PRIVACY POLICY

PRIVACY POLICY OF THE 303AVENUE.PL ONLINE STORE

TABLE OF CONTENTS:

1. GENERAL PROVISIONS

2. BASIS FOR THE PROCESSING OF DATA

3. PURPOSE, BASIS, PERIOD AND SCOPE OF PROCESSING DATA IN THE ONLINE STORE

4. DATA RECIPIENTS IN THE ONLINE STORE

5. PROFILING IN THE ONLINE STORE

6. THE RIGHTS OF THE DATA SUBJECT

7. COOKIES IN THE ONLINE STORE, OPERATIONAL DATA AND ANALYTICS

8. FINAL PROVISIONS

4. DATA RECIPIENTS IN THE ONLINE STORE

4.1. For the needs of proper Online Store functioning, inclusive of the performance of the Sales Agreements entered into, it shall be necessary for the Controller to make use of external companies’ services (e.g. software provider, courier, or payment system provider). The Controller uses solely the services of such processing entities which ensure sufficient guarantee to implement appropriate technical and organisational measures so that the processing meets the requirements set out in the GDPR Regulation and protects the rights of data subjects.

4.2. Personal data of the Online Store Service Users or Customers may be transferred to the third countries. In such case The Controller ensures that the country to which personal data will be provided guarantees the appropriate level of protection and security for processing the data – in accordance with the GDPR Regulation, and the Customer is able to obtain the copy of his personal data stored in the third country. The Controller provides the personal data only in the case and within the extent necessary for attaining a given purpose of data processing in accordance herewith.

4.3. Providing data by the Controller does not take place in every case and not to all the recipients or categories of recipients defined in the privacy policy – the Controller provides the data only in the case it proves necessary to attain a given purpose of personal data processing and solely within the necessary scope.

4.4. Personal data of the Online Store Service Users or Customers may be provided to the following recipients or categories of recipients:

4.4.1. carriers/forwarders/couriers – in the case of a Customer who selects the Online Store to deliver the Product by post or courier, the Controller makes the collected Customer’s personal data available to the selected carrier, forwarder or agent performing shipment for the Controller to the extent necessary to deliver the Product to the Customer.
4.4.2. e-payments or payment card service providers – in the case of a Customer who uses in the Online Store the option of e-payment or payment card, the Controller makes the collected Customer’s personal data available tothe selected payment service provider in the Online Store for the Controller to the extent necessary to perform the payment of the Customer.
4.4.3. service providers rendering for the Controller technical, IT or organisational solutions, making it possible for the Controller to conduct a business, inclusive of the Online Store and E-Services provided via it (in particular computer software providers for the Online Store, e-mail companies and hosting providers as well as software providers for company management and technical aid for the Controller) – the Controller makes the collected personal data of the Customer available to the selected provider operating to their order only in the case and to the extent necessary for attaining a given purpose of data processing in accordance herewith.
4.4.4. accounting, legal and counselling services providers rendering for the Controller accounting, legal or counselling services (in particular an accounting agency, law firm or debt collection company) – the Controller makes the collected personal data of the Customer available to the selected provider operating to their order only in the case and to the extent necessary for attaining a given purpose of data processing in accordance herewith.

5. PROFILING IN THE ONLINE STORE

5.1. The GDPR Regulation obligates the Controller to inform about the automated decision-making process, including profiling referred to in Article 22, par. 1 and 4 of the GDPR Regulation, and – at least in those cases –the vital information concerning the decision-making process as well as the meaning and foreseeable consequences of processing for the person being the data subject. Bearing in mind the above, the Controller specifies in this point of the privacy policy the information concerning the possible profiling.

5.2. The Controller may use profiling in the Online Store for direct marketing purposes, yet the decisions made on its basis by the Controller do not concern the conclusion or rejection to conclude the Sales Agreement, or the possibility to make use of E-Services in the Online Store. The result of profiling in the Online Store may be e.g. discount for a given person, sending a discount code, reminding about unfinished purchase process, sending Product offers, which may be related to the interests or preferences of the person, or offering better conditions as compared with the standard offer of the Online Store. Regardless of profiling, the person makes decisions freely, whether they want to use the discount given, or better conditions and buy a product in the Online Store.

5.3. Profiling in the Online Store consists in automatic analysis or forecast of the conduct of a given person on the website of the Online Store, e.g. by adding a given Product to the cart, browsing the page of a given product in the Online Store, or the analysis of the history of purchase in the Online Store. The condition for such profiling is for the Controller to have the personal data of the person, so that they can later send them e.g. a discount code.

