We process personal data in accordance with the principles provided for in the RODO, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "RODO"), as well as those provided for in the Polish Personal Data Protection Act, its implementing acts and the Act on Providing Services by Electronic Means of July 18, 2002 (Journal of Laws of 2002, no. 144, item 1204, as amended).
In order to implement the statutory requirements, the Administrator selects and applies appropriate technical and organizational measures to ensure the protection of the processed data, and secures the data against their access to unauthorized persons, as well as against their processing in violation of applicable laws.
Personal data controller
The administrator of the personal data is MFS Sp. z o. o. with its registered office in Wilcza Wola 21, 26-500 Szydłowiec entered in the register of entrepreneurs kept by the District Court for the city of Lublin VI Economic Department of the National Court Register under KRS number: 0000911907, NIP 799-197-83-99 , REGON 389480547 - hereinafter referred to as the Administrator.
When do we process personal data, for what purpose and on what basis?
Provision of personal data is voluntary, however, failure to provide data in cases, may be necessary for the use of a particular service or the conclusion of a particular contract .Administrator collects personal data in the framework of:
1. Activities of the Administrator's Online Store:
a. What data: Name, surname, address, telephone, e-mail, in some cases also the company and Tax ID. For those with a store account, additionally login and order history.
b. For what purpose: To operate an online store, including maintaining a separate account within the store that allows access to additional store functionality, i.e. status and history of Orders and posting, editing or deleting data, including delivery addresses. Conducting sales through the aforementioned online store for account holders and non-account holders. Including promotional programs dedicated to account holders in the store.
c. On what basis: Activities aimed at concluding and the conclusion of a contract - Art. 6(1)(b) RODO)
2. Contact forms on the website and other forms of contact:
a. What data: name and e-mail address - in the case of the contact form. In the case of telephone contacts - telephone number;
b. For what purpose: To establish contacts through the website of the administrator's company and other means of contact indicated on the website.
c. On what basis: Consent based on the fact that you have approached us with a specific issue. In certain cases, we may have an additional legitimate interest in responding to the issue sent. (Article 6(1)(a) and (f) of the RODO)
3. Order fulfillment;
a. What data: First name, last name, address, telephone, phone, e-mail.
b. For what purpose: Fulfilling orders (shipping)
c. On what basis: Performance of the contract - Art. 6(1)(b) RODO.
4. Marketing activities, including with partners;
a. What data: names, surnames, e-mail addresses, telephone numbers, within the scope of the website cookies, and within the scope of the administrator's Facebook fan page, data resulting from the settings of the account of a given user.
b. For what purpose: Promoting the store's brand, acquiring customers, conducting marketing activities
c. On what basis: consent obtained prior to the commencement of contact (Article 6(1)(a) RODO), with regard to entities with whom cooperation has already been conducted also the legitimate interest of the Administrator (Article 6(1)(f) RODO).
5. Records of contractors;
a. What data: Contractors' indentification data - names, surnames, names, addresses, TIN, as well as contact data of contractors and their designated contact persons.
b. For what purpose: To establish and maintain business relationships.
c. On what basis: As part of activities aimed at concluding a contract or performing a given contract art. 6(1)(b) RODO, as to contractors with whom there is already cooperation, also within the framework of the legitimate interest of maintaining cooperation art. 6(1)(f) RODO.
6. Contracts and accounting records;
What data: Identification data of entrepreneurs - names, surnames, names, addresses, TIN.
For what purpose: Archiving transactions made through all sales channels , as well as contracts not directly related to it, and fulfilling accounting obligations towards them.
On what basis: Performance of contracts (Article 6(1)(b) of the DPA), their archiving for the purpose of fulfilling accounting obligations (Article 6(1)(c) of the DPA), and archiving in case of the need to investigate or protect against claims (Article 6(1)(f) of the DPA).
