Privacy Policy and Cookie Usage Policy

Privacy Policy and Cookie Usage Policy

§1 GENERAL PROVISIONS

This document outlines the rules for processing personal data obtained from Clients by the Online Store fitoncydy.pl, operated under the address fitoncydy.pl by przez firmę Baltic Griffin Krzysztof Kurpiecki, ul. Skłodowskiej 29/35. 14-202 Iława, Poland, VAT tax ID: PL7441343773. It also includes information regarding the use of Cookies and analytical tools in the Online Store.

The administrator of personal data is Baltic Griffin  (hereinafter referred to as the "Administrator").

Personal data collected by Baltic Griffin via the Online Store is processed in accordance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016).

The fitoncydy.pl Online Store informs that Clients' personal data will only be processed to execute and fulfill the agreement concluded with the Buyer/Client. With additional consent, personal data will also be processed to deliver informational materials and marketing offers in the form of a Newsletter.

The fitoncydy.pl Online Store makes every effort to ensure the privacy and protection of personal information provided while using and making purchases in the store, including the use of a secure communication encryption protocol (SSL).

Providing personal data is voluntary; however, failure to provide data marked as required will make registration or placing an Order impossible.

§2 TYPES, PURPOSES, AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

Personal data is collected in the fitoncydy.pl Online Store in the following cases:

1. To execute the sales agreement concluded with the Client for products from the Store related to Account registration and placing Orders – the legal basis for processing is Article 6(1)(b) GDPR (performance of a contract).

2. To establish, pursue, or defend claims – the legal basis for processing is Article 6(1)(f) GDPR (legitimate interests of the Administrator).

   • In these cases, the necessary scope of processed data includes: full name; email address; contact phone number; address (street, house number, apartment number, postal code, city, country); residence/business/registered office address; bank account number (in case of refunds). For non-consumer Clients, additional data such as company name and tax identification number (NIP) may also be collected, as well as other data gathered during the use of the Online Store.

3. Newsletter subscription, for the purpose of providing a service delivered electronically under an agreement. The legal basis for processing is Client consent for executing the agreement for the Newsletter service (Article 6(1)(a) GDPR).

   • In this case, the necessary scope of processed data includes: email address and contact phone number.

§3 SHARING PERSONAL DATA

To ensure the proper functioning of the Online Store, the Administrator relies on services provided by external entities. The Administrator guarantees that it uses the services of processors that operate in compliance with applicable laws, including the GDPR.

The Administrator shares data only when it is necessary for achieving the processing purpose and only to the extent required.

Clients' personal data may be shared with the following entities:
a. Hosting and IT service providers,
b. Carriers performing Order deliveries (as specified in the Terms and Conditions of the Online Store),
c. Entities handling electronic payments in the Online Store,
d. Entities providing accounting, legal, and advisory services.

§4 RETENTION PERIOD FOR PERSONAL DATA

The personal data provided will be processed for the duration of:

• The sales agreement for goods, including the Client’s warranty claims and the Administrator's pursuit or defense of claims – but no longer than 10 years from the date the data was provided.

§5 PROFILING

The fitoncydy.pl Online Store may use profiling, which involves automated processing of personal data to assess personal factors of a natural person, particularly to analyze or predict the preferences and interests of Clients.

This functionality enables the Administrator to display advertisements tailored to the Client's preferences and interests and to present products that best meet their needs. It also facilitates appropriate communication methods, including language preferences.

A data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

§6 RIGHTS OF THE DATA SUBJECT

Under the GDPR, individuals providing their personal data have several rights, including:

1. Right to information – regarding how personal data is processed.
2. Right to access and update data.
3. Right to withdraw consent – legal basis: Article 7(3) GDPR.
4. Right to object to data processing – legal basis: Article 21 GDPR:
   • A Client has the right to object at any time, on grounds relating to their particular situation, to the processing of their personal data, including profiling, if the fitoncydy.pl Online Store processes their data based on legitimate interests.
5. Right to data deletion (right to be forgotten) – legal basis: Article 17 GDPR.
6. Right to restrict data processing – legal basis: Article 18 GDPR.
7. Right to data portability – legal basis: Article 20 GDPR.
8. Right to file a complaint – with a supervisory authority.

§7 COOKIES

1. The fitoncydy.pl Online Store uses Cookies. These are small text files sent by a web server and stored by browser software. When the browser reconnects to the website, the site recognizes the type of device the user is connecting from. Parameters allow the server that created them to read the information contained in them. Cookies facilitate the use of previously visited websites.

2. The Administrator uses its own Cookies to configure the Store properly, including:
   a. Adapting the Store’s website content to the Client’s preferences and optimizing the use of websites,
   b. Recognizing the Client’s device and location to display the website accordingly,
   c. Remembering settings chosen by the Client and personalizing the interface (e.g., language or region preferences),
   d. Adjusting appropriate advertisements to the Client’s preferences,
   e. Remembering the history of visited pages to recommend content,
   f. Font sizes, website appearance, etc.

3. The Administrator uses its own Cookies for user authentication in the Store and maintaining user sessions, specifically:
   a. Maintaining the Client’s session after logging in, so the Client does not have to re-enter their login and password on each subpage.
   b. Configuring specific service features to verify session authenticity.
   c. Optimizing and improving the performance of services provided by the Administrator.

4. The Administrator collaborates with the following external services, which may place third-party Cookies:
   a. Google Inc. (including Google AdSense, Google Analytics, Google Ads, etc.),
   b. Facebook Inc. or Facebook Ireland,
   c. Benhauer Sp. z o.o. (SalesManago),
   d. Comperia.pl S.A.,
   e. EBROS Mariusz Rosa (czater.pl – online chat functionality),
   f. CallPage Sp. z o.o.,
   g. Zendesk, Inc.,
   h. Hotjar Ltd.

5. Users can independently change their Cookie settings at any time, specifying storage and access conditions for Cookies via browser settings or service configuration.

6. Users can delete Cookies at any time using their browser’s available functions.

7. Restricting the use of Cookies may affect certain functionalities of the website.

§8 FINAL PROVISIONS

The Administrator reserves the right to amend this Privacy Policy at any time and place while committing to promptly publishing the new Privacy Policy on the Store’s website and notifying all registered Users.

Any matters not covered by this Privacy Policy are governed by applicable personal data protection laws.

All questions regarding the Privacy Policy and personal data protection should be sent to sklep@fitoncydy.pl.

This Privacy Policy is effective as of April 13, 2024.