Personal data of visitors to the Website (hereinafter referred to as “Users”) are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) (Dz. Urz. EU L 119, s. 1), hereinafter referred to as “RODO.”
The Administrator makes special efforts to protect the privacy and information provided to him and concerning Users. The Administrator shall select and apply with due diligence appropriate technical measures, including those of a programmatic and organizational nature, ensuring the protection of the processed data, in particular securing the data against their access to unauthorized persons, disclosure, loss and destruction, unauthorized modification, as well as against their processing in violation of applicable laws.
The addressee of the opportunity to use the Services available on the website are not minors under the age of 16. The data controller does not provide for the targeted collection of data on minors under the age of 16.
The following information is directed to all Users of the www.oplot.eu Website.
- Data of the Personal Data Administrator
The administrator of your personal data is: the company Oplot Borys Gołębiowski with its registered office in Łódź at ul. Wigilia 2/2, 93-329, NIP: 731-139-05-15 .
- Contact details of the Administrator
You can contact Us via e-mail address: firstname.lastname@example.org, by phone at +48 608 086 685 or in writing to our address: ul. Wigilijna 2/2 , 93-329 Lodz.
Contact details of the Data Protection Officer
We have appointed a Data Protection Officer. You can contact him via e-mail address: email@example.com or via snail mail: ul. Wigilijna 2/2 , 93-329 Lodz.
- Purposes and legal basis for processing personal data
The data controller processes your personal data for the following purposes:
- in order for you to establish and maintain a Customer Account with us on the www.oplot.eu Website . The data provided in the registration form on the Website, i.e. the e-mail address, the password established, and the personal data provided at the time of account registration: name, surname, address for shipment of goods, e-mail address and telephone number are then processed. The basis for processing your data in such a case is Art. 6 paragraph. 1(b) RODO, i.e.. Necessity of the processing for the conclusion and performance of the Account agreement;
- in order to perform the Agreement for the sale of goods available on the Website. The goods you provided at the time of purchase are then processed, i.e. Name, email address, address details for shipping goods and payment details. The basis for processing your data in such a case is Art. 6 paragraph. 1(b) RODO, i.e.. Necessity of processing for the performance of the contract for the sale of goods;
- in order to provide Services that do not require the creation of a Customer Account and the purchase of goods, i.e. browsing the Website or searching for goods. Your device session, operating system, browser, location and unique IP address ID are then processed. The basis for processing your data in such a case is Art. 6 paragraph. 1(f) RODO, i.e.. legitimate legal interest in the processing of your personal data by the Administrator;
- in order to keep statistics on the use of particular functionalities available on the Website, to facilitate the use of the Website and to ensure the IT security of the Website. Personal data is then processed regarding your activity on the Website and the amount of time spent on each of the subpages on the Website, your search history, location, IP address, device ID, your browser data and operating system. The basis for processing your data in such a case is Art. 6 paragraph. 1(f) RODO, i.e.. legitimate legal interest in the processing of your personal data by the Administrator;
- for the purpose of handling complaints, complaints and requests and answering questions. The personal data you provide in the contact form, complaints, complaints and requests are then processed, as well as the data regarding the Order and/or other Services provided by us that are the cause of the complaint, complaint or request, and the data contained in the documents attached to the complaints, complaints and requests. The basis for processing your data in such a case is Art. 6 paragraph. 1(c) RODO, i.e.. Necessity of the processing for the performance of a legal obligation by the Administrator.
- for the purpose of establishing, investigating and enforcing claims and defending against claims in judicial and extrajudicial proceedings. Your personal data provided at the time of purchase of the Goods or creation of the Customer Account and other data necessary to prove the existence of a claim or which arises from generally applicable law may then be processed. The basis for processing your data in such a case is Art. 6 paragraph. 1(f) RODO, i.e.. The legitimate legal interest of the Administrator in processing your data.
- For the purpose of marketing our goods and services. We then process your personal data provided when you create your Account and update it, data about your activity on the Website including orders, which are recorded and stored via cookies, in particular your Order history, search history, clicks on the Online Store, login and registration dates, history and your activity related to our communication with you. The basis for processing your data in such a case is Art. 6 paragraph. 1(a) and (f) of the RODO, i.e.. your consent to receive marketing content from the Administrator and the Administrator’s legitimate interest in conducting direct marketing of its services.
- Voluntariness of providing personal data
Your provision of the required personal data is voluntary and is a condition for the provision of services by the Personal Data Administrator through the Website.
