PRIVACY POLICY

This Privacy Policy (hereinafter: "Policy") Contains information on the processing of your personal data in connection with the use of the Leeves online store, operating at the internet address www.staging-leeves.kinsta.cloud (hereinafter:"Store").

All capitalized terms that have not been defined otherwise in the Policy have the meaning given to them in the Store Regulations, available at: https: /staging-leeves.kinsta.cloud/strona/regulamin

 

Administrator personal data

The administrator of your personal data is LEEVES SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, NIP: 1182215421, REGON: 387457739, Ul. Podleśna 12c, 05-092 Łomianki, Masovian Voivodeship

Contact with the Administrator

In all matters related to the processing of personal data, you can contact the Administrator by e-mail by sending an e-mail to the following address: [email protected]

Personal data protection measures

The administrator uses modern organizational and technical security measures to ensure the best protection of your personal data and guarantees that it processes it in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with with the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation) (hereinafter: "GDPR"), The Act of May 10, 2018 on the protection of personal data and other provisions on the protection of personal data.

Information on processed personal data

Using the Store requires the processing of your personal data. Below you will find detailed information about the purposes and legal grounds for processing, as well as the period of processing and the obligation or voluntary provision thereof.

Purpose of processing

Processed personal data

Legal basis

Conclusion and performance of the contract for the provision of the Account Service

  1. name;
  2. name;
  3. e-mail address; optional - home address, tax identification number.

art. 6 sec. 1 lit. b GDPR

(processing is necessary to perform the contract for the provision of the Account Service concluded with the data subject, or to take action to conclude it)

 

Providing the above-mentioned personal data is a condition for the conclusion and performance of the contract for the provision of the Account Service (providing them is voluntary, but failure to provide them will result in the inability to conclude and perform the above-mentioned contract, including the creation of an Account).

The administrator will process the above-mentioned personal data until the claims under the Agreement for the provision of the Account Service are time-barred.

Purpose of processing

Processed personal data

Legal basis

Conclusion and performance of a Product sales contract

  1. name;
  2. name;
  3. e-mail address;
  4. Phone number;
  5. delivery address (street, house number, apartment number, zip code, city, country).

art. 6 sec. 1 lit. b GDPR

(processing is necessary to perform the Product sales contract concluded with the data subject, or to take action to conclude it)

Providing the above-mentioned personal data is a condition for the conclusion and performance of the product sales contract (providing them is voluntary, but failure to provide them will result in the inability to conclude and perform the above-mentioned contract).

The administrator will process the above-mentioned personal data until the claims under the Product sales contract are time-barred.

Purpose of processing

Processed personal data

Legal basis

Conclusion and performance of an agreement to replace the Product with another Product

  1. name;
  2. name;
  3. e-mail address;
  4. Phone number;
  5. correspondence address (street, house number, apartment number, zip code, city, country).

art. 6 sec. 1 lit. b GDPR

(processing is necessary to perform the contract to replace the Product with another Product concluded with the data subject, or to take action to conclude it)

Providing the above-mentioned personal data is a condition for the conclusion and performance of the contract to replace the Product with another Product (providing them is voluntary, but failure to provide them will result in the inability to conclude and perform the above-mentioned contract).

The administrator will process the above-mentioned personal data until the claims under the contract for replacing the Product with another Product are time-barred.

Purpose of processing

Processed personal data

Legal basis

Conducting the complaint procedure

  1. name;
  2. name;
  3. e-mail address;
  4. Phone number;
  5. correspondence address (street, house number, apartment number, zip code, city, country).

art. 6 sec. 1 lit. c GDPR

(processing is necessary to fulfill the legal obligation incumbent on the Administrator, in this case the obligations:

- responding to a complaint - art. 7a of the Consumer Rights Act;

- the implementation of the consumer's rights under the warranty - art. 556 and following of the Civil Code)

Providing the above-mentioned personal data is a condition for receiving a response to the complaint or exercising the Consumer's rights under the warranty (providing them is voluntary, but the consequence of not providing them will be the inability to receive a response to the complaint and exercise the rights resulting from the warranty).

