Privacy Policy

§ 1 General provisions

1. The company is the administrator of personal data KOLEKT5 – Ujście 14, 93-490 Łódź, Polska – NIP: 7292756919 , REGON: 528956304, KRS: 0001112313. Z KOLEKT5 można kontaktować się pisemnie na adres wskazany w zdaniu poprzedzającym lub drogą e-mailową na adres: [email protected]
2. Pursuant to Art. 37 of the GDPR, the company "KOLEKT5 – Ujście 14, 93-490 Łódź, Polska – NIP: 7292756919 , REGON: 528956304, KRS: 0001112313” has not appointed a Data Protection Inspector.
3. The privacy policy is an integral part of the Regulations. By using the services we offer, you entrust us with your information. This document is intended only to help you understand what information and data is collected and for what purposes and what it is used for. This data is very important to us, so please read this document carefully as it sets out the principles and methods of processing and protecting personal data. This document also defines the rules for using files "Cookies".
4. We would like to inform you that we comply with the principles of personal data protection and all legal regulations provided for by the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to data processing personal data and on the free movement of such data and repealing Directive 95/46/EC.
5. At the request of the person whose personal data is processed, we provide comprehensive information on how we use his or her personal data. We always try to provide clear information about the data we collect, how we use it, what purposes it is to be served and to whom we transfer it, what protection we provide to this data when transferring it to other entities, and we provide information about the institutions that should be contacted in the event of doubts.

1. The Administrator informs Users that he entrusts the processing of personal data to the following entities:
   – Edrone Sp. z o. o., ul. Lekarska 1, 31-203 Kraków, NIP: 676-248-20-64, KRS: 0000537197 - in order to use the edrone.me mailing system for sending the newsletter,
   – Edrone Sp. z o. o., ul. Lekarska 1, 31-203 Kraków, NIP: 676-248-20-64, KRS: 0000537197: - for marketing purposes only and exclusively for the needs of e-mail, text message and social media campaigns launched or indicated by the Administrator using the edrone system,

2. The Administrator informs that it uses the following technologies to track activities undertaken by the user/Customer within the Store's website:
   – edrone tracking codes – in order to analyze the statistics of the Store's website, as well as for marketing purposes only for the needs of e-mail, SMS and social media campaigns launched or indicated by the Administrator using the edrone system.

§ 2 Privacy policy

1. We respect your privacy. We want to guarantee you the convenience of using our services.
2. We value the trust you place in us by entrusting us with your personal data in order to provide services. We always use personal data honestly and so as not to disappoint your trust, only to the extent necessary to provide services.
3. As a User, you have the right to obtain full and clear information about how we use your personal data and for what purposes they are necessary. We always provide clear information about the data we collect, how and to whom we share it, and provide information about entities to contact in case of doubt.
4. If there are any doubts regarding our use of your personal data, we will immediately take steps to clarify and dispel such doubts. We answer all related questions in a comprehensive manner.
5. We will take all reasonable steps to protect your data against inappropriate and uncontrolled use.
6. The legal basis for the processing of your personal data is:
   1. art. 6 section 1 letter and the data subject has consented to the processing of his or her personal data for one or more specific purposes
   2. art. 6 section 1 letter b processing is necessary for the performance of a contract to which the data subject is party or to take action at the request of the data subject before concluding the contract
   3. art. 6 section 1 letter c processing is necessary to fulfill the legal obligation imposed on the administrator
   4. art. 6 section 1 letter d processing is necessary to protect the vital interests of the data subject or another natural person
   5. art. 6 section 1 letter e processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
   6. art. 6 section 1 letter f processing is necessary for the purposes of legitimate interests pursued by the administrator or a third party

    

7. Your personal data related to the conclusion and implementation of the contract will be processed for the period of its implementation, and for a period no longer than provided for by law, including the provisions of the Civil Code and the Accounting Act, i.e. no longer than 10 years from the end calendar year in which the last contract was performed.
8. Your personal data processed for the purpose of concluding and performing future contracts will be processed until you raise an objection.
9. You have the right to: access your personal data and receive a copy of the personal data being processed, rectify your incorrect data; request deletion of data (right to be forgotten) in the event of the circumstances provided for in Art. 17 GDPR; request restriction of data processing in the cases indicated in Art. 18 GDPR, to object to data processing in the cases indicated in Art. 21 GDPR, transfer of the provided data processed in an automated manner.
10. If you believe that your personal data is being processed illegally, you may lodge a complaint with the supervisory authority (Office for Personal Data Protection, ul. Stawki 2, Warsaw). If you need additional information related to the protection of personal data or want to exercise your rights, please contact us by mail to the correspondence address.
11. We comply with all applicable data protection laws and regulations and will cooperate with data protection authorities and authorized law enforcement authorities. In the absence of data protection regulations, we will act in accordance with generally accepted data protection principles, principles of social coexistence and established customs.
12. If you have any questions, please contact us via the page from which you were redirected to this Privacy Policy. The request for contact will be immediately forwarded to the appropriate person.
13. To help us respond or respond to the information you have provided, please provide your name and surname.

§ 3 Scope and purpose of collecting personal data

1. We process the necessary personal data in order to provide services and for accounting purposes and only such.
2. We collect, process and store the following user data:
   1. first name and last name,
   2. address,
   3. delivery address (if different from the residential address),
   4. tax identification number (NIP),
   5. e-mail address (e-mail),
   6. telephone number (mobile, landline),
   7. information about the web browser used,
   8. other personal data voluntarily provided to us.

