural or social identity, including a device IP, location data, internet identifier and information collected through cookies and other similar technology.

Policy - this privacy policy.

RODO – (GDPR- General Data Protection Regulation) Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC.

The Act - the Act of May 10, 2018 on the Protection of Personal Data.

Online Store - an online store run by the Administrator at https://www.yeda.pl/

User - any natural person visiting the Online Store and using one or several services or functionalities described in the Policy.

3. The administrator of personal data

The administrator of personal data is YEDA Kupcy Bławatni Turlejski i Wychowałek Sp. j. with the registered office in Wrocław (52-407), Kwiatkowskiego street 8A, signed in the Register of Entrepreneurs of the National Court Register under No. 0000182493, kept by the District Court for Wroclaw Fabryczna, VI Commercial Department of the National Court Register, NIP: 8940048722. The administrator can be contacted in writing via the traditional postal address at the company's registered office or an e-mail address: biuro@yeda.pl. The administrator will provide information on all matters related to the protection of personal data, in particular, he will answer questions regarding the processing of your personal data.

4. Goals and basics of personal data processing

According to the scope of the business, the Administrator processes your personal data for various purposes, but it is always done in compliance with the law. Your data is processed in connection with the following categories of activities:

a) Browsing the Online Store

The data of all entities using the Online Store (including the IP address or other identifiers and information collected via cookies or other similar technologies), but not registered Users (i.e. persons without a profile in the Online Store) are processed by the Administrator in one or several of the following purposes:

- provision of electronic services within the scope of facilitating to Users the content placed in the Online Store, provision of contact forms - legal basis for processing - necessary processing to perform a contract (Article 6 , paragraph 1b of RODO);

- handling purchases made without registration in the Online Store - legal basis for processing - necessity of processing to perform a contract (Article 6, paragraph 1b of RODO);

- handling complaints - legal basis for processing - necessity of processing to perform a contract (Article 6, paragraph 1b of RODO);

- analytical and statistical - legal basis for processing - justified interest of the Administrator (Article 6, paragraph 1f of RODO), which consists in conducting analysis of the Users' behavior and activities as well as their preferences, which aims at improving the quality and adequacy of the functionalities and services provided;

- possible establishing and vindicating claims or defending against them - legal basis for processing- justified interest of the Administrator (Article 6, paragraph 1f of RODO), which consists in the protection of his rights;

- the marketing purposes of the Administrator and other entities, in particular related to the presentation of behavioral advertising - legal basis for processing - justified interest of the Administrator (Article 6, paragraph 1f of RODO), which consists in adjusting the displayed advertising content - the principles of personal data processing for marketing purposes have been described in the "MARKETING" section.

b) Registration in the Online Store

Users who register in the Online Store by creating a Customer Account are asked to provide the data necessary to create and service the account. In order to facilitate placing an order, the User may provide additional data and a consent to their processing. Additional data can be changed or deleted at any time. Providing data marked as mandatory (an e-mail address and a password) is required in order to set up and service an account, and failure to do so results in the inability to create an account. Personal data provided to the administrator is processed for one or more of the following purposes:

- provision of services related to running and servicing an account in the Online Store - legal basis for processing - necessity of processing to perform a contract (Article 6, paragraph 1b of RODO),

- analytical and statistical - legal basis for processing - justified interest of the Administrator (Article 6, paragraph 1b of RODO), which consists in conducting analysis of the Users' behavior and activities as well as their preferences, and aims at improving the quality and adequacy of the functionalities and services provided;

- possible establishing and vindicating claims or defending against them - legal basis for processing- justified interest of the Administrator (Article 6, paragraph 1f of RODO), which consists in the protection of his rights;

- the marketing purposes of the Administrator and other entities, in particular sellers using the Marketplace service - the principles of processing personal data for marketing purposes are described in the "MARKETING" section.

c) Placing an order

Placing an order (offers to purchase goods) by the User in the Online Store involves the processing of his personal data. Providing data marked as mandatory is voluntary, but necessary in order to execute an order and deliver ordered goods, and failure to do so results in the inability to place an order. Providing the remaining data is optional and does not affect the execution of an order.