- Data processing time
Personal data will be processed for the period necessary for the execution of Orders, services, marketing activities and other services performed for the User. Personal data will be deleted in the following cases:
- when the data subject requests their deletion or withdraws the consent given;
- When the data subject has not taken action for more than 10 years (inactive contact, calculated from January 1 following the date of last contact);
- upon learning that the stored data is outdated or inaccurate.
Some data in the following areas: e-mail address, first and last name, may be stored for a further period of 3 years for evidential purposes, processing of complaints, claims and claims related to the services provided by the Website – this data will not be used for marketing purposes.
Data on Orders for paid services, contests and loyalty programs will be stored for a period of 5 years from the end of the calendar year in which the event occurred or the Order was placed.
We store data on non-logged-in Users for a period of time corresponding to the life cycle of cookies stored on the devices or until they are deleted on the User’s device by the User.
Your personal information about your preferences, behaviors and choice of marketing content may be used as the basis for automated decisions to determine sales opportunities for the Website.
- Recipients of personal data
We provide your personal data to the following categories of recipients:
- state authorities, such as the prosecutor’s office, the Police, PUODO, the President of the OCCP, if they request us to do so;
- to the service providers we use in the operation of the Website, e.g. for the purpose of processing an Order or payment procedures. Depending on contractual arrangements and circumstances, these entities either act on our behalf or determine the purposes and means of processing themselves.
- Transfers of data outside the EEA
The Administrator’s suppliers are primarily based in Poland and other countries in the European Economic Area (EEA). Some of the suppliers (Microsoft, Google) are based outside the EEA. In connection with the transfer of User data outside the EEA, including to the USA, the Administrator has ensured that suppliers provide a guarantee of a high degree of protection of personal data.
- Rights of the data subject
Under the RODO, you have the right to:
- Request access to your personal data,
- Request rectification of your personal data,
- Request the deletion of your personal data,
- Request for restriction of personal data processing,
- object to the processing of personal data,
- request for portability of personal data,
- lodge a complaint with the supervisory authority,
- withdraw consent to the processing of your personal data.
The personal data controller shall, without undue delay – and in any case within one month of receiving your request – provide you with information about the actions taken in connection with your request. If necessary, the one-month deadline may be extended for another two months due to the complexity of the request or the number of requests.
In any case, the Data Controller will inform you of such extension within one month of receipt of the request, stating the reasons for the delay.
The right to access personal data (Article 15 RODO)
You have the right to obtain information from the Data Controller as to whether your personal data is being processed. This means that if the Administrator processes your personal data, you have the right to obtain information from the Administrator about:
- processing purposes;
- categories of personal data processed;
- Recipients or categories of recipients of your data;
- the planned period of storage of your data or the criteria for determining this period;
- Your rights under the RODO;
- the source from which the Administrator obtained your data, if you did not provide it directly;
- automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;
As well as to obtain a copy of your personal data.
If you wish to request access to your personal data submit your request to: firstname.lastname@example.org
The Administrator’s response to your first request is free of charge, but for each subsequent request the Administrator may charge you for the cost of preparing a response to your access request.
Right to rectify personal data (Article 16 of the RODO)
If your personal data is inaccurate you have the right to request the Administrator to correct your personal data immediately. You also have the right to request the Administrator to complete your personal data if it is incomplete.
If you wish to request rectification of your personal data or supplementation, please submit your request to: email@example.com
If you have registered on the Website your personal data can be corrected and supplemented by yourself after logging on to the Website.
The right to erasure of personal data, so called. “right to be forgotten” (Article 17 of the RODO).
You have the right to request the Data Controller to delete your personal data when:
- Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you have withdrawn specific consent, to the extent that personal data was processed based on your consent;
- Your personal data was processed illegally;
- you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of personal data is related to direct marketing;
- you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the Controller or a third party.
Despite your request for erasure, the Controller may continue to process your personal data if it is necessary to establish, assert or defend claims by or against the Controller, of which you will be informed.
If you wish to request the deletion of your personal data submit your request to: firstname.lastname@example.org
Right to request restriction of personal data processing (Article 18 RODO)
You have the right to request that the Administrator restrict the processing of your personal data, i.e. to stop its processing of your data in a form beyond the mere storage of your data, when:
- you question the accuracy of your personal data – the Personal Data Controller will restrict the processing of your personal data for a period of time that allows you to verify the accuracy of the data;
- when the processing of your data is unlawful, and instead of deleting your personal data, you request that the processing of your personal data be restricted;
- Your personal data is no longer needed for the purposes of processing, but it is needed to establish, assert or defend your claims;
- when you have objected to the processing of your personal data – until it is determined whether the legitimate interests on the part of the Personal Data Controller override the grounds stated in your objection.
