GENERAL PROVISIONS

• The controller of the personal data collected via the Online Shop is Iskra spółka z ograniczoną odpowiedzialnością with its registered office in Gdańsk, ul. Doki 1, 80-863 Gdańsk, entered in the Register of Entrepreneurs of the National Court Register by the Gdańsk–North District Court in Gdańsk, under KRS number: 0000927167; NIP [Tax ID]: 5833438668; REGON [Business ID]: 52023845; e-mail address: shop@iskracassettes.com, hereinafter referred to as the "Controller" and which is also the Seller.
• Personal data in the Online Shop are processed by the Controller in accordance with the applicable laws, in particular pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the “GDPR”.
• The use of the Online Shop, including making purchases, is voluntary. Similarly, the provision of personal data by a Customer using the Online Shop is voluntary, subject to two exceptions:
  1. 1. conclusion of agreements with the Controller - failure to provide personal data necessary for the conclusion and performance of a Sale Agreement with the Controller, in the cases and to the extent indicated on the website of the Online Shop, in the Regulations of the Online Shop and in this Privacy Policy, makes it impossible to conclude the agreement;
  2. 2. the Controller's statutory obligations - providing personal data is a statutory requirement resulting from generally applicable laws requiring the Controller to process personal data; if the data are not provided, the Controller will be unable to fulfil its obligations.
• The Controller represents that the data collected by it are:
  1. 1. processed in accordance with law;
  2. 2. collected for specific legitimate purposes and not subjected to further processing incompatible with those purposes;
  3. 3. substantially correct and adequate in relation to the purposes for which they are processed;
  4. 4. kept in a form which makes data subjects identifiable for no longer than is necessary for the purposes of the processing;
  5. 5. processed in a manner that ensures the appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by means of appropriate technical or organisational measures.
• All capitalised words in this Privacy Policy shall be understood in accordance with their definition in the Shop Regulations available on the website of the Online Shop.

BASIS FOR DATA PROCESSING

• The Controller is entitled to process personal data in cases where:
  1. 1. the data subject has given consent to the processing of their personal data for one or more specified purposes;
  2. 2. the processing is necessary for the performance of an agreement to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into an agreement;
  3. 3. processing is necessary for compliance with the Controller’s legal obligation;
  4. 3. processing is necessary for compliance with the Controller’s legal obligation;

PURPOSE AND BASIS OF DATA PROCESSING IN THE ONLINE SHOP

• The purpose, basis and period of the processing and recipients of the personal data processed by the Controller result each time from the activities undertaken by a given Customer in the Online Shop or by the Controller.

DATA RECIPIENTS IN THE ONLINE SHOP

• To ensure the proper functioning of the Online Shop, including the performance of concluded Sale Agreements, the Controller is required to use services provided by external entities. The Controller shall only use the services of processors providing sufficient guarantees that appropriate technical and organisational measures will be implemented.
• The Controller transfers data only when it is necessary for the fulfilment of a given purpose of personal data processing and only to the extent necessary for its fulfilment.
• The personal data of the Customers of the Online Shop may be transferred to the following recipients or categories of recipients:
  1. 1. carriers / forwarders / courier brokers / entities handling the warehouse and/or the shipment process - for a Customer using the delivery of a Product by post or courier in the Online Shop, the Controller shall make the collected personal data of the Customer available to the selected carrier, forwarder or broker carrying out the shipment on behalf of the Controller, and if the shipment is made from an external warehouse - to the entity handling the warehouse and/or the shipment process - to the extent necessary to deliver the Product to the Customer;
  2. 2. entities handling electronic or credit card payments - for a Customer using payment with an electronic card or credit card in the Online Shop, the Controller makes the collected personal data of the Customer available to a selected entity commissioned by the Controller to handle the above-mentioned payments to the extent necessary to handle the payment made by the Customer;
  3. 3. service providers supplying the Controller with technical, IT and organisational solutions enabling the Controller to conduct business activity, including the Online Shop and Electronic Services provided through it;
  4. 4. accounting, legal and advisory service providers providing the Controller with accounting, legal or advisory support.

PROFILING IN THE ONLINE SHOP

• The Controller may use profiling in the Online Shop for direct marketing purposes, but the decisions made by the Controller on its basis do not concern the conclusion or refusal to conclude a Sale Agreement or the possibility of using Electronic Services in the Online Shop.
• The data subject has the right not to be subject to decisions which are based solely on automated processing, including profiling, and which produce legal effects in relation to the data subject or have a similar significant impact on the data subject.

RIGHTS OF THE DATA SUBJECT

• The data subject has the right to request from the Controller access to their personal data, their rectification and erasure or the restriction of processing, the right to object to the processing and the right to data portability.
• The person whose data are processed by the Controller on the basis of consent (pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR) has the right to withdraw their consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
• The person whose data is processed by the Controller has the right to lodge a complaint to the supervisory authority in the manner and under the procedure specified in the provisions of the GDPR and Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Office for Personal Data Protection.
• The data subject has the right to object at any time, for reasons related to their particular situation, to the processing of their personal data pursuant to Article 6(1)(e) (public interest or tasks) or (f) (legitimate interest of the controller), including profiling on the basis of these provisions. In such a case, the Controller shall no longer be allowed to process these personal data, unless the Controller demonstrates the existence of compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or grounds for the establishment, exercise or defence of claims.
• Where personal data are processed for the purposes of direct marketing, the data subject shall have the right to object at any time to the processing of their personal data for the purposes of such marketing, including profiling, to the extent that the processing is related to such direct marketing.
• In order to exercise the rights referred to in this section of the Privacy Policy, the Controller may be contacted by sending an appropriate message in writing or by e-mail, to the Controller’s address specified at the beginning of the Privacy Policy.

COOKIES IN THE ONLINE SHOP AND ANALYTICS

• Most web browsers available on the market accept cookies by default. Everyone has the possibility to determine the conditions for the use of cookies through the settings of their own web browser.
• The web browser settings regarding cookies are relevant to your consent to the use of cookies by our Online Shop. In accordance with the regulations, such consent can also be expressed through your browser settings. Detailed information on how to change the cookies settings and how to delete cookies in the most popular web browsers on your own is available in the help section of your web browser.

FINAL PROVISIONS

• The Online Shop may contain links to other websites. The Controller recommends reading the privacy policy of other websites. This Privacy Policy applies only to the Controller’s Online Shop.