PRIVACY POLICY
PRIVACY POLICY OF THE WEBSITE https://warfrontline.com/- The Personal Data Administrator of the website at the following address: twojwlasnyogrod.pl (hereinafter referred to as the “Website”) is: IV3 Dawid Paprocki with its registered office in Katowice, postal code 40-862, ul. Czoika 3, e-mail: iv3agencja@gmail.com, NIP (Tax ID): 6272694528, REGON (Business ID): 388519170, entered into the Central Register and Information on Economic Activity conducted by the minister competent for economic affairs.
- Respecting your rights as data subjects (persons whose data are processed) and respecting the applicable provisions of law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR,” the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws, item 1000), hereinafter referred to as the “Act,” and other relevant data protection regulations, we are committed to maintaining the security and confidentiality of the personal data obtained from you. All employees have been properly trained in the processing of personal data, and our company, as the Personal Data Administrator, has implemented appropriate safeguards as well as technical and organizational measures to ensure the highest level of personal data protection. We have implemented procedures and data protection policies in accordance with the GDPR, ensuring compliance with the law and reliability of data processing, as well as the enforceability of any rights you have as persons whose data are processed. Additionally, if necessary, we cooperate with the supervisory authority in the territory of the Republic of Poland, i.e., with the President of the Personal Data Protection Office (hereinafter referred to as “PUODO”).
- All inquiries, requests, and complaints regarding the processing of personal data by our company (the Personal Data Administrator), hereinafter referred to as “Notifications,” should be directed to the following e-mail address: iv3agencja@gmail.com
- The content of the Notification should clearly indicate:
- the data of the person or persons the Notification concerns,
- the event that is the reason for the Notification,
- your demands and the legal basis for those demands,
- the preferred way of handling the matter.
- In our Online Store, we collect the following personal data:
- first and last name – when placing an Order, you will be asked to provide your first and last name so that we can fulfill the Order and be able to contact you,
- residential address – needed for invoicing,
- phone number – there may be cases when we call you to confirm the Order,
- e-mail address – we will send you an Order confirmation via e-mail and contact you if necessary regarding the Order being processed. If you have subscribed to our newsletter, we will also send you commercial information once or twice a month,
- NIP (Tax Identification Number) – we collect this from entrepreneurs and individuals who request an invoice and have a NIP number,
- device IP address – information resulting from the general rules of connections made on the Internet, such as the IP address (and other information stored in system logs), is used by the Online Store administrator for technical purposes. IP addresses may also be used for statistical purposes, in particular to collect general demographic information (e.g., about the region from which the connection is made).
- Providing the data indicated in the preceding point is necessary in the following cases:
- when making a purchase in our Online Store via the Order Form available on the Online Store’s website (Order without logging in/registering an Account),
- in order to register you in the buyer database, which is voluntary; in this situation, we store the data you provide in our database to facilitate your future purchases in our Online Store,
- in order to provide the newsletter service (subscription) – if you wish to be informed about interesting events and commercial offers, you can become a subscriber to our newsletter; subscribing is voluntary, and you can unsubscribe at any time.
- Our Online Store uses Cookie technology to tailor its operation to your individual needs. Therefore, you may consent to have the data and information you enter stored, so that they can be reused during your next visits to our Online Store without re-entering them. Owners of other websites will not have access to this data and information. If you do not agree to personalize the Online Store, we suggest disabling cookies in your web browser’s options.
- Each of you as a user of our Online Store can decide whether and to what extent you wish to use our services and share information and data about yourself, as set out in this Privacy Policy.
- Your personal data is processed by our company as the Personal Data Administrator in order to fulfill sales contracts and all additional services provided to you (i.e., the persons whose data are processed) and offered in the Online Store. In accordance with the principle of data minimization, we only process those categories of personal data that are necessary to achieve the purposes mentioned in the preceding sentence.
- We process personal data for as long as necessary to achieve the purposes mentioned in the preceding point. Personal data may be processed for a longer period than indicated in the previous sentence if such a right or obligation imposed on the Personal Data Administrator results from specific legal provisions or if the service we provide is continuous in nature (e.g., newsletter subscription).
- The source of the personal data processed by the Personal Data Administrator is the persons to whom the data pertains.
- Your personal data is not transferred to a third country within the meaning of the GDPR.
- No personal data is disclosed to third parties without the explicit consent of the person to whom the data pertains. Without the person’s consent, personal data may be disclosed only to public law entities, i.e., authorities and administrative bodies (e.g., tax authorities, law enforcement agencies, and other entities authorized under generally applicable legal provisions).
- Personal data may be entrusted for processing to entities that process such data on behalf of our company as the Personal Data Administrator. In this situation, as the Personal Data Administrator, we enter into a personal data processing agreement with the processing entity. The processing entity processes the entrusted personal data solely for the needs, to the extent, and for the purposes specified in the entrustment agreement referred to in the preceding sentence. Without entrusting your personal data for processing, we would not be able to conduct our business activities within the Online Store. As the Personal Data Administrator, we entrust personal data for processing to entities:
- that provide hosting services for the website on which our Online Store operates,
- that provide other services to us as the Personal Data Administrator, which are necessary for the day-to-day functioning of the Online Store.
- Personal data is not subject to profiling by the Personal Data Administrator.
