Bioelixire Polska s.c.
TABLE OF CONTENTS
- Legal grounds.
- General information.
- Principles of personal data processing.
- For what purpose do we collect your data?
- On what basis do we process your data?
- Is the provision of data obligatory?
- Who will we share your data with?
- Data storage period.
- Your rights.
I. Legal grounds.
This document has been prepared taking into account the provisions of the following legal acts:
1.Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on the protection of data) (Journal of Laws UE L 119 of May 4, 2016, p. 1 and Journal of Laws UE L 127 of May 23, 2018, p. 2); in short: “GDPR“;
2. the Act of 10/05/2018 on the Protection of Personal Data (Journal of Laws of 2018, item 1000), in short: “UODO“;
3. of the Act of April 23, 1964, the Civil Code (i.e. Journal of Laws of 2019, item 1145, as amended); in short: “Civil Code“;
4. the Act of July 18, 2002 on the provision of electronic services (i.e. Journal of Laws of 2019, item 123, as amended); in short: “Act on Providing Services by Electronic Means“;
5. the Act of July 16, 2004, Telecommunications Law (i.e. Journal of Laws of 2019, item 2460, as amended); in short: “Telecommunications Law“.
1. Administrator: Bioelixire Poland Tomasz Mikulski, Piotr Mikulski, Maciej Mikulski s.c, 60-413 Poznań, ul. Dunajecka 19, 40-413 Poznań NIP 9721266342, REGON 365282435; hereinafter in short: “Administrator” or “We“
2. Personal data: it is information about an identified or identifiable natural person (data subject); an identifiable natural person is a person who can be directly or indirectly identified, in particular on the basis of an identifier such as name and surname, identification number, location data, internet identifier or one or more specific physical, physiological, genetic, mental factors, the economic, cultural or social identity of a natural person;
4. Website: Website run by the Administrator at: https://gestewlosy.pl
5. Regulations of the Website: regulations for the provision of electronic services and regulations of the online store;
6. User: any natural person visiting the Website or using one or more services or functionalities offered by the Administrator.
III. General information.
2. We respect the privacy of our Website Users. The safety of our Website Users is very important to us.
3. The functioning of our Website is carried out in accordance with the requirements of generally and absolutely applicable provisions of law, as well as with the use of generally accepted principles of the functioning of Websites, including in particular the security of Website Users and technical and organizational measures used for this purpose.
IV. Principles of personal data processing.
1. The Administrator collects the User’s personal data in connection with his activities on the Website – in accordance with the principle of legality, purposefulness, limited processing, data minimization, correctness, integrity and confidentiality.
2. The administrator collects personal data for specific, explicit and legally justified purposes and does not process them further in a manner inconsistent with these purposes.
3. The scope of the User’s personal data collected by the Administrator is limited to what is necessary to enable the User to use the services available on the Website.
V. Why do we collect your data?
1. General information
1) Cooperation with us or the use of our Website may require you to provide us with your personal data. In connection with the User’s use of the Website, the Administrator collects data to the extent necessary to provide individual services offered, as well as information about the User’s activity on the Website.
2) We keep the collected data strictly confidential and only use it for the purposes we have informed you about. Thanks to a variety of choices, you can decide what data you provide and what data we can use.
2. Use of the Website
Personal data of all persons using the Website (including IP address or other identifiers and information collected via cookies or other similar technologies) and who are not registered Users (i.e. persons who do not have an account on the Website) are processed by the Administrator for the purposes of:
– providing services by electronic means in terms of the functionalities offered on the Website – the legal basis for processing is then the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR);
– making the content offered on the Website available to Users, in particular related to marketing, advertising and sales activities – the legal basis for processing is then the consent expressed by the person using the Website (Article 6 (1) (a) of the GDPR);
– analytical and statistical – the legal basis for processing is then the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in conducting analyzes of Users’ activity, as well as their preferences in order to improve the functionalities used and the services provided;
– detecting cases of unauthorized use of services, determining liability and pursuing claims or defending against them – the legal basis for processing is then the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the protection of his rights.
3. Data collected during registration
1) To use some of the functions of our Website, you must register – create an account, e.g. when making purchases in the online store.
2) When registering and creating an account, we will ask you to provide your personal data necessary to create and operate the account. We need this data to provide you with the service you intend to use, e.g. as part of an online store. In order to facilitate service, the User may provide additional data, thus consenting to their processing. Such data can be deleted at any time. Providing data marked as mandatory is required to set up and operate an account, and failure to do so results in the inability to create an account. Providing other data is voluntary, although sometimes it determines the possibility of using a special offer, e.g. in the case of special discounts granted in connection with birthdays.
3) If you register on the Website and set up an account, we will process your data provided during registration in order to provide the services described in the Website’s regulations (e.g. online store regulations). These services will include: the ability to make purchases in the online store.
4) If you give your consent, we will also process the data provided by you for marketing purposes.
4. Data collected automatically
1) During your visit to the Website, some of your data will be collected automatically.
2) Data obtained automatically on the Website is information contained in cookies.
3) The user has the ability to independently manage cookies, because it is possible, for example, by the Internet browsers he uses.