If you wish to request a restriction on the processing of your personal data, submit your request to: email@example.com
The right to object to the processing of personal data (Article 21 RODO)
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
- processing based on the realization of legitimate interests by the Administrator, i.e. Art. 6 paragraph. 1(f) RODO,
- processing for direct marketing purposes.
If you wish to object to the processing of your personal data, please submit your request to: firstname.lastname@example.org
The right to request the portability of personal data (Article 20 RODO)
You have the right to receive your personal data from the Controller in a structured, commonly used, machine-readable format and send it to another personal data controller. You may also request that it is the Controller who will directly send your personal data to another controller (if technically possible).
This request applies only if the basis for the processing of your data is your consent to its processing or the necessity of the processing for the performance of the contract concluded with the Administrator, i.e. Art. 6 paragraph. 1 lit. (a) or (b) RODO.
If you wish to request the transfer of your personal data submit your request to: email@example.com
Complaint to the supervisory authority (Article 77 RODO)
If you believe that the processing of your personal data by the Administrator violates the provisions of the RODO, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged violation was committed.
In Poland, the supervisory authority under the RODO is the President of the Office for Personal Data Protection (PUODO).
Right to withdraw consent (Article 7(3) of the RODO)
You may revoke the consent you have given for the processing of your personal data at any time. However, the withdrawal of consent to process personal data does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
If you wish to withdraw your consent to the processing of your personal data, submit your request to: firstname.lastname@example.org
- The possibility of profiling of your personal data by the Administrator
Your personal information about your preferences, behaviors, and marketing content choices may be used as the basis for automated decisions to determine the Website’s sales opportunities. Accordingly, under Art. 21 para. 2 RODO you have the right to object to the Administrator’s processing of your data for this purpose.
Consent clauses used by the Administrator:
- marketing consent
I consent to the processing of my personal data by the personal data controller for marketing and advertising purposes, in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC.
- consent to send offer electronically
I agree to receive commercial information and promotional materials from the data controller by means of electronic communication within the meaning of the Electronic Services Act.
3.Marketing contact using electronic communication tools)
I consent to contact from the controller of personal data, using telecommunications terminal equipment and automatic calling systems, in accordance with Art. 172 par. 1. Telecommunications Law.
What are cookies?
Cookies (so-called “cookies”) are small text files sent by the visited website to the Internet user’s device (computer, smartphone, etc.). For more information on how cookies work, see, for example, https://wszystkoociasteczkach.pl.
- adjustment of the content of the Website’s pages to the User’s preferences and optimization of the use of websites; in particular, these files allow for recognition of the Website User’s device and appropriate display of the website, adjusted to his/her individual needs;
- creation of statistics that help to understand how the Users of the Website use the websites, which allows to improve their structure and content;
- maintaining the session of the Service User (after logging in), thanks to which the User does not have to re-enter his/her login and password on each sub-page of the Service.
What cookies do we use?
The www.oplot.eu website uses two types of cookies:
Performance (which collects information about how visitors use the site, such as the most frequently visited pages or error messages, etc.),
Functional (recording user settings, e.g. language, consents given, etc.), such as:
Session cookies – these are temporary information stored in the memory of the browser until the session ends, i.e. it is closed.
Legal basis for processing
We collect the above data based on your consent (Par 6 pt.1 lit. a RODO), to perform a contract or to take action before concluding a contract (Par 6 pt.1 lit. b RODO). We may also process data on the basis of a legitimate purpose of the data controller (PAR 6(1)(f) RODO).
Do cookies contain personal information?
Personal data collected using cookies may only be collected for the purpose of performing certain functions for you. Such data is encrypted in a way that prevents unauthorized access.
How long will we process cookies?
If you have consented to the storage of cookies, every 365 days from the date you consented to the storage of cookies, we will ask you to consent to the storage of cookies again during your next visit to our sites.
You can set the level of protection against cookies in your web browser, up to blocking cookies completely. This increases the level of security and data protection, however, it may also prevent you from using certain features or prevent you from using the site altogether. Detailed information about the possibility and methods of handling cookies is available in the settings of your software (web browser).