1. GENERAL PROVISIONS
1.2. The administrator of personal data collected via the Online Store www.shop.hempevplution.eu Company's data Oleg Kaminskij, firstname.lastname@example.org hereinafter referred to as the "Administrator" and being at the same time the Service Provider of the Online Store and the Seller.
1.3. The personal data of the Service Recipient and Customer are processed in accordance with the Personal Data Protection Act of August 29, 1997 (Journal of Laws 1997 No. 133, item 883, as amended) (hereinafter: the Personal Data Protection Act) and the Act on providing services by electronic means of July 18, 2002 (Journal of Laws 2002, No. 144, item 1204, as amended).
1.4. The administrator takes special care to protect the interests of the data subjects, and in particular ensures that the data collected by him are processed in accordance with the law; collected for specified, lawful purposes and not subjected to further processing incompatible with these purposes; factually correct and adequate in relation to the purposes for which they are processed and stored in a form that allows the identification of persons to whom they relate, no longer than it is necessary to achieve the purpose of processing.
1.5. All words, expressions and acronyms appearing on this website and beginning with a capital letter (eg Seller, Online Store, Electronic Service) should be understood in accordance with their definition contained in the Regulations of the Online Store available on the Online Store website.
2. PURPOSE AND SCOPE OF DATA COLLECTION AND DATA RECIPIENTS
2.1. Each time, the purpose, scope and recipients of data processed by the Administrator result from actions taken by the Service User or the Customer in the Online Store. For example, if the Customer chooses personal pickup instead of courier when placing the Order, his personal data will be processed in order to conclude and implement the Sales Agreement, but will no longer be made available to the carrier performing the shipment at the request of the Administrator.
2.2. Possible purposes of collecting personal data of Service Users or Customers by the Administrator:
2.2.1. conclusion and implementation of the Sales Agreement or contract for the provision of Electronic Services (eg Account).
2.2.2. direct marketing of the Administrator's own products or services.
2.2.3. expressing an opinion by the Customer on the concluded Sales Agreement.
2.3. Possible recipients of personal data of the Customers of the Online Store:
2.3.1. In the case of a Customer who uses the Online Store with the method of delivery by post or courier, the Administrator provides the Customer's collected personal data to the selected carrier or intermediary performing the shipment at the request of the Administrator.
2.3.2. In the case of a Customer who uses the Online Store with the method of electronic payments or with a payment card, the Administrator provides the Customer's collected personal data to the selected entity servicing the above payments in the Online Store.
2.3.3. In the case of a Customer who has agreed to express an opinion on the concluded Sales Agreement, the Administrator provides the Customer's collected personal data to the selected entity servicing the system of surveys giving opinions on the concluded Sales Agreements in the Online Store.
2.4. The administrator may process the following personal data of the Service Users or Customers using the Online Store: name and surname; e-mail address; contact telephone number; delivery address (street, house number, apartment number, zip code, city, country), address of residence / business / seat (if different from the delivery address). In the case of Service Users or Customers who are not consumers, the Administrator may additionally process the company name and tax identification number (NIP) of the Service User or Customer.
2.5. Providing personal data referred to in the above point may be necessary for the conclusion and implementation of the Sales Agreement or the contract for the provision of Electronic Services in the Online Store. Each time, the scope of the data required to conclude a contract is previously indicated on the website of the Online Store and in the Regulations of the Online Store.
3. COOKIES AND PERFORMANCE DATA
3.1. Cookies are small text information in the form of text files, sent by the server and saved on the side of the person visiting the website of the Online Store (e.g. on the hard drive of the computer, laptop or on the smartphone's memory card - depending on which device is used by visitors to our Online Store). Detailed information on cookies as well as the history of their creation can be found: http://pl.wikipedia.org/wiki/Ciasteczko .
3.2. The Administrator may process the data contained in Cookies when visitors use the Online Store website for the following purposes:
3.2.1. identifying the Service Users as logged in to the Online Store and showing that they are logged in;
3.2.2. remembering Products added to the basket in order to place an Order;
3.2.3. remembering data from completed Order Forms, surveys or login details to the Online Store;
3.2.4. adjusting the content of the Online Store website to the individual preferences of the Service Recipient (e.g. regarding colors, font size, page layout) and optimizing the use of the Online Store websites;
3.2.5. keeping anonymous statistics showing how to use the Online Store website.
