Privacy policy
1. General Provisions
- The document defines the Privacy Policy of the zanadesign.eu store, which in particular includes regulations regarding the protection of personal data and the security of other data entered into the Store by the User.
- The Privacy Policy constitutes an integral annex to the Regulations.
2. Definitions
The terms used in the regulations mean:
- Administrator – Sebastian Zach, conducting business under the name of ZD Marcin
Nasiłowski Sp. K., ul. Miodowa 23/2, 81-558 Gdynia, NIP: 5862313751,
REGON: 366358212;
- Store – the zanadesign.eu online store available via the Internet from the domain https://zanadesign.eu
- Website – the website at https://zanadesign.eu and all its subpages.
- Parties – Administrator and User.
- User – a natural person who, by registering in the Store in the manner indicated in § 2 of the regulations, has an active user account or makes a purchase in the Store without registration.
3. Protection of personal data
- The Administrator is the Administrator of personal data within the meaning of art. 7 point 4 of the Personal Data Protection Act.
- The data entered into the IT System by the User who is a natural person has been registered in the register of personal data collections maintained by GIODO.
- Using the Store requires the User to provide their own personal data.
- The Administrator obtains and processes the following personal data:
- first name and last name
- address for deliveries
- telephone number
- e-mail address
- company name of the business activity
- NIP number
- address of the business activity
- The Administrator processes personal data in order to conclude an agreement and provide services and sell the Administrator's goods to Users and for other legally justified purposes.
- Personal data are processed on the basis of the consent expressed by the User and in cases where legal regulations authorize the Administrator to process personal data.
4. User rights
- The User has the right to access and review the content of personal data and to correct and update it.
- In the event of a change in personal data, the User should update it on the User Profile.
- The Administrator provides the User with the possibility of removing their personal data from the data set referred to in § 3 point 2 at the request of the User, as well as in other cases, based on the provisions of applicable law.
- The Administrator may refuse to remove the User's personal data if the retention of personal data is necessary due to the obligation imposed on the Administrator by law.
- The User also has the following rights:
- the right to obtain a copy of the Personal Data processed by the Administrator,
- the right to limit the processing of Personal Data,
- the right to transfer Personal Data,
- the right to object to the processing of Personal Data for marketing purposes,
- the right to object to other purposes of data processing,
- the right to withdraw consent if Personal Data are processed on the basis of expressed consent,
- the right to lodge a complaint with the body supervising the processing of Personal Data. In Poland, the supervisory authority is the President of the Personal Data Protection Office.
5. Data encryption
- The Administrator undertakes to encrypt data transmission in order to secure the User's data stored in the system.
- Each connection between the User and the Store is encrypted and confidential.
6. Technical data protection
- The Administrator undertakes to store backup copies containing the User's personal data.
- The entrusted data is stored on top-class equipment and servers in appropriately secured information storage centers, to which only authorized persons have access.
- The Administrator carries out activities related to the processing of personal data while respecting all legal and technical requirements imposed on it by the provisions on personal data protection.
7. Cookies Policy
- For the convenience of Users, the Store uses cookies, among others, to adapt the service to the needs of users and for statistical, functional, analytical and marketing and advertising purposes. Cookies are small text files sent by the website visited by the Internet user to the Internet user's device.
- The data collected in the logs are used solely for the purposes of administering the Store.
- In accordance with the practice of most websites, we store https requests directed to our server (server logs). In connection with the above, we store:
- IP addresses from which users browse the information content of our service;
- time of receipt of the request,
- time of sending the response,
- name of the client station - identification performed by the https protocol,
- information about errors that occurred during the execution of the https transaction,
- URL address of the page previously visited by the user (referrer link);
- information about the user's browser.
- The collected logs are stored for an indefinite period of time as auxiliary material used to administer the Store. The information contained therein is not disclosed to anyone other than persons authorized to administer the Store. Statistics that assist in administration can be generated based on log files. Collective summaries in the form of such statistics do not contain any features identifying persons visiting the website.
- The Administrator processes the information contained in the logs for technical and administrative purposes, for the purposes of ensuring the security of the IT system and managing this system, as well as for analytical and statistical purposes - in this respect, the legal basis for the processing of Personal Data is the legitimate interest of the Administrator (Article 6, paragraph 1, letter f of the GDPR).
- The Administrator uses cookies to provide services electronically, improve them and improve their quality, as well as for analytical and statistical purposes and to adapt the Website to the needs of its Users. By using cookies, the Administrator personalizes content and advertisements. Information on how the User uses the Service is shared by the Administrator with trusted social, advertising and analytical partners in order to provide the highest quality services in the scope of e-shop operation, analytics, matching and personalization. The list of trusted partners is below:
- Google Analytics, Google Ads Manager, Google Tag Manager - marketing tools https://policies.google.com/privacy?hl=pl-PL
- The Service uses two types of cookies: "session" (session cookies) and "persistent" (persistent cookies). "Session" cookies are temporary files that are stored on the User's end device until logging out, leaving the website or disabling the software (internet browser). Persistent cookies are stored on the User's end device for the time specified in the cookie file parameters or until they are deleted by the User.
- The Administrator uses the following types of cookies on the Website:
- necessary - they enable the use of services and functionalities available on the Website, e.g. used to handle user authorization or to fill the shopping cart when shopping online;
- preferential - they enable the User's choices to be remembered and remembered and adjusted on the Website, e.g. in terms of language preferences, font size, appearance of the Website, etc.;
- analytical - they enable the acquisition of a range of information, including the number of visits and traffic sources on the Website. The collection of this data is used to determine which pages are most frequently visited and leads to the creation of statistics on traffic on the Website. The collection of this data is used by the Administrator to improve the performance of the Website. The collected data is processed in anonymized form;
- marketing and advertising - they enable the adjustment of content displayed on the Website and outside the Website, including advertisements, to the interests of Users. Data regarding the history of pages viewed, activity on websites (e.g. purchase history, method of using services, type of content and advertisements displayed) or geolocation data may be used to present personalized content. Based on information from the Website and the User's activity on other websites, a profile of the User's interests is built.
- Preferential, analytical and marketing-advertising cookies may be installed by the Administrator and its trusted partners via the Website.
- The legal basis for data processing in connection with the use of necessary cookies is the necessity to process Personal Data to perform the contract (Article 6, paragraph 1, letter b of the GDPR). In the case of other cookies, the basis for processing Personal Data is the legitimate interest of the Administrator or the User's consent (Article 6, paragraph 1, letters a and f of the GDPR). In order to use preferential, analytical and marketing-advertising cookies, the Administrator must obtain the User's consent.
- The consent referred to in paragraph 9 is granted using an appropriate form displayed during the first visit to the Website. The consent granted may be withdrawn or adjusted in a different way at any time.
- The User may change the settings for cookies from the web browser. Below are links to web browsers (containing information on how to modify their settings on the User's end devices):
Mobile devices
8. Transferring data outside the EOG
As part of the Administrator's use of tools supporting current activities provided by, for example, Google, Users' Personal Data may be transferred to a country outside the European Economic Area (EOG), in particular to the United States of America (USA) or another country in which an entity cooperating with it maintains tools for processing Personal Data in cooperation with the Administrator. The Administrator transfers Personal Data outside the EOG only when it is necessary and with an adequate level of protection, primarily through the use of standard contractual clauses issued by the European Commission.
9. Contact
- The User may contact the Administrator at any time to obtain information on whether and how the Administrator uses or intends to use his or her personal data.
- The User may also ask the Administrator to delete his or her personal data in whole or in a specific part.
- The Administrator can be contacted by sending a message to the e-mail address: sklep@zanadesign.eu