PRIVACY POLICY
Online Shop sklep.proteccss.pl
§ 1
General provisions
-
Privacy Policy sets out the principles for the processing and protection of personal data of Users and Clients (including potential Clients) using the online shop available at the following Internet address: sklep.proteccss.pl, hereinafter referred to as Shop. The document also defines the principles of using cookies.
-
The privacy policy of the shop is for information purposes only.
-
The controller of the personal data of Users and Clients of the Shop within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) of 27 April 2016. (Official Journal of the EU. L No. 119, p. 1), hereinafter referred to as GDPR, is Albert Marczak, conducting business activity under the name PRO - TEC CAR SECURITY SYSTEM Albert Marczak, registered in the Central Register of Business Activity and Information, having the address of the principal place of business and the address for service: ul. Graniczna 1, 05-124 Janówek Pierwszy, NIP: 1132005503, REGON: 141410674, e-mail address: sklep@proteccss.pl, phone number: +48 669 999 901, hereinafter referred to as the Controller and being at the same time the Online Shop Service Provider and the Seller.
-
The User's personal data shall be processed in accordance with the provisions of the Personal Data Protection Act and the Act on Rendering Electronic Services of 18 July 2002 (Journal of Laws No. 144, item 1204, as amended).
-
The Controller shall take every care to protect the interests of data subjects, and in particular to ensure that the data are processed lawfully. Personal data are collected by the Controller for defined, legitimate purposes and are not subject to further processing incompatible with those purposes. The Controller declares that the data collected by him/her are collected in a form enabling the identification of the data subjects for no longer than it is necessary to achieve a given purpose of processing.
-
The purpose of the Privacy Policy is to define actions taken by the Controller with respect to personal data collected by means of the Online Shop and services and tools related to the Online Shop, used by the Clients to perform activities such as creating an Account, placing an Order and performing other actions within the Online Shop.
-
The Client who uses services and tools made available by the Online Shop confirms that he or she has read the provisions of the Privacy Policy and the Regulations of the Online Shop, and also consents, if necessary, to the use of his or her personal data in accordance with the Regulations of the Online Shop and the Privacy Policy (for this purpose, he or she selects the appropriate checkboxes, following the messages appearing on the website of the Online Shop).
-
All data collected by the Controller are protected using reasonable technical and organisational measures and security procedures in order to protect them against unauthorised access or use.
-
The Controller of the Online Shop has exclusive access to the data under the terms of the Regulations and Privacy Policy. Access to the Client's personal data may also be granted to other entities, e.g. by means of which the Client makes payments, which collect, process and shop personal data in accordance with their regulations and privacy policies. Access to the Client's personal data is granted to these entities to the extent necessary and only to the extent that ensures the proper performance of services. External entities process entrusted data only on the basis of relevant personal data processing agreements.
-
Any words and expressions appearing in the Privacy Policy that begin with a capital letter (e.g. Seller, Online Shop, Client, Order) shall be understood in accordance with the definitions contained in the Regulations of the Online Shop available on the website of the Online Shop.
§ 2
Collection, acquisition, scope and purpose of collection of personal data
-
The Controller obtains information about users, among other things, by collecting server logs through the hosting operator.
-
Data recorded in server logs are not associated with specific persons using the Shop's website and are not used to identify persons using the Shop.
-
Server logs constitute only auxiliary material used for administration of the Service, and their content is not disclosed to anyone except persons authorized to administer the server.
-
The Controller informs that due to the possibility of registration in the Online Shop and creating an Account, the Clients creating an Account in the Online Shop may be obliged to provide certain data, such as the e-mail address and the password. Providing the data specified during the registration process is necessary to set up an Account, and the remaining data can be provided additionally.
-
Within the framework of the Online Shop, the Controller may collect personal data of the Clients and potential Clients who contact the Controller within the framework of the Client service, and which personal data are necessary to realize a given request of the Client and to contact him/her in order to provide the answer. The basis for data processing is Article 6(1)(a) of the GDPR - consent to processing. The legal basis for processing after the possible termination of the contact will be the justified purpose in the form of archiving the correspondence for the purpose of demonstrating its course in the future (pursuant to Article 6(1)(f) GDPR). If a contract is concluded after the contact, the data will be processed pursuant to Article 6(1)(b) of the GDPR.
-
The Controller informs that the personal data provided within the Online Chat Service are transferred to the United States by saving them in a database located on a server in the United States. This is due to the fact that the Controller uses the Tawk.to system, which is provided by an entity located in a third country - in the United States. Tawk.to guarantees the confidentiality of the data collected in its databases. For more information, see: https://www.tawk.to/data-protection/gdpr/.
