- The data controller is Sławomir Kulbida, hereinafter referred to as the "Administrator".
- The online store is operated by the company: Graf-Art Sławomir Kulbida, ul. B.Chrobrego 38/5, 59-700 Bolesławiec, Poland. Tax Identification Number: PL6121710614. National Official Business Register: 380701030
- The user is the person who uses the website azwarsztat.pl operated by the Administrator.
- The user's personal data may be processed on the basis of:
- the necessity to perform the contract or to take actions before entering into the contract (Art. 6(1)(b) GDPR) for the purpose of:
- placing orders and fulfilling purchases;
- customer account registration (only if the option "Register" is selected in the shopping cart);
- a legal obligation related to the performance of the contract (Art. 6(1)(c) in conjunction with Art. 6(1)(b) GDPR) for the purpose of handling filed complaints;
- consent (Art. 6(1)(a) GDPR) expressed by submitting data through electronic forms located on the website for the purpose of sending marketing information;
- the legitimate interest of the Administrator (Art. 6(1)(f) GDPR), for the purpose of:
- contact - providing information, where the legitimate interest is customer care and responding to inquiries;
- pursuing claims related to the contract, where the legitimate interest of the Administrator is the ability to pursue and protect against possible claims;
- a legal obligation (Art. 6(1)(c) GDPR) to fulfill obligations arising from legal provisions, including accounting and tax obligations.
- the necessity to perform the contract or to take actions before entering into the contract (Art. 6(1)(b) GDPR) for the purpose of:
- Personal data may be transferred to entities processing personal data on behalf of the Administrator, including: entities providing courier services, where such entities process data based on agreements concluded with the Administrator and solely according to his instructions.
- Furthermore, personal data may be shared with, among others: entities providing insurance, banking, equipment service, postal, accounting, legal, email, and marketing services.
- Data collected for the purpose of registering a customer account or carrying out purchases – placing orders, will be processed for the duration of the purchases and the operation of the account. Personal data will also be processed for the period allowing for the handling of complaints, including being stored until the expiration of any potential claims or until the obligation to archive data under legal provisions expires, especially the obligation regarding the storage of accounting documents. This data includes: first name, last name, address, email address, telephone number, PESEL (if the purchase requires PESEL).
- Data collected for the purpose of sending marketing information will be processed for the duration of the consent. This data includes: first name, last name, address, email address, telephone number.
- The Administrator will cease processing personal data processed on the basis of a legally justified interest of the administrator if an objection is raised against this type of data processing. In case of data processing based on expressed consent, the data will be stored until the consent is withdrawn.
- The user has the right to:
- access – to obtain confirmation from the administrator whether their personal data is being processed. If data about the person is being processed, they are entitled to access it and receive the following information: the purposes of the processing, categories of personal data, recipients or categories of recipients to whom the data have been or will be disclosed, the planned period of data storage or the criteria used to determine that period, the right to request the rectification, deletion or limitation of personal data processing pertaining to the data subject, and to object to such processing (Art. 15 GDPR);
- to receive a copy of the data – to obtain a copy of the data being processed, where the first copy is free of charge, and for additional copies, the administrator may charge a reasonable fee based on administrative costs (Art. 15(3) GDPR);
- to rectification – to request the rectification of their personal data that is incorrect, or to have incomplete personal data completed (Art. 16 GDPR);
- to erasure of data – to request the deletion of their personal data when the administrator no longer has a legal basis for processing it or the data is no longer necessary for processing purposes (Art. 17 GDPR);
- to restrict processing – to request restriction of processing of personal data (Art. 18 GDPR), when:
- the person whose data is concerned disputes the accuracy of the personal data – for a period enabling the administrator to check the accuracy of that data,
- processing is unlawful and the person whose data is concerned opposes the deletion of the data, requesting instead the restriction of their use,
- the administrator no longer needs the data, but they are required by the person whose data is concerned for the establishment, exercise or defense of legal claims,
- the person whose data is concerned has objected to processing – pending the verification whether the legitimate grounds of the administrator override those of the data subject;
- to data portability – to receive in a structured, commonly used and machine-readable format the personal data concerning them, which they have provided to the administrator, and to have this data transmitted to another administrator, if the data is processed based on the consent of the person whose data is concerned, or on a contract with them, and if the data is processed automatically (Art. 20 GDPR);
- to object – to object to the processing of their personal data for the legally justified purposes of the administrator, for reasons related to their particular situation, including profiling. In such cases, the administrator assesses the existence of valid legal grounds for processing, which override the interests, rights and freedoms of the data subjects, or grounds for the establishment, exercise or defense of legal claims. If, according to the assessment, the interests of the person whose data is concerned are deemed more significant than those of the administrator, the administrator is obligated to cease processing data for these purposes (Art. 21 GDPR).
- To exercise the above-mentioned rights, the person whose data is concerned should contact the administrator using the provided contact details and inform them of which right and to what extent they wish to exercise.
- Providing personal data is voluntary, but in terms of data processed on the basis of a legal obligation and for the performance of the contract and taking actions before entering into the contract, it is necessary for the conclusion and implementation of the contract. Failing to provide data necessary for contact, including the sending of marketing information, will prevent contact and the delivery of marketing materials via email or phone.
- If the user believes that the Administrator has violated the data protection provisions with their actions, they are entitled to lodge a complaint with the President of the Personal Data Protection Office against such action by the Administrator.
- The website uses cookies. By using the Shop's Website, the User or Buyer accepts that cookies will be installed on their end device, which enables the Service Provider to provide services.
- Cookies are used for the following purposes:
- creating statistics that help understand how users use the website, which directly influences improving its structure and content;
- maintaining the user's session on the internet, so that they do not have to re-enter login and password on each subpage of the Service or perform additional actions, e.g., re-adding a product to the cart;
- Web browsing software (internet browser) typically allows the storage of cookies on the user's end device by default. Service users can change the settings in this regard. The internet browser allows for the deletion of cookies. It is also possible to automatically block cookies. Detailed information on this subject can be found in the help or documentation of the internet browser.
- Restrictions on the use of cookies may affect some functionalities available on the Service.
- The user has the right to decide on the access of cookies to their end device by setting the appropriate settings (rights) for these files in the window settings of their internet browser.
- Leaving the settings of the software installed on the end device unchanged means that the user consents to the placement of text-type cookies on their device.