Privacy policy

PRIVACY POLICY

General Provisions

This Privacy Policy of the online store https://vsb-store.pl/ (hereinafter referred to as the Online Store) is for informational purposes only and is not a source of obligations for buyers in the Online Store. The Privacy Policy contains the principles of personal data processing by the Administrator in the Online Store, including the grounds, purposes, and scope of personal data processing, as well as the rights of persons to whom this data relates, as well as information on the use of cookies and analytical tools in the Online Store.

The administrator of personal data collected through the Online Store is:

VSB.STORE Spółka z ograniczoną odpowiedzialnością with a registered office in Kraków, Józefa Ignacygo Kraszewskiego street 36, lok. 128, 30-110 Kraków, registered in the Unified State Register of Enterprises of Poland by the Kraków-Midtown District Court in Kraków XI Economic Division of the Unified State Register of Court Decisions under no: 0000983007, REGON: 522616547, NIP: 6772481439, tel: +48 728 832 449, e-mail: vsb.store.pl@gmail.com - in relation to the sale and purchase of goods marked as Shop Poland, as well as in relation to services provided by electronic means - is called the "Administrator" and is also the seller;

Diana Butsiak does business under the name FOP BUTSIAK DIANA, with its registered office at 72 Myru Avenue, apartment 121, Khmelnytskyi, Ukraine. Her tax identification number: 3509111201, registration number: 2010350000000284581, telephone: +48 728 832 449, e-mail: vsb.store.pl@gmail.com.

Personal data in the online store is processed by the Administrator in accordance with applicable law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of their personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the "GDPR".

Use of the Online Shop, including making purchases, is voluntary. The provision of personal data by a customer using the Online Shop for the purpose of making purchases is voluntary, except in the following cases:

If you wish to conclude an agreement with the Administrator, you must provide the Administrator with the necessary personal data, which are indicated on the page of the Online Store, as well as in the Regulations for the Sale and Provision of Services by Electronic Means and in this Privacy Policy. Failure to provide the required personal data may result in the inability to conclude an agreement with the Administrator. In this case, the provision of personal data is a condition of the agreement, and if you want to enter into an agreement with the Administrator, you are obliged to provide the necessary data. Each time, the amount of data required to conclude a transaction is indicated on the page of the Online Store, as well as in the Regulations for the Sale and Provision of Services by Electronic Means.

The Administrator also has obligations under applicable law that require the processing of personal data (e.g., processing data for tax or accounting purposes). Failure to provide such data will result in the Administrator's inability to perform its duties.

The Administrator pays special attention to protecting the interests of persons whose personal data it processes, and in particular, is responsible for ensuring that the data collected by it is

processed in accordance with the law;

Collected for specific, legitimate purposes and not subject to further processing incompatible with these purposes;

are correct and relevant in relation to the purposes for which they are processed;

are stored in a form that allows for the identification of individuals relating to the data for no longer than is necessary to achieve the purpose of the processing;

processed in a manner that ensures an appropriate level of security of personal data, including protection against unlawful or incompatible processing, accidental loss, destruction, or damage by appropriate technical or organizational means.

Taking into account the nature, scope, context, and purposes of the processing, as well as the risk of violation of the rights and freedoms of individuals with different levels of probability and severity of the threat, the Administrator implements appropriate technical and organizational measures to ensure that the processing is under the General Data Protection Regulation and that this can be demonstrated. These measures are reviewed and updated as necessary. The Administrator uses technical means to prevent unauthorized persons from obtaining and modifying personal data transmitted electronically.

All words, phrases and abbreviations used in this Privacy Policy that begin with a capital letter (for example, Seller, Buyer, Online Store) should be understood under their definition contained in the Regulations for the sale and provision of services by electronic means, which is available on the pages of the Online Store.

Grounds for data processing

The Administrator has the right to process personal data in cases where - and to the extent to which - at least one of the following conditions is met:

The person concerned has given his or her consent to the processing of his or her personal data for one or more specific purposes (Art. 6 (a) GDPR);

The processing is necessary for the performance of a contract to which the data subject is a party or to take steps requested by the data subject before entering into the contract (Article 6(b) GDPR);

The processing is necessary for the performance of a legal obligation imposed on the Administrator (Article 6(c) of the GDPR);

Processing is necessary for the pursuit of legitimate interests pursued by the Administrator or a third party, except in situations where the interests or fundamental rights and freedoms of the person to whom the data relating to the personal data requires protection prevail, in particular when that person is a child (Article 6, paragraph f of the GDPR).

The processing of personal data by the Administrator requires at least one of the grounds specified in clause II.1 of the Privacy Policy. The specific grounds for processing the personal data of the Customers using the Administrator's Online Store are specified in the next paragraph of the Privacy Policy - for the respective purpose of processing personal data by the Administrator.