-
Data provided in connection with subscribing to the Newsletter are used only to send the Newsletter, on the basis of consent (pursuant to Art. 6 par. 1 lit. a GDPR).
-
The Controller processes the Clients' personal data necessary for proper performance of the services available in the Online Shop and is entitled to use the data collected and stored within the Online Shop for the following purposes:
-
placing an order in the Online Shop (pursuant to Article 6(1)(b) of the GDPR),
-
concluding and performing a Sales Agreement or an Agreement for the provision of Electronic Services (on the basis of Article 6(1)(b) of the GDPR),
-
directing marketing of our own products or services, including sending newsletters (pursuant to Article 6(1)(f) or (a) of the GDPR),
-
providing full service to the User, including setting up and managing the User's account(s), troubleshooting technical issues and providing relevant functionality(based on Article 6(1)(b) and (f) of the GDPR),
-
customisation of the User's offer and experience, including advertising, in the Shop properties(based on Article 6(1)(b) and (f) of the GDPR),
-
contacting Users, in particular for purposes related to the provision of services, User services, permitted marketing and advertising activities (on the basis of Article 6(1)(a), (b) and (f) GDPR),
-
carrying out research and analysis in order to improve the performance of the available services (based on Article 6(1)(b) and (f) of the GDPR),
-
enforcing compliance with the Regulations of the Online Shop (pursuant to Article 6(1)(b) and (f) of the GDPR),
-
monitoring the activity of all and specific Users (based on Article 6(1)(f) of the GDPR),
-
evaluating certain personal factors of the Client (based on Article 6(1)(f) of the GDPR).
-
-
The Controller is entitled to store the data collected and tracked in the Online Shop only to the extent necessary to achieve the above specified purposes.
-
The Controller reserves the right to filter and block messages sent through the internal messaging system, in particular if they are spam, contain prohibited content or otherwise pose a threat to the security of the Online Shop's users.
-
The Controller is entitled to automatically acquire and record data transmitted to the server by Internet browsers or Clients' devices, e.g. IP address, software and hardware parameters, pages viewed, mobile device identification number and other data on devices and system usage. Collection of the above information will take place when using the Online Shop.
-
The Controller collects, processes and stores the following Client data:
-
electronic mail address (e-mail address),
-
name,
-
company data (in the case of Clients who are not consumers),
-
delivery address of the Goods (street, house number, apartment number, zip code, city, country),
-
residence/business/office address (if different from delivery address),
-
phone number.
-
Seller declares that the provision of data by the Client, to the extent indicated above, is voluntary. Their provision may, however, be necessary for the conclusion and implementation of a Sales Agreement or an Agreement for the provision of Electronic Services in the Online Shop. The scope of data required for the conclusion of an agreement is previously indicated on the website of the Online Shop and in the Regulations of the Online Shop.
-
Examples of recipients of personal data of the Clients of the Online Shop:
-
in case of a Client, who uses the courier delivery method in the Online Shop, the Controller entrusts collected personal data of the Client to a chosen carrier or agent executing the shipment on commission of the Controller,
-
if the Client uses in the In Online ternet Shop the method of electronic or credit card payment, the Controller shall entrust the collected personal data of the Client to a selected entity handling electronic payments in the Online Shop.
-
The Controller may share anonymised data with other entities, including the partners of the Online Shop, in order to recognise the attractiveness of advertisements and services for Clients, improve the quality and effectiveness of services provided by the Online Shop or the aforementioned entities, or to participate in scientific research.
-
The Controller informs that the personal data provided within the Newsletter service (while filling in the Newsletter subscription form), are transferred to the United States by saving them in a database located on a server in the United States. This is due to the Controller's use of the mailing system MailChimp, whose provider is an entity located in a third country - the United States. MailChimp guarantees the confidentiality of data shopd in its databases.