The administrator will process the above-mentioned personal data for the duration of the complaint procedure (but no longer than 14 days), and in the case of the exercise of the consumer's rights under the warranty - until their expiry.

Purpose of processing

Processed personal data

Legal basis

Sending the newsletter

e-mail adress

art. 6 sec. 1 lit. f GDPR

(processing is necessary to implement the Administrator's legitimate interest, in this case, informing about new products and promotions available in the Store)

Providing your e-mail address is voluntary, but necessary in order to receive the Newsletter (the consequence of not providing them will be the inability to receive the Newsletter).

The administrator will process the e-mail address until the objection is effectively raised or the purpose of processing is achieved.

Purpose of processing

Processed personal data

Legal basis

Sending e-mail notifications

(e.g. informing about the progress of the Order, reminding about the placed pre-order)

  1. name;
  2. name;
  3. e-mail adress.

art. 6 sec. 1 lit. f GDPR

(processing is necessary to implement the Administrator's legitimate interest, in this case informing customers about activities related to the provision of services)

Providing the above-mentioned voluntary personal data, but necessary in order to receive information about activities related to the provision of services (failure to provide them will result in the inability to receive the above-mentioned information).

The administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved.

Purpose of processing

Processed personal data

Legal basis

Fulfilling tax obligations (e.g. issuing a VAT invoice, keeping accounting documentation)

  1. name and surname / company;
  2. address of residence / seat;
  3. number nip;
  4. order number

art. 6 sec. 1 lit. c GDPR

(processing is necessary to fulfill the legal obligation incumbent on the Administrator, in this case obligations arising from tax law)

Providing the above-mentioned personal data is voluntary, but necessary for the Administrator to meet the tax obligations (failure to provide them will result in the Administrator's inability to meet the above-mentioned obligations).

The administrator will process the above-mentioned personal data for a period of 5 years.

Purpose of processing

Processed personal data

Legal basis

Fulfillment of obligations related to the protection of personal data

  1. name;
  2. name;
  3. contact details provided by you (e-mail address, correspondence address, telephone number).

art. 6 sec. 1 lit. c GDPR

(processing is necessary to fulfill the legal obligation incumbent on the Administrator, in this case the obligations arising from the provisions on the protection of personal data)

Providing the above-mentioned personal data is voluntary, but necessary for the Administrator to properly perform the obligations arising from the provisions on the protection of personal data, including exercising the rights granted to you by the GDPR (failure to provide the above-mentioned data will make it impossible to correctly implement the above-mentioned rights).

The administrator will process the above-mentioned personal data until the expiry of the limitation periods for claims for violation of the provisions on the protection of personal data

Purpose of processing

Processed personal data

Legal basis

Establishing, investigating or defending against claims

  1. name;
  2. name;
  3. business;
  4. e-mail adress;
  5. address of residence / seat;
  6. PESEL / KRS number;
  7. number nip

art. 6 sec. 1 lit. f GDPR

(processing is necessary to implement the Administrator's legitimate interest, in this case to establish, investigate or defend against claims that may arise in connection with the performance of contracts concluded with the Administrator)

Providing the above-mentioned personal data is voluntary, but necessary to establish, investigate or defend against claims that may arise in connection with the performance of contracts concluded with the Administrator (failure to provide the above-mentioned data will make it impossible for the Administrator to take the above-mentioned actions)

The administrator will process the above-mentioned personal data until the expiry of the limitation periods for claims that may arise in connection with the performance of contracts concluded with the Administrator.

Purpose of processing

Processed personal data

Legal basis

Analysis of your activity in the Store

  1. date and time of visit;
  2. device IP number;
  3. device operating system type;
  4. approximate location;
  5. type of internet browser;
  6. time spent in the Store;
  7. viewed Products;
  8. visited subpages and other activities undertaken as part of the Store.

art. 6 sec. 1 lit. f GDPR

(processing is necessary to implement the Administrator's legitimate interest, in this case, to obtain information about your activity in the Store)

Providing the above-mentioned personal data is voluntary, but necessary in order for the Administrator to obtain information about your activity in the Store (failure to provide them will result in the Administrator's inability to obtain the above-mentioned information).

The administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved.

