General provisions
This privacy policy sets out how we process your personal data obtained through the website https://timeforwax.pl/sklep/(„Online Shop„) and, in particular, provides information about the controller of your personal data, the scope, purpose and duration of the processing, your rights and the entities with whom we may share your data.
Personal data controller
The controller of your personal data obtained through the Online Shop is Time For Wax spółka z ograniczoną odpowiedzialnością, a limited liability company with its registered office in Warsaw (postcode:02-529), at ul. Ludwika Narbutta 82, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register under KRS number 0000497869, REGON number 147104560, NIP number 5213666292 („Controller„).
In all matters related to the processing of your personal data, you can contact us at the following e-mail address:ochronadanych@timeforwax.pl or in writing to: Time For Wax spółka z ograniczoną odpowiedzialnością, ul. Ludwika Narbutta 82,02-529 Warszawa.
Scope of data processing
The processing of your personal data by the Controller may concern:
- the information you provide by filling in any of the forms available in the Online Shop. This includes data and information such as your name, e-mail address, telephone number, as well as other data required by specific forms,
- information that you provide when creating and using a User Account,
- data which is required for the fulfilment of an order placed via the Online Shop and the dispatch of the order,
- if you contact us, we may keep a record of your correspondence,
- details of your visits to the Online Shop, including, but not limited to, data about your activity in the Online Shop, information about your browser or terminal device, including its location.
Purposes, basis and duration of processing of personal data
We process your personal data obtained through the Online Shop, mainly using the relevant forms available on the Online Shop and to the extent resulting from them for the following purposes:
- in order to fulfil your request for contact or to present you with our offer:
- on the basis of Article 6(1)(a) and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) hereafter referred to as „GDPR„),
- in which case your personal data will be processed by the Controller as long as your consent is not revoked;
- for the performance of an agreement to which you are a party in relation to the purchase of a product offered by the Controller or entering into cooperation with the Controller, or in order to take action, at your request, prior to entering into a contract with the Controller:
- on the basis of Article 6(1)(b) GDPR,
- in which case your personal data shall be processed by the Controller for as long as it is necessary for the performance of the contract, and thereafter for a period corresponding to the period of limitation of possible claims arising therefrom;
- for marketing purposes, in particular for the purpose of sending newsletter-type messages, which is the realisation of the Controller’s legitimate interest:
- on the basis of Article 6(1)(a) GDPR,
- in which case your personal data are processed by the Controller as long as you do not object to such processing,
- whereby such information is of course sent on the basis of your consent to electronic communication;
- for the purpose of surveying your satisfaction and for statistical purposes for the internal needs of the Controller, which is the fulfilment of the Controller’s legitimate interest:
- on the basis of Article 6(1)(f) GDPR,
- in this case, your personal data will be processed by the Controller for as long as you do not object to such processing;
- for archival (evidential) purposes, including for the purpose and to the extent necessary for the possible establishment, investigation or defence of our claims related to the use of the Online Shop, which is the fulfillment of our legitimate interest:
- on the basis of Article 6(1)(f) GDPR,
- in which case your personal data shall be processed by the Controller for as long as you do not object to such processing;
- We also process your data if required to do so by law e.g. for taxation, accounting purposes:
- on the basis of Article 6(1)(c) GDPR
- in which case your personal data is processed by the Controller for as long as required by applicable law.
Furthermore, where the basis for the processing of your personal data is your consent or the legitimate interest of the Controller, despite your request for the erasure of your personal data, due to the filing of an objection or the withdrawal of consent, the Controller may retain certain personal data to the extent that the processing is necessary for the establishment, investigation or defence of claims, and until they are time-barred.
Your rights in relation to data processing
The use of the Online Shop and the provision of personal data in the relevant forms available on the Online Shop is voluntary, but necessary for the fulfilment of your request for contact or receipt of information material, and necessary to enable you to take advantage of our offer to make purchases of products and services.