5. Purposes of processing data collected automatically
1) We will use the above data (i.e. data collected in the scope of the Website) to provide the service requested by you.
2) Thanks to cookies, the use of our Website is easier and more pleasant, and its content – texts, photos, surveys, as well as advertisements – is better suited to the expectations and preferences of each User.
3) We will use the data collected automatically, among others to study traffic on our Website pages, measure the effectiveness of advertisements and measure the popularity of the Website, its individual sections and individual materials posted on them.
6. Other data
1) When you provide us with data in order to conclude a contract, we will process your data for this purpose, and then for its implementation, if the contract is concluded.
2) When you contact us in order to perform various activities or obtain information (e.g. filing a complaint) via the website, telephone or e-mail, we will again require you to provide us with your personal data to confirm your identity and the possibility of return. contact. This applies to the same personal data that you provided previously. However, it may happen that due to the specificity of your request, we will have to collect other data from you. You provide the above-mentioned data is not mandatory, but it is necessary to perform activities or obtain information that interest you. We will process the above-mentioned data in order to perform the activities requested by you or to provide you with the information you request – depending on which situation takes place.
VI. On what basis do we process your data?
We process all data collected by us in accordance with the purpose for which it was collected and on the basis of applicable law. The legal basis authorizing us as the Administrator to process your personal data may be:
- Your consent expressed for one or more purposes (Article 6 (1) (a) of the GDPR);
- an agreement concluded between the Administrator and you as a User, which is also the provision of electronic services indicated in the Website’s regulations (Article 6 (1) (b) of the GDPR);
- the legal obligation of the Administrator (Article 6 (1) (c) of the GDPR);
- legitimate interest pursued by the Administrator or by a third party (Article 6 (1) (f) of the GDPR).
1. Data processing based on consent (Article 6 (1) (a) of the GDPR).
1) Consent may be expressed as a result of an active action (e.g. leaving data and sending a form) or by checking the checkbox.
2) Whenever we ask you for consent to the processing of your personal data, your consent will be the legal basis authorizing us to process the data.
3) In some cases, consent may be expressed by entering data in the fields marked as optional. In this case, we will process this data on a voluntary basis, including in order to receive special offers offered on the Website, e.g. by providing your date of birth, you consent to the transfer of a special birthday offer, to offer a special discount or other surprise on this occasion, or to make your wishes.
4) We will ask you for consent to the processing, including profiling, of your personal data stored in cookies and similar technologies used on the Website for marketing purposes, including analytics for marketing purposes and displaying personalized offers, advertisements and other services on our Website .
5) If you give your consent, we will also send / provide you with commercial information about our goods and services by telephone and electronically.
6) The consent will be the legal basis for the processing of your data, including in the following situations:
– directing marketing content to you through various channels, i.e. via e-mail, SMS / MMS or by phone;
– providing services related to maintaining and servicing an account on the Website in the scope of optional data;
– when you voluntarily leave us your data by sending us a query about our offer, including goods or services, a request to contact our consultants;
– subscribing to the newsletter;
– conducting marketing activities and adjusting them to your preferences (profiling for marketing purposes);
– participation in contests, lotteries or plebiscites.
2. Data processing on the basis of a contract (Article 6 (1) (b) of the GDPR).
1) We will process your data when it is necessary to perform the contract to which you are a party or when it is necessary to take action at your request, before concluding the contract, this applies, inter alia, if:
– we provide access to our Website and services provided electronically through it (we provide Users with functionalities available on the Website related to the provision of electronic services);
– we carry out orders made in the online store;
– we consider complaints.
2) Your use of the services offered via the Website is tantamount to concluding a contract for the provision of electronic services. In a situation where we will collect data from you that are necessary for us to provide services on the Website (e.g. when making purchases in an online store, ordering a newsletter), these data will be processed by us on the basis of a contract.
3. The legal obligation imposed on the Administrator (Article 6 (1) (c) of the GDPR). In certain situations, we must process your personal data due to the need to fulfill our obligations under the law in connection with running a business and concluded contracts, including for the purpose of making payments, issuing and storing invoices and other accounting documents, recording revenues, settling taxes, fulfilling accounting obligations, reporting, keeping and archiving documentation related to concluded contracts, and also other obligations resulting from applicable legal regulations.
4. The legitimate interest pursued by the Administrator or by a third party (Article 6 (1) (f) of the GDPR).
1) Your personal data will be processed by us when it is necessary for the purposes of the legitimate interests pursued by us.
2) However, we will not process your personal data in a situation where it turns out that your interests or your fundamental rights and freedoms will override our interests.