Purpose of processing

Processed personal data

Legal basis

Store administration

  1. IP address;
  2. server date and time;
  3. information about the web browser;
  4. information about the operating system.

The above data is saved automatically in the so-called server logs, each time the Store is used (administering it without the use of server logs and automatic saving would not be possible).

art. 6 sec. 1 lit. f GDPR

(processing is necessary to implement the Administrator's legitimate interest, in this case to ensure the proper operation of the Store)

Providing the above-mentioned personal data is voluntary, but necessary to ensure the proper operation of the Store (failure to provide them will result in the inability to ensure the Store's operation in a proper manner).

The administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved.

Profiling

In order to create your profile for marketing purposes and to direct direct marketing to you tailored to your preferences, the Administrator will process your personal data in an automated manner, including profiling them - however, it will not cause any legal effects to you, or in a similar way significantly affect your situation.

The scope of the profiled personal data corresponds to the scope indicated above in relation to the analysis of your activity in the Store and the data that you save in the Account.

The legal basis for the processing of personal data for the above purpose is Art. 6 sec. 1 lit. f GDPR, according to which the Administrator may process personal data in order to implement its legitimate interest, in this case, conducting marketing activities tailored to the preferences of recipients. Providing the above-mentioned personal data is voluntary, but necessary to implement the above-mentioned purpose (failure to provide them will result in the Administrator's inability to carry out marketing activities tailored to the preferences of recipients).

Recipients of personal data

The recipients of personal data will be the following external entities cooperating with the Administrator:

- hosting company;

- logistics operator and courier companies;

- online payment system providers

- companies providing tools for analyzing activity in the Store and directing direct marketing to people using it (including Google Analytics);

- a company providing accounting services.

In addition, personal data may also be transferred to public or private entities, if such an obligation will result from generally applicable provisions of law.

Transferring personal data to a third country

In connection with the Administrator's use of tools such as Google Analytics, your personal data may be transferred to the following third countries:

- the United States of America - on the basis of Implementing Decision (EU) 2016/1250 adopted pursuant to Directive 95/46 / EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-US Privacy Shield;

-Chile, Singapore and Taiwan (Republic of China) - based on adequate level of protection contractual clauses in line with the standard contractual clauses set out in the Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to data processors established in third countries under Directive 95/46 / EC of the European Parliament and of the Council.

You can obtain from the Administrator a copy of the data transferred to a third country.

Permissions

In connection with the processing of personal data, you have the following rights:

  1. the right to information what personal data concerning you are processed by the Administrator and to receive a copy of this data (the so-called right of access). The first copy of the data is free of charge, the Administrator may charge a fee for subsequent copies;
  2. if the processed data becomes out of date or incomplete (or otherwise incorrect), you have the right to request their rectification;
  3. in some situations, you can ask the Administrator to delete your personal data (i.e. when the data is no longer needed by the Administrator for the purposes he informed about; when the consent to data processing is effectively withdrawn - unless the Administrator has the right to process data on a different legal basis ; when the processing would take place unlawfully; when the need to delete data results from the legal obligation imposed on the Administrator);
  4. in the event that personal data are processed by the Administrator on the basis of the consent granted for processing or in order to perform the contract concluded with him, you have the right to transfer your data to another administrator;
  5. if personal data are processed by the Administrator on the basis of your consent to processing, you have the right to withdraw this consent at any time (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal);
  6. if you decide that the personal data being processed is incorrect, the processing is unlawful, or the Administrator no longer needs certain data, you can also request that for a certain, necessary time (e.g. checking the correctness of data or pursuing claims), the Administrator does not make data on them no operations, but only stored them;
  7. you have the right to object to the processing of personal data, the processing of which is based on the legitimate interest of the Administrator. In the event of an effective objection, the Administrator will cease to process personal data in the above-mentioned purpose;
  8. you have the right to lodge a complaint with the President of the Personal Data Protection Office, if you believe that the processing of personal data violates the provisions of the GDPR.

Cookies

Information on cookies used as part of the Store can be found in the Cookie Policy.

Final Provisions

In matters not covered by this Policy, the generally applicable provisions on the protection of personal data shall apply.

This Policy is effective from December 1, 2020.

Categories

Subscribe to our Newsletter!