Welcome!
Below you will find the Privacy Policy of the Monika Adamska online store, which outlines the principles for processing personal data. It has been structured in a question-and-answer format to ensure the clarity and transparency of the information presented to you. This document is effective as of August 19, 2024.
Should you have any questions or concerns, I remain at your disposal at kontakt@monikaadamska.com.
Best regards,
Monika Adamska
PRIVACY POLICY
Monika Adamska respects the right to privacy of the Users of the website www.monikaadamska.com and the online store available therein. We take particular care to protect their personal data and implement appropriate organizational and technical solutions to prevent any third-party interference with the privacy of Users. Our activities are aimed at ensuring a full sense of security for the User at a level adequate to the applicable law, including:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
- The Act of 18 July 2002 on the provision of services by electronic means;
- The Act of 16 July 2004 on telecommunications law.
The use of the website www.monikaadamska.com and the online store available on it is conducted via a secure SSL protocol, which significantly increases the protection of data transmission over the Internet.
§ 1. Who is the data controller?
The data controller is Monika Adamska, conducting business under the name Monika Adamska, headquartered in Warsaw at the following address: ul. Zgrupowania AK Żmija 15/197, 01-875 Warsaw, registered in the Central Register and Information on Economic Activity (CEIDG) maintained by the minister responsible for the economy, holding NIP: 7422009429 and REGON: 522295451.
§ 2. Who should be contacted regarding personal data processing?
In implementing personal data protection within the company, it was decided not to appoint a data protection officer since it is not mandatory for the company Monika Adamska. For matters related to personal data protection and privacy, please contact us at the email address kontakt@monikaadamska.com.
§ 3. What information is processed and stored?
Depending on the purpose, the User may be asked to provide the following information, which may be processed:
- First and last name
- Residential address
- Business address
- NIP (Tax Identification Number)
- Email address
- Telephone number
- Content of the contact message
- Products viewed in the store
- Details of placed orders
- Details of abandoned shopping carts
Providing the above-mentioned data is voluntary; however, failure to provide such information may prevent the use of the website and the online store in areas that require such information (e.g., processing orders or responding to inquiries). Detailed information about the scope of data processing for each purpose is described in the subsequent sections of this document.
Regarding the use of the website and the online store by the User, we store HTTP requests directed to the server. The viewed resources are identified through URLs and concern:
- The public IP address of the terminal device from which the request came;
- The name of the User's station - identification carried out by the HTTP protocol if possible;
- The name provided by the User during the authorization process;
- The time of the request;
- The first line of the HTTP request;
- The HTTP response code;
- The number of data sent by the server;
- The URL of the previously visited page by the User (the so-called referrer link) - in case of transition to the website through an external link;
- Information about the User's browser;
- Information about errors that occurred during the HTTP transaction.
These data are not linked with specific individuals browsing the website and the online store. The website and the online store do not automatically collect any information except for the information contained in cookies.
§ 4. Where does personal data come from?
In most cases, the Customer provides data during the following activities:
- User account registration
- Placing an order in the store
- Submitting a complaint or using the right of withdrawal
- Contacting the company.
Additionally, some information may be automatically collected by tools used by the company, such as the e-commerce system, which gathers information about viewed products, details of placed orders, including unfinished ones.
§ 5. Are the data secure?
Monika Adamska takes the security of your personal data seriously. We have analyzed the risks associated with individual data processing processes and implemented appropriate security measures and personal data protection measures. The technical infrastructure is continuously monitored, and necessary improvements are implemented. Should you have any questions regarding personal data, we are at your disposal at kontakt@monikaadamska.com.
§ 6. For what purposes are personal data processed?
Below is a list of personal data processing purposes and their explanations:
- Registration and maintenance of a user account – Article 6(1)(b) of the GDPR
- Order processing – Article 6(1)(b) of the GDPR
- Handling complaints or withdrawal from the contract – Article 6(1)(f) of the GDPR
- Correspondence handling – Article 6(1)(f) of the GDPR
- Fulfillment of tax and accounting obligations – Article 6(1)(c) of the GDPR
- Creating an archive for potential defense, establishing, or pursuing claims – Article 6(1)(f) of the GDPR.
§ 7. How long is personal data stored?
The periods for storing data have been indicated separately for each processing purpose. These details are outlined in the above sections dedicated to each specific processing purpose.
§ 8. Who are the recipients of personal data?
External service providers involved in the processing of your personal data include:
- The hosting provider that stores data on the server
- The accounting office that processes data visible on invoices and other documents to fulfill tax, accounting, and settlement obligations
- Courier companies (or Poczta Polska S.A.) that process your data to deliver your order
- A law firm that gains access to data if it is necessary to provide legal assistance to the company
- A technical support service provider that gains access to data if the technical work involves areas where personal data are located
- An online payment service provider that receives data to process payments for orders
- Other subcontractors who gain access to data if the scope of their activities requires such access.
Personal data may also be transferred to tax offices as necessary to fulfill tax, settlement, and accounting obligations, especially in terms of any declarations, reports, statements, and other accounting documents containing customer personal data.
Moreover, if necessary, personal data may be disclosed to entities, bodies, or institutions authorized to obtain access under legal provisions, such as police, security services, courts, and prosecutors.
§ 9. Is your data transferred to third countries or international organizations?
No.
§ 10. Does the company use profiling or automated decision-making based on your personal data? The company does not use personal data profiling.
§ 11. What rights do you have in connection with the processing of personal data?
Rights related to personal data processing:
- The right to access your data and receive a copy
- The right to rectify (correct) your data
- The right to delete data
- The right to limit data processing (you can request that we only store your data or perform agreed-upon actions if you believe that the data are incorrect or we process them without justification)
- The right to object to data processing (exercising the right to object to data processing based on legitimate interest, you should indicate a specific situation justifying the cessation of processing subject to objection; the company will stop processing personal data for these purposes unless the company demonstrates that the grounds for processing are overriding your rights, or that these data are necessary to establish, pursue, or defend claims)
- The right to transfer data (the right to receive from the company in a structured, commonly used, and machine-readable format the personal data provided to the company based on a contract or consent; you may also instruct us to send this data directly to another entity)
- The right to withdraw consent to data processing if such consent has been previously given
- The right to lodge a complaint with a supervisory authority (if you believe that the company processes personal data unlawfully, the complaint should be submitted to the President of the Personal Data Protection Office or another competent supervisory authority).
