This document implements the information policy towards users of the online store at www.konrad-bielizna.pl ("Website") in all aspects of personal data processing and protection. We attach great importance to the protection, collection, processing and use of your personal data in accordance with applicable regulations.
1. Information regarding the Administrator and collection of personal data
1.1. Co-administrators within the meaning of art. 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (hereinafter referred to as the Regulation) in relation to your personal data, the following companies are jointly:
1.1.1. Konrad R.K.Z. Bzdurscy sp. J. With its registered office in P─Öczniewo, address: ul. D─ůbrowska 44, 99-235 P─Öczniew NIP: 8281099281, REGON: 730232001, entered into the Register of Entrepreneurs of the National Court Register under the number 0000197000 (hereinafter Co-Administrator No. 1)
1.1.2. Konrad Lingerie sp.z o.o. with its registered office in ┼ü├│d┼║, address: ul. Zachodnia 70/404, 90-403 ┼ü├│d┼║ NIP: 8281399994, REGON 731590524, entered into the Register of Entrepreneurs of the National Court Register under the number 0000144708 (hereinafter Co-Administrator No. 2)
1.1.3. Konrad Dystrybucja sp.z o.o. with its registered office in P─Öczniewo, address ul. D─ůbrowska 44, 99-235 P─Öczniew NIP: 8281414386, REGON: 363601474, entered into the Register of Entrepreneurs of the National Court Register under the number 0000599307 (hereinafter Co-Administrator No. 3)
1.1.4. Konrad Trading Konrad Dystrybucja sp.z o.o. sp.k. with its registered office in P─Öczniewo, address ul. D─ůbrowska 44, 99-235 P─Öczniew NIP: 8281414593, REGON: 364274184, entered into the Register of Entrepreneurs of the National Court Register under the number 0000614108 (hereinafter Co-Administrator No. 4)
hereinafter jointly referred to as Joint Administrators.
1.2. Please be advised that as part of mutual co-administration agreements, responsibilities have been agreed regarding the fulfillment of obligations under the Regulation, in particular it has been agreed that:
1.2.1. for fulfilling the information obligations arising from the Regulation in relation to providing information referred to in art. 13 and 14 (primary and secondary information obligation), is the responsibility of the Co-Administrator 1 Co-Administrator No. 2 and Co-Administrator No. 4
1.2.2. the Administrator is responsible for fulfilling the obligations arising from the Regulation with respect to your exercise of rights, regardless of this arrangement, you may also exercise your rights against Administrator 2, Joint Administrator 3 and Joint Administrator 4, who will forward your request to Joint Administrator 1 who will fulfill your request.
1.2.3. the Administrator 1 is responsible for fulfilling the other obligations arising from the GDPR.
1.3. In all matters regarding the processing of personal data and the exercise of rights related to the processing of personal data, please contact the e-mail address: firstname.lastname@example.org or in writing to the address of any of the Co-controllers.
1.4. The controllers process the personal data provided by you for the purposes necessary for the proper functioning of the Website, in particular to the extent necessary to register the account, place an order, perform the sales contract, accounting and financial reporting, as well as to pursue claims. For this purpose, the Co-controllers collect your personal data such as: name and surname, address, e-mail address, telephone number and possibly the company name, tax identification number, bank account number for refunds. In addition, data on orders placed is collected. Providing this personal data is necessary to perform the sales contract and the contract for electronic services, and their processing is carried out on the basis of art. 6 clause 1 lit. b) Regulations.
1.5. The co-controllers collect and process your personal data referred to in point 1.4, as well as also the date of birth and gender, also for marketing purposes, i.e. for the purposes of marketing of Administrator 1 and its partners. The processing of personal data for marketing purposes by the Co-controllers takes place only with your consent, pursuant to art. 6 clause 1 lit. a) Regulations. Providing personal data for marketing purposes is voluntary and is at the discretion of the data subject, and their processing by Joint Controllers depends on obtaining their consent. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal. More on the conditions for granting and withdrawing consent in point 3 of this policy. Sometimes Joint Administrators may use automated processes, including profiling, to analyze personal data to send you personalized offers and marketing information or present them on the Website. Such processing is based on your consent. However, you can always opt out of such marketing, including profiling associated with such activities.
1.7. Co-controllers store your personal data only for the period necessary to perform the contract, including redress and compliance with the requirements arising from applicable regulations, including tax regulations. In the case of personal data processed for marketing purposes, the Co-controllers store the provided personal data for the period necessary for the purpose of processing or to withdraw consent. After these periods, your personal data will be deleted.
2. The rights of the data subject
2.1. You have the right to obtain confirmation from each of the Co-controllers whether it processes your personal data, the right to request access to this data and the right to obtain from each of the Co-controllers information regarding the purposes of processing and the categories of personal data processed, information about recipients or categories of recipients to whom the data personal data are disclosed, the planned period of storage of personal data, the data source if it was collected not from the person to whom it relates, and information whether the Administrator makes automated decisions towards the data subject, including based on profiling. You also have the right to obtain a copy of the data.
