Privacy Policy and use of cookies on the www.sigern.pl Online Store
General information
This document describes the Privacy Policy for the Online Store (hereinafter „Online Store”). The Online Store administrator is FIRMA PRODUKCYJNO-HANDLOWO-USŁUGOWA SIGERN WOJCIECH FAŁOWSKI SPÓŁKA KOMANDYTOWA based in Wielopole, Wielopole 86, 33-311 Wielogłowy registered in the National Court Register of the District Court for Krakow-Śródmieście in Krakow, 12th Commercial Department of the National Court Register under KRS number: 0000474793, NIP: 7343052299, REGON: 492946256.
Capitalised word have the meaning assigned to them in the terms and conditions of this Online Store.
Personal data collected by the Online Store Administrator are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJEU L 119, p. 1), hereinafter: GDPR.
The Online Store Administrator particularly strives to protect the privacy and information provided to them and pertaining to the Customers of the Online Store. The Administrator diligently selects and applies appropriate technical measures, including those of a programming and organisational nature, ensuring the protection of the processed data, in particular securing the data against access by unauthorised persons, disclosure, loss and destruction, unauthorised modification as well as against data processing in violation of applicable laws.
The Services available on the website (in particular, the ability to place an Order in the Store) are not intended for persons under 16 years of age. The data controller does not foresee deliberate collection of data on persons under 16 years of age.
Personal data
Personal data controller
The controller of your personal data is:
FIRMA PRODUKCYJNO-HANDLOWO-USŁUGOWA SIGERN WOJCIECH FAŁOWSKI SPÓŁKA KOMANDYTOWA based in Wielopole
Wielopole 86, 33-311 Wielogłowy
You can contact the Personal Data Controller about your personal data via:
- e-mail: adriana@sigern.pl, katarzyna@sigern.pl
- post: Wielopole 86, 33-311 Wielogłowy;
- phone: +48 608 580 403.
Purposes and legal grounds of personal data processing
The Personal Data Controller processes your personal data for the following purposes and in the following scope:
- in order to take action prior to concluding a contract at your request (such as creating an account), i.e. the data provided via the Online Store registration form, that is e-mail address and password, gender; if your Account is registered via an external authentication service (such as Google+, Facebook) we collect your name and surname, and if you register when you purchase Goods we collect your name and surname as well as the details you provide for order delivery such as your shipping address; in order to provide Services for which an Account is necessary, such as maintaining order history, notifying on order status, we process your data provided in the Account and when purchasing Goods;
- in order to provide Services for which an Account is not necessary, such as browsing the Online Store, we process personal data on your activity in the Online store, i.e. data on the Goods you browse, data on your device session, operating system, browser, location and unique ID, IP address;
- in order to perform the contract of sale of Goods (such as delivery of the ordered Goods), we process personal data provided by you when purchasing the Goods, such as your name and surname, e-mail address, phone number, address details, payment details, and, if you make a purchase via the Account, also the password;
- for the purpose of statistics on the use of different functionalities available in the Online Store, to facilitate the use of the Online store and to ensure the IT security of the Online Store, we process personal data on your activity in the Online store and the amount of time spent on each subpage in the Online Store, your search history, location, IP address, device ID, data on your Internet browser and operating system;
- for the purpose of establishing, investigating and enforcing claims and defending against claims in court proceedings and other enforcement authorities, we may process your personal data provided when you purchase Goods or create the Account and other data necessary to prove the existence of a claim or that arise from a legal requirement, court order or other legal procedure;
- for the purpose of processing complaints and requests and responding to Customers’ inquiries, we process the personal data you provided in the contact form, complaints and requests, or for the purpose of responding to inquiries submitted in another form, and some personal data you provided in the Account, as well as data regarding the order of Goods and other Services provided by us that are the cause of the complaint or request, and data in documents submitted along with complaints and requests;
- for the purpose of marketing of our Goods and Services and our customers and partners, including remarketing, for this purpose we process personal data your provided when you create the Account and update the Account, data on your activity in the Online Store including orders, which are recorded and stored via cookies, in particular order history, search history, clicks in the Online Store, login and registration dates, history and your activity related to our communication with you. In the case of remarketing, we use the data on your activity to reach you with our marketing messages outside of the Online Store and we use 3rd party suppliers for this purpose. These services involve displaying our messages on websites other than the Online Store. For details refer to the provisions regarding cookies;
- in order to organise contests and loyalty programs, i.e. notifications of collected points, notification of rewards and advertising our offer, we use your personal data provided in the Account and when registering for a contest or loyalty program. Detailed information on the above can be found from time to time in the terms and conditions of participation in relevant contest or loyalty program;
- for the purpose of market research and opinion surveys by us or our partners, i.e. order information, your data provided in the Account or when purchasing Goods, email address. We do not use the data collected through market research and opinion surveys for advertising purposes. Exact instructions are provided in the information about a survey or in the place where you enter your data.
