We are committed to protecting your privacy and want you to feel secure whilst using our services. Accordingly, below you can find the key points regarding our processing of your personal data. This policy also contains information about the cookies used by our website. The privacy policy has been drawn up in accordance with the GDPR, the General Data Protection Regulation.
PERSONAL DATA CONTROLLER
Centoro S.A., with its registered office at al. Zwycięstwa 96/98, 81-451 Gdynia, entered in the Register of Entrepreneurs maintained by the District Court for Gdańsk-Północ in Gdańsk, 8th Commercial Division of the National Court Register, under KRS number 0000846769, Tax Identification Number (NIP) 5862356855, share capital (paid-up capital) PLN 1,183,145.10
You are the data controller in respect of customers’ personal data or any other data you may enter onto the Website; we, on the other hand, process this data on your behalf and solely on your documented instructions, and without such instructions only where we are required to do so by law.
PERSONAL DATA AND PRIVACY
If you intend to create an account and use our services, you will be asked to provide us with your personal data. These services may primarily involve managing your account and providing access to online shop software features (‘Services’).
Purpose of processing:
- the provision of the Services offered on the Website
- direct marketing (though not a newsletter)
- sending the newsletter
Legal basis for data processing:
Depending on the actions you take, these may include:
- a contract for the provision of services – including the granting of a licence – or steps taken at your request with a view to entering into such a contract (Article 6(1)(b) of the GDPR),
- a legal obligation to which we are subject, e.g. relating to accounting (Article 6(1)(c) of the GDPR),
- Your consent given on the Website – if you choose to give it (Article 6(1)(a) of the GDPR),
- our legitimate interest, consisting of processing for the purpose of establishing, exercising or defending potential claims by the parties (Article 6(1)(f) of the GDPR),
- our legitimate interest, consisting of processing for the purposes of direct marketing (Article 6(1)(f) of the GDPR)
Providing data:
- voluntary, but in some cases it may be necessary in order to conclude a contract
Consequences of failing to provide the data:
Depending on the purpose for which the data is provided:
- inability to register on the Website,
- inability to use the Website’s services,
- inability to receive information about promotions or special offers available on the Website.
The right to withdraw consent:
- at any time
The processing of your data remains lawful until you withdraw your consent.
PROFILING
In connection with the Website, we may carry out profiling using the personal data you have provided. This profiling may be based on your previous activity and may involve the display of personalised adverts.
The profiling we carry out does not result in decisions being made that have legal consequences for you or affect you in a similarly significant way.
PROCESSING PERIOD
We will only process your data for as long as we have a legal basis for doing so, that is, until:
- we will no longer be subject to a legal obligation requiring us to process your data (particularly in relation to accounting) or
- it will no longer be possible for the parties to establish, pursue or defend claims relating to a contract concluded by the Website, or
- you may withdraw your consent to the processing of your data, if that consent formed the basis for such processing, or
- your objection to the processing of your personal data will be upheld – where the basis for the processing of your data was the controller’s legitimate interest or where the data was processed for the purposes of direct marketing (including profiling) – depending on which applies in the particular case and whichever occurs later.
DATA SECURITY
When processing your personal data, we implement organisational and technical measures in accordance with the relevant legal provisions.
TRANSACTIONS
Transaction data, including personal data, may be transferred to PayLane Sp. z o.o., with its registered office in Gdańsk at 4 Norwida Street, postcode: 80-280, KRS: 0000227278, to the extent necessary to process payment for the order.
YOUR RIGHTS
In addition, you have the right to request:
- access to your personal data,
- their corrections,
- removal or
- restrictions on processing,
- requests for the transfer of data to another data controller.
And also the law:
to object to the processing of your data at any time:
- on grounds relating to your particular situation – in respect of the processing of your personal data based on Article 6(1)(f) of the GDPR (i.e. on the legitimate interests pursued by the controller), including profiling carried out on the basis of those provisions,
- where personal data are processed for the purposes of direct marketing, including profiling, to the extent that the processing is related to such direct marketing.
Please contact us if you wish to exercise your rights.
If you believe that your personal data is being processed unlawfully, you may lodge a complaint with the supervisory authority.
BISCUITS
Like most websites, our website uses what are known as ‘cookies’. These files:
- are stored in the memory of your device (computer, mobile phone, etc.);
- enable you, amongst other things, to use all the features of the Website;
- do not alter your device’s settings.
By using the relevant options in your browser, you can at any time:
- delete cookies,
- block the use of cookies in future.
On this website, cookies are used for the following purposes:
- to store information about your session,
- statistical,
- marketing,
- making the Shop’s features available.
To find out how to manage cookies, including how to disable them in your browser, you can consult your browser’s help file. You can access this information by pressing the F1 key in your browser. You will also find relevant guidance on the following pages, depending on which browser you are using:
You can find more information about biscuits on Wikipedia.
EXTERNAL SERVICES / DATA RECIPIENTS
In connection with our Website, we use the services of third parties to whom your data may be disclosed (solely for the purposes set out in this policy).
Below is a list of the possible recipients of your data:
- Web hosting provider
- People who work with us under civil law contracts and support our day-to-day operations
- The entity responsible for liaising with clients and carrying out the Controller’s projects
- Email provider
- The organisation running the secretariat
- Accountancy firm
- A marketing services provider
- Software provider CRM
- Office suite provider
- the relevant public authorities, to the extent that the Controller is obliged to make the data available to them
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
Consequently, your personal data may also be processed by entities outside the European Union. An adequate level of protection for your data, including through the application of appropriate safeguards, is ensured by these entities’ participation in the EU-US Privacy Shield, established by an implementing decision of the European Commission as a set of rules guaranteeing adequate protection of your privacy.
CONTACT THE ADMINISTRATOR
Would you like to exercise your rights regarding your personal data? Or perhaps you simply have a question about our Privacy Policy? Please get in touch with us.