Privacy policy

PRIVACY POLICY OF THE PALMAR STORE

This Privacy Policy (hereinafter: "Policy") contains information on the processing of your personal data in connection with the use of the "Palmar" online store, operating at the Internet address www.palmar.co hereinafter: "Store").

All capitalized terms not defined otherwise in the Policy have the meaning given to them in the Regulations, available at: www.palmar.co/pl/policies/terms-of-service.

Personal data administrator

The administrator of your personal data is Katarzyna Rusin, running a business under the name "Katarzyna Rusin Saturday Summer" (address of the permanent place of business: ul. Dworska 1A/84, 30-314 Kraków), entered into the Central Register and Information on Business Activity, with NIP: 6792991103, REGON number 383940769 (hereinafter: "Administrator").

Contact with the Administrator

In all matters related to the processing of personal data, you can contact the Administrator via e-mail at: hello@palmar.co.

Personal data protection measures

The administrator applies modern organizational and technical security measures to ensure the best possible protection of your personal data and guarantees that it processes them in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with with the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) (hereinafter: "GDPR"), the Act of May 10, 2018 on the protection of personal data and other provisions on the protection personal data.

Information about processed personal data

Using the Store requires the processing of your personal data. Below you will find detailed information about the purposes and legal grounds for processing, as well as the processing period and the obligation or voluntarily to provide them.


Profiling

In order to create your profile for marketing purposes and to direct direct marketing to you tailored to your preferences, the Administrator will process your personal data in an automated manner, including profiling - however, this will not have any legal effects on you or in a similar way significantly affect your situation.

The scope of profiled personal data corresponds to the scope indicated above in relation to the analysis of your activity in the Store and the data that you will save in the Account.

The legal basis for the processing of personal data for the above purpose is art. 6 sec. 1 lit. f of the GDPR, according to which the Administrator may process personal data in order to pursue its legitimate interest, in this case conducting marketing activities tailored to the preferences of recipients. Application of the above personal data is voluntary, but necessary for the implementation of the above. purpose (the consequence of not providing them will be the Administrator's inability to conduct marketing activities tailored to the preferences of recipients).

The administrator will process personal data for the purpose of profiling until the objection is successfully raised or the purpose of processing is achieved.

Recipients of personal data

The recipients of personal data will be the following external entities cooperating with the Administrator:

data hosting service provider;
newsletter service provider;
Courier;
online payment system providers;
provider of tools for analyzing activity in the Store and directing direct marketing to people using it (including Google Analytics);
social network operators whose plugins have been placed in the Store;
accounting services company.

In addition, personal data may also be transferred to public or private entities, if such an obligation results from generally applicable provisions of law, a final court judgment or a final administrative decision.

Transfer of personal data to a third country

Due to the use of tools such as Google Analytics by the Administrator, your personal data may be transferred to the following third countries: USA, Chile, Singapore and Taiwan (Republic of China). The basis for the transfer of data to the above-mentioned third countries are contractual clauses ensuring an adequate level of protection, in accordance with the standard contractual clauses set out in Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries under the Regulation of the European Parliament and of the Council (EU) 2016/679.

You can obtain from the Administrator a copy of the data transferred to a third country.

Right

In connection with the processing of personal data, you have the following rights:

the right to information which personal data concerning you are processed by the Administrator and to receive a copy of this data (the so-called right of access). The release of the first copy of the data is free of charge, the Administrator may charge a fee for the next ones;
if the processed data becomes outdated or incomplete (or otherwise incorrect), you have the right to request their rectification;
in certain situations, you can ask the Administrator to delete your personal data, e.g. when:
the data will no longer be needed by the Administrator for the purposes of which he informed;
you have effectively withdrawn your consent to data processing - unless the Administrator has the right to process data on a different legal basis;
the processing is unlawful;
the need to delete the data results from the legal obligation imposed on the Administrator;
in the event that personal data is processed by the Administrator on the basis of consent to processing or in order to perform the Agreement concluded with him, you have the right to transfer your data to another administrator;
in the event that personal data is processed by the Administrator on the basis of your consent to the processing, you have the right to withdraw this consent at any time (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal);
if you decide that the processed personal data are incorrect, their processing is unlawful, or the Administrator no longer needs specific data, you can request that the Administrator does not make any operations, but only stored them;
you have the right to object to the processing of personal data, the basis for which is the legitimate interest of the Administrator. In the event of an effective objection, the Administrator will stop processing personal data in the above-mentioned manner. purpose;
you have the right to lodge a complaint with the President of the Office for Personal Data Protection when you consider that the processing of personal data violates the provisions of the GDPR.

Cookies

  1. The administrator informs that the Store uses "cookies" (cookies) installed on your end device. These are small text files that can be read by the Administrator's system, as well as by systems belonging to other entities whose services the Administrator uses (e.g. Facebook, Google).
  2. The administrator uses cookies for the following purposes:
  • ensuring the proper operation of the Store - thanks to cookies, it is possible to operate the Store efficiently, use its functions and conveniently move between individual subpages;
  • increasing the comfort of browsing the Store - thanks to cookies, it is possible to detect errors on some subpages and improve them constantly;
  • creating statistics - cookies are used to analyze how users use the Store. Thanks to this, it is possible to constantly improve the Store and adapt its operation to the preferences of users;
  • conducting marketing activities - thanks to cookies, the Administrator can direct advertisements to users tailored to their preferences.

3. The administrator can place both permanent and temporary (session) files on your device. Session files are usually deleted when the browser is closed, while closing the browser does not delete persistent files.
4. Information about cookies used by the Administrator is displayed in the panel located at the bottom of the Store's website. Depending on your decision, you can enable or disable cookies for specific categories (except essential cookies) and change these settings at any time.

5. Data collected using cookies do not allow the Administrator to identify you.
The administrator uses the following cookies or tools that use them:

  • Necessary cookies (The operation of these files is necessary for the proper functioning of the Store's website, so you cannot disable them. Thanks to these files (retrieving, among others, the IP number of your device), it is possible to e.g. informing you about cookies operating on the Store's website)

  • Google Analytics (This tool enables the collection of statistical data on the use of the Store by Customers, including about the number of visits, duration of visits, search engine used, location. The collected data helps to improve the Store and make it more customer-friendly.)

  • Facebook Pixel (This tool makes it possible to determine that you have visited the Store, and to direct advertisements displayed on Facebook and Instagram social networks to you and measure their effectiveness.)

Through most commonly used browsers, you can check whether cookies have been installed on your end device, as well as delete installed cookies and block their installation in the future by the Store. Disabling or limiting the use of cookies may, however, cause quite serious difficulties in using the Store, e.g. in the form of the need to log in on each subpage, longer loading period of the Store page, restrictions on the use of some functionalities.

Final Provisions

To the extent not regulated by the Policy, generally applicable provisions on the protection of personal data shall apply.
The policy has been in force since 25.07.2022.