Privacy policy

PRIVACY POLICY

This privacy policy („Privacy Policy”) is an integral part of the regulations of the shop Restyle.pl Accepting the regulations means accepting the Privacy Policy. Before using the shop, the client ought to read the Privacy Policy. The Privacy Policy outlines the rules of processing and securing the personal data of those using the site Restyle.pl

GENERAL CONDITIONS

The administrator of personal data gathered via the online shop is Ewelina Rozbicka, operating a business activity under the company Ewelina Rozbicka “Restyle”, 232 Starowiejska Street, Siedlce, zip code 08-110: VAT identification number 821-246-24-88, REGON 141382989, phone number: +48731666380, E-mail: customer@restyle.pl

Personal data in the online shop are processed by the administrator in accordance to applicable laws, in particular the Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the securement of physical persons in connection to the processing of personal data and the free movement of such data and on repealing Council Directive 95/46/WE (General Data Protection Regulation) – hereinafter called “GDPR” or “GDPR Regulation”. The official text of the GDPR Regulation: http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679

GATHERED DATA

The gathered personal data covers: first name and surname, the name and address of the business, VAT identification number, delivery address, phone number, e-mail address, credit card details, account number, login and password of the user, IP address of the computer on which the registration or placing an order took place. Personal data is gathered during the registration process of the user, filling out the order form, online chat, application Callpage, and contact form.

THE PURPOSES AND LEGAL BASES OF PROCCESING DATA ON THE WEBSITE

The personal data of people using the website (including IP address or any other identifier and information gathered via cookies or similar technologies), while not being registered users (that is people not having an account on the website), are processed by the administrator:

• in order to manage order placed during registration, or without registration in the shop – in that case, the legal base of processing the data is the necessity of processing it in order to make a contract (Art. 6 paragraph. 1 GDPR);

• in order to manage complaints – in that case, the legal base of processing the data is the necessity to process it in order to make a contract (Art. 6 paragraph. 6 GDPR);

• for analytical and statistical purposes – in that case, the legal base of processing the data is a legitimate interest of the administrator (Art. 6 paragraph. 6 GDPR), involving conducting analyses on the users’ activity, and their preferences in order to improve used features and provided services;

• in order to determine any potential claims or to defend against them – the legal base of processing the data is a legitimate interest of the administrator (Art. 6 paragraph. 6 GDPR), having the objective to defend the administrator’s rights;

VOLUNTARY PROVIDING DATA, CONSENT WITH PROCESSING

• Providing data is voluntary. It is necessary, within the range that is specified in the regulations, to complete a registration or to place and execute and order.

• You can provide your personal data, while at the same time objecting to their processing to receive the newsletter or using the feature Ask the pharmacist.

• In case of agreeing to process your data in the above purposes, you can withdraw your permission in any moment by contacting the Customer Service Office at customer@restyle.pl, phone number +48731666380. The permission to receive the newsletters can also be withdrawn by clicking the respective, placed in every newsletter. Withdrawing the consent won’t affect the lawfulness of processing based on consent before its withdrawal.

RECIPIENTS OF DATA IN THE ONLINE SHOP

• In order for the online shop to function properly, including realization of concluded contracts, it is necessary to use services of third parties (such as software provider, courier, or a party that operates payments). The administrator uses services of only those third parties that provide adequate guarantees implementing appropriate technical and organizational measurements that complies with GDPR and protects the rights of people involved.

• The administrator does not transfer the data under every circumstances, and not to every recipient or category of recipients specified in the Privacy Policy – the administrator transfers the data only when it’s necessary in order to execute a specific goal of processing personal data and only to the extend necessary in its execution. For example, if the client collects the ordered items personally then their data won’t be transferred to the courier working with the administrator.

• The personal data of customers of the online shop may be transferred to the following recipients or categories of recipients:

• Carriers / freight forwarders / courier brokers – in the case of a client who chose the post mail or courier delivery as the method of shipment, the administrator transfers the gathered personal data of the client to the chosen carrier, freight forwarder or an agent working on behalf of the administrator to the extend necessary in executing the client’s order. This includes InPost Paczkomaty, Poczta Polska S.A. and General Logistics Systems Poland sp z o.o.

