Privacy policy

Here you will find the rules for the processing of personal data and the use of cookies and other tracking technologies in connection with the functioning of the website WWW.CHOCOLU.PL, WWW.CHOCOLU.EU

The website administrator is Cukiernia Staropolska Tomasz Machoń 20-388 Lublin, Wólka Abramowicka 47H

This privacy policy is informative, which means that it is not a source of obligations for Customers or Customers of the Online Store. The privacy policy contains rules regarding the processing of personal data by the Administrator in the Online Store, including the grounds, purposes and duration of personal data processing and the rights of data subjects, as well as information on the use of cookies and analytical tools in the Online Store.

 

  1. GENERAL PROVISIONS

The administrator of your personal data is: Cukiernia Staropolska Tomasz Machoń 20-388 Lublin, Wólka Abramowicka 47H

Contact details of the data protection officer appointed by the Administrator: CONTACT DETAILS (via MAIL) biuro@chocolu.pl

Personal data in the Online Store are processed by the Administrator in accordance with applicable law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on free movement of such data and the repeal of Directive 95/46 / EC (general data protection regulation) – hereinafter referred to as “GDPR” or “GDPR Regulation”. The official text of the GDPR Regulation: http://eurlex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679

The administrator takes special care to protect the interests of persons whose personal data being processed by him, and in particular is responsible and ensures that the data collected by him are: (1) processed in accordance with the law; (2) collected for specified, lawful purposes and not subjected to further processing incompatible with these purposes; (3) factually correct and adequate in relation to the purposes for which they are processed; (4) stored in a form enabling the identification of persons to whom they relate, no longer than it is necessary to achieve the purpose of processing, and (5) processed in a manner ensuring adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage by appropriate technical or organizational measures.

 

  1. GROUNDS FOR DATA PROCESSING

The administrator is entitled to process personal data in cases where – and to the extent that – at least one of the following conditions is met: (1) the data subject has consented to the processing of his personal data for one or more specific purposes ; (2) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (3) processing is necessary to fulfill the legal obligation incumbent on the Administrator; or (4) processing is necessary for the purposes of the legitimate interests pursued by the Administrator or by a third party, except where these interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require protection of personal data , in particular when the data subject is a child.

The data subject to processing are:

  • first name and last name,
  • address,
  • business address,
  • NIP number,
  • e-mail adress,
  • Phone number,
  • information about placed orders,
  • data contained in correspondence addressed to us,

The data is processed on the basis of voluntary provision of information during:

  • user account registration
  • placing an order
  • sending a complaint or withdrawing from the contract
  • subscribing to the newsletter
  • contact with the website administration

 

  1. PURPOSE, BASIS AND PERIOD OF DATA PROCESSING IN THE ONLINE STORE

The purpose, basis and period as well as the recipients of personal data processed by the Administrator result from actions taken by a given Service User or Customer in the Online Store or by the Administrator.

The purpose, legal basis and period of data processing and storage are presented below:

 

Purpose of data processing

 

Legal basis for data processing

Data storage period

Performance of the Sales Agreement or contract for the provision of Electronic Services or taking action at the request of the data subject, before concluding the above-mentioned contracts

Article 6 (1) 1 lit. b) GDPR Regulations (performance of the contract) – processing is necessary for the performance of the contract to which the data subject is a party, or to take action at the request of the data subject, before concluding the contract

The data is stored for the period necessary to perform, terminate or otherwise terminate the concluded Sales Agreement or contract for the provision of Electronic Services.

Marketing

Article 6 (1) 1 lit. a) GDPR Regulations (consent) – the data subject has consented to the processing of his personal data for marketing purposes by the Administrator

The data is stored until the data subject withdraws his consent for further processing of his data for this purpose.

Expressing the opinion by the Customer on the concluded Sales Agreement

Article 6 (1) 1 lit. a) GDPR Regulations – the data subject has consented to the processing of his personal data in order to express an opinion

The data is stored until the data subject withdraws his consent for further processing of his data for this purpose.