7. Complaints:
a. What data: Data relating to the contract in question, name, address, telephone, e-mail, complaint data.
b. For what purpose: Handling complaints submitted by customers - both under warranty and guarantee and other titles.
c. On what grounds: Consent or performance of the contract or statutory obligations of the administrator - with regard to complaints based on warranty and guarantee, respectively (Article 6(1)(b) and Article 6(1)(c) of the DPA).
8. Recruitment of employees and associates.
a. What data: Contained in the applications and resumes received: identification data, address data, data on education, work experience, professional entitlements.
b. For what purpose: Recruitment of employees and associates.
c. On what basis: Consent of data subjects - Art. 6(1)(a) RODO.
The information obligations for each of the fields of activity of the Administrator specified above have been carried out in whole or in part in the course of activities related to the aforementioned fields of activity of the Administrator. In this document, this information will be presented in an aggregate manner, along with descriptions of each entitlement. We hope that this will give you a better understanding of what we do with your data and what entitlements are involved.
[Przetwarzanie innych danych]
Notwithstanding the above, if your personal data is processed by the Administrator, in activities that do not fall within the above enumeration, we indicate the grounds on which this may occur:
1. conclusion and performance of the contract (provision of services)
2. conduct marketing activities undertaken by the Administrator independently or in cooperation with other entities
3. sales of services and products offered by the Administrator
4. to comply with legal obligations incumbent on the controller
5. conduct analyses and statistics
6. archiving.
The legal basis for data processing in such a case may be:
1. consent granted;
2. necessity for the performance of the contract or to take action at your request before concluding the contract;
3. necessity for the purposes of legitimate interests pursued by the administrator;
4. necessity to fulfill a legal obligation incumbent on the controller.
[Przekazywanie danych]
In order to fulfill your requests to provide various features, services and materials through the Site and to respond to your inquiries, we may share personal information with third parties who perform certain functions on our behalf, such as companies or individuals who: administer or operate our sites/site; analyze data; provide customer service, book appointments; are sponsors or others who participate in, manage or provide marketing or promotional assistance for our promotions. In the above situation, we require these entities to protect such data in accordance with this Policy.
The administrator also uses the services of third parties, such as:
Google Analytics (For more information, visit: analytics.google.com)
Facebook (For more information, visit: www.facebook.com)
PayU (For more information, visit: www.payu.pl)
Przelewy24 (For more information, visit: www.przelewy24.pl)
Your data will be transferred to a third country (e.g., USA) in connection with the activities conducted on FB, i.e. in connection with the creation of profiles using Google Analytics.
[Okres przechowywania danych]
The period for which your personal data is processed depends on the purpose for which the data is processed. The period for which your personal data will be kept is calculated based on the following criteria:
1. legal provisions that may oblige the Administrator to process data for a certain period of time,
2. the period for which the services are provided
3. the period that is necessary to defend the administrator's interests - i.e. until the statute of limitations for claims that can be brought against the administrator in connection with ,
4. the period for which the consent was granted
[Twoje prawa]
We provide data subjects with the exercise of the following rights:
withdrawal of consent - if the data are processed on the basis of an expressed consent, the data subject has the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before the withdrawal of consent;
information about the processing of personal data - including, first and foremost, the scope, purposes and legal basis of the processing, the entities to which the data are disclosed, and the planned date of deletion;
obtain a copy of the data - on this basis, we provide a copy of the processed data on the person making the request, with the first copy of the data being provided free of charge, and each subsequent copy after setting a fee to compensate for the cost of the activity;
corrigenda - is to remove any inconsistencies or errors in the processed personal data and complete it if it is incomplete;
deletion of data - On this basis, you can request the deletion of data, but the effective exercise of this right depends on the absence of an effective basis for further processing (if such a basis exists, we inform the person making the request about it);
restrictions on processing - involving a request to stop performing a certain category of operations on personal data, while continuing to process the rest of the data;
objection to the processing of data for marketing purposes or other purposes of data processing - similar to the above is the right to request the cessation of data processing for marketing purposes (without justification) and other purposes arising from the Interest of the controller (with justification);
data portability - under which we are obliged to issue to the data subject or to another entity designated by him/her a copy of his/her personal data with a structure that allows it to be read in other computer systems, while this entitlement applies only to data processed on the basis of consent and contract in an automated manner;
complaints - If it is determined that the processing of personal data violates the provisions of the RODO or other national or international data protection laws, the data subject may file a complaint with the competent supervisory authority - established pursuant to Article 51 of the RODO - the President of the Office for Personal Data Protection.