• agents operating on online payments or with a payment card – in the case of a client that uses online payments or a payment card in the online shop, the administrator transfers the gathered personal data of the client to the chosen agent operating on these payments for the online shop, working on behalf of the administrator to the extent necessary to operate on the payment executed by the client. Includes PayU and DotPay.

Suppliers of the administrator, providing technical, informatic and organizational solutions, allowing the administrator to conduct business activities, including the online shop and the online services provided through it (in particular agents providing computer software allowing business and online shop managing, email service providers, hosting providers, and agents providing the administrator with technical support) – the administrator transfers the gathered personal data of the client the chosen provider working on the administrator’s behalf only in the situation and in the extend necessary to execute the particular goal in processing the data complying with this Privacy Policy. Included IAI S.A. Edrone sp z o.o

Suppliers of the administrator, providing the administrator with legal, accounting and advisory services (in particular an accounting office, law firm and debt recovery firm) – the administrator transfers the gathered data of the client the chosen provider working on the administrator’s behalf only in the situation and in the extend necessary to execute the particular goal in processing the data complying with this Privacy Policy. Includes accounting office KONTAFIN.

Bo THE RIGHTS OF DATA SUBJECT

- The right to access, correct, restrict the use of, remove or transfer – the person who is the data subject has the right to call for the access of their personal data, its rectification, removal (“the right to be forgotten”) or restricting the use of processing it, and also has the right to object transferring their data. The detailed arrangements for exercising the above rights are set out in Art. 15-21 GDPR Regulation.

- The right to withdraw consent in any moment – the person whose data is being processed by the administrator based on the given consent (based on Art. 6 paragraph. 1 or Art. 9 paragraph. 2 GDPR) has the right to withdraw their consent in any moment without affecting the lawfulness of processing based on consent before its withdrawal.

- The right to lodge a complaint to the supervisory authority – the person whose data is being processed by the administrator has the right to lodge a complaint to the supervisory authority in the manner and range specified by the GDPR Regulation and the Polish law, in particular the Act on the Protection of Personal Information. The supervisory authority in Poland is the President of the Office for Personal Data Protection.

- The right to object – the person who is the data subject has the right to object in any time – on grounds relating to their specific situation – to the processing their personal data based on Art. 6 paragraph. e) (the public interests or goals) or f) (the legitimate interest of the administrator), including the profiling of these regulations. In this case, the administrator cannot process the personal data any longer, unless the administrator proves the existence of legitimate factors for its processing, overriding the interests, rights and freedom of the data subject, or grounds to determine, pursuing and defending claims.

- The right to object against direct marketing – if personal data is processed for direct marketing purposes, the person who is the data subject has the right to object in any moment against processing their data for the purposes of such marketing, including profiling, to the extend in which the processing is connected with direct marketing.

In order to realize the rights mentioned in this paragraph of the Privacy Policy, you can contact the administrator by sending them an appropriate message in the form of a letter or email on the administrator’s address given in the introduction of the Privacy Policy or by filling out the contact form available at the online shop’s website.

COOKIE POLICY

This Policy lays down the rules of retention and access to information on the user’s devices using cookies, for the implementation of electronic services requested by the user, by Ewelina Rozbicka “Restyle”, 85 Garwolińska Street, Siedlce.

1. DEFINITIONS

1. Administrator – means Ewelina Rozbicka “Restyle”, 85 Garwolińska Street, Siedlce, zip code 08-110, VAT identification number 821-246-24-88, REGON 141382989.

2. Cookies – means IT data, in particular small text files, recorded and stored on the devices via which the user uses the website.

3. Own cookies – means cookies provided by the administrator associated with the service provision by electronic means by the administrator via the website.

4. Third-party cookies – means cookies provided by the administrator’s agents via the website.

5. Website – means online site or app, at which the administrator runs the internet service operating under the domain restyle.pl

6. Device – means electronic device via which the user gains access to the website.

7. User – means subject on whose behalf, in accordance with the Regulations and the National Provisions, online services can be provided or with whom an agreement can be concluded via online means.

2. TYPES OF COOKIES USED

1. The cookies used by the administrator are safe for the user’s device. It is impossible for viruses or other malware to enter the user’s device via this method. These files help identify the software used by the user and to adjust the website to each user individually. In most cases, cookies contain the domain’s name, the time of being stored on the device and imputed value.

