Privacy protection
Privacy Policy in the company:
MULTISTORE ECOTOYS Krystian Ślebioda,
Welcome!
In our company, we take the protection of personal data very seriously, therefore we have prepared this document to explain to you in a simple and accessible way why we collect personal data and what we use it for, what obligations we have in this respect, as well as what rights you are entitled to. In addition, we will also try to familiarize you with the topic of cookies.
In our company, we have fully complied with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC – also known under the abbreviated name: GDPR.
Important information at the beginning: the administrator of the website and the controller of personal data is Krystian Ślebioda conducting business activity under the name MULTISTORE ECOTOYS Krystian Ślebioda, ul. Logistyczna 31, 62-080 Tarnowo Podgórne, NIP: 7792263999, REGON: 302053899, entered in the Central Register and Information on Economic Activity (hereinafter: the “Data Controller”).
If you have any questions or doubts related to the principles of personal data protection in our company, we kindly invite you to contact us by e-mail or phone.
Most important information:
By subscribing to the Newsletter, placing an order or simply contacting us, you provide us with your personal data, and we guarantee that your data will remain confidential and secure. The personal data you provide is shared with other entities (recipients within the meaning of Article 4(9) GDPR) only when it is necessary for the proper performance of the services we provide. These may primarily include our employees who handle your order, the mailing system service provider used to run our Newsletter, as well as courier companies and postal operators. In order to comply with accounting obligations imposed by law, our company also uses the assistance of a professional tax advisor.
We use analytical tools such as Google Analytics, which collect anonymous information about website visits, such as the subpages viewed or the time users spent on the website. This involves the use of Google cookies.
We provide the ability to use social features such as sharing content on social media and subscribing to a social media profile. Using these features involves the use of cookies from social media administrators such as Facebook, Instagram, YouTube.
We use cookies so that you can use our website comfortably.
Below we present a detailed explanation of issues related to the protection of personal data in our company.
Personal data.
The controller of your personal data within the meaning of personal data protection regulations is MULTISTORE ECOTOYS Krystian Ślebioda,, ul. Logistyczna 31, 62-080 Tarnowo Podgórne, NIP: 7792263999, REGON: 302053899, entered in the Central Register and Information on Economic Activity.
In our company, a Data Protection Officer has not been appointed, therefore all obligations related to the protection of personal data are performed personally by the data controller.
The purposes, legal bases and the period of processing of personal data are indicated separately for each purpose of data processing (see: the provisions below containing a detailed description of different purposes of data processing).
In connection with our processing of your personal data, you are entitled to the following rights:
- the right to request access to your personal data, rectification, erasure (the right to be forgotten) or restriction of processing;
- the right to object to processing;
- the right to data portability;
- the right to withdraw consent to the processing of personal data for a specific purpose, if you have previously given such consent;
- the right to lodge a complaint with a supervisory authority;
You may exercise the above rights in accordance with the rules described in Articles 16–21 of the GDPR.
Providing your personal data is always voluntary, however it is necessary in order to place an order, subscribe to the Newsletter or simply contact us.
We guarantee the confidentiality of all personal data provided to us. We ensure that all security and personal data protection measures required by personal data protection regulations (GDPR) are implemented. Personal data is collected with due care and appropriately protected against access by unauthorized persons. Personal data is processed exclusively within the territory of the European Union.
Account.
Through the website, you may create a user account in our service. The account is intended to facilitate placing orders in our online store and provides access to the history of previously placed orders. In order to register an account, it is necessary to provide the same data as when placing an order, i.e. first and last name, e-mail address, phone number and delivery address. You may also provide additional data, such as information about your business activity. Providing the above-mentioned data when registering an account results in the fact that you will not have to provide it each time when placing subsequent orders. The legal basis for processing your personal data in the case of an account is your consent expressed by selecting the checkbox when registering the account. You may withdraw such consent at any time, which is equivalent to deleting the account. The legal basis for processing your personal data in the case of an account is Article 6(1)(b) GDPR, i.e. the processing of your personal data is necessary for the performance of a contract for the provision of a service to which you are a party. The data is processed for the duration of the operation of our service, unless you resign from having an account in our service, which will result in the immediate deletion of data from the database.
Orders.