Legal basis for data processing. Data storage period

Bookkeeping

out

 

Article 6 (1) 1 lit. c) Regulations of the GDPR in connection with joke. 74 sec. 2 of the Accounting Act, i.e. of January 30, 2018 (Journal of Laws of 2018, item 395) – processing is necessary to fulfill the legal obligation incumbent on the Administrator;

The data is stored for the period required by law requiring the Administrator to store accounting books (5 years from the beginning of the year following the financial year to which the data relates).

Determining, investigating or defending claims that may be raised by the Administrator or which may be raised against the Administrator

Article 6 (1) 1 lit. f) GDPR Regulations (legitimate interest of the administrator) – processing is necessary for purposes resulting from the legitimate interests of the Administrator – consisting in establishing, investigating or defending claims that may be raised by the Administrator or which may be raised against the Administrator

The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of claims that may be raised against the Administrator (the basic limitation period for claims against the Administrator is six years).

Using the website of the Online Store and ensuring its proper functioning

Article 6 (1) 1 lit. f) GDPR Regulations (legitimate interest of the administrator) – processing is necessary for purposes resulting from the legitimate interests of the Administrator – consisting in running and maintaining the website of the Online Store

The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of the Administrator’s claims against the data subject due to the economic activity conducted by the Administrator. The limitation period is defined by law, in particular the Civil Code (the basic limitation period for claims related to running a business is three years, and for a sales contract – two years).

Keeping statistics and traffic analysis in the Online Store

Article 6 (1) 1 lit. f) GDPR Regulations (legitimate interest of the administrator) – processing is necessary for purposes arising from the legitimate interests of the Administrator – consisting in keeping statistics and analyzing traffic in the Online Store in order to improve the functioning of the Online Store and increase the sale of Products

The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of the Administrator’s claims against the data subject due to the economic activity conducted by the Administrator. The limitation period is defined by law, in particular the Civil Code (the basic limitation period for claims related to running a business is three years, and for a sales contract – two years).

 

Newsletter – details of data processing

By subscribing to the newsletter, you provide us with your name and e-mail address. Providing data is voluntary, but necessary to subscribe to the newsletter.

The data provided to us in connection with the subscription to the newsletter is used to send you the newsletter, and the legal basis for their processing is your consent (Article 6 (1) (a) of the GDPR) expressed when subscribing to the newsletter. As far as the processing of information that does not come from you, and was collected automatically by our mailing system, we rely in this respect on our legitimate interest (Article 6 (1) (f) of the GDPR) in analyzing the behavior of newsletter subscribers in in order to optimize mailing activities.

You can unsubscribe from the newsletter at any time by clicking on the dedicated link in each message sent as part of the newsletter or by simply contacting us. Despite unsubscribing from the newsletter, your data will still be stored in our database in order to identify the returning subscriber and possibly defend claims related to sending you the newsletter, in particular to demonstrate that you consent to receiving the newsletter and the moment of its withdrawal, which is our legal legitimate interest referred to in art. 6 sec. 1 lit. f GDPR.

You can modify your data provided for the purposes of receiving the newsletter at any time by clicking on the appropriate link visible in each message sent as part of the newsletter or by simply contacting us.

 

  1. DATA RECIPIENTS IN THE ONLINE STORE

The following processors are involved in the processing of personal data:

  • hosting provider that stores data on the server,
  • cloud computing service provider in which backups that may contain your personal data are stored,
  • the provider of the mailing system in which your data is stored, if you are a newsletter subscriber,
  • an advertising agency that provides marketing services that can access personal data if the activities require its use,
  • supplier of the invoicing system in which your data is stored for the purpose of invoicing,
  • an accounting office that processes your data visible on invoices,
  • courier companies that process your data to the extent necessary to deliver the order to you,
  • an entity providing maintenance services that gains access to data, if the technical works carried out relate to areas in which personal data are located,
  • a logistics company that processes data to the extent necessary to complete and ship the order
  • other subcontractors who gain access to data, if the scope of their activities requires such access.