The purpose, basis, term, and scope of data processing in the Online Store in each case are determined by the actions performed by each Buyer in the Online Store.

The Administrator may process personal data in the Online Store for the following purposes, on the following grounds, in the following terms, and to the following extent:

Recipients of data in the Online Store

For the proper operation of the Online Store, including the execution of sales transactions, the Administrator must use the services of external companies. The Administrator uses the services of only those companies that provide sufficient guarantees of the implementation of appropriate technical and organizational measures to ensure that the processing complies with the requirements of the GDPR and protects the rights of the persons concerned.

The Administrator does not transfer data in each case and not to all recipients or categories of recipients specified in the Privacy Policy - the Administrator transfers data only if it is necessary to fulfill a specific purpose of processing personal data and only to the extent necessary to fulfill it.

Personal data of Buyers in the Online Store may be transferred to the following recipients or categories of recipients:

carriers / freight forwarders / courier brokers - if the Buyer uses the service of delivery of the Product by courier in the Online Store, the Administrator provides the collected personal data of the Buyer to the selected carrier, freight forwarder, or intermediary that makes shipments on behalf of the Administrator to the extent necessary to deliver the Product to the Buyer;

entities that provide electronic payment services or payment cards - if the Buyer uses an electronic payment method or a payment card in the Online Store, the Administrator provides the collected personal data of the Buyer to the selected entity that serves the above payments in the Online Store on behalf of the Administrator to the extent necessary to process the payment made by the Buyer;

service providers who provide the Administrator with technical, information and organizational solutions that allow the Administrator to carry out business activities, including the Online Shop and Electronic Services provided through its mediation (in particular, suppliers of computer software for the Online Shop);

Email and hosting providers, as well as providers of software for managing the company and providing technical support to the Administrator - the Administrator provides the collected personal data of the Buyer to the selected provider, who acts on its order only in the case and to the extent necessary to fulfill a specific purpose of data processing in accordance with this Privacy Policy;

Providers of accounting, legal, and advisory services that provide support to the Administrator in accounting, legal, or advisory matters (in particular, an accounting firm, law firm, or debt collection firm) - the Administrator provides the collected personal data of the Buyer to the selected provider, acting on its order only if and to the extent necessary to fulfill a specific purpose of data processing in accordance with this Privacy Policy;

Marketing Service Providers - the Administrator provides the collected personal data of the Buyer to the provider that provides the Administrator with marketing services (in particular, maintaining a profile on Facebook, Instagram, and blogging) only if and to the extent necessary to fulfill a specific purpose of data processing in accordance with this Privacy Policy.

Profiling in the online store

In accordance with the GDPR, the Administrator must inform about automated decision-making, including profiling as referred to in Art. 22, Paragraphs 1 and 4 of the GDPR, as well as - at least in these cases - important information about the rules for their adoption, as well as the significance and expected consequences of such processing for the individual in relation to his or her data. With this in mind, the Administrator provides information on possible profiling in this section of the Privacy Policy.

The Administrator may use profiling in the Online Store to market its own services/goods, but the decisions made by the Administrator on its basis do not relate to the conclusion or refusal to conclude a Purchase Agreement or the possibility of using the Electronic Services in the Online Store. The result of using profiling in the Online Shop may be, for example, to provide a person with a discount, send a promotional code, remind them of incomplete purchases, offer a product that may meet the interests or preferences of this person, or offer better conditions than the standard offer of the Online Shop. Despite the profiling, it is up to the individual to decide whether he or she wants to take advantage of the discount or better terms and conditions and make a purchase from the online store.

Profiling in the Online Shop is the automatic analysis or prediction of the behaviour of a particular person on the Online Shop page, for example, adding a particular product to the basket, viewing a page of a particular product in the Online Shop or analysing the history of purchases made earlier in the Online Shop. The condition for such profiling is that the Administrator has the personal data of this person in order to send him/her, for example, a discount code.

The person to whom the data relates has the right not to be subjected to a decision based solely on automated processing, including profiling, which has a significant impact on that person.

Rights of the data subject

Right to access, rectification, restriction, erasure or portability - the data subject has the right to request from the Controller access to his or her personal data, rectification, erasure ("right to be forgotten") or restriction of processing, as well as the right to object to processing and the right to have his or her data ported. Detailed conditions for exercising the above rights are set out in Articles 15-21 of the GDPR.

The right to withdraw consent at any time - a person whose data is processed by the Administrator on the basis of expressed consent (pursuant to Article 6, paragraph 1, letter a) or Article 9, paragraph 2, letter a) of the GDPR) has the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent prior to its withdrawal.

The right to lodge a complaint with a supervisory authority - a person whose data is processed by the Controller has the right to lodge a complaint with a supervisory authority in accordance with the requirements of the GDPR and relevant provisions of Polish law, in particular, the Act of 10 May 2018 on personal data protection (Dz.U. 2018, item 1000). The supervisory authority in Poland is the Head of the Government for Personal Data Protection.

