PRIVACY AND COOKIES POLICY

Good day! If you have ended up here, it is a sure sign that you value your privacy. We understand this perfectly, which is why we have prepared this document for you, in which you will find the principles of processing personal data and using cookies in connection with the use of the website https://marcinstanek.pl Formal information to start with - the administrator of the website is Marcin Stanek, conducting business under the name of Marcin Stanek, with its registered office in Zborów, ul. Solecka 83, 28-131 Solec-Zdrój, entered into the Central Register and Information on Economic Activity, NIP 6551975700, REGON 369052790. In case of any doubts related to the privacy policy, you can contact us at any time by sending a message to kontakt@marcinstanek.pl Abridged version - the most important information We care about your privacy, but also about your time. That is why we have prepared a shortened version of the most important principles related to privacy protection for you. - By creating a user account via the website, placing an order, subscribing to the newsletter, filing a complaint, withdrawing from the contract or simply contacting us, you provide us with your personal data, and we guarantee that your data will remain confidential, secure and will not be made available to any third parties without your express consent. - We entrust the processing of personal data only to verified and trusted entities providing services related to the processing of personal data. - We use Google Analytics analytical tools, which collect information about your visits to the website, such as the subpages you have viewed, the time you spent on the website or transitions between individual subpages. For this purpose, Google LLC cookies are used for the Google Analytics service. As part of the mechanism for managing cookie settings, you have the option of deciding whether we will also be able to use marketing functions within the Google Analytics service or not. - We use marketing tools, such as Facebook Pixel, to target advertisements to you. This involves the use of Facebook cookies. As part of the cookie settings, you can decide whether or not you consent to our use of Facebook Pixel in your case. - We embed video recordings from YouTube on the website. When you play such recordings, Google LLC cookies for the YouTube service are used. - We provide the ability to use social functions, such as sharing content on social media and subscribing to a social profile. Using these functions involves the use of cookies from the administrators of social media such as Facebook, Instagram, YouTube, Twitter, Google+, LinkedIN. - We use the Disqus commenting system on the website. This involves the use of Disqus cookies. If the above information is not sufficient for you, you will find further details below.

Personal data

The administrator of your personal data within the meaning of the provisions on the protection of personal data is Marcin Stanek, conducting business activity under the name of Marcin Stanek with its registered office in Zborów, ul. Solecka 83, 28-131 Solec-Zdrój, entered into the Central Register and Information on Business Activity, NIP 6551975700, REGON 369052790. The purposes, legal basis and period of processing personal data are indicated separately in relation to each purpose of data processing (see: description of individual purposes of personal data processing below). Entitlements. GDPR grants you the following potential rights related to the processing of your personal data: the right to access personal data, - the right to rectify personal data, - the right to delete personal data, - the right to limit the processing of personal data, - the right to object to the processing of personal data, - the right to transfer data, - the right to lodge a complaint with the supervisory authority, - the right to withdraw consent to the processing of personal data, if you have given such consent. The principles related to the implementation of the indicated rights have been described in detail in Articles 16 - 21 of the GDPR. We encourage you to familiarize yourself with these provisions. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and will not apply to all activities of processing your personal data. For your convenience, we have made every effort to indicate the rights you are entitled to within the framework of these operations as part of the description of individual personal data processing operations. We emphasize that you always have one of the rights indicated above - if you believe that we have violated the provisions on the protection of personal data when processing your personal data, you have the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office). You can also always contact us with a request to provide you with information about what data we have about you and for what purposes we process it. Just send a message to kontakt@marcinstanek.pl. However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. You can also use the e-mail address provided above for any questions related to the processing of your personal data. Security. We guarantee the confidentiality of all personal data provided to us. We ensure that all security measures and personal data protection required by the provisions on the protection of personal data are taken. Personal data is collected with due diligence and properly protected against access by unauthorized persons. List of entrustments. We entrust the processing of personal data to the following entities: ActiveCampaign LLC, 1 North Dearborn Street, Suite 500, Chicago, IL 60602, USA – for the purpose of using the mailing system in which your data is processed, if you have subscribed to the newsletter, IFIRMA SA, Grabiszyńska 241 B, 53-234, Wrocław, Dolnośląskie, NIP: 8981647572 – for the purpose of using the invoicing system in which your data is processed, if we issue an invoice for you, All entities to which we entrust the processing of personal data guarantee the use of appropriate measures for the protection and security of personal data required by law.