Personal data may be transferred to law offices, if there is a need to use legal assistance that requires access to personal data.

Your personal data may also be transferred to tax offices to the extent necessary to fulfill tax, accounting and accounting obligations. It concerns in particular all declarations, reports, statements and other accounting documents in which your personal data is located.

In addition, if necessary, your personal data may be made available to entities, bodies or institutions authorized to obtain access to data on the basis of legal provisions, such as the police, security services, courts, public prosecutor’s offices.

 

  1. PROFILING IN THE ONLINE STORE

We do not make decisions for you based solely on automated processing, including profiling, which would have legal effects on you or similarly significantly affect you.

We use tools that can take specific actions depending on the information collected as part of the tracking mechanisms, but we believe that these actions do not have a significant impact on you, because they do not differentiate your situation as a customer, do not affect the terms of the contract you can with us to include, etc.

By using certain tools, we can, for example, direct personalized advertisements to you based on your previous actions taken on our website or suggest products that may be of interest to you. As part of the tools we use, we do not have access to information that would allow your identification. The information we are talking about here is, in particular:

  • information about the operating system and the web browser you use,
  • viewed by the public,
  • time spent on the website,
  • transitions between individual subpages,
  • the source from which you go to our website,
  • the age range you are in,
  • your gender,
  • Your approximate location limited to the city,
  • Your interests based on your online activity.

The above information is not combined with your personal data, which is in our databases. This information is anonymous and does not allow us to identify you. This information is stored on the servers of the suppliers of individual tools, and these servers can most often be located all over the world.

 

  1. RIGHTS OF THE PERSON WHO THE DATA CONCERNS

The GDPR grants you the following potential rights related to the processing of your personal data:

  • the right to access your data and receive a copy of it,
  • the right to rectify (correct) your data,
  • the right to delete data,
  • the right to limit processing,
  • the right to object to data processing,
  • the right to transfer data,
  • the right to withdraw consent to the processing of personal data, if you have previously given such consent,
  • the right to lodge a complaint with a supervisory authority (if you find that we are processing data unlawfully, you can file a complaint with the President of the Personal Data Protection Office or another competent supervisory authority).

 

  1. COOKIES IN THE ONLINE STORE AND ANALYTICS

Cookies (cookies) are small text information in the form of text files, sent by the server and saved on the side of the person visiting the website of the Online Store (e.g. on the hard drive of the computer, laptop or on the memory card of the device used while browsing the website. In cookies, specific information can be saved and stored, to which ICT systems can then access for specific purposes.

Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you visit the website (persistent cookies).

We use cookies on the basis of your consent, except when cookies are necessary for the proper provision of electronic services to you.

You can manage cookie settings within your web browser. You can block all or selected cookies. You can also block cookies from specific websites. You can also delete previously saved cookies and other website and plug-in data at any time.

Web browsers also offer the option of using incognito mode. You can use it if you do not want information about visited pages and downloaded files to be saved in your browsing and download history. Cookies created in incognito mode are deleted when all incognito windows are closed.

Remember that disabling or limiting the use of cookies may prevent you from using some of the functions available in our store and cause difficulties in using our store, as well as many other websites that use cookies.

Own cookies are used to ensure the proper functioning of individual store mechanisms, such as maintaining a session after logging in to the account, remembering recently viewed products and products added to the basket.

The following third party cookies are used in our store:

  • Google Analytics,
  • Google AdSense,
  • Facebook Custom Audiences,
  • social tools cookies.

 

  1. FINAL PROVISIONS

The Online Store may contain links to other websites. After switching to other websites, we encourage you to read the privacy policy established there. This privacy policy applies only to the Administrator’s Online Store.

Fundusze Europejskie