25 May 2018
2. THE CONTROLLER
The Controller of your personal data is Aleksandra Kościkiewicz operating under the name ALEKSANDRA KOŚCIKIEWICZ, Młynowa St. no. 57, 05-831 Krakowiany, phone: 660 449 477, e-mail address: firstname.lastname@example.org The Controller makes decisions about the purposes and methods of processing your data, as well as is bearing responsibility for the security and lawfulness of processing your data. If you have questions or concerns regarding the protection of your personal data, please contact the Controller using the contact details provided above.
The Controller is the owner of the Alexandra K. brand and runs the E-Shop, available at the website www.alexandrak.co
3. THE PRINCIPLES OF PERSONAL DATA PROCESSING
The Controller makes every effort to ensure that your personal data is properly protected
and processed in accordance with the law. The principles of data processing are as follows.
Personal data must be:
(a) processed in accordance with the law, fairly and transparently for the data subject ("lawfulness, fairness and transparency");
(b) collected for specific, explicit and legitimate purposes and not further processed in a way incompatible with those purposes; ("purpose limitation");
- c) adequate, relevant and limited to what is necessary for the purposes for which they are processed ("data minimization");
(d) correct and, where necessary, kept up to date; all reasonable steps must be taken to ensure that personal data which are incorrect in view of the purposes for which they are processed are immediately removed or corrected ('accuracy');
(e) kept in a form which permits identification of the data subject for no longer than is necessary for the purposes for which the data are processed ('storage limitation');
(f) processed in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by appropriate technical or organizational measures ('integrity and confidentiality').
4. HOW DO WE OBTAIN THE DATA WE PROCESS?
We collect data directly from you when you agree to use the newsletter service when you register as an E-shop User and when you place an order. You can provide us with your data also when you simply contact the Controller, for example to obtain information.
5. WHAT CATEGORIES OF DATA WE PROCESS?
The scope of data we process depends on which service you use.
If you only use the newsletter, we process your e-mail address.
If you register as an E-Shop User, the scope of the data that we ask you for depends on whether you act as a consumer or as an entrepreneur - a person running a business or if you represent a legal person.
If you act as a consumer, you are kindly asked provide your name, address, e-mail address and telephone number.
If you act as an entrepreneur or if you represent a legal person, we also ask you for the tax identification number NIP and contact details appropriate to the form of business activity (respectively: the legal name of the sole proprietorship or of the legal person, address of the registered office).
6. WHAT IS THE PURPOSE AND THE GROUND FOR DATA PROCESSING?
We process your data primarily because it is necessary for the service you are interested in: subscription to the newsletter, registration of the User's account, placing an order in the E-Shop.
The main basis for the processing of personal data is your consent. It is voluntary, but it is necessary to initiate the appropriate service.
In particular, your personal data is necessary for such activities as the conclusion of a contract (which follows as a result of placing an order), sending the ordered goods or issuing an invoice. We may also process personal data to contact you in connection with the execution of the order and in connection with handling the process of possible complaint.
After the conclusion of the contract, we can process your data, the processing of which is necessary to perform the contract, or to take action on your request, notified before the conclusion of the contract.
If you express additional consent by checking the appropriate box in the registration form, we may process your personal data also for marketing purposes, that is to inform you about new products, services and promotions offered by the Controller.
If you express additional consent by selecting the appropriate field in the registration form, we can also process your data in order to profile the presented and sent marketing content and to automatically suggest solutions tailored to the individual needs of the User.
In the case give this consent, your personal data will also be processed in an automated way, including in the form of profiling. This processing is done through the automatic use of data collected via the IP address, cookies, Google Analytics and data automatically transmitted by your web browser in order to best adapt the presented and sent content to your needs and facilitate the navigation of the website (e.g. automatic data filling in form fields on the website).
The consent granted for the processing of personal data can be canceled at any time by sending a mail message to the address email@example.com
If you revoke consent to the processing of personal data necessary for the provision of a given service, for which your consent is necessary, we will not be able to carry out this service.
We may also process your data due to our legitimate interest (eg defense against legal claims), as well as if the processing is necessary to fulfill the legal obligation of the Controller, for example resulting from tax regulations.
Cookies are generally not personal data, but certain information stored in "cookies" (eg as to preferences), especially when combined with other information about the user of websites, can be treated as personal data. Such personal data may be processed on the basis of the granted consent regarding the automatic suggestion of the solutions referred to above.
Details of cookies are included in the COOKIES POLICY.
8. HOW LONG DO WE STORE YOUR DATA?
The personal data provided by you after the order has been completed may be kept for the time necessary to process and settle the completed order, provide services related to account maintenance (in the case of registration on the website) and deliver the ordered marketing information. Canceling your consent to data processing or submitting an effective objection means that we will no longer process your data to the extent covered by that revoked consent or effective objection.
We may store your personal data until the expiry of the limitation period for any claims related to the selected service.
9. RECIPIENTS OF THE DATA
As a rule, we do not pass your personal data to third parties. However, we can do so if we conclude an agreement with a given entity to entrust the processing of personal data. Before we do, we need to make sure that this entity guarantees that all data processing security requirements are met. We may also transfer your personal data to entities cooperating with us (eg to law firms), if it proves necessary in connection with our legitimate interest, for example in the area of bringing or defending against legal claims. We may also transfer your data to a competent state authority if the authority so requests, acting on the basis of applicable laws.
To complete your order the data may also be transferred to entities providing us with delivery services, and the entities maintaining the information systems we use (eg administering our website). The transferred data will only be used to complete your order or provide you with marketing information – in case you have agreed to receive it.