Right to object - the person whose data is processed has the right to object at any time - for reasons related to his or her particular situation - to the processing of his or her personal data on the basis of Article 6(1)(e) (interests or tasks of general interest) or (f) (legitimate interest of the Controller), including profiling based on these provisions. The Controller shall no longer process the personal data unless it can demonstrate compelling legitimate grounds for processing that override the interests, rights, and freedoms of the person to whom the data relate or the grounds for the establishment, exercise, or defense of rights.

The right to be excluded from the marketing of own services/products - if personal data is processed for marketing of own services/products, the person concerned has the right to express his/her request at any time to be excluded from the processing of his/her personal data for the purposes of such marketing, including profiling, to the extent that the processing is related to such marketing.

In order to exercise the rights specified in this section of the Privacy Policy, you can contact the Administrator by sending a notice in writing or by e-mail to the Administrator's address specified at the beginning of the Privacy Policy.

Cookies

Cookies are small text information files in the form of text files that are sent by the server and stored on the side of the visitor of the online store (for example, on the hard drive of a computer, laptop or smartphone memory card - depending on which device the visitor of the online store uses).

The Administrator may process the data contained in cookies when visitors use the Online Shop for the following purposes:

• identification of the Buyers as registered in the Online Store and showing that they are logged in;
• remembering the goods added to the basket for placing an Order;
• memorising data from completed Order forms, surveys, or login details to the Online Store;
• customising the content of the Online Shop page in accordance with the individual preferences of the Buyer and optimising the use of the Online Shop pages;
• conducting anonymous statistical studies that show how the Online Store page is used;
• remarketing, i.e. studying the behaviour of visitors to the Online Shop by anonymously analysing their actions (e.g. repeated visits to certain pages, keywords, etc.) in order to create their profile and provide them with advertising that meets their expected interests, even when they visit other Internet pages in the advertising network of Google Inc. and Facebook Ireland Ltd.

By default, most web browsers available on the market accept the storage of cookies by default. Everyone has the opportunity to define the conditions for the use of cookies through their browser settings. This means that it is possible, for example, to partially restrict (e.g. temporarily) or completely disable the storage of cookies - however, in the latter case, this may affect some of the functionality of the online shop.

Your browser settings regarding cookies are important in terms of your consent to the use of cookies by our online shop - according to the rules, such consent can also be expressed through your browser settings. If you do not express such consent, you should change your browser settings for cookies accordingly.

Detailed information on changing the settings for cookies and deleting them yourself in the most popular web browsers is available in the help section of the browser.

The Administrator may use the Google Analytics and Google Ads services provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the Online Store. These services help the Administrator analyse traffic to the Online Shop and display of sponsored links in Google search results. The collected data is processed within the framework of the above services with anonymisation (this is so-called operational data that does not allow for the identification of a person) to create statistics that help to manage the Online Shop. This data is general and anonymous, i.e. it does not contain any signs of identification (personal data) of visitors to the Online Shop. The Administrator, using the above-mentioned services in the Online Shop, collects data such as sources and environments of attracting visitors to the Online Shop, as well as their behaviour on the Online Shop page, information about the devices and browsers from which the page is visited, IP address and domain, geographic data, as well as data on age, gender, and interests.

It is possible to block Google Analytics from easily accessing information about user activity on the website of the online store by installing a browser add-on provided by Google Inc. available at https://tools.google.com/dlpage/gaoptout?hl=pl

Final Provisions

This Privacy Policy applies only to this Online Store. The Online Store may contain links to other websites. The Administrator recommends that you read the privacy policies on these websites.

If you have any questions about the Online Store or the Privacy Policy, please contact the following addresses:

VSB.STORE A limited liability company with registered office in Kraków, 36 J.I. Krzeszewskiego Street, Office 128, 30-110 Kraków, registered in the National Court Register of the Court of the District Court for Kraków - City Centre in Kraków, XI Division of the Commercial Register of the Court Register of Enterprises at 0000983007, REG: 522616547, TIN: 6772481439, tel: +48 728 832 449, e-mail: vsb.store.pl@gmail.com - in relation to sales transactions concerning goods labeled as "Shop Poland" and in relation to services provided electronically - hereinafter referred to as the "Administrator" and is the seller;

Diana Butsiak, doing business as FOP BUTSIAK DIANA, 72 Myru Str., apartment 121, Khmelnytskyi, Ukraine, tax ID: 3509111201, registration number 2010350000000284581: vsb.store.pl@gmail.com - in relation to sales transactions in respect of goods marked as "Shop Ukraine" - hereinafter referred to as the "Administrator" and is the seller;

Date of last change: 28.04.2023