Privacy Policy

privacy policy

§1
GENERAL PROVISIONS
This document defines the Privacy Policy in the online store Wycinarnia.pl, operating at https://wycinarnia.vercel.app/pl, run by IMPRESS CREATIVES Sp. z o. o. based in Katowice, ul. Pierwiosnków 11, 40-750 (Katowice), entered into the register of entrepreneurs of the National Court Register kept by the District Court Katowice - Wschód in Katowice, 8th Commercial Division of the National Court Register under KRS number 0000874714, REGON 387743385, NIP 9542821471, which in particular includes regulations regarding protection of personal data and the security of other data entered into the Website by the User.
The Privacy Policy is an integral annex to the Regulations of the Wycinarnia.pl online store.

§2
DEFINITIONS
The terms used in this document mean:
Personal data administrator (also called Administrator) - IMPRESS CREATIVES Sp. z o. o. based in Katowice, ul. Pierwiosnków 11, 40-750 (Katowice), entered into the register of entrepreneurs of the National Court Register kept by the District Court Katowice - Wschód in Katowice, 8th Commercial Division of the National Court Register under KRS number 0000874714, REGON 387743385, NIP 9542821471.
Website - website at https://wycinarnia.vercel.app/pl and all its subpages.
User - a natural person who uses the Website and provides personal data there.
Personal data - information about a natural person identified or identifiable by one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity, including image, voice recording, contact details, location data, information contained in in correspondence, information collected through recording equipment or other similar technology,
GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC,
Regulations – Regulations of the Wycinarnia.pl online store.

§3
PERSONAL DATA PROTECTION
The administrator is the administrator of personal data within the meaning of the GDPR.
The Administrator collects and processes personal data in accordance with the applicable legal provisions, in particular the GDPR, and in accordance with the principles provided for in these provisions.
The administrator informs about data processing at the time of collection. The Administrator processes data to the extent, time and purposes indicated each time in the content provided under the forms used to collect personal data from the User.
The Administrator transfers Personal Data only to trusted subcontractors of the Administrator, i.e. couriers, suppliers responsible for operating IT systems, entities such as warehouses, banks and payment operators, entities providing accounting and legal services, marketing agencies (in the field of marketing services), entities providing other services IT and programming.
The Administrator has the right to transfer selected User Personal Data to competent authorities and third parties if such a necessity results from applicable legal provisions and when these entities submit a request to provide them based on an appropriate legal basis.
The Administrator ensures the security of processed personal data and their confidentiality, and also allows the User access to information about data processing. If, despite the security measures in place, there is a breach of Personal Data protection (e.g. data "leakage" or loss) and such a breach could result in a high risk of violating the User's rights and freedoms, the Administrator will inform the User about such an event in a manner consistent with the regulations.
The user may contact the data administrator. Contact details are as follows:

Address for correspondence:
street Pierwiosnków 11, 40-750 Katowice,
E-mail adress:
kontakt@wycinarnia.pl
Phone number:
+48 32 441 28 83

§4
SECURITY OF PERSONAL DATA
The Administrator uses all technical and organizational possibilities available to him to ensure the security of the User's personal data and protect them against accidental or intentional destruction, accidental loss, modification, unauthorized disclosure or access to them. Users' personal data are stored and processed on high-security servers, while maintaining appropriate security measures that meet the requirements of Polish law.
The entrusted data is stored on top-class equipment and servers in appropriately secured information storage centers, to which only authorized persons have access.
The Administrator carries out activities related to the processing of personal data while respecting all legal and technical requirements imposed on him by the provisions on the protection of personal data. The Administrator constantly analyzes the risks related to the processing of personal data and ensures that only authorized persons have access to the data and only to the extent necessary to perform their duties.
The Administrator takes all necessary actions to ensure that its subcontractors and other cooperating entities guarantee the use of appropriate security measures whenever they process Personal Data on behalf of the Administrator.
The Administrator undertakes to store backup copies containing the User's personal data.

§5
USER PERMISSIONS
If personal data changes, the User should update them by sending an appropriate message to the Administrator.
The user has the following rights:
the right to information about the processing of Personal Data,
the right to obtain a copy of Personal Data processed by the Administrator,
the right to rectify Personal Data,
the right to delete Personal Data (on this basis, you can request the deletion of data whose processing is no longer necessary to achieve any of the purposes for which it was collected),
the right to limit the processing of Personal Data,
the right to transfer Personal Data,
the right to object to the processing of Personal Data for marketing purposes (the User may at any time object to the processing of Personal Data for marketing purposes, without the need to justify such objection),
the right to object to other purposes of data processing (the User may at any time object - for reasons related to his or her particular situation - to the processing of Personal Data which is carried out on the basis of the legitimate interest of the Administrator; such an objection requires justification),
the right to withdraw consent if Personal Data is processed on the basis of consent (withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal),
the right to lodge a complaint with the authority supervising the processing of Personal Data, competent for the User's place of habitual residence, place of work or place of the alleged infringement. In Poland, the supervisory authority is the President of the Personal Data Protection Office.