When placing an order, you must provide your personal data necessary to fulfill the order, i.e. first and last name, e-mail address, phone number and delivery address. You may also provide additional data, such as information about your business activity. If you have previously provided such data in your user account, this data will be automatically filled in the order form, and you always have the option to modify it. The legal basis for processing your personal data contained in the order is the performance of a contract (Article 6(1)(b) GDPR). The data provided in the order form will be saved in the database and stored for the period specified in legal regulations (limitation period for claims arising from the concluded contract and the period indicated by tax law regulations). Each order is recorded as a separate entry in the database. In addition to personal data, order details are also recorded, such as the date the order was placed, the subject and value of the order, the selected delivery method and payment method.
Buy with Twisto.
In order to facilitate shopping in our online store, we cooperate closely with ING Bank Śląski S.A. and Twisto Polska sp. z o.o. ING Bank provides services for making infrastructure available to handle payments via the Internet, and also handles and settles payments made by you using payment instruments. Twisto Polska sp. z o.o. provides the “Buy with Twisto” service, which allows you to check the product before paying for it. Therefore, if you decide to use the “Buy with Twisto” service, your personal data will be transferred to ING Bank Śląski S.A. and Twisto Polska sp. z o.o., which will make it possible to use and perform this service. In such a case, your personal data is processed for the following purposes:
- in order to transfer your personal data to ING Bank Śląski S.A. (“Bank”) in connection with:
- the provision by the Bank to the Data Controller of the service of making infrastructure available to handle payments via the Internet (legal basis: Article 6(1)(f) GDPR);
- handling and settling by the Bank payments made by the Data Controller’s customers via the Internet using payment instruments (legal basis: Article 6(1)(f) GDPR);
- verification by the Bank of the proper performance of contracts concluded with the Data Controller, in particular ensuring the protection of payers’ interests in connection with complaints submitted by them (legal basis: Article 6(1)(f) GDPR).
- in order to transfer your personal data to Twisto Polska sp. z o.o. in connection with the possibility of offering you payment for the purchased goods or services by Twisto Polska sp. z o.o. under a commission agreement covering the purchasing formula “Buy with Twisto” and making this purchasing formula available by the Data Controller, as well as for the purpose of verification by Twisto Polska sp. z o.o. of the proper performance of such commission agreements (legal basis: Article 6(1)(f) GDPR);
Newsletter.
Through the website, you may subscribe to our Newsletter containing information about new products, promotions, products and services related to our activity on the Internet. In order to send the Newsletter, we only need your e-mail address. The legal basis for processing your personal data in the case of the Newsletter is Article 6(1)(b) GDPR, i.e. the processing of your personal data is necessary for the performance of a contract for the provision of a service to which you are a party. You may unsubscribe from the Newsletter at any time. The data is processed for the duration of the Newsletter, unless you unsubscribe from receiving the Newsletter, which will result in the immediate deletion of data from the database.
Complaints and withdrawal from the contract.
In the event of submitting a complaint or withdrawing from the concluded contract, you provide us with personal data contained in the complaint or the statement of withdrawal from the contract, i.e. first and last name, residential address, phone number and e-mail address.
The data provided to us in connection with submitting a complaint or withdrawing from a contract is used to carry out the complaint procedure or the withdrawal procedure (Article 6(1)(c) GDPR).
The data will be processed for the time necessary to carry out the complaint procedure or the withdrawal procedure.
E-mail contact.
By contacting us via e-mail, you naturally provide us with your e-mail address as the sender’s address. In addition, you may also include other personal data in the content of the message. The legal basis for processing personal data in such a case is your consent resulting from initiating contact with us. Your personal data provided to us as part of e-mail contact is processed solely for the purpose of handling your inquiry. The content of correspondence may be archived.
Cookies and other tracking technologies.
Our website, like almost all other websites, uses cookies to provide you with the best possible experience when using the website.
Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone) that may be read by our ICT system.
Cookies allow us to:
- ensure the proper functioning of the website as you expect;
- improve the speed and security of using the website;
- enhance the functions available to you on our website;
- use analytical tools;
- use marketing tools;
- use a commenting system;
- provide social features.
The legal basis for processing personal data in this case is our legitimate interest (Article 6(1)(f) GDPR) consisting in conducting analyses of users’ activity in the service and the way they use the account, as well as their preferences in order to improve the functionalities used.
More details are provided below.
Consent to cookies.
During the first visit to the website, you are shown information about the use of cookies. Accepting and closing this information means that you consent to the use of cookies in accordance with the provisions of this privacy policy. You may always withdraw your consent by deleting cookies and changing cookie settings in your browser. Please remember, however, that disabling cookies may cause difficulties in using the website, as well as many other websites that use cookies.