5.4. The data subject shall have the right not to depend on the decision which is only based on automated processing, including profiling, and has some legal effects on the person or similarly affects them.

6. THE RIGHTS OF THE DATA SUBJECT

6.1. The right to access, rectify, restrict, erase or transmit – the data subject shall have the right to demand the Controller to have access to their personal data, rectify, erase (“the right to be forgotten”) or restrict the processing and shall have the right to object to the processing and transmit their data. Detailed conditions of the above rights shall be indicated in Articles 15­22 of the GDPR Regulation.

6.2. The right to withdraw the consent at any time – the person whose data are being processed by the Controller on the basis of the consent given (pursuant to Article 6, par. 1, point a) or Article 9, par. 2, point a) of the GDPR Regulation), they shall have the right to withdraw their consent at any time without any impact on the compatibility with the right to process made based on the consent prior to the withdrawal.

6.3. The right to lodge a complaint with a supervisory body – the person whose data are being processed by the Controller shall have the right to lodge a complaint with a supervisory body in a manner and mode specified in the provisions of the GDPR Regulation and the Polish law, in particular the Personal Data Protection Act. The supervisory body in Poland shall be the President of the Office for Personal Data Protection.

6.4. The right to object – the data subject shall have the right, at any time, to lodge a complaint – for reasons related to their particular situation – as regards the processing of their personal data based on Article 6, par. 1, point e) (public interest or official authority) or f) (legitimate interest of the controller) in the case of profiling based on the provisions. The Controller in such a case must stop processing the personal data, unless they show the existence of legally significant and justified bases for the processing, overriding the interests, rights and freedoms of the data subject, or the bases for determining, pursuing or defending the claims.

6.5. The right to object as regards direct marketing – in the case the personal data are being processed for the needs of direct marketing, the data subject shall have the right, at any time, to lodge a complaint as regards the processing of their personal data for the needs of such marketing, including profiling, to the extent to which the processing is related to direct marketing.

6.6. To perform the rights mentioned in this point of the privacy policy, one may contact the Controller by sending them an appropriate message in writing or via e-mail to the address of the Controller indicated at the beginning of the privacy policy or using the contact form available on the Online Store’s website.

7. COOKIES IN THE ONLINE STORE, OPERATIONAL DATA AND ANALYTICS

7.1. Cookies are small pieces of text files sent by the server and saved at the device of the visitor of the Online Store (e.g. on the hard disk of a computer, laptop, or smartphone’s memory card – depending on the type of device used by the Online Store’s visitor). Detailed information on Cookies as well as the history of their origin can be found e.g. at: http://pl.wikipedia.org/wiki/Ciasteczko (https://en.wikipedia.org/wiki/HTTP_cookie).

7.2. The Controller may process the data contained in Cookies while the visitors of the Online Store use it for the following purposes:

7.2.1. identification of the Service Users being logged in the Online Store and showing that they are logged in;
7.2.2. saving Products added to the cart to place an order;
7.2.3. saving data from the Order Forms, polls or logging data to the Online Store;
7.2.4. adjusting the content of the Online Store to individual preferences of the Service User (e.g. concerning the colours, font size, layout) and optimising the use of the Online Store’s websites;
7.2.5. preparing anonymous statistics presenting the manner of using the Online Store;
7.2.6. remarketing, namely evaluating the conduct of visitors of the Online Store through anonymous analysis of their activities (e.g. repeated visits on particular pages, key words etc.) to create their profile and provide them with adverts matching their interests, also when they visit other websites in the advertising network of Google Ireland Ltd. and Facebook Ireland Ltd.

7.3. As a standard, most internet browsers on the market accept saving Cookies by default. Every person has the possibility to specify the conditions of using Cookies in the browser settings. It means that one may, e.g. partially restrict (e.g. temporarily) or fully disable saving Cookies – in the latter case it may have an impact on some functionalities of the Online Store (for instance it may prove impossible to go through the Order using the Order Form owing to failure to save the Products in the cart in the course of subsequent stages of Order placement).

7.4. The browser settings concerning Cookies are essential as regards the consent to use Cookies by our Online Store – in accordance with the law, such consent may also be expressed in the browser settings. In view of lack of such consent, change the browser setting accordingly as regards Cookies.

7.5. Detailed information concerning the change in Cookies settings and their individual removal in the most common browsers is available in the help section of the browser and the following websites (click the link):