ART AND CAT
- General information
This document specifies the privacy principles applicable in the Online Shop www.artandcat.com (hereinafter referred to as the “Online Shop”). The Administrator of the Online Shop is ART AND CAT SP. Z O.O. (ART AND CAT limited liability company) with the registered seat in Jarocin (63-200), Św. Ducha 31/3, entered into the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court in Poznan, IX Commercial Division of the National Court Register , under the number 0000619221, Taxpayer Identification Number (NIP): 6172209249, National Official Register of Business Entities (REGON): 364492018.
- Personal information
- The Administrator collects information provided voluntarily by the Online Shop Customers. However, the provision of marked personal data is a condition for placing an order, while the consequence of not ordering will be the inability to order products in the store.
- Moreover, the Administrator may record the information about connection parameters, like IP addresses, for technical purposes, for server administration and for collection of general, statistical demographic information (e.g. about the region from which the connection comes), and also for security purposes.
- Personal information collected by the Administrator shall be processed in accordance with the provisions of the the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC ( GDPR), current Polish Data Protection Act, the Act on Rendering Electronic Services of 18 July 2002 .
- Personal data will be processed for the purpose of shopping in our online store on the basis of art. 6 par. 1 lit. b), c) GDPR.
- After expressing separate consent, pursuant to art. 6 par. 1 lit. a) GDPR data may also be processed for the purpose of sending commercial information by electronic means or making telephone calls for direct marketing purposes – respectively in connection with art. 10 para. 2 of the Act of 18 July 2002 on the provision of electronic services or art. 172 para. 1 of the Act of 16 July 2004 – Telecommunications Law, including those managed as a result of profiling, provided that the user has given appropriate consent.
- Personal data may also be processed in an automated way in the form of profiling, provided that the user consents to it on the basis of art. 6 par. 1 lit. a) GDPR The consequence of profiling will be the assignment of a profile to a given person in order to take decisions regarding him or to analyze or predict his preferences, behaviors and attitudes.
- If the Customer has subscribed for the newsletter, the Administrator shall send, to the electronic mail address provided by the Customer, messages with information about products and services available in the Online Shop, and also information about organized competitions, promotions.
- The Administrator shall make an extra effort in order to protect privacy and information about the Online Shop Customers provided to him. The Administrator shall exercise due diligence when selecting and applying appropriate technical measures, including those of programming and organizational nature, in order to protect the processed data, and in particular he shall protect the data from unauthorized access, disclosure, loss and destruction, unauthorized modification, and also from their processing with the breach of the applicable provisions of law.
- Personal data will be processed in accordance with the principles of art. 5 GDPR.
Personal data will be:
- processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
- collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes (‘purpose limitation’);
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
- accurate and, where necessary, kept up to date (‘accuracy’);
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
- processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
- The Administrator may entrust processing of the Customers’ personal information to third parties which perform specific services, in particular delivery of the order, payment processing, assessing the Customer’s satisfaction with the Online Shop, i.e.:
- to the Operator of the online payment system Paypal Polska Sp. z o.o. with its seat in Warsaw (ul. Emilii Plater 53, 00-113 Warszawa) as the data controller entered into the register of entrepreneurs maintained by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division of the National Court Register, under the No. 0000289372, with the share capital of PLN 506,500 paid in full, with the Taxpayer Identification Number (NIP): 5252406419, an entity rendering payment services within the meaning of the Payment Services Act of 19 August 2011 (Journal of Laws 2011.199.1175 as amended). The transferred data shall be the data necessary for processing of the payment by Paypal Polska, and in particular: name and surname, electronic mail address, telephone number.
- Personal data processed for purposes related to the purchase will be processed for the period necessary to complete the purchase and order, after which the data subject to archiving will be stored for the period appropriate for the limitation of claims, i.e. 10 years. Personal data processed for marketing purposes covered by the consent statement will be processed until the consent is revoked.
III. Recipients of personal data
- Recipients of the Buyer’s personal data may by entities performing the order at the Seller’s request and handling it, such as: shipment companies, accounting companies, suppliers of the goods, assembly services, providers of IT solutions, payment processing companies, banks, insurance companies, debt collection agencies, companies providing marketing services, providers of warehouse services, telecommunication providers, companies utilizing documents, law offices, authorised state authorities.