First-party cookies.
Cookies can be divided into first-party and third-party cookies. As for first-party cookies, we use them for the proper functioning of the website.
Third-party cookies.
Our website, like most modern websites, uses functions provided by third parties, which involves the use of cookies originating from third parties. The use of such cookies is described below.
How to disable cookies?
Cookies may be disabled by you at any time by changing the relevant settings in your web browser. Below we present links to information regarding cookie settings in the most popular browsers.
Opera:
https://www.opera.com/help/tutorials/security/privacy/
Mozilla Firefox:
Google Chrome:
https://support.google.com/chrome/answer/95647?hl=pl
Internet Explorer:
https://support.microsoft.com/pl-pl/help/17442
Safari:
https://support.apple.com/kb/PH5042?locale=pl_PL
Analytics and statistics.
We use cookies to track website statistics, such as the number of visitors, the type of operating system and web browser used to browse the website, time spent on the website, visited subpages, etc. In this regard, we use the Google Analytics tool. The information collected in this scope is completely anonymous and does not allow for your identification. For this purpose, cookies of Google LLC related to the Google Analytics service are used.
Using Google Analytics services involves implementing the tracking code provided by Google in the code of our website (the so-called tracking code). This code is based on cookies, but may also use other tracking technologies.
We indicate that Google has made available a browser add-on blocking Google Analytics at https://tools.google.com/dlpage/gaoptout. If you do not want your data to be used by this software, we recommend using the tool provided by Google.
We also invite you to ознакомиться yourself with Google’s general privacy principles at https://www.google.com/analytics/learn/privacy.html.
Analytics and statistics.
We use cookies to track website statistics, such as the number of visitors, the type of operating system and web browser used to browse the website, time spent on the website, visited subpages, etc. In this regard, we use the Google Analytics tool. The information collected in this scope is completely anonymous and does not allow for your identification. For this purpose, cookies of Google LLC related to the Google Analytics service are used.
Using Google Analytics services involves implementing the tracking code provided by Google in the code of our website (the so-called tracking code). This code is based on cookies, but may also use other tracking technologies.
Marketing.
We use Facebook’s marketing tools to direct advertisements to you on this service. For this purpose, we have implemented the Facebook Pixel in the code of the platform, which remembers your visits. For this purpose, cookies of Facebook are used.
Profiling.
Profiling is used primarily by applications such as Google AdWords and Facebook Pixel. If you do not want to be subject to profiling, you can optimize your web browser. You may also object to profiling – in such a case, please contact us.
Social features (Social Media).
We provide the ability to use social features, such as subscribing to our company profile (fanpage) on a given social media service. Please note that we are the controller of personal data (first name, last name and image) of users who follow our company profiles (fanpages) on the popular social media service, i.e. Facebook. Personal data is not processed within databases over which we have control, as it is processed exclusively within databases belonging to the owners of social media services. The owners of these services are independent data controllers. We also use these services as a user, but having access to the list of people who follow us, we ourselves have become an independent controller of personal data. You may revoke our access to your personal data on a given social media platform at any time by using the appropriate function provided by Facebook (“Unlike the page on Facebook”).
We indicate that the use of functions provided by social media services involves the use of cookies of the administrators of these services.
In the case of Facebook, on a computer or other device you use to browse this portal, including visiting our fanpage, during each visit (regardless of whether you have an account on this portal or not) Facebook cookies are saved, which are intended to store information in web browsers and remain active for a period of two years, unless they are deleted earlier. Thanks to these cookies, our company can obtain from Facebook statistics prepared by this portal based on the number of people visiting our fanpage. These statistics, although anonymized (they do not allow us to determine specific persons who visited our fanpage and viewed the content shared there), allow us to learn the profile of people who visited our fanpage. Using filters provided by Facebook, we can define criteria on the basis of which these statistics are to be prepared (e.g. demographic and geographic data), and we can also define categories of people whose personal data will be used by Facebook. Based on the statistics provided to us by Facebook, we can therefore better tailor the content we share so that it may be more interesting to Facebook users, including people who subscribe to our fanpage.
Server logs
Using the website involves sending queries to the server where the website is stored. Each query sent to the server is recorded in the server logs.
The logs include, among others, your IP address, server date and time, information about the web browser and operating system you use. Logs are saved and stored on the server.