At the same time, we stipulate that for the effective exercise of the aforementioned rights, in order to protect the rights of persons whose data we process, the request should be made in a manner that allows us to verify its sender. (For example, in the situation of a request to cease data processing as part of marketing carried out via e-mail, if the only data known to us is an e-mail address, the request should be received from that address) If you have any doubts in this regard, we will request additional information from you. Correspondence regarding the bottom request is carried out through the related communication channels (phone, email, postal address) related to the personal data subject to the request.
We will make every effort to respond to your request promptly, in any case no longer than 30 days. If we are unable to meet this deadline, we will inform you of the reasons for the delay by setting a time to deal with the matter.
[Przetwarzanie w sposób zautomatyzowany]
Your personal data will be processed by automated means (including profiling), but this will not have any legal effect on you or similarly significantly affect you.
Profiling of personal data by the Administrator involves the processing of your data (including by automated means), by using it to evaluate certain information about you, in particular to analyze or forecast your personal preferences and interests. The profiling affects the marketing information and offers you will receive (offers tailored to your needs).
[Wykorzystywanie plików cookie]
1. The website does not automatically collect any information, except for the information contained in cookies.
2. "Cookies" files, also known as cookies (cookie means cookie), are IT data, in particular text files, stored on the users' terminal equipment for the use of websites. These files allow to recognize the user's device and appropriately display the website tailored to his individual preferences. "Cookies" usually contain the name of the website from which they come, the time they are stored on the end device and a unique number.
3. The operator of the website (Administrator) is the entity placing cookies on the end device of its user and having access to them.
4. Cookies are used for:
adapting the content of the Website's pages to the individual preferences of the User and optimizing the use of the websites; in particular, these files recognize the User's device in order to display the page in accordance with the User's preferences;
creation of statistics that help to understand, preferences and behavior of Users, how they use websites, which allows to improve their structure and content;
maintaining a session of the Service User (after logging in), thanks to which the User does not have to re-enter his/her login and password on each sub-page of the Service;
5. The website uses two main types of cookies: "session" and "permanent". "Session" cookies are temporary files that are stored on the User's terminal equipment until the User logs out, leaves the website or turns off the software (web browser). "Permanent" cookies are stored on the User's end device for the time specified in the parameters of the cookies or until they are deleted by the User.
6. The following types of cookies are used within the Service:
"necessary" cookies to enable the use of services available on the Website, such as authentication cookies used for services that require authentication on the Website;
cookies used for security purposes, e.g. used to detect abuse of authentication on the Website;
"performance" cookies, which allow you to collect information about how you use the Website's websites;
"functional" cookies, which allow "remembering" the User's selected settings and personalizing the User's interface, e.g. with regard to the chosen language or region of origin of the User, font size, appearance of the website, etc;
"advertising" cookies, allowing to provide Users with advertising content more tailored to their interests.
7. It is possible to manage cookies by using the settings of the User's browser, thanks to which it is possible to manage cookies even at the level of individual selected sites. The user can change the settings of his/her browser at any time to block cookies or to obtain information about their placement on his/her device each time. Other available options can be checked in the settings of your web browser. Please note that most browsers are set by default to accept the storage of cookies on your end device. Please note that changing your browser settings, depending on the option you choose, may affect some of the functionality available on the Website.
8. Cookies placed in the Service User's terminal equipment may be used by partners and advertisers cooperating with the Service Operator.
9. More information about cookies is available in the "Help" section of your web browser menu or at ciasteczka.org.pl.