Privacy policy

The Administrator of personal data processed within the scope and purpose necessary to provide services is  Urszula Radwańska with registered office in Cracow at Cystersów street 10/9, 31-140, entered into the Central Register and Information on Economic Activity (CEIDG) kept by the minister competent for the economy: VAT no 6762285429, registry number 366137474 (further „Administrator”).

A glossary of the Regulations is used for the interpretation of terms, or as described in the Privacy Policy (if directly apparent from the description).

The Service Provider is the Administrator of its Clients' data. The scope of collected data includes:

• e-mail address (necessary to create the account)

• name and surname

• delivery address including: street, postal code, city, country (necessary to complete the order),

• Company name and Tax Identification Number (for Entrepreneur, and Entrepreneur - Consumer),

• telephone number (provided optionally),

• date of registration and date of logging into the service,

• orders and payments.

The purpose of the processing of the personal data is to provide services, including to perform a contract and sell products, as well as in cases where it is necessary for purposes of the legitimate interests pursued by the Administrator to directly market own products or services or for other purposes to which the user gives consent, if it is required under applicable law. In particular, this may include consent to receive correspondence and commercial communications concerning the Administrator's own products and services. The data subject has a right to withdraw consent at any time.

The Administrator processes the data according to the law, collects them for specified and legitimate purposes and does not process them for any other purposes. The data is collected only as appropriate and necessary to pursue for which they are processed. The Administrator does not process special categories of personal data.

Personal data are processed:

• in accordance with data protection legislation and the privacy policy implemented,

• in order to perform the contract for the provision of electronic services, including making payments, contact for purposes related to the provision of services (e.g. complaints),

• in order to comply with a legal obligation, i.e. for tax and accounting purposes, debt collection, data storage for archiving purposes, and to ensure accountability in accordance with RODO.

By way of a written agreement, the Administrator may entrust another entity with processing the personal data on behalf of the Administrator. Personal data shall be processed by persons exclusively authorised by the Administrator and service providers with whom the Administrator cooperates (entities providing accounting, legal, auditing and payment services as well as providers responsible for IT systems maintenance).

We require our suppliers to ensure the security of your personal data and to process it lawfully. Suppliers may only process it for explicitly stated purposes, and they can not process personal data for their own purposes.

We quarantee that all of the personal data provided are kept confidential and we ensure that security and data protection measures required by applicable laws are taken. Personal data are stored with due care and are protected against access of unauthorized persons.

Your personal data will not be sold, leased or made available by us to recipients other than those who have been authorized in accordance with mandatory legal provisions.

Personal data is processed in Poland.

The Administrator makes every effort to protect the Customers' and Users' personal data against unauthorized access of third parties and to this end, a high standard of organisational and technical security measures is applied, e.g. secure communication encryption protocol SSL is used.

The Administrator stores the data for the period necessary to perform a contract and for a period specified by the applicable laws but no longer than is necessary for the purposes of the legitimate interests pursued by the Administrator or by the third party, including the purpose of asserting claims in particular, tax and accounting purposes or for reporting purposes, for a maximum period of 5 years from the date of completion of the contract. For the purposes for which the data subject has given his/her consent to the processing of his/her personal data, such data will be stored until the consent is withdrawn.

The Administrator reserves the right to process your data after the termination of the contract or the withdrawal of consent only for the purpose of asserting possible claims in court or if national or EU regulations or international law oblige us to data retention.

The data subject has a right to demand that the Administrator provide access to his/her personal data, and to demand rectification, erasure or restriction of processing and the right to object to processing in cases stipulated by the law, as well as the right to data portability. The data subject shall also have the right to lodge a complaint to the supervisory authority in case of unlawful processing of his/her personal data.

If the data subject gives consent to the processing of his or her personal data for one or more specific purposes, she or he has the right to withdraw the consent at any time.

Providing personal data is voluntary, however, failure to provide data marked as necessary makes it impossible to register or to place an Order. If the processing of data is necessary in order to perform a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract, providing the required and specified data is necessary.

In order to present an offer that provides the most value and is personalised to meet the interests of Customers and Users and for the purposes necessary for entering into or conclude a contract between the data subject and the Administrator, and also with express consent of the data subject, the Administrator may use profiling, which means a form of automated processing of personal data, which involves automated processing of personal data consisting in the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning personal preferences and interests. The data subject have the right not to be subject to a decision which is based solely on automated processing, including profiling, and significantly affects him or her. The controller implements suitable measures to safeguard the rights, freedoms and legitimate interests of the data subject, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest a decision resulting from automated processing.

In order to obtain additional information regarding this Privacy Policy and matters concerning the principles of processing and protection of personal data at the Administrator, please contact by the address indicated in paragraph 1 or the e-mail address: store@urszularadwanska.com, also to contact the Data Protection Officer.

Cookies provide statistical data about users' activity and their use of particular pages of the Administrator's website. The Administrator may also place cookies to monitor user traffic on the website.

The Store's website uses text files called Cookies. These are small text files sent by a web server and stored by the browser's computer software. When the browser reconnects to the website, the site recognizes the type of device the user connects to. The parameters allow reading the information contained therein only to the server that created them. Cookies therefore facilitate the use of previously visited websites.

Cookies are used to:

• personalise the Store website content to User's preferences and improving the use of the website; in particular cookies make it possible to recognise the device of the Store's visitor and customise the look and appearance of the website, adapted to the user's individual needs;

• maintaining the user session.

The administrator uses the following cookies:

1. by origin:

   • native - created by the website www.urszularadwanska.com

   • third parties - this is information posted by scripts of other websites embedded in the www.urszularadwanska.com (e.g. Facebook plug-in), which allows these entities to collect information about users for their own use.

2. due to storage time:

   • session cookies - temporary cookies remain in the cookie archive in the user's browser until the user leaves the website

   • permanent - stored in the user's terminal device for the time specified in the parameters of cookies or until they are deleted by the user.

3. by function:

   • „essential" cookies:

     1. enabling the use of services available on the website, such as authentication cookies used for services that require authentication on the website and to maintain a user session (they can not be disabled).

     2. cookies used to ensure security, e.g. used to detect abuse of authentication within the site;

   • "performance" cookies, which allow to collect the informations about the methods of using the website;

   • "functional" cookies, enabling "remembering" the user's selected settings and personalizing the user's interface, e.g. in terms of the selected language or region of the user's origin, font size, website layout, etc;

   • with session cookies you will not be required to log in again

Some cookies from the device are deleted after the end of the browser session (session cookies). The administrator uses the required cookies only to provide the services and functions that are necessary.

At any time, the Customer has the ability to disable or restore the option of collecting cookies by changing the settings in their web browser.

The browser can be configured to reject some or all cookies or to ask you to accept them. However, if you refuse the cookies, some of your services may be limited. When connecting to the website using multiple devices (such as a smartphone, tablet, computer, etc.), please ensure that each device's browser is adjusted to your cookie preferences.

The Privacy Policy can be saved or downloaded at any time from the website.

The Administrator reserves the right to this privacy and cookie policy by publishing a new version of the document on the website.

Privacy policy is valid from: 1.01.2021.

Privacy policy (pdf).