PERSONAL DATA ADMINISTRATOR
The personal data administrator is the company HURT ODZIEŻY UŻYWANEJ BYDGOSZCZ, with its registered office in Bydgoszcz (85-834), ul. Mokra 3, NIP: 9531740674, hereinafter referred to as the Administrator. The terms used in this Privacy Policy – Shop, Customer, should be understood in accordance with their definitions contained in the Store Regulations. This privacy policy is for informational purposes only and is not a source of obligations for the Store’s Customers.
PURPOSE AND SCOPE OF COLLECTION OF PERSONAL DATA
Personal data means any information about the Customer that allows for their identification, such as name and surname, contact details, order number, payment details and information on access to our website. The Customer’s personal data is collected when the Customer places an order, creates an account, uses our website or contacts the Store’s support team.
In particular, information from the following categories is collected:
– name and surname, residential/business address, e-mail address, telephone number, delivery address (street, house number, apartment number, postal code, town, country), company name and tax identification number (NIP) of the Customer, bank account number required for refunds to the account, credit/debit card details or other payment details;
– information on the purchase of products;
– information on the use of our website;
– communication with the Customer via post, e-mail, social media and by phone;
Data The Customer may be used for the following purposes:
– ensuring the performance of the sales agreement for products ordered by the Customer, in particular the operational performance of the order, shipment or delivery of ordered products, performance of obligations arising from the warranty and guarantees granted, collection of receivables
– contacting the Customer in the event of the need to make changes to the order, caused by, for example, the unavailability of certain products;
– credit card or other payment card verification/checking: payment information is used for accounting, billing and to detect and/or prevent any fraudulent activity;
– administrative or legal purposes: the Customer’s data may be used to respond to claims or complaints and to exercise other rights and obligations under applicable laws;
– marketing: from time to time the Customer may receive information electronically about promotions for products offered by us for sale; The Customer has the right to accept or opt out of receiving such messages, and each electronic message sent by us will include the option to indicate that the user does not wish to receive further direct marketing materials from us.
SHARING PERSONAL DATA
The Customer’s personal data may be shared for the purposes described in this Privacy Policy with the following third parties, who have appropriate technical and organizational security measures to protect the Customer’s personal data in accordance with Polish and EU law:
– entities participating in the process of executing the sales contract, in order to properly execute it, e.g. Poczta Polska S.A., courier companies, e.g. DPD;
– companies handling payment transactions – in particular, this applies to the transfer of personal data to PayTel S.A. in the case of making payments using an online payment system; the transfer of data concerns only the personal data necessary for the execution of payments by PayTel S.A., as well as verification of payments for possible irregularities and ensuring the security of transactions;
PERSONAL DATA PROTECTION RIGHTS
The Customer has the right to:
– information on whether his/her personal information is stored, and if so, what information is stored and for what purpose we store/use it.
– access to his/her personal information (the so-called “data subject request”). This makes it possible to obtain a copy of the personal information we have about the user and to check whether we process it lawfully.
– rectify your personal information that we hold about you. You can complete any incomplete data or rectify any incorrect information that we hold about you.
– delete your personal information. You can request that we delete or remove your personal information if there are no grounds to justify further processing. You also have the right to ask us to delete or remove your personal information if you have exercised your right to object to data processing (see below).
– object to the processing of your personal information where we process it based on our legitimate interest (or the interest of a third party) and in your specific situation there is any reason for you to object to processing on this basis. In addition, you have the right to object if we process your personal information for direct marketing purposes.
– Object to automated decision-making, including profiling, i.e. object to automated decision-making about you using your personal information or object to profiling you.
– Restrict the processing of your personal information. You may request that we suspend the processing of your personal information, for example if you want us to establish its accuracy or the reason for processing it.
– transfer your personal information in an electronic and structured form to you or another person (known as the right to “data portability”). This allows you to collect your data from us in an electronically usable format and transfer your data to another person in an electronically usable format.
– withdraw consent. In limited circumstances, where you have consented to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent to such processing at any time. As soon as we receive information about the withdrawal of consent, we will cease processing the user’s information for the purpose or purposes for which the user initially consented, unless we have another legitimate interest in such processing.
SHARING PERSONAL DATA
The Customer’s personal data may be shared for the purposes described in this Privacy Policy with the following third parties, who have appropriate technical and organizational security measures to protect the Customer’s personal data in accordance with Polish and EU law:
– entities participating in the process of executing the sales contract, in order to properly execute it, e.g. Poczta Polska S.A., courier companies;
– companies handling payment transactions – in particular, this applies to the transfer of personal data to PayTel S.A. in the case of making payments using an online payment system; the data transferred only concerns personal data necessary to make payments by PayTel S.A., as well as to verify payments for possible irregularities and ensure transaction security;