Categories of relevant personal data
The Personal Data Controller processes the following categories of relevant personal data:
- contract details;
- data on activity in the Online Store;
- data on orders in the Online Store;
- data on complaints and requests;
- data on marketing services.
Freedom of providing personal data
Your provision of the required personal data is voluntary and is a condition for the provision of services by the Personal Data Controller via the Online Store.
Data processing duration
Personal data will be processed for the period necessary for the delivery of orders, services, marketing activities and other services performed for the Customer. Personal data will be deleted in the following cases:
- when the data subject requests their deletion or withdraws the consent granted;
- when the data subject remains inactive for more than 10 years (inactive contact);
- upon becoming aware that the stored data are outdated or inaccurate.
Some data regarding: e-mail address, name and surname, may be stored for a further period of 3 years for evidence purposes, processing of complaints and claims related to the services provided via the Online Store – such data will not be used for marketing purposes.
Data on orders of Goods and paid services, contests and loyalty programs will be stored for a period of 5 years of the date of order delivery.
Data on non-logged-in Customers are stored for a period of time corresponding to the life cycle of cookies stored on devices or until they are deleted from the Customer’s device by the Customer.
Your personal data on preferences, behaviours and marketing content selection may be used as the basis for automated decisions to determine the Online Store’s sales opportunities.
Recipients of personal data
We transfer your personal data to the following categories of recipients:
- state authorities, such as the prosecutor’s office, the Police, President of the Personal Data Protection Office, President of the Office of Competition and Consumer Protection, should they request us to do so,
service providers we use to run the Online Store, e.g. for order processing. Depending on the contractual arrangements and circumstances, these data recipients either act on our behalf or independently determine the purposes and methods of processing, refer to the website of our Online Store at https://sigern.pl for the list of suppliers
List of service providers we use to run the Online Store
| PROVIDER | PURPOSE |
| Operator DPD sp. z o.o. based in Warsaw | Order delivery |
| FedEx Express Polska sp. z o.o., based in Warsaw | Order delivery |
| Sendit S.A. based in Poznań | Order delivery |
| Jas – FBG S.A. | Order delivery |
| Krajowy Integrator Płatności S.A. based in Poznań (tpay) | Payment processing |
| Google Inc. (Google Cloud, Google Analytics, Google Analytics 360, Fabric Software) based in the U.S. | Website traffic tracking, application error reporting, statistics |
| Google Inc. based in the U.S. | Determining profiles of Google AdSense and Google Adwords customers |
| Google Inc. based in the U.S. | Analysing customer activity |
| Google Ireland Ltd (Google Adwords, Double Click Manager, Double Click Search, Remarketing Service, Firebase) based in Ireland | Measuring advertising campaign effectiveness, managing advertising campaigns |
Rights of the data subject
Under GDPR, you have the right to:
- request access to your personal data;
- request rectification of your personal data;
- request deletion of your personal data;
- request restriction of processing of your personal data;
- object to the processing of your personal data;
- request transfer of your personal data.
The Personal Data Controller shall, without undue delay – and in any case within one month of receiving your request – notify you of the actions taken with regard to your request. If necessary, the one-month deadline may be extended for two more months due to the complexity of the request or the number of requests.
In any case, the Personal Data Controller will notify you of such extension within one month of receipt of the request, stating the reasons for the delay.
The right to access personal data (GDPR Art. 15)
You have the right to be informed by the Personal Data Controller if your personal data are being processed.
If the Controller processes your personal data you have the right to:
- access your personal data;
- obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data, the intended period of storage of your data or the criteria for determining that period, your rights under GDPR and your right to lodge a complaint with a supervisory authority, the source of such data, automated decision-making, including profiling, and the safeguards applied when transferring such data outside the European Union;
- receive a copy of your personal data.
If you wish to request access to your personal data, submit your request to: katarzyna@sigern.pl.
The right to rectify personal data (GDPR Art. 16)
If your personal data are incorrect you have the right to request that the Controller correct your personal data immediately.
You also have the right to request that the Controller update your personal data.
If you wish to have your personal data corrected or updated, submit your request to: katarzyna@sigern.pl.
If you have registered with the Online Store your personal data can be corrected and updated by you after logging in to the Online Store.
The right to delete personal data, aka “the right to be forgotten” (GDPR Art. 17)
You have the right to request that the Personal Data Controller delete your personal data if:
- your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- you have withdrawn your consent, to the extent that personal data were processed based on your consent;
- your personal data were processed unlawfully;
- you have objected to the processing of your personal data for the purpose of direct marketing, including profiling, to the extent that the processing of personal data is related to direct marketing;
- you have objected to the processing of your personal data in connection with processing necessary for performing a task carried out in the public interest or processing necessary for the purpose of legitimate interests pursued by the Personal Data Controller or a third party.
Despite your request for deletion of your personal data, the Personal Data Controller may continue to process your data for the purpose of establishing, asserting or defending claims, of which you will be notified.