The Administrator may refuse to delete the User's personal data if the retention of personal data is necessary due to the obligation imposed on the Administrator by law.
The User has the right to submit a request regarding the exercise of his rights indicated above by post or electronically (e-mail). The Administrator's contact details are indicated in § 3 section 7.
If, based on the request referred to in section 4 The Administrator will not be able to determine and identify the natural person to whom the request relates, he will ask the applicant for additional information. Failure to provide additional information will result in refusal to comply with the applicant's request.
The Administrator responds to the request within one month of receiving it. If it is necessary to extend this deadline, the Administrator informs the applicant about the reasons and the expected deadline for responding to the request.

§6
BASIS, PURPOSE AND STORAGE PERIOD OF PERSONAL DATA
Personal data is processed for the following purposes and on the following grounds:
Using the Website:

Personal data of all persons using the Website (including the IP address or other identifiers and information collected via cookies or other similar technologies) are processed by the Administrator for the purpose of:
provision of services electronically (legal basis: necessity of processing to perform the contract - Article 6(1)(b) of the GDPR),
for analytical and statistical purposes (legal basis: consent – Article 6(1)(a) of the GDPR),
determining and pursuing claims or defending against claims (legal basis: legitimate interest of the Administrator - Article 6(1)(f) of the GDPR, which is the protection of the Administrator's rights).
Registration on the Website, order form:

In order to create, operate and maintain a User Account, the User is asked to provide the Personal Data indicated in the registration form. In order to place an order on the Website, the User is asked to provide the Personal Data indicated in the order form. Providing data is not obligatory, but refusing to provide it results in the inability to place an order. The Personal Data indicated by the User are processed by the Administrator for the following purposes:
provision of services electronically and conclusion of a sales contract (legal basis: necessity of processing to perform the contract - Article 6(1)(b) of the GDPR),
for analytical and statistical purposes (legal basis: consent – Article 6(1)(a) of the GDPR),
determining and pursuing claims or defending against claims (legal basis: legitimate interest of the Administrator - Article 6(1)(f) of the GDPR, which is the protection of the Administrator's rights).
Newsletter:

Users who have notified the Administrator of such a will receive e-mails with advertising content. Subscribing to the Newsletter involves providing the Administrator with the User's Personal Data. Providing data is not obligatory, but refusing to provide it results in the inability to provide the Newsletter service. The Personal Data indicated by the User are processed by the Administrator for the following purposes:
provision of services electronically (legal basis: necessity of processing to perform the contract - Article 6(1)(b) of the GDPR - in the scope of data necessary for sending Newsletter 'a), for analytical and statistical purposes (legal basis: consent – Article 6(1)(a) of the GDPR),
determining and pursuing claims or defending against claims (legal basis: legitimate interest of the Administrator - Article 6(1)(f) of the GDPR, which is the protection of the Administrator's rights),
Marketing

The Administrator processes Users' Personal Data in order to carry out marketing activities, which may consist in particular in displaying marketing content to the User corresponding to his/her interests or sending commercial information electronically for purposes related to direct marketing of goods and services. In such a case, the User's Personal Data are processed by the Administrator on the basis of the User's consent (Article 6(1)(a) of the GDPR), which may be withdrawn. The Administrator's marketing goals may be achieved through profiling, which involves the automatic processing of Personal Data and their evaluation in order to analyze the user's behavior and create a forecast for the future, which allows for displaying content to the User that is consistent with the User's individual preferences and interests.
Contact form, traditional and electronic correspondence (e-mail)

The User may send messages to the Administrator via e-mail using the Administrator's contact details available on the Website, the Regulations or this Privacy Policy, as well as via the contact form available on the Website. The Administrator uses the personal data contained in this correspondence only for the purpose of communication and settling the matter to which the correspondence relates. The basis for Data processing is the legitimate interest of the Administrator - Art. 6 section 1 letter f GDPR - consisting in maintaining correspondence addressed to him in connection with his business activity, and in the case of contact related to the services provided or a contract - the necessity of processing to perform the contract - art. 6 section 1 letter b GDPR.
Telephone contact

The User may contact the Administrator by phone for purposes related to the services provided or the concluded contract and for other matters. In the event of telephone contact in matters unrelated to the concluded contract or the service provided, the Administrator may request Personal Data only if it is necessary to handle the reported matter. The legal basis for the processing of Personal Data is the legitimate interest of the Administrator - Art. 6 section 1 letter f GDPR - consisting in the necessary

