We collect and store all personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (hereinafter: "GDPR") and the Act of 18 July 2002 on the provision of electronic services
Personal data administrator
The administrator of Personal Data is EXTRADECOR Spółka z Ograniczoną Odpowiedzialnością, Plac Bankowy str. 2 / 1309, Warsaw, 00-095, Poland, registered in the Register of Entrepreneurs of the National Court Register by the District Court in Warsaw, Commercial Division of the National Court Register, under KRS number 0000737519, REGON 380624246, NIP 5213832307.
What kind of data we process
We process your personal data which you provide to us in particular in the order form or in the contact form or by subscribing to the newsletter or by sending us an e-mail, or by submitting a complaint or withdrawing from the contract. We also process your bank account number from which you will make a payment or on which we will make refunds. If you issue a VAT invoice, we also process the company name, address of residence or business address, NIP number. In addition, we also store your data regarding your behavior, including transactions, complaints and history of correspondence and contacts with us, activities on our website and in the online store, our profiles on social networks, our accounts on third party websites (such as Dawanda.pl). These are data such as the products viewed, IP addresses or device identifiers, cookie data and locations, correspondence, contacts. For the purposes of establishing, investigating and defending claims, we may also collect data regarding the PESEL number or NIP number and address of residence.
Objectives and basics of processing
When placing an order, you must provide the necessary information to complete the order, such as your name, mailing address, e-mail address, telephone number. Providing data is voluntary, but necessary to place an order. The data provided to us in connection with the order is processed for the purpose of the contract (Article 6 (1) b), invoice (Article 6 (1) (c) of the GDPR), invoice included in our accounting documentation (Article 6 (1) (c) of the GDPR) and for archival and statistical purposes (Article 6 (1) (f) of the GDPR Law). Data on orders will be processed for the time necessary to perform the contract, and then until the expiry of the period of limitation of claims under the contract. In addition, after this date, the data may still be processed by us for statistical purposes.
If you want to subscribe to the newsletter, you must give us your e-mail address via the subscription form to the newsletter. Providing data is voluntary, but necessary to subscribe to the newsletter. The data provided to us when subscribing to the newsletter is used to send you a newsletter, and the legal basis for their processing is your consent (Article 6 (1) letter and GDPR) expressed when you subscribe to the newsletter. The data will be processed for the duration of the newsletter operation, unless you cancel your receipt earlier, which will delete your data from the database. At any time, you can correct your data stored in the newsletter database, as well as request their removal, giving up receiving the newsletter.
Complaints and withdrawal from the contract
If you make a complaint or withdraw from the contract, you provide us with personal data contained in the content of the complaint or a statement of withdrawal, which includes your name, address, phone number, e-mail address, bank account number. Providing data is voluntary but necessary to make a complaint or withdraw from the contract. The data provided to us in connection with the submission of a complaint or withdrawal from the contract are used to carry out the complaint procedure or the procedure for withdrawing from the contract (Article 6 (1) (c) of the GDPR). The data will be processed for the time necessary to carry out the complaint procedure or the withdrawal procedure. Complaints and statements about withdrawal from the contract may also be archived for statistical purposes.
By contacting us via e-mail, including by sending an inquiry via the contact form, you give us your e-mail address as the sender's address. In addition, you can also include other personal information in the body of the message. Providing data is voluntary, but necessary to make contact. Your data is processed in this case in order to contact you, and the basis for processing is art. 6 par. 1 lit. a GDPR, or your consent resulting from initiating contact with us. The legal basis for processing after the end of contact is the justified purpose of archiving correspondence for internal needs (Article 6 (1) (c) of the GDPR).
Your data may be processed by our subcontractors, that is, entities whose services we use to process data and provide services to you or perform orders in the online store, in particular:
a) to our employees and associates who must have access to the data to be able to carry out our obligations or actions on behalf of you;
b) entities processing, on our behalf, your personal data and participating in the performance of our activities:
- to store personal data on the server;
- in order to use the mailing system in which your data are processed, if you subscribed to the newsletter;
- in order to handle the shipping process, under which your data necessary for the delivery of the order is processed;
- in order to use the services of courier companies that deliver your order to you;
- in order to use IT support, manage websites, in connection with which the entity providing support may have access to your personal data collected as part of the website or store;
- in order to make refunds or to ensure the operation of a direct debit service;
- in order to provide consultancy, audit, legal, tax and accounting services.
Analysis and online statistics
We use the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We implement activities in this area based on our legitimate interest in the production of statistics and their analysis in order to optimize our websites. Google Analytics automatically collects information about your use of our site. The information collected in this way is usually transmitted to a Google server in the United States and stored there. Due to the IP anonymisation that we have activated, your IP address is shortened before forwarding. Only in exceptional cases, the full IP address is forwarded to a Google server in the United States and shortened there. Due to the fact that Google LLC has a registered office in the USA and uses technical infrastructure located in the USA, he joined the EU-US-Privacy Shield program to ensure an adequate level of protection of personal data required by a European provision. Under the agreement between the US and the European Commission, the latter has found an adequate level of data protection for companies certified by Privacy Shield. If you are interested in the details related to the processing of data within Google Analytics, we encourage you to read the explanations prepared by Google: https://support.google.com/analytics/answer/6004245.
In addition, our site uses plugins and other social tools provided by social networking sites, such as Facebook, Instagram, Twitter, Google, Pinterest. By displaying our website containing such a plugin, your browser will establish a direct connection to social network administrators (service providers) servers. The content of the plugin is forwarded by a given service provider directly to your browser and integrated with the website. Thanks to this integration, service providers receive information that your browser has displayed our website, even if you do not have a profile with your service provider or if you are not logged in at the same time. This information (along with your IP address) is sent by your browser directly to the server of a given service provider (some servers are located in the USA) and stored there. If you have logged in to one of the social networking sites, then this service provider will be able to directly assign a visit to our website to your profile in a given social network.
a) Facebook - https://www.facebook.com/legal/FB_Work_Privacy;
b) Instagram - https://help.instagram.com/519522125107875?helpref=page_content,
c) Twitter - https://twitter.com/en/privacy,
d) Google - https://policies.google.com/privacy?hl=en,
e) Pinterest - https://policy.pinterest.com/en/privacy-policy.
If you do not want social networking sites to assign data collected during the visit to our website directly to your profile in a given website, then before you visit our website you have to log out of this site. You can also completely prevent loading on the plugin page using the appropriate extensions for your browser, e.g. blocking scripts.