Your personal data will in principle not be transferred outside the European Economic Area, unless such transfer will result from the automated processing of data for which you have agreed; in the latter case, the Controller will make sure that the service used meets the requirements resulting from the provisions of the GDPR.
10. YOUR RIGHTS
The GDPR significantly extends the scope of your rights.
The right to access personal data
You have the right to obtain information about your personal data, which we process in connection with the following problems:
- what are the purposes of processing personal data;
- what are the categories of relevant personal data;
- who is the recipient / categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or an international organization (in this case you have the right to receive information about the appropriate security related to the transfer);
- what is the expected period of storage of your personal data or what are the criteria for determining this period;
- additional information regarding the right to rectification, deletion, limitation of processing, objection to the processing of personal data;
- additional information regarding the right to lodge a complaint to the supervisory body - the President of the Office for Personal Data Protection;
- are your personal data used in the process of automatic decision making, including profiling and what are the rules for making these decisions and what is the significance and consequences of such processing;
You have the right to request a copy of personal data that is processed by the Data Controller.
The right to withdraw consent
You have the right to withdraw consent to the processing of personal data. However, it should be remembered that the withdrawal of the consent will only affect data whose processing is based on consent and does not affect the lawfulness of the processing carried out prior to the withdrawal of consent.
The right to rectify
You have the right to correct your personal data that is incorrect and to supplement it if necessary. You should immediately notify the Controller if this data changes and the Controller will correct it.
The right to erasure ("the right to be forgotten")
You have the right to delete personal data in the following situations:
- personal data are no longer needed in connection with the purposes for which they were collected or otherwise processed by the Controller;
- you have withdrawn your consent on which the processing is based and there is no other legal basis for processing;
- you have filed or opposed the processing (see below)
- personal data have been processed unlawfully;
- personal data must be removed in order to comply with the legal obligation;
This means that the Controller will delete data if there is no reason to process it further.
The right to restrict the processing
You have the right to request a restriction on the processing of your data. You can ask the Controller to stop processing certain types of data or stop processing them in a certain way if:
- Your personal information is incorrect;
- the processing of your personal data is against the law;
- Your personal data is no longer needed for processing but is needed to establish, assert or defend legal claims;
- you have objected to the processing of your personal data (see below).
The right to data portability
You have the right to receive personal data that we process. In this case, the Controller will send a copy of the files with this data in a structured, commonly used and readable computer format so that you can transfer it to another entity. You can also ask the Controller to transfer files directly to this other entity.
The right to object
You have the right to object to the processing of your data due to being in a special situation. The Controller is no longer allowed to process such personal data, unless he demonstrates the existence of valid legally valid grounds for processing, superior to the interests, rights and freedoms of the data subject, or grounds for establishing, investigating or defending claims.
If personal data is processed for direct marketing purposes, you have the right, at any time, to object to the processing of your personal data for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data may no longer be processed for such purposes.
The right to submit a complaint
If it is found that the processing of personal data violates your rights, you have the right to submit a complaint to the President of the Office for Personal Data Protection.
The Controller encourages you to contact him first and make a joint attempt to explain and resolve the situation. We kindly ask you to contact us in this regard at the e-mail address firstname.lastname@example.org
11. FINAL PROVISIONS
Cookies are used by ALEXANDRAK.CO only for the purpose of creating statistics and
administer the site, and are not used for advertising purposes nor are they passed on to the
The term "cookie" used below, refers to cookies and similar tools, as described in Directive
2009/136 / EC of the European Parliament and of the Council of 25 November 2009., and
in art. 173 of the Act of 16 July 2004. Telecommunications Law (Journal of Laws No. 171,
item. 1800, as amended. D.). Cookies are computer data, especially text files stored on the
computer or a mobile device, while using the websites. Cookies can contain the name of the
website they were taken from, time of storage on a device and a unique number.
“Cookies” are text-only pieces of information that a web site transfers to an individual’s hard
drive or other web site-browsing equipment for record-keeping purposes. Cookies allow
the Website to remember important information that will make your use of the site more
convenient. A cookie will typically contain the name of the domain from which the cookie
has come, the “lifetime” of the cookie, and a randomly generated unique number or other
Website for the following purposes:
For example, we may store the recent searches you have performed in a Cookie so
that we can allow you to easily repeat those searches when you return to our Website.
Session Cookies are temporary cookies that remain in the cookie file of your browser until
you leave the Website.
Persistent Cookies remain in the cookie file of your browser for much longer (though how
long will depend on the lifetime of the specific cookie). When we use session cookies to track
the total number of visitors to our Website, this is done on an anonymous aggregate basis (as
cookies do not in themselves carry any personal data). We may also employ cookies so that
we remember your computer when it is used to return to the Website to help customize your
Aleksandrak.pl web experience. We may associate personal information with a cookie file in
those instances. Use the options in your web browser if you do not wish to receive a cookie
or if you wish to set your browser to notify you when you receive a cookie. You can easily
delete any cookies that have been installed in the cookie folder of your browser. For example,
if you are using Microsoft Windows Explorer:
1. Open ‘Windows Explorer’
2. Click on the ‘Search’ button on the tool bar
3. Type “cookie” into the search box for ‘Folders and Files’
4. Select ‘My Computer’ in the ‘Look In’ box
5. Click ‘Search Now’
6. Double click on the folders that are found
7. ‘Select’ any cookie file
8. Hit the ‘Delete’ button on your keyboard
If you are not using Microsoft Windows Explorer, then you should select “cookies” in the
“Help” function for information on where to find your cookie folder.
If you disable all cookies, you may not be able to take advantage of all the features of this