§ 7
COOKIES POLICY
For the convenience of Users, the Website uses cookies, among others: in order to adapt the website to the needs of users and for statistical purposes. Cookies are small text files sent by the website visited by the Internet user to the Internet user's device.
The Website uses two types of cookies: "session cookies" and "persistent cookies". "Session" cookies are temporary files that are stored on the User's end device until logging out, leaving the website or turning off the software (web browser). "Permanent" cookies are stored on the User's end device for the time specified in the cookie parameters or until they are deleted by the User.
We use the following types of cookies on the Website:
"necessary" - enable the use of services available on the Website, e.g. used to handle user authorization;
"functional" - enable remembering the settings selected by the User and personalizing the User's interface, e.g. in terms of the selected language or region from which the User comes, font size, appearance of the Website, etc.;
“analytical (tracking and performance)” - – enable obtaining a range of information, including: the number of visits and traffic sources on the Website. The collection of this data is used to determine which pages are most frequently visited and leads to the creation of statistics on traffic on the Website. The collection of this data is used by the Administrator to improve the efficiency of the Website. The collected data is processed in an anonymized form. These types of cookies include Google Analytics cookies;
"marketing (targeting and advertising)" - enable matching the content displayed on the Website and outside the Website, including advertisements, to the interests of Users. Data regarding the history of pages viewed, activity on websites (e.g. purchase history, method of using services, type of content and advertisements displayed) or geolocation data may be used to present personalized content. Based on information from the Website and the User's activity on other websites, a profile of the User's interests is built.

The legal basis for data processing in connection with the use of necessary cookies is the necessity of processing personal data to perform the contract (Article 6(1)(b) of the GDPR). In the case of other cookies, the basis for the processing of personal data is the User's consent (Article 6(1)(a) of the GDPR).
The consent referred to in section 4 is granted via an appropriate form displayed during the first visit to the Website. The consent granted may be withdrawn or modified in any other way at any time. To change or withdraw your consents, click HERE.
Cookies may be installed by the Administrator and its trusted partners via the Website. The Administrator shares information about how the User uses the Website with trusted social, advertising and analytical partners in order to provide the highest quality services in the field of Website operation, analytics, customization and personalization. The list of trusted partners is below:
Google LLC, Google Ireland Limited - privacy policy: https://policies.google.com/privacy?hl=pl;
Meta Platforms, Inc. - privacy policy: https://www.facebook.com/privacy/policy/ and https://www.meta.com/pl/legal/privacy-policy/

The user can change cookie settings from the web browser. Below are links to web browsers (containing information on how to modify their settings on the User's end devices):
Chrome - (https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=pl)
Internet Explorer - (https://support.microsoft.com/pl-pl/help/278835/how-to-delete-cookie-files-in-internet-explorer)
Firefox - (https://support.mozilla.org/pl/kb/usuwanie-ciasteczek-i-dani-stron-firefox?redirectlocale=pl&redirectslug=usuwanie-ciasteczek)
Opera - (https://help.opera.com/pl/latest/web-preferences/#cookies)
Microsoft Edge - (https://support.microsoft.com/pl-pl/microsoft-edge/wy%C5%9Bwietlanie-i-usuwanie-historii-przegl%C4%85darki-w-programie-microsoft-edge-00cf7943- a9e1-975a-a33d-ac10ce454ca4)
Safari - (https://support.apple.com/pl-pl/guide/safari/sfri11471/mac)

Changing the settings of cookies and similar technologies may affect the functioning of the Website and the services it provides.

§8
LOGS
In accordance with the practice of most websites, the Administrator stores HTTP requests directed to its server (server logs). Due to the above, the Administrator stores the following information:
IP addresses from which users view the information content of our website;
query arrival time,
time of sending the response,
name of the client station - identification carried out by the HTTP protocol,
information

§ 9
TRANSFER OF DATA OUTSIDE THE EEA
As part of the Administrator's use of tools supporting current operations provided, e.g. by Google, Users' Personal Data may be transferred to a country outside the European Economic Area (EEA), in particular to the United States of America (USA) or another country in which the entity the person cooperating with it maintains tools for the processing of Personal Data in cooperation with the Administrator. The Administrator transfers Personal Data outside the EEA only when necessary and ensuring an adequate level of protection, primarily through the use of standard contractual clauses issued by the European Commission.

§ 10
FINAL PROVISIONS
This privacy policy is updated in connection with the ongoing analysis of technical and legal conditions related to the processing of personal data.
This privacy policy is valid from May 25, 2024.