-
The Controller informs Users that it entrusts the processing of personal data to the following entities:
-
CYBER_FOLKS SPÓŁKA AKCYJNA with headquarters in Poznan, Franklin Roosevelt 22, 60-829 Poznan, registered in National Court Register by District Court Poznan - Nowe Miasto and Wilda in Poznan, VIII Commercial Division of National Court Register under KRS 0000612359, REGON 364261632, NIP 7822622168, share capital 215.228,00 PLN fully paid.( formerly H88 S.A. ) - in order to shop personal data on the server where the shop is installed,
-
ALSENDO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Warsaw, address: ul. Franciszka Klimczaka 1, Warszawa (postal code: 02-797), entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw XII Commercial Division - National Court Register under the number KRS 0000678992, with the share capital of PLN 56,900, NIP number: 897184004, Regon number: 367328934, ( formerly R2G Polska Sp. z o.o. ) - for the purpose of storing personal data for the performance of agreements of carriage and provision of postal services,
-
PayPal Polska sp. z o.o. with headquarters in Warsaw, ul. Emilii Plater 53, Warszawa 00-113, NIP: 5252406419, KRS: 0000289372, REGON: 141108225 - to enable electronic payment and payment card for the ordered Goods
-
PayPro SA 60-327 Poznań, ul. Kanclerska 15 NIP 779-236-98-87, REGON 301345068 KRS 0000347935, - to enable electronic and card payments for the ordered Goods,
-
PayU S.A. ul. Grunwaldzka 182, 60-166 Poznań, KRS: 0000274399, NIP: 7792308495 - to enable electronic and credit card payments for the ordered Goods,
-
Rocket Science Group, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 - in order to use Mailchimp mailing system for sending newsletters
-
The Controller informs that it uses the following technologies to track the actions taken by the User/Client within the Shop website:
-
Google Analytics tracking code - to analyze the Shop's website statistics; information related to Google Analytics can be found at: https://support.google.com/analytics/answer/6004245,
-
chatting via the Tawk.to service provided by Tawk.to, Inc.
-
The website uses plugins and other tools provided by social networks such as Facebook. When displaying a website that contains such a plugin, your browser establishes a direct connection to the servers of the Controllers of these social networks. The content of the plugin is transmitted directly to your browser and integrated into the website. If the User is logged in to one of the social networks, the service provider will be able to directly associate the visit to the Website with the given profile in the given social network. This information will be published on the respective social network and will appear, for example, on a Facebook wall. The purpose and scope of data collection and its further processing and use by service providers, as well as the possibility of contacting and the rights of Users in this respect and the possibility of making settings to ensure privacy protection are described in the privacy policies of individual service providers.
-
If the Client chooses to pay via PayPal at the end of the ordering process, he/she will be redirected directly to PayPal (similarly, if the Client has previously logged into this system). If a Client is already a PayPal user, he/she can log in there using his/her user data and confirm the payment. By using PayPal, the Client agrees to the terms of use of PayPal, which is a separate Controller of personal data here.
§ 3
Cookie policy and operational data
-
The Controller gathers information contained in cookies automatically in order to collect data related to the use of the Online Shop by the Client. Cookies are small text fragments which the website sends to the User's browser and which the browser sends back on subsequent visits to the website. They are used mainly to maintain the session e.g. by generating and sending back a temporary identifier after logging in.
-
The Controller uses "session" cookies stored on the Client's terminal equipment until the Client logs out, disconnects the website or switches off the Internet browser, and "permanent" cookies stored on the Client's terminal equipment for the time specified in the parameters of the cookies or until they are deleted by the Client.
-
The Controller uses the following types of cookies in the Online Shop:
-
"indispensable" cookies, enabling the use of the services available in the Online Shop,
-
security cookies,
-
"performance" cookies, used to obtain information about the use of the Online Shop website by Users,
-
"advertising" cookies, enabling the delivery to Users of advertising content more tailored to their interests,
-
"functional" cookies, enabling "remembering" the settings selected by the User and adjusting the Online Shop to the User.
-
The service Controller uses external cookies for the following purposes:
-
to collect general and anonymous statistical data through analytical tools: Google Analytics (the Controller of the cookies is Google LLC, based in the United States),
-
to operate the Online Chat (external cookie controller: Tawk.to Inc. based in the USA).
-
Google LLC and Tawk.to Inc. are third country entities - the United States use appropriate compliance mechanisms such as standard contractual clauses to ensure an adequate level of protection of personal data as required by the GDPR.
-
The Controller provides the possibility to use a social networking function, such as subscribing to a social networking profile. Using this function may involve the use of cookies of the Controllers of social networking sites Facebook or Twitter.
-
Cookie files adjust and optimise the Online Shop and its offer for the needs of the Clients by such actions as creating the statistics of the Online Shop's views and ensuring safety to its users.
-
Cookies are also necessary to maintain the Client's session after leaving the Online Shop.
-
A Client may at any time, using his/her Internet browser, change the settings concerning cookies, including blocking the collection of cookies.