    

3. Providing the above data is completely voluntary, but also necessary for the full provision of services.
4. We may transfer personal data to servers located outside your country of residence or to related entities, third parties based in other countries, including countries from the EEA (European Economic Area, EEA - free trade area and Common Market). , covering the countries of the European Union and the European Free Trade Association EFTA) in order to process personal data by such entities on our behalf in accordance with the provisions of this Privacy Policy and applicable laws, customs and regulations regarding data protection.
5. Access to your data may be provided by entities providing services necessary to run the website, i.e.:
   1. Hosting companies providing hosting or related services to the Administrator
   2. Companies through which the Newsletter service is provided
   3. IT service and support companies performing or responsible for maintaining IT infrastructure
   4. Companies intermediating in online payments for goods or services offered on the Website (in the case of purchase transactions on the Website)
   5. Companies intermediating in mobile payments for goods or services offered on the Website (in the case of purchase transactions on the Website)
   6. Companies responsible for keeping the Administrator's accounting (in the case of purchase transactions on the Website)
   7. Companies responsible for delivering physical products to the User (postal/courier services in the case of purchase transactions on the Website)

    

§ 4 Cookies

1. It uses cookies or similar technologies (hereinafter collectively referred to as "cookies"), which should be understood as IT data, in particular text files, intended for using the website and stored on the end devices of Users browsing the websites. Information collected using cookies allows you to tailor services and content to individual needs and preferences of users, and is also used to develop general statistics on the use of websites by users. Data collected using cookies is collected only to perform specific functions for Users and is encrypted in a way that prevents access to it by unauthorized persons.
2. We use cookies on our website:
   1. Internal cookies – files uploaded and read from the User's Device by the Website's IT system
   2. Third-party cookies – files posted and read from the User's Device by the IT systems of external websites. Scripts of external websites that may place Cookies on User's Devices have been consciously placed on the Website through scripts and services made available and installed on the Website
   3. Session cookies – files uploaded and read from the User's Device by the Website during one session of a given Device. After the session ends, the files are deleted from the User's Device.
   4. Persistent cookies – files uploaded and read from the User's Device by the Website until they are manually deleted. Files are not deleted automatically after the end of the Device session, unless the configuration of the User's Device is set to delete cookies after the end of the Device session.

    

3. Our website uses the following types of cookies due to their necessity to provide services:
   1. necessary cookies enabling the use of services available on the website, in particular authentication cookies used for services requiring authentication;
   2. cookies used to ensure security, in particular used to detect authentication abuses;
   3. performance cookies, enabling the collection of information on how websites are used;
   4. functional cookies that enable "remembering" user-selected settings and personalization of the user interface;
   5. advertising cookies, enabling the provision of advertising content to users tailored to their interests.

    

4. Software for browsing websites (internet browser) usually allows cookies to be stored on the end device by default. The user browsing the website can independently change cookie settings at any time, specifying the conditions for storing them and accessing cookies to his device. The Customer can change the settings referred to in the previous sentence using the web browser settings. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the web browser settings or to inform each time a cookie is placed on the User's device. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings.
5. By using the website without changing cookie settings, you consent to the storage of cookies. The customer can always withdraw consent by changing cookie settings. Information on how to configure cookie settings in sample web browsers can be found here:
   • Chrome
   • Opera
   • FireFox
   • Edge
   • Safari
   • Internet Explorer 11

§ 5 Social Media Plugins

1. 1. So-called plug-ins of social networking sites may be located on our website.

1. 1. 1. Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA Facebook. To see Facebook plugins go to: https://developers.facebook.com/docs/plugins
      2. Twitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. To see Twitter plugins go to: https://dev.twitter.com/web/tweet-button

1. The plug-in only tells its provider which of our websites you have accessed and at what time. If, while viewing or staying on our website, the user is logged in to his or her account, e.g. on Facebook or Twitter, the provider is able to combine your interests, information preferences, and other data obtained, e.g. by clicking the Like button or leaving comment, or enter the profile name in the search. This information will also be transmitted by the browser directly to the provider.
2. To avoid your visit to your selected user account being recorded by the Plug-in on our website, you must log out of your account before browsing our website.

§ 6 Rights and obligations

1. We have the right, and in cases specified by law, also a statutory obligation, to provide selected or all information regarding personal data to public authorities or third parties who submit such a request for information under applicable Polish law.
2. The user has the right to:
   1. access to personal data The user has the right to obtain access to his or her personal data, carried out upon request submitted to the Administrator
   2. rectification of personal data The user has the right to request from the Administrator to immediately rectify personal data that is incorrect and / or to complete incomplete personal data, carried out upon request submitted to the Administrator
   3. deletion of personal dataThe User has the right to request the Administrator to immediately delete personal data, carried out upon request submitted to the Administrator. In the case of user accounts, deletion of data involves anonymization of data enabling the User's identification. The Administrator reserves the right to suspend the execution of a request to delete data in order to protect the Administrator's legitimate interest (e.g. when the User has violated the Regulations or the data was obtained as a result of correspondence). In the case of the Newsletter service, the User has the option of deleting his/her personal data on his/her own using the link included in each e-mail message sent.
   4. limiting the processing of personal data The user has the right to limit the processing of personal data in the cases indicated in Art. 18 GDPR, among others questioning the accuracy of personal data, carried out upon request submitted to the Administrator
   5. transfer of personal data The User has the right to obtain from the Administrator personal data regarding the User in a structured, commonly used, machine-readable format, carried out upon request submitted to the Administrator
   6. object to the processing of personal data. The user has the right to object to the processing of his or her personal data in the cases specified in Art. 21 GDPR, carried out upon request submitted to the Administrator
   7. lodge a complaintThe user has the right to lodge a complaint with the supervisory authority responsible for the protection of personal data.