Since May 25, 2018, regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), has been in force.
With this in mind, we would like to inform you about the processing of your data and the rules on which this will take place from May 25, 2018.
What data do we process?
We process your personal data that we collect as part of your use of our website and online store. This also applies to data stored in cookies. In the case of registration in our online store, we only need your data, which are necessary for the execution of the order:
– first and last name;
– order delivery address;
– e-mail address;
– phone number;
NIP for companies;
We also process the data of our customers, contractors, companies cooperating with US, entities providing services to the cooperative. All data is processed as part of our statutory activities.
Providing personal data during registration or placing an order is voluntary, although necessary for the implementation of the sales agreement concluded by the customer of the online store with the seller. The customer has the right to access the content of their data and correct them.
Each of our customers using the offer of our online store has the opportunity to take advantage of the system of quick fees for the order carried out by an external entity, i.e. Transfers24. The provision of data in the transfer form takes place on the website of the entity performing the transfer function, the provision of data is voluntary, but necessary in order to use the service.
Who will be the administrator of your data?
The administrator of your data will be: Spółdzielnia Niewidomych PROMET, with its Registered office at 41-200 Sosnowiec, ul. Lipowa 11. NIP: 644-051-51-83, KRS: 0000053760.
Why do we process data?
We process your data in connection with:
- Conducting business activities, including the execution of your orders made in our online store.
- For the performance of a contract to which the data subject is a party.
- In order to facilitate the payment for the ordered goods, we provide the option of fast transfers carried out by Przelewy24.
- Making measurements and analyses that will allow us to improve our offer and the services provided, this applies in particular to traffic on our website and in the online store.
Who can we give the data to?
In accordance with applicable law, we may transfer your data to entities processing it on our behalf, e.g. subcontractors of our services, entities providing courier and transport services, and entities authorized to obtain data under applicable law, e.g. courts or law enforcement authorities – of course, only if they make a request based on an appropriate legal basis. Taking into account our business profile, we would like to inform you that your data will not be processed automatically by us.
Your data will be processed by entities with which the Administrator cooperates in order to fulfill your order, and entities providing services to the administrator. In some cases, we transfer your data to selected third parties. We do this only as part of the implementation of the services that have been defined by US and to the extent that they include the processing agreements signed by US.
In the case of data transfer to third parties, we sign an appropriate data processing agreement with this entity. In this case, the data subject is obliged to ensure adequate protection of the data transmitted to him.
In the case of payment for an order through the Przelewy24 system, your data are processed by the operator of this service, i.e. PayPro S. A ul. Kanclerska 15, 60-327 Poznań, NIP 781-173-38-52, REGON 634509164.
What rights do you have in relation to your data?
Right of access
At any time, you have the right to receive complete information about which of your personal data we store. To do so, please contact us at the addresses below.
Right to data portability
The cooperative as an Administrator does not process personal data in an automated manner, bearing in mind that, on the basis of your request, you have the right to receive a copy of your data in a commonly used and readable format. This applies only to personal data that has been made available to us.
Right to rectification
In accordance with applicable law, you have the right to improve or supplement the data provided to us. To do this, please contact us.
Right to data portability
You have the right to request the deletion of your personal data from our database at any time. This can be done at any time, except when:
- Your order has not yet been processed;
- you have unrealized payments to us, regardless of the stage of order execution;
- if you have made any purchases, we will retain your personal data relating to the transaction for accounting purposes.
Right to object to data processing on the basis of legitimate interest
The applicable law gives you the right to object to the processing of your data, to the extent that we process your data, based on the legitimate interest of the administrator. We will then stop processing your personal data unless we can find a legitimate reason to do so that overrides your interest or rights; or because of legal claims.
Right to object to direct marketing
You have the right not to consent to receive direct marketing materials, including the analysis of your profile that we prepare to create such materials.
Right to restriction of processing
You have the right to request that we restrict the processing of your personal data under the following conditions:
- if you do not agree to the processing of data on the basis of the legitimate interest of the controller. We then restrict any processing of such data once we have verified whether there is such a legitimate interest;
- if you report the inaccuracy of your personal data. We will then restrict any processing of your data until we have verified that it is correct;
- if the data processing is unlawful. In this case, you may not consent to the erasure of your personal data and instead request the restriction of the use of your personal data;
- if we no longer need your personal data but are required to file, dismiss or secure a claim.
How can you exercise your rights?
The Administrator takes care of the personal data entrusted to him, for this purpose, for their security, he has appointed a Data Protection Officer, who can be contacted at: firstname.lastname@example.org.
Right to lodge a complaint with a supervisory authority
If you believe that we are processing your personal data improperly, please contact us. You can also file a complaint with the Supervisory Authority, which is the president of the Office for Personal Data Protection.
How to contact us?
The controller has appointed a Data Protection Officer who can be contacted at the above addresses.
The period for which the data will be stored
Your personal data will be stored until the limitation period for claims under the contract / provision of services or until the expiration of the obligation to store data resulting from legal provisions, in particular the obligation to store accounting documents related to the contract.
A Cookie is a small file (usually a text file) stored on your computer or device, in this file the settings and other settings of the pages that you visit are stored and saved. They make it easier to recognize individual user preferences related to the functionality of the device and display a page tailored to the individual needs of the site user. Cookies may contain personal data in the form of a computer’S IP address and a unique Device Identifier stored in the file.
The Administrator uses only his own cookies, this is related to the provision of services by us electronically.
Cookies are used for the following purposes:
- adjusting the content of the website and the online store of the cooperative of the Blind PROMET in Sosnowiec to the preferences of the visitor to the website, and optimizing the use of the website, in particular, these files allow you to recognize the device used by the user and properly display the page tailored to his individual needs;
- create statistics that allow you to understand how users use the site;
- maintaining the user session (only after logging in), thanks to this feature, the user does not have to log in to the store again on each subpage (product card).
Cookies do not endanger the client’s computer system. They perform nameless identification, usually contain only the name of the website from which they originate, their storage time on the terminal device and a unique number.
Cookies may contain personal data if placed on our website. Such data are effectively protected by US and no unauthorized person has access to them. This information is only used in the course of performing certain specific actions that have been accepted (e.g. when executing an order). Cookies only contain information that is necessary for the proper performance of our services.
In addition, in order to increase security, the Administrator uses encryption on the store’s website.
Basic safety rules
In order to maintain basic security principles, we recommend that you use the same computer together with other people when you finish using the services www.sklep.sn-promet.com.pl to which you must log in, you must log out so that no one can view, use or modify its resources or information. At the same time, we recommend disabling automatic password storage in web browser options.
We ask you to be careful when sharing your data, in particular your password, with third parties.
What are the legal grounds for processing your data?
The processing of your data must be based on an appropriate legal basis in accordance with applicable laws. In the case of placing orders through our online store, by e-mail, the basis for such processing will be art. 6 para.1 lit. b of the GDPR. In the case of measurements and analyses (m.in.) traffic on our website will be based on art. 6 (1) lit. f of the GDPR regulation. This should be understood as a legitimate interest pursued by the administrator. In the case of performance of other types of contracts or obligations, the basis for data processing will be Article 6 (1) (b).
As of 08.03.2019