3.3. By default, most web browsers available on the market accept saving cookies by default. Everyone has the option to define the terms of using cookies using the settings of their own web browser. This means that you can, for example, partially limit (e.g. temporarily) or completely disable the option of saving Cookies - in the latter case, however, it may affect some functionalities of the Online Store (for example, it may be impossible to complete the Order path through the Order Form due to the failure to remember the Products in the basket during the next steps of the Order placing).
3.5. Detailed information on changing cookie settings and their self-removal in the most popular web browsers are available in the help section of the web browser and on the following pages (just click on the link):
• in the Chrome browser
• in the Firefox browser
• in Internet Explorer
• in the Opera browser
• in the Safari browser
• in the Microsoft Edge browser
3.6. The administrator also processes anonymised operational data related to the use of the Online Store (so-called logs - IP address, domain) to generate statistics helpful in administering the Online Store. These data are aggregate and anonymous, i.e. they do not contain features that identify visitors to the Online Store website. Logs are not disclosed to third parties.
4. BASIS FOR DATA PROCESSING
4.1. Providing personal data by the Service Recipient or the Customer is voluntary, but failure to provide the personal data indicated on the Online Store website and in the Online Store Regulations necessary for the conclusion and implementation of the Sales Agreement or contract for the provision of Electronic Services results in the inability to conclude this agreement.
4.2. The basis for the processing of personal data of the Service Recipient or Customer is the need to perform the contract to which he is a party or to take action at his request before its conclusion. In the case of data processing for direct marketing of the Administrator's own products or services, the basis for such processing is (1) the prior consent of the Service Recipient or Customer or (2) the fulfillment of legally justified purposes carried out by the Administrator (in accordance with Article 23 (4) of the Act on the Protection of Personal Data. a legitimate goal is, in particular, direct marketing of the Administrator's own products or services).
4.3. In the case of data processing in order to express an opinion on the concluded Sales Agreement by the Customer, the basis for such processing is the consent of the Customer or the Customer.
5. THE RIGHT TO CONTROL, ACCESS TO THEIR DATA AND THEIR CORRECTION
5.1. The Service Recipient or the Customer has the right to access their personal data and correct them.
5.2. Each person has the right to control the processing of data relating to him, contained in the Administrator's data set, and in particular the right to: request supplementing, updating, rectifying personal data, temporarily or permanently suspending their processing or removing them if they are incomplete or out of date, untrue or have been collected in violation of the Act or are no longer necessary for the purpose for which they were collected.
5.3. If the Service User or the Customer grants consent to the processing of data for direct marketing of the Administrator's own products or services, the consent may be revoked at any time.
5.4. In the event that the Administrator intends to process or processes the data of the Service Recipient or Customer for the purpose of direct marketing of the Administrator's own products or services, the data subject is also entitled to (1) submit a written, motivated request to stop processing his data due to his special situation or to (2) object to the processing of its data.
6. FINAL PROVISIONS
6.2. The administrator uses technical and organizational measures to ensure the protection of the processed personal data appropriate to the threats and categories of data protected, in particular, protects the data against unauthorized disclosure, removal by an unauthorized person, processing in violation of applicable laws and change, loss, damage or destruction.
6.3. The administrator provides the following technical measures to prevent the acquisition and modification of personal data sent electronically by unauthorized persons:
6.3.1. Securing the data set against unauthorized access.
6.3.2. SSL certificate.
6.3.3. Access to the Account only after providing an individual login and password.
Information regarding online dispute resolution pursuant to Art. 14 Para. 1 of the ODR (Online Dispute Resolution Regulation):
The European Commission gives consumers the opportunity to resolve online disputes pursuant to Art. 14 Para. 1 of the ODR on one of their platforms. The platform (http://ec.europa.eu/consumers/odr) serves as a site where consumers can try to reach out-of-court settlements of disputes arising from online purchases and contracts for services.