- In accordance with the GDPR provisions, every individual whose personal data we process as the Personal Data Administrator has the right to:
- be informed about the processing of personal data, as referred to in Article 12 of the GDPR – the Administrator is obliged to provide you, as the persons whose data is to be processed, with the information specified in the GDPR (including our details, the DPO’s contact details, the purposes and legal bases for processing personal data, the recipients or categories of recipients of personal data, if any, or the period during which the data will be processed or the criteria for determining that period). This obligation must be fulfilled at the time of data collection (for example, when a customer places an order in the online store). If the data is not obtained from the data subject but from another source, it must be provided within a reasonable period, depending on the circumstances. The Administrator may refrain from providing this information if the data subject already has it.
- access their personal data, as referred to in Article 15 of the GDPR – by providing us with your personal data, you have the right to inspect and access it. However, this does not mean you have the right to access all documents containing your data, as they may include confidential information. You do, however, have the right to information about which of your data we process and for what purpose, as well as the right to obtain a copy of your personal data, with the first copy being issued free of charge, and for each subsequent copy, in accordance with the GDPR, we charge an appropriate administrative fee corresponding to the cost of producing the copy.
- correct, supplement, update, rectify personal data, as referred to in Article 16 of the GDPR – if your personal data has changed, please inform us as the Personal Data Administrator so that the data we hold is consistent with the actual state and up to date. Likewise, if your personal data has not changed, but for any reason, the data we hold is incorrect or has been recorded incorrectly (e.g., as a result of a typographical error), please let us know so that we can correct or rectify it.
- erasure of data (the “right to be forgotten”), as referred to in Article 17 of the GDPR – in other words, you have the right to request the “deletion” of data held by us as the Personal Data Administrator and to request that we inform other administrators to whom we have disclosed your data about the need to delete them. You may request the erasure of your personal data, in particular, when:
- the purposes for which the personal data was collected have been achieved, e.g., we have fully executed the sales contract concluded with you,
- the basis for processing your personal data was solely consent, which has subsequently been withdrawn, and there are no other legal grounds for further processing of your personal data, e.g., if you unsubscribe from the newsletter and no longer use our company’s offer in any other way,
- you have objected pursuant to Article 21 of the GDPR, and you believe that we have no overriding legal basis allowing us to continue processing your personal data,
- your personal data was processed unlawfully, i.e., for purposes incompatible with the law or without any basis for processing personal data – please remember that you must have grounds for your request in such a case,
- the necessity to delete your personal data results from legal regulations,
- the personal data concerns a minor and was collected in connection with the provision of information society services,
- restriction of processing, as referred to in Article 18 of the GDPR – you may contact our company with a request to restrict the processing of your personal data (which would mean that, until the matter is resolved, our company would primarily only store it) if:
- you dispute the accuracy of your personal data, or
- you believe we are processing your data without a legal basis, but at the same time, you do not want us to delete the data (i.e., you are not exercising the right referred to in the preceding letter), or
- you have filed an objection as referred to in letter f) of this point, or
- your personal data is needed to establish, pursue, or defend claims, e.g., in court,
- data portability, as referred to in Article 20 of the GDPR – you have the right to obtain your data in a format that allows it to be read on a computer and the right to send this data in such a format to another administrator. You are entitled to this right only if the processing of your data was based on consent (e.g., for the newsletter subscription) or if the data was processed automatically.
- object to the processing of personal data, as referred to in Article 21 of the GDPR – you have the right to object if you do not agree to the processing of your personal data, which we have processed so far for legitimate purposes consistent with the law. In particular, you have the right to object to the processing of your personal data for direct marketing purposes (e.g., newsletter subscription).
- not be subject to profiling, as referred to in Article 22 in connection with Article 4(4) of the GDPR – in our Online Store, you will not be subject to automated decision-making or profiling within the meaning of the GDPR, unless you give your consent. In addition, we will always inform you if profiling should occur.
- With regard to the right to erasure of data (the right to be forgotten), please note that under the GDPR you do not have the right to exercise this right if:
- the processing of your personal data is necessary for exercising the right to freedom of expression and information, for example, if you have posted your data on a blog, in comments, etc.,
- the processing of personal data is necessary for our company to fulfill legal obligations resulting from legal regulations – we cannot delete your data for the period necessary to fulfill obligations (e.g., tax obligations) imposed on us by law,
- the processing of your data is carried out for the purposes of establishing, pursuing, or defending legal claims.
- If you wish to exercise your rights referred to in the preceding point, please use the appropriate tabs in the Online Service that allow you to delete your account and the data collected in our Online Service, or please send an e-mail to iv3agencja@gmail.com or a written letter to the correspondence address mentioned in item 3 above.
- Every identified case of a security breach is documented, and if one of the situations specified in the GDPR or the Act occurs, the persons whose data is affected and, if applicable, PUODO will be informed of such a breach of personal data protection regulations.
- All terms written in capital letters have the meanings assigned to them in the Regulations of our Online Store, unless otherwise stated in this Privacy Policy.
- In matters not regulated by this Privacy Policy, the relevant provisions of generally applicable law shall apply. In the event of any inconsistencies between the provisions of this Privacy Policy and the above regulations, the latter shall prevail.