Purposes and activities of processing

User account. When creating a user account, you must provide your e-mail address and define a password for the account. Providing data is voluntary, but necessary to create an account. As part of editing the user profile, you can provide further data about yourself, i.e. name and surname, billing address and shipping address. Providing this data is completely voluntary. You can have an account without providing this further data. In such a situation, when placing an order, you will have to enter this data manually. The data entered by you as part of the user account is processed solely for the purpose of maintaining the account and providing you with the possibility of using it. Providing data in the user account is intended to make it easier for you to place orders in the store by automatically substituting data into the order form. The legal basis for the processing of your personal data as part of the user account is the implementation of the account management agreement, which you conclude on the basis of the store regulations - art. 6 sec. 1 letter b GDPR. Your data will be processed as part of the account for as long as you have a user account. After deleting the account, your data will be deleted from the database, with the exception of data on placed orders. You can access your personal data processed within your account at any time by logging in to your user account. After logging in to your account, you can modify your data at any time, as well as delete it, with the exception of data about orders placed. You can also decide to delete your account at any time. In relation to the data collected in the user account, you also have the right to transfer data, as referred to in Article 20 of the GDPR. Orders. When placing an order, you must provide the data necessary to complete the order, i.e. name and surname, billing address, e-mail address. Providing data is voluntary, but necessary to place an order. The data provided to us in connection with the order is processed for the purpose of fulfilling the order (Article 6, paragraph 1, letter b of the GDPR), issuing an invoice (Article 6, paragraph 1, letter c of the GDPR), including the invoice in our accounting documentation (Article 6, paragraph 1, letter c of the GDPR) and for archival and statistical purposes (Article 6, paragraph 1, letter f of the GDPR). The data contained in the order placed via the store is processed within the WordPress system and stored on the server provided by zenbox sp. z o.o. If you have a user account, your order will be visible within the order history of a given account. Each order is documented with an invoice. Invoices are issued using the IFIRMA SA system. The invoice is forwarded to the accounting office Biuro Rachunkowe PERFEKTUS Barbara Pawlik. Orders are also registered in our internal database for archival and statistical purposes. Order data will be processed for the time necessary to complete the order and then until the expiry of the limitation period for claims under the concluded contract. In addition, after this period, the data may still be processed by us for statistical purposes. Please also remember that we are obliged to store invoices with your personal data for a period of 5 years from the end of the tax year in which the tax obligation arose. In the case of order data, you do not have the possibility to correct this data after the completion of the order. You also cannot object to the processing of data or demand the deletion of data until the expiry of the limitation period for claims under the concluded contract. Similarly, you cannot object to the processing of data or demand the deletion of data contained in invoices. After the expiry of the limitation period for claims under the concluded contract, you may, however, object to the processing of your data by us for statistical purposes, as well as demand the deletion of your data from our database. In relation to order data, you also have the right to transfer data, as referred to in Article 20 of the GDPR.

Newsletter.