Personal data are processed as a part of placing an order in the Online Store and processed in one or several of the following purposes:

- execution of an order - the legal basis for processing:

- as regards mandatory data - necessity of processing to perform a contract (Article 6, paragraph 1b of RODO),

- in the field of optional data – a consent (Article 6, paragraph 1a of RODO);

- fulfillment of statutory obligations incumbent on the Administrator, resulting in particular from tax regulations and accounting regulations - legal basis for processing –a legal obligation (Article 6, paragraph 1c of RODO);

- analytical and statistical - legal basis for processing - justified interest of the Administrator (Article 6, paragraph 1f of RODO), which consists in conducting analysis of the Users' behavior and activities as well as their preferences and aims at improving the quality and adequacy of the functionalities and services provided;

- possible establishing and vindicating claims or defending against them - legal basis for processing- justified interest of the Administrator (Article 6, paragraph 1f of RODO), which consists in the protection of his rights;

d) Contact form

In the Administrator's Online Store you can contact him using the electronic contact form. Using the form requires providing personal data necessary to contact the User and the possibility to reply to their request. The user may also provide other data to facilitate a contact or service of the inquiry. Providing data marked as mandatory is required in order to accept and service the inquiry, and a failure to do so results in the inability to use the form. Providing unrequired data is voluntary.

Personal data provided to the Administrator in the contact form is processed for one or more of the following purposes:

- identification of the sender and handling his/her inquiry sent by the provided form - legal basis for processing - necessity of processing to perform a contract for the provision of services (Article 6, paragraph 1b of RODO);

- analytical and statistical - legal basis for processing - justified interest of the Administrator (Article 6, paragraph 1f of RODO), which consists in keeping statistics of inquiries submitted by Users via the Online Store in order to improve its functionality and Administrator's activities.

e) Marketing

The Administrator processes Users' personal data in order to realize marketing activities, the legal basis of which is the justified interest of the Administrator (Article 6 paragraph 1f of RODO). These activities may include in particular:

- displaying to the User marketing content that is not adapted to their preferences (contextual advertising);

- displaying to the User marketing content corresponding to his/her interests (behavioral advertising);

- sending e-mail notifications about interesting offers or content, which in some cases contain commercial information;

- conducting other types of activities related to direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities).

In order to implement marketing activities, the Administrator uses profiling in some cases. This means that due to the automatic processing of data, the Administrator evaluates selected factors concerning natural persons in order to analyze their behavior or create a prediction for the future. While performing this kind of profiling, the Administrator does not apply profiling to the User that could cause legal effects or in a similar way influence the User vitally.

f) Contextual advertising

The Administrator processes Users' personal data for marketing purposes in connection with the targeting of Contextual Ads to Users (i.e. advertising that is not suited to the User's preferences). The processing of personal data takes place then in connection with the implementation of the justified interest of the Administrator (Article 6, paragraph 1f of RODO).

g) Behavioral advertising

The Administrator processes Users' personal data, including personal data collected through cookies and other similar technologies, for marketing purposes in connection with the targeting of behavioral advertising to Users (i.e. advertising that is tailored to the User's preferences). The processing of personal data also includes profiling of Users. The use of personal data collected through this technology for marketing purposes, in particular in the promotion of services and goods of third parties, is based on the justified interest of the administrator and only on the condition that the User consents to the use of cookies. A consent to the use of cookies can be expressed through the appropriate configuration of the browser, and can be withdrawn at any time, in particular by clearing the cookie history and disabling cookies in the browser settings. This consent can be withdrawn at any time.

h) Direct marketing

If the User has agreed to receive marketing information via e-mail, SMS and other electronic communication means, the User's personal data will be processed for the purpose of sending such information. The basis for data processing is the justified interest of the Administrator consisting in sending marketing information within the limits of the consent given by the User (direct marketing). The User has the right to object to the processing of data for direct marketing purposes, including profiling. The data will be stored for this purpose for the duration of the justified interest of the Administrator, unless the User objects to gaining marketing information.

i) Cookies and a similar technology

Cookies are small text files installed on the User's device browsing the Online Store. Cookies collect information that facilitates the use of the website - for example, by memorizing the User's visits to the Online Store and the activities carried out by him/her.

j) "Online store" cookies

The administrator uses the so-called cookie primarily to provide the User with services provided electronically and to improve the quality of these services. Therefore, the Administrator and other entities providing their analytical and statistical services use cookies by storing information or accessing information already stored in the User's telecommunications terminal equipment (a computer, telephone, tablet, etc.). Cookies used for this purpose include:

- cookies with data entered by the User (session id) for the duration of the session (user input cookies);

- authentication cookies used for services requiring authentication for the duration of the session (authentication cookies);

- cookies used to ensure security, e.g. used for detection of abuse in the field of authentication (user centric security cookies);

- session cookies of multimedia players (e.g. flash player cookies), for the duration of the session (multimedia player session cookies);

- permanent cookies used to personalize the User interface for the duration of the session or a little longer (user interface customization cookies),

- cookies used to remember shopping cart contents for the duration of the session (shopping cart cookies);