- Your rights on personal data concerning you
- As Customers provide their personal information voluntarily, they shall have the right to access their personal data and the right to rectify, delete, limit the processing, the right to data transfer, the right to object, the right to withdraw consent at any time .
- If it is found that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the President of the Office for Personal Data Protection.
- Detailed conditions of the above rights shall be indicated in Articles 1522 of the GDPR Regulation.
- Cookie files policy of the online shop
1. When viewing the Online Shop websites “cookie” files are used, which are small text files recorded in the Customer’s target device in connection with using the Online Shop. They are used in order to improve the experience with the Online Shop websites.
2. The “cookie” files used by the Administrator are safe for the Customer’s devices. In particular, it is not possible for viruses or other unwanted or malicious software to enter the Customer’s devices in that way. Those files allow to identify the software used by the Customer and to adjust the Online Shop to each Customer individually. “Cookie” files sometimes contain information about the domain name of their origin, how long they are kept in the device and the ascribed value.
3. The Administrator uses three types of “cookie” files:
a. Session cookies: they are kept in the Online Shop Customer’s device and remain there until the given browser session is closed. Then the recorded information is permanently deleted from the memory of the Online Shop Customer’s device. The session cookies’ mechanism does not allow to download any personal information or confidential information from the Online Shop Customer’s device.
b. Permanent cookies: they are kept in the Online Shop Customer’s device and remain there until they are deleted. They are not deleted automatically when the session of the given browser is closed or when the device is turned off. The permanent cookies’ mechanism does not allow to download any personal information or confidential information from the Online Shop Customer’s device.
c. ” Analytical ” cookies allow for a better understanding of how the Customer interacts with the content of the Store, better organize its layout. “Analytical” ” cookies ” collect information about the manner of using the Store by the Customer, the type of website from which the Recipient was redirected, and the number of visits and time of the Customer’s visit to the Store. This information does not record specific Customer’s personal data, but it is used to develop statistics on the use of the Store.
4. “Cookie” files may be used by advertisement networks, in particular by the Google network, in order to display advertisements adjusted to the way the Customer uses the Online Shop. To that end, the information may be retained about the Customer’s navigation path or the time spent on the given website.
5. As regards the information about the Customer’s preferences collected by the advertising network Google, the Customer may view and edit the information related to cookie files by means of the following tool: https://www.google.com/ads/preferences/.
6. The Customer may, by himself and at any time, change the “cookie” files settings, specifying the conditions of their storing and of their access to the Customer’s device. The settings referred to in the previous sentence may be changed by the Customer through the web browser settings or through configuration of the service. Those settings may be changed in particular so as to block automatic support for “cookie” files in the web browser settings or to inform each time they are introduced to the Customer’s device. Detailed information about the possibilities and ways of supporting cookie files is available in the software (web browser) settings.
7. The Customer may remove “cookie” files at any time, using the functions available in the web browser he uses.
8. Limitation of the “cookie” files application may affect some functionalities available on the Online Shop website.
Request for deletion of personal data from the collection”
First name and last name……………………………………………………………………………
Address for correspondence:……………………………………………………………………..
Post Code / City:………………………………..
Phone number :…………………………………………………………………….
E-mail adress :……………………………………………………………………………..
¨ I give my consent for processing of the above data contained in the form by ………… .. ………………………………. with headquarters in ……………, at ul. ………………… based on Article. 6 par. 1 point a) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (general regulation on protection data). Consent is voluntary but also necessary to remove your data from our databases. The processing of the above data is only for the purpose of removing them from our system.
¨ I give my consent for processing of the above data contained in the form by ………… .. ………………………………. with headquarters in ……………, at ul. ………………… based on Article. 6 par. 1 point a) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (general regulation on protection data). Expressing consent is voluntary, but at the same time it is necessary to send you confirmation that your data has been removed from our system. The processing of the above data is only for the purpose of deleting them from our system and sending a confirmation of deletion to the e-mail address provided in the above form.