Data saved in server logs is not associated with specific persons using the service and is not used by us to identify you.
Server logs constitute only auxiliary material used to administer the website and their content is not disclosed to anyone other than persons authorized to administer the server.
Thank you for ознакомне yourself with the rules for protecting personal data in our company!
INFORMATION CLAUSE
Due to the content of Article 13(1)-(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”), I inform that the controller of your personal data is Krystian Ślebioda, conducting business activity under the name: MULTISTORE ECOTOYS Krystian Ślebioda, ul. Logistyczna 31, 62-080 Tarnowo Podgórne, NIP: 7792263999, REGON: 302053899, entered in the Central Register and Information on Economic Activity (hereinafter: the “Data Controller”).
Contact: k.slebioda@multistore.pl
The personal data provided to us will be processed for the following purposes:
- for the purpose of performing the concluded contract (legal basis: Article 6(1)(b) GDPR);
- for the purpose of transferring your personal data to ING Bank Śląski S.A. (“Bank”) in connection with:
- the provision by the Bank to the Data Controller of the service of making infrastructure available to handle payments via the Internet (legal basis: Article 6(1)(f) GDPR);
- handling and settling by the Bank payments made by the Data Controller’s customers via the Internet using payment instruments (legal basis: Article 6(1)(f) GDPR);
- verification by the Bank of the proper performance of contracts concluded with the Data Controller, in particular ensuring the protection of payers’ interests in connection with complaints submitted by them (legal basis: Article 6(1)(f) GDPR).
- for the purpose of transferring your personal data to Twisto Polska sp. z o.o. in connection with the possibility of offering you payment for the purchased goods or services by Twisto Polska sp. z o.o. under a commission agreement covering the purchasing formula “Buy with Twisto” and making this purchasing formula available by the Data Controller, as well as for the purpose of verification by Twisto Polska sp. z o.o. of the proper performance of such commission agreements (legal basis: Article 6(1)(f) GDPR);
- for the purpose of direct marketing of the Data Controller’s products and services (legal basis: Article 6(1)(f) GDPR);
In order to ensure the proper performance of the contract, personal data may be made available to authorized employees of the company, courier companies, postal operators carrying out delivery, as well as entities providing accounting and legal services to the controller. Personal data may also be transferred to entities entitled to obtain it on the basis of generally applicable law. For the purposes referred to in points 2 and 3, personal data will be transferred to ING Bank Śląski S.A. and Twisto Polska sp. z o.o.
The data will be stored until the limitation period for claims arising from the concluded contract expires, in accordance with generally applicable law, and in the case of accounting documents, until the expiry of the period indicated in tax law regulations.
Providing the required data is voluntary; however, failure to provide it may significantly hinder or even prevent the performance of the contract.
If you provide your personal data for the purpose of transferring your personal data to Twisto Polska sp. z o.o. before concluding a sales contract for goods (or services) purchased in the Data Controller’s online store, the transfer of such data is a condition for concluding the sales contract due to the business model adopted by the Data Controller.
If your personal data is transferred to the Bank in connection with handling and settling payments made by you to the Data Controller via the Internet using payment instruments, providing the data is required in order to process the payment and to transfer confirmation of its completion by the Bank to the Data Controller.
If your personal data is transferred to the Bank for the purpose of verifying by the Bank the proper performance of contracts concluded with the Data Controller, in particular ensuring the protection of payers’ interests in connection with complaints submitted by them, providing such data is required in order to enable the performance of the contract concluded between the Data Controller and the Bank.
If your personal data is transferred to Twisto Polska sp. z o.o. in connection with the possibility of offering you payment of the price for goods or services purchased by you by Twisto Polska sp. z o.o. under a commission agreement covering the purchasing formula “Buy with Twisto” and making this formula available by the Data Controller, providing such data and processing it for this purpose is required due to the business model adopted by the online store and for the purpose of performing the contract concluded between the Data Controller and Twisto Polska sp. z o.o.
If the processing of personal data is based on consent, you have the right to withdraw such consent at any time. Withdrawal of consent does not affect the processing of data prior to withdrawal of consent or the legal basis for such processing.
We inform you that you have the right to access data, rectify data, erase data, restrict processing, object, request data portability, as well as to lodge a complaint with the Personal Data Protection Office. The controller does not make decisions concerning you based on automated processing, including profiling.
English