If you wish to request deletion of your personal data, submit your request to: katarzyna@sigern.pl.
The right to request restriction of processing of personal data (GDPR Art. 18)
You have the right to request restriction of the processing of your personal data if:
- you question the accuracy of your personal data – the Personal Data Controller will restrict the processing of your personal data for a period of time necessary for you to verify the accuracy of these data;
- when the processing of your data is unlawful, and instead of deleting your personal data, you request that the processing of your personal data be restricted;
- your personal data are no longer needed for the purposes of processing, but they are needed to establish, assert or defend your claims;
- when you have objected to the processing of your personal data – until it is determined whether the legitimate interests of the Personal Data Controller override the grounds stated in your objection.
If you wish to request that the processing of your personal data be restricted, submit your request to: katarzyna@sigern.pl.
The right to object to the processing of personal data (GDPR Art. 21)
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
- processing necessary for performing a task carried out in the public interest or processing necessary for the purpose of legitimate interests pursued by the Personal Data Controller or a third party;
- processing for direct marketing purposes.
If you wish to object to the processing of your personal data, submit your request to: katarzyna@sigern.pl.
The right to request the transfer of personal data (GDPR Art. 20)
You have the right to receive your personal data from the Personal Data Controller in a structured, commonly used, machine-readable format and send them to another personal data controller.
You may also request that the Personal Data Controller send your personal data to another controller directly (if technically possible).
If you wish to request that your personal data be transferred, submit your request to: katarzyna@sigern.pl.
The right to withdraw consent
You may withdraw the consent you have granted for the processing of your personal data at any time.
Withdrawing the consent to process personal data does not affect the lawfulness of processing performed based on your consent before its withdrawal.
If you wish to withdraw your consent to the processing of your personal data, submit your request to: katarzyna@sigern.pl or use the appropriate functionality in the Account.
Complaint to the supervisory authority
If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged violation was committed.
In Poland, the supervisory authority under GDPR is the President of the Personal Data Protection Office.
Cookie files
General information
When you browse the web pages of the Online Store, cookie files, hereinafter Cookies, are used; these are small pieces text information that are stored on your terminal device when you use the Online Store. Their purpose is the correct operation of the Online Store web pages.
With these files we are able to identify the software you use and customise the Online Store individually to your needs.
Cookies usually contain the name of the domain they come from, the time they are stored on the device and the assigned value.
Safety
The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to enter your devices through Cookies.
Types of Cookies
We use two types of cookies:
- Session cookies: these are stored on your device and remain there until the end of the session of relevant browser. The information stored is then permanently deleted from your device’s memory. The mechanism of session Cookies prevents the collection of any personal data or any confidential information from your device.
- Persistent cookies: these are stored on your device and remain there until you delete them. Ending the session of a browser or turning off the device will not remove them from your device. The mechanism of persistent Cookies prevents the collection of any personal data or any confidential information from your device.
Purposes
We also use third-party Cookies for the following purposes:
- configuration of the Online Store;
- presentation of the Certificate of Compliance, via the website solidnyregulamin.pl, the administrator of which is GP Kancelaria Poniatowska-Maj Strzelec-Gwóźdź sp. p. based in Krakow, Privacy Policy is available at the following link: http://solidnyregulamin.pl/polityka-prywatnosci/;
- creating statistics that help understand how customers of the Online Store use the websites, which enables to improve their structure and content via analytical tools Google Analytics, the administrator of which is Google Inc. based in the USA, Google’s privacy policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/;
- determining the customer’s profile for the purpose of displaying tailored material to the customer in advertising networks, using the Google AdSense online advertising tool, the administrator of which is Google Inc. based in the U.S., Google’s privacy policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/;
- determining the customer’s profile for the purpose of displaying tailored material to the customer in advertising networks, using the Google Adwords online advertising tool, the administrator of which is Google Inc. based in the U.S. Google’s privacy policy is available at the following links: href=”http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/.
- popularising the Online Store by means of the social networking site Facebook.com, the administrator of which is Facebook Inc. based in the U.S. or Facebook Ireland based in Ireland, Facebook’s Privacy Policy is available at the following link: https://www.facebook.com/help/cookies/.
To learn about the use of Cookies, we recommend reviewing the privacy policies of the above-mentioned companies.
Cookies may be used by advertising networks, in particular the Google network, to display ads tailored to your preferences. For this purpose, information about how you can navigate the web or when you use the website may be stored.
To view and edit information about your preferences collected by Google’s advertising network, you may use the tool provided at the link
https://www.google.com/ads/preferences/.
Using the settings of your web browser or the configuration of the service, you can independently and at any time change the settings for Cookies, specifying the conditions for their storage and access to your device. You can change these settings so as to disable the automatic handling of Cookies in the settings of your web browser or be notified about them each time they are stored on your device. Detailed information on the possibility and methods of handling Cookies can be found in the settings of your software (web browser).