-
Blocking the collection of cookies or making other changes in the settings for cookies on the Client's device may hinder or prevent the use of services and tools of the Online Shop, including the ability to place an Order.
-
A Client who does not wish to use cookies for the purposes described above may delete them manually at any time. For detailed instructions on how to proceed, please visit the website of the manufacturer of the web browser the Client is currently using. More information about cookies is available in the help menu of each web browser. Examples of web browsers that support these cookies are Internet Explorer, Mozilla Firefox, Google Chrome, Opera.
-
The Controller may enable external entities, e.g. advertisement providers or analytical solution providers, to collect information using the above technologies directly on the website of the Online Shop. The data collected in this way are subject to the provisions of privacy policies developed by these entities.
-
Some of the external entities operating within the Online Shop allow users to withdraw their consent to the collection and use of data by them for advertising based on Client activity. For more information on this and to make a choice, please see, for example, the following website: www.youronlinechoices.com.
§ 4
Rights and obligations of the Controller and the Users
-
The Controller has the right, as well as a statutory obligation, to provide selected or all information concerning Website Users to public authorities or third parties who submit such requests for information under applicable Polish law.
-
The Controller shall not entrust data processing and shall not make the collected personal data available to unrelated parties without the consent of the parties concerned, unless the following circumstances occur:
-
The Controller may use the support of third-party entities to provide the services it makes available; however, these entities are not authorized to independently use the personal information processed on behalf of the Controller, and all of their actions are subject to the provisions of the Site's Privacy Policy,
-
The Controller retains the right to make the data available to public authorities in the investigation of possible violations of law or in the fight against possible violations.
-
The Client/User has the right to access his/her personal data collected by the Controller at any time. This right includes the possibility to verify, modify, supplement, delete, limit the processing of data, object to the processing, transfer data, stop processing the User's personal data, as well as the right to withdraw consent to the processing of data for a specific purpose, if the User has previously given such consent, and the right to lodge a complaint to the supervisory authority. The above-mentioned rights are granted without giving any reason.
-
The Client/User, by accepting the statements proposed by the Controller contained in the interactive forms available on the website, consents to the processing of personal data for the purposes of providing the services.
-
The Client/User, by accepting the optional statements proposed in the forms, may consent to additional purposes for the processing of his/her personal data.
-
Clients who have registered with the Online Shop have the right to access, edit and delete their data. The Client ensures that the data provided or published by him in the Online Shop are correct.
-
Voluntarily granted consent to receive commercial information and to receive the Newsletter may be withdrawn at any time at the User's request submitted via email or in a link appearing in each Newsletter. Immediately, not later than within 48 hours from receiving the statement on withdrawal of consent, the Controller shall remove the User's data from the contact database used for sending commercial information by email. At any time you can correct data provided in connection with the Newsletter subscription service, request their deletion by resigning from the Newsletter subscription service, as well as request data transfer.
-
In order to exercise his/her rights, the Client/User may, at any time, send a relevant declaration of intent to the Controller's registered address or by e-mail.
-
Deletion of personal data or discontinuation of their processing by the Controller may result in the impossibility to render the services provided by the Online Shop or in the limitation of the possibility to use the Shop's functionalities.
-
Personal data collected within the purposes specified in the Privacy Policy shall be stored for the period of the realization of services (including electronic services) provided by the Controller and for the period resulting from the period of claims limitation, consumer rights, tax law regulations or other rights in this scope (e.g. until withdrawal of consent for sending Newsletter or commercial information).
§ 5
Changes in Privacy Policy
-
The offer of the Online Shop shall be extended in the future. This means that the Controller shall be obliged or entitled to introduce changes to the Privacy Policy.
-
New versions of the Privacy Policy shall appear on the website of the Online Shop together with a relevant announcement.
-
Any change to the Privacy Policy shall be effective from the date of its notification by posting on the website of the Online Shop. Any changes will be appropriately highlighted for a period of one month from the date of introduction of changes to the Privacy Policy.
-
In case of any additional questions regarding the Privacy Policy of the Online Shop, please contact us at the e-mail address provided by the Controller.
choice you make, we will provide you with a link to track your package online.
Shipping fees include handling and packing fees as well as postage costs. Handling fees are fixed, whereas transport fees vary according to total weight of the shipment. We advise you to group your items in one order. We cannot group two distinct orders placed separately, and shipping fees will apply to each of them. Your package will be dispatched at your own risk, but special care is taken to protect fragile objects.
Boxes are amply sized and your items are well-protected.