2. The administrator uses two types of cookies:

1. Session cookies – are stored on the user’s device and remain there until the end of the web browser’s session. The stored information is permanently deleted from the device’s memory. The mechanism of session cookies does not allow to download any personal data or any confidential information from the user’s device.

2. Persistent cookies – are stored on the user’s device and remain there until their deletion. The end of the web browser’s session or turning off the device won’t delete them from the user’s device. The mechanism of persistent cookies does not allow to download any personal data or any confidential information from the user’s device.

3. The user has the right to limit or disable access of cookies to the user’s device. In case of using this option, using the website will be possible, excluding the services which require cookies.

3. PURPOSES OF COOKIES

1. The administrator uses own cookies in the following purposes:

1. Service configuration

1. adjusting the content of the website to the user’s preferences and optimizing of the use of the website;

2. recognizing the user’s device and its location, and properly displaying the website and adjusted to the user’s individual needs;

3. remembering the setting chosen by the user and personalizing the user’s interface, ex. the chosen language and the user’s region;

4. remembering the history of visited pages within the website in order to recommend content;

5. remembering the font size, the website’s appearance, etc.

2. Identification of the website’s user and providing the user’s session

1. maintaining the user’s session (after logging in), so that the user does not have to log in on every page of the website;

2. having the proper configuration of the website’s selected functions, in particular allowing the verification of the web browser’s session’s authenticity;

3. optimizing and increasing the efficiency of the services provided by the administrator.

3. Realization of processes required for full functionality of the website

1. adjusting the website’s contents to the user’s preferences and optimizing the website’s usage. In particular, these files allow to recognize the basic parameters of the user’s device and display the website in accordance to the user’s individual needs;

2. the correct handling of the loyalty program, allowing verification of the source of the user’s redirection to the website.

4. Remembering the user’s location

1. the correct configuration of the website’s chosen services, in particular allowing to adjust the information provided to the user based on the user’s location.

5. Analyzing, studying and auditing popularity

1. creating anonymous statistics which help understand how the user uses the website, which allows to improve its structure and content

6. Providing advertisement services

1. adjusting third-party services and products advertised via the website

7. Providing security and reliability of the website

2. The administrator used third-party cookies in the following purposes:

1. Presenting multimedia content on the website, which are downloaded from third-party websites:

1. www.vimeo.com [the cookie administrator: Vimeo, LLC, USA]

2. www.youtube.com [the cookie administrator: Google INC. USA]

2. Collecting general and anonymous statistical data via analytical tools:

1. Google Analytics [the cookie administrator: Google Inc, USA]

2. Gemius Traffic [the cookie administrator: Gemius S.A., Warsaw, Poland]

3. Stat24 [the cookie administrator: Redejine Sp. z o.o., Warsaw, Poland]

4. IAI-Shop.com [the cookie administrator: IAI S. A., Szczecin, Poland]

5. eDrone [the cookie administrator: eDrone Sp. z o.o. Crakow, Poland]

3. Presenting advertisement adjusted to the user’s preferences using an online advertisement tool:

1. Google AdSense [the cookie administrator: Google Inc, USA]

4. Logging in on the website using an account from a different website:

1. Facebook Connect [the cookie administrator: Facebook Inc, USA OR Facebook Ireland, Ireland]

2. Google [the cookie administrator: Google Inc, USA]

3. PayPal [the cookie administrator: PayPal (Europe) S.à r.l. & Cie, S.C.A, Luxemburg OR PayPal Inc., USA]

5. Using interactive services in order to popularize the website using social network services:

1. Facebook.com [the cookie administrator: Facebook Inc, USA OR Facebook Ireland, Ireland]

2. Pinterest [the cookie administrator: Pinterest Inc., USA]

4. The right to determine the conditions of storing and gaining access by cookies

1. The user can change the cookie preferences at any time, determining the conditions of storing and gaining access to the user’s device by cookies. The mentioned change in preferences can be done using the web browser’s preferences or using service configuration. These preferences can be changed so that they can automatically block cookies in the web browser’s preferences or inform about every usage of cookies on the user’s device. Detailed information about the means of using cookies are available in the web browser’s preferences.

2. The user can delete cookies at any time using the web browser’s functions.

3. Restricting the use of cookies may influence some services available on the website.