2.2.In addition, you have the right to request the rectification of personal data, the right to request the deletion of personal data, the right to request restriction of processing, the right to transfer data and the right to object to the processing. You can exercise these rights:
2.2.1. regarding the request to rectify data: when your data is incorrect or incomplete;
2.2.2. regarding the request to delete data: when your data are no longer necessary for the purposes for which they were collected by the Co-Administrator; you withdraw your consent to data processing; you object to the processing of your data; Your data will be processed unlawfully; the data should be deleted in order to comply with the obligation arising from legal provisions or the data was collected in connection with the offering of information society services;
2.2.3. in relation to the request for limitation of data processing: when your data is incorrect - you can request the restriction of their processing for a period allowing the Administrator to check the correctness of this data; your data is processed unlawfully, but you do not want them to be deleted; Your data will no longer be needed by the Administrator, but you will need it to determine, pursue or defend claims; or you have objected to data processing - until it is determined whether legally justified grounds on the side of the Controllers prevail over the grounds of objection;
2.2.4. in relation to the request for data transfer: when the processing of your data takes place on the basis of consent or contract granted, and when the processing takes place in an automated manner;
2.2.5. regarding the right to object: when the processing of your personal data is based on a legitimate interest and the objection is justified due to your particular situation, as well as when your personal data is processed for the purposes of direct marketing, including profiling.
2.3 You also have the right to lodge a complaint to the supervisory body if you find that the processing of personal data concerning you violates the provisions of the Regulation.
2.4. The implemented security procedures mean that we can ask for confirmation of your identity before exercising your rights.
3. Consent to the processing of personal data
3.1. If the Co-controllers process personal data that are not necessary for the implementation of a sales contract or electronic service contract, your data is always provided voluntarily, after giving your consent to the processing of the data provided.
┬á3.2. Expressing consent takes place after reading this policy by checking the appropriate selection box. In this case, you agree to the collection and processing by the indicated by the Joint Controllers of personal data provided by you for the purpose clearly indicated when giving consent.
┬á3.3 You can withdraw your consent at any time, in the same way that consent was given, i.e. by unchecking the appropriate selection box after logging into your account. In the case of consent by checking the appropriate selection box when placing an order without logging in to the account, you can withdraw your consent by clicking on the consent withdrawal link in each received marketing information. In addition - in any case - you can withdraw your consent by sending to the Administrator a statement of withdrawal of consent in the manner indicated in point 7 of this policy.
3.4. Withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal.
4.1. The provision of the Newsletter service consists in the cyclical sending of electronic newsletter containing commercial information, published by Joint Administrators.
4.2. The co-administrators provide the Newsletter service free of charge.
4.3. In order to receive the Newsletter you should:
4.3.1. Make an order by entering your email address in the electronic form available on the Website and selecting the appropriate checkbox;
4.3.2. agree to receive the Newsletter, in accordance with the statement found under the electronic form,
4.3.3. have an active e-mail address,
4.3.4. activate the link contained in the message sent automatically by the Administrator No. 1 to the provided e-mail address.
4.4. Upon activation of the link contained in the message referred to above, an agreement for the provision of the Newsletter service is concluded between the Parties.
4.5. You may at any time terminate the contract for the provision of the Newsletter service by sending a proper declaration of intent to the address of any of the Joint Administrators or by using the link contained in the content of the Newsletter (footer). Administrator No. 1 confirms the termination of the contract by sending a message to your email address. Upon termination of the contract for the provision of the Newsletter service, the Co-controllers will stop sending the Newsletter. You can re-order the Newsletter at any time.
5. Information on recipients / categories of recipients of personal data
5.1. The Co-controllers also partly use external service providers who process personal data on behalf of the Co-controllers, e.g. hosting service providers, courier companies, accounting service providers, electronic payment service providers, and a law firm. The transfer of data may, however, only be used to provide their service. Co-controllers use only the services of such entities that provide sufficient guarantees to protect the rights of data subjects. The processing of personal data by these entities is based on written agreements concluded with the Administrators. These entities follow the Administrator's guidelines and are subject to audits conducted by him.
5.2. The controllers provide personal data for the purpose of performing the contract also to postal service providers and payment service providers servicing electronic payments that are separate controllers of your data.
6. Security of personal data
6.1. The controllers process your personal data in accordance with the provisions of the Regulation, including the appropriate technical and organizational measures to ensure the security and adequate confidentiality and integrity of personal data, including protection against unauthorized access, unauthorized modification, disclosure or destruction of this data.
7. Contact details
7.1. All requests, requests, notifications, queries related to the processing of personal data, you can send by e-mail to the address: email@example.com or in writing to the address of any of the Joint Administrators indicated in point 1.1.
As of May 25, 2018