You are entitled to the following rights in relation to the processing of your personal data by the Controller:
- the right of access to your data, including obtaining a copy of your data,
- the right to request rectification of your data,
- The right to erasure of your data (right to be forgotten),
- The right to lodge a complaint to the supervisory authority for the protection of personal data, which in Poland is the President of the Office for Personal Data Protection,
- the right to restrict data processing,
- The right to object (objection to processing, objection to direct marketing).
Where your personal data is processed on the basis of consent or for the performance of a contract, you also have the right to personal data portability.
In addition, where your personal data is processed on the basis of your consent, you have the right to withdraw your consent at any time, but the withdrawal of consent does not affect the lawfulness of the processing carried out while we had it,
In order to exercise the above-mentioned rights, please contact us by email to e-mail: ochronadanych@timeforwax.pl or in writing to: Time For Wax spółka z ograniczoną odpowiedzialnością, ul. Ludwika Narbutta 82,02-529 Warszawa.
Recipients of the data
We do not share your data collected through the Online Shop with third parties unless we receive your consent to do so, with the exception of our verified affiliates, subcontractors and partners to whom we may entrust your data in order to properly execute the contact request and to conclude and execute the contract, as well as to service providers in order to ensure the operation and maintenance of the Online Shop.
Your personal data will only be processed to the extent necessary, permitted for the purposes of the processing and in accordance with the applicable legislation, in terms of data protection, including the GDPR. Each recipient will be responsible for ensuring adequate protection of your data.
Recipients of data based outside the EEA
In case the Controller decides to transfer your personal data to our partners who are not established in the EEA, we will take all steps to ensure that your personal data is adequately protected and we will only transfer your personal data to entities that guarantee an adequate level of data protection, resulting in particular from the obligation to apply the standard contractual clauses adopted by the Commission (EU) in application of the provisions of Article 46(2) GDPR.
The right of access of these entities will be strictly limited in such a way that their access will only be possible to the extent necessary for the purposes of contacting or cooperating with you or for the conclusion and proper execution of a contract.
Automated decision-making
The Controller does not carry out automated decision-making, including profiling, based on the personal data provided.
Security
We have implemented solutions in the Online Shop to ensure a high level of protection of your data, including an SSL certificate, an IT system of the Online Shop that meets high standards of personal data protection.
Cookies
When you browse the Online Shop, depending on the consent you have given and the configuration of your browser, one or more cookies may be stored on your device (end device) by us or a cooperating company (our subcontractor). Please read the following information about cookies and how they are used.
Cookies are small files that are placed on your computer’s hard drive when you visit certain websites. They contain information about your device and usually do not contain any personal data. These files cannot be used to infect your device with viruses or other malware.
In cookies, we store basic, anonymous information about users (e.g. ID) and data to improve the user experience of the Online Shop, needed for optimisation and correct display of website content and advertising campaigns.
Cookies are installed for different periods. Some of them expire when you close your browser, others are active for several days, months or even years, mainly so that information about your choices is not lost. Long-term active cookies are used to help us identify new and returning users of the Online Shop.
As a user of the Online Shop, you can stop the provision of this information to the Online Shop at any time by deleting the cookies stored on your terminal equipment by the Online Shop. In order to do this, you need to change the settings of the Internet browser you are currently using.
It is also possible to configure your browser in such a way as to block the installation of cookies for certain websites of your choice or for all websites. However, such settings will result in the loss of some features of the Online Shop that require the installation of cookies.
Final provisions
We reserve the right to amend this Privacy Policy, in particular due to a change in the law, a change in technology or in the way Online Shop operates. The current text of the Privacy Policy can always be found on the website of the Online Shop.
If any provision of the Privacy Policy is declared invalid by a final court decision, the remaining provisions of the Policy shall remain in force.
The Privacy Policy shall be subject to and interpreted in accordance with the provisions of the Polish law.