If you wish to subscribe to the newsletter, you must provide us with your e-mail address via the newsletter subscription form. The data provided to us when subscribing to the newsletter is used to send you the newsletter, and the legal basis for its processing is your consent (Article 6, paragraph 1, letter a of the GDPR) expressed when subscribing to the newsletter. The data is processed within the Active Campaign mailing system and stored on a server provided by ActiveCampaign LLC. The data will be processed for the duration of the newsletter, unless you cancel your subscription earlier, which will delete your data from the database. At any time, you can correct your data saved in the newsletter database, as well as request its deletion by canceling the newsletter. You also have the right to transfer your data, as referred to in Article 20 of the GDPR. Complaints and withdrawal from the contract. If you file a complaint or withdraw from the contract, you provide us with personal data contained in the content of the complaint or declaration of withdrawal from the contract, which includes your name and surname, address of residence, telephone number, e-mail address, bank account number. The data provided to us in connection with filing a complaint or withdrawal from the contract are used to implement the complaint procedure or the procedure for withdrawal from the contract (Article 6, paragraph 1, letter c of the GDPR). The data will be processed for the time necessary to implement the complaint procedure or the procedure for withdrawal from the contract. Complaints and declarations of withdrawal from the contract may also be archived for statistical purposes. In the case of data contained in complaints and declarations of withdrawal from the contract, you do not have the possibility to rectify this data. You also cannot object to the processing of data or demand the deletion of data until the expiry of the limitation period for claims under the concluded contract. After the expiry of the limitation period for claims under the concluded contract, you may, however, object to our processing of your data for statistical purposes, as well as demand the deletion of your data from our database. E-mail contact. By contacting us via e-mail, including by sending an inquiry via the contact form, you naturally provide us with your e-mail address as the sender's address. In addition, you can also include other personal data in the content of the message. In this case, your data is processed for the purpose of contacting you, and the basis for processing is art. 6 sec. 1 letter a GDPR, i.e. your consent resulting from initiating contact with us. The legal basis for processing after the end of contact is the justified purpose of archiving correspondence for internal purposes (art. 6 sec. 1 letter c GDPR). The content of correspondence may be subject to archiving and we are unable to clearly determine when it will be deleted. You have the right to demand a history of the correspondence you have conducted with us (if it was subject to archiving), as well as to demand its deletion, unless its archiving is justified due to our overriding interests, e.g. defense against potential claims on your part.

Cookies and other tracking technologies

Our website, like almost all other websites, uses cookies to provide you with the best experience when using it. Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone) that can be read by our IT system. More details can be found below. Consent to cookies. During your first visit to the website, you will be shown information about the use of cookies along with a question about your consent to the use of cookies. Thanks to a special tool, you can manage cookies from the website. In addition, you can always change cookie settings from your browser or delete cookies altogether. Remember, however, that disabling cookies may cause difficulties in using the website, as well as many other websites that use cookies. Third-party cookies. Our website, like most modern websites, uses functions provided by third parties, which involves the use of cookies from third parties. The use of this type of cookies is described below. Analysis and statistics. We use cookies to track website statistics, such as the number of visitors, the type of operating system and web browser used to browse the website, time spent on the website, subpages visited, etc. We use Google Analytics for this purpose, which involves the use of cookies from Google LLC. As part of the mechanism for managing cookie settings, you have the option to decide whether we will also be able to use marketing functions as part of the Google Analytics service or not. Marketing. We use marketing tools, such as Facebook Pixel, to direct advertisements to you. This involves the use of Facebook cookies. As part of the cookie settings, you can decide whether you consent to our use of Facebook Pixel in your case or not. Social tools. We provide the ability to use social functions, such as sharing content on social networking sites and subscribing to a social profile. Using these functions involves the use of cookies from social networking site administrators such as Facebook, Instagram, YouTube, Twitter, Google+, LinkedIN. We embed video recordings from YouTube on the website. When you play such recordings, Google LLC cookies are used for the YouTube service. We use the Disqus commenting system on the site. This involves the use of Disqus cookies.

Server logs

Using the site involves sending queries to the server where the site is stored. Each query sent to the server is saved in the server logs. The logs include, among others, your IP address, server date and time, information about the web browser and operating system you are using. The logs are saved and stored on the server. The data saved in the server logs is not associated with specific people using the site and is not used by us to identify you. The server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone other than those authorized to administer the server.