- cookies used to monitor traffic on the website, i.e. data analytics, including Google Analytics cookies (these are files used by Google to analyze the use of the Online Store by the User, to create statistics and reports on the functioning of the Online Store) . Google does not use the collected data to identify you or link this information to enable identification. Detailed information about the scope and rules of data collection in connection with this service can be found at: https://www.google.com/intl/pl/policies/privacy/partners.

k) "Marketing" cookies

The administrator uses cookies also for marketing purposes, including in connection with the targeting of behavioral advertising to Users. For this purpose, the Administrator stores information or accesses information already stored in the User's telecommunications terminal equipment (a computer, telephone, tablet, etc.). The use of cookies and personal data collected through them for marketing purposes, in particular as regards the promotion of services and goods of third parties, requires the User's consent. This consent can be expressed through the appropriate configuration of the browser, and can also be withdrawn at any time, in particular by clearing the cookie history and disabling cookies in the browser settings.

5. Data retention period

In accordance with an applicable law, we process your personal information for the time that is needed to achieve the goal. After this period, your personal data will be irreparably removed or destroyed.

Your personal data will be processed by the Administrator for the period necessary to achieve the objectives referred to in the "Objectives and grounds for personal data processing" section, e.g. to terminate the service of your newsletter, participation agreements in our loyalty program, termination of the complaint procedure and after this period until the time limits for possible claims or until the data storage obligations resulting from legal provisions expire.

6. User rights related to data

The data subjects have the following rights:

- The right to information about the processing of personal data - on this basis, to the person submitting such a request, the Administrator provides information about the processing of personal data, in particular about the purposes and legal grounds of processing, scope of data held, entities to which personal data are disclosed and the planned date of their deletion;

- The right to obtain a copy of data - on this basis, the Administrator provides a copy of the data processed concerning the person making a request;

- The right to correct data - on this basis, the Administrator removes any non-conformities or errors regarding personal data being processed, and completes or updates them if incomplete or have changed;

- The right to delete data - on this basis, you can request deletion of data, the processing of which is no longer necessary to carry out any of the purposes for which they were collected;

- The right to limit the processing - on this basis the Administrator ceases to conduct operations on personal data, except for operations agreed to by the data subject and their storage, in accordance with accepted retention rules, or until the reasons for limiting data processing cease to exist (e.g. a supervisory organ decision will be issued allowing the further processing of data);

- The right to data transfer - on this basis, within the scope in which the data is processed in relation to the concluded agreement or consent, the Administrator issues data provided by the person concerned in a format that allows their reading by the computer. It is also possible to request that data to be sent to another entity - provided, however, that there are technical possibilities in this regard, both on the part of the Administrator and that other entity;

- The right to object to the processing of data for marketing purposes - the data subject may at any time object to the processing of personal data for marketing purposes, without the need to justify such objection;

- The right to object to other purposes of data processing - the data subject may at any time object to the processing of personal data based on the justified interest of the Administrator (e.g. for analytical or statistical purposes or for reasons related to property protection). An objection in this respect should include justification and is a subject to the Administrator's assessment;

The application for the exercise of the rights described above may be submitted by a traditional mail or by an e-mail in accordance with the data provided in paragraph 3 above. The application should, if possible, precisely indicate what the request is for, i.e. in particular the applicant's data and the scope of the data to which it relates. If the Administrator is not able to determine the content of the request or identify the person submitting the application based on the submitted application, he will ask the applicant for additional information. A response to the notification will be given immediately, no later than one month after its receiving. If it is necessary to extend this deadline, the Administrator will inform the applicant about the reasons for such an extension.

7. The right to withdraw the consent

If the Administrator processes your personal data on the basis of your consent, you can withdraw your consent at any time - at its sole discretion. If you want to withdraw your consent to the processing of your personal data, you can do it via a traditional mail or by an e-mail in accordance with the data provided in paragraph 3 above, or using the functionality in the customer's profile.

 If the Administrator processes your personal data on the basis of your consent, its withdrawal does not mean that the processing of personal data up to this point was illegal. In other words, until the consent is withdrawn, the Administrator has the right to process your personal data and the cancellation of the consent does not affect the legality of the past processing.

8. The right to lodge a complaint

If you believe that your personal data is processed contrary to an applicable law, you can complain to the President of Data Protection Office.

 9. Transfer of personal data to Third Countries and International Organizations

Your personal data is not transferred to third countries, i.e. outside the European Economic Area (EEA) or outside international organizations

10. Changes to the Privacy Policy

To the extent not covered by this Privacy Policy, the provisions of the Act and the RODO shall apply. Any changes to this Privacy Policy will be notified by e-mail.

This Privacy Policy applies from May 25, 2018.

11. Questions and a contact

If you have any questions about the privacy policy, please contact the Administrator in writing, using a traditional mail, by writing to the address of the registered office of the company or by e-mail at the following address: biuro@yeda.pl.