3) For the above reasons, we would like to inform you that based on our legitimate interest, we will process your data, among others for purposes:
A) managing relations with Users, including handling inquiries, notifications and correspondence, including other than those related to marketing activities;
B) identifying the User’s needs, including for own marketing purposes consisting in matching the content and advertisements on our Website to the User’s preferences;
C) creating compilations, analyzes, statistics and conducting analytical and statistical research for marketing purposes and quality of service;
D) administration, management and development of our activities and services, including activities related to promotion, marketing and advertising of services and goods offered by the Administrator, organization of promotional events;
E) maintaining and using IT systems, including administering and managing the Administrator’s website and social media profile;
F) managing the sales and customer service process, setting service standards, ensuring care for the quality of goods and services, maintaining a customer base, including potential customers;
G) verification of clients and contractors in public registers;
H) management of security, property protection, information protection, including the use of video monitoring;
I) evidence and archives and to secure information in the event of a legal need to prove facts, possible determination, asserting rights and claims and defending against claims, conducting court proceedings and before other state authorities, conducting debt collection proceedings.
4) On the same basis, we will also process your personal data collected automatically on the Website in order to ensure the security of the session, ensure the quality of the session and provide all functions of our Website.
5) If you pay through, for example, a bank or payment institutions, we will obtain information about the account in which you made the payment. We will process this data in order to check whether you have made the correct payment, and if necessary, also to make refunds, to establish, assert and defend claims.
1. Is the provision of data obligatory?
2. In the case of concluding and performing a contract, we collect only the personal data without which the contract cannot be performed. Failure to provide the data necessary for the conclusion and performance of the contract will result in us not being able to conclude or perform it with you. This also applies to data that we must collect due to the legal obligation imposed on us (e.g. data for invoicing).
3. When we obtain your consent to the processing of personal data, it is completely voluntary, but necessary to process your order or inquiry. If you do not give your consent, for which we ask, we will not take actions to which this consent relates. The scope of the necessary data is marked with the symbol “*”, eg name and surname (in some cases), e-mail address, telephone number. Regardless of the necessary scope of data, you can leave additional data voluntarily.
4. You can withdraw your consent at any time. Withdrawal of consent, however, does not affect the lawfulness of our processing of your personal data, which we have made on the basis of consent before its withdrawal.
VIII. Who will we share your personal data with?
IX. Data storage period.
1. The period of storage of personal data is related to the purposes and grounds for processing. The data will be stored for the time necessary to achieve the purposes for which the data was collected. Where possible, we try to provide a specific data storage period.
2.However, in any case, the storage period may change, i.e. personal data may be stored longer, if such an obligation results from legal provisions or it is necessary to establish, defend or pursue claims (e.g. until the claims are time-barred, we may store evidence of the granted by your consent), or shorter, e.g. in the case of the fulfillment of the request to delete data.
3. The period of storage of personal data is determined in accordance with applicable law. Your personal data will be processed until there is a basis for their processing, i.e .:
1) in the case of consent – until its withdrawal, restriction or other actions on your part regulating this consent;
2) in the case of the necessity of data to perform the contract – for the duration of its performance and until the expiry of the limitation period for claims under this contract (as a rule: 6 years, and for claims for periodic benefits and claims related to running a business: 3 years) , in the case of a limitation period of not less than 2 years, it is, in accordance with art. 118 of the Civil Code, extended until the end of the calendar year in which the limitation period expires, e.g. if the 6-year period expires on May 1 of a given year, the limitation period is extended to December 31 of this year). The beginning of the period is counted from the date of maturity of the claim;
3) if the basis for data processing is the legitimate interest of the administrator – until you submit an effective objection;
4) for tax and accounting purposes – to the extent and for the time compliant with applicable law and until the expiry of the limitation period for claims (as a rule: 5 years for claims arising from tax liabilities arising under the law, e.g. VAT tax).
4. After the indicated periods of time, your personal data will be deleted or made anonymous.
X. Your rights.
1. In connection with the processing of your personal data by us, you have a number of rights:
1) access to the content of your personal data,
2) rectify (correct) your personal data,
3) delete your personal data,
4) restrictions on the processing of your personal data,
5) transfer your personal data,
6) and in addition, you have the right to object to the processing of your data.
2. If the basis for the processing of personal data is your consent, you have the right to withdraw this consent at any time. Withdrawal of consent, however, does not affect the lawfulness of our processing of your personal data, which we have made on the basis of consent before its withdrawal.
3. To exercise your right to withdraw your consent, you can use the following e-mail: email@example.com
4. You can also use the Administrator’s contact details indicated at the beginning of this Policy and send a notification of withdrawal of consent by traditional mail.
5. After withdrawing your consent, we will send you an e-mail confirmation of the receipt of your consent withdrawal statement. However, please note that due to the complexity of our IT systems, it may take up to 5 business days for us to process your declaration of withdrawal of consent after you receive our confirmation.
6. When you believe that the processing of your personal data violates the provisions on the protection of personal data, you have the right to lodge a complaint with the supervisory body, which is the President of the Office for Personal Data Protection, based in Warsaw, at ul. Stawki 2, 00-193 Warsaw.
7. You can exercise the above-mentioned rights, as well as obtain more explanations, by contacting us: by e-mail: firstname.lastname@example.org by correspondence: Bioelixire Polska Tomasz Mikulski, Piotr Mikulski, Maciej Mikulski s.c, 60-413 Poznań, ul. Dunajecka 19, 40-413 Poznań (with an annotation GDPR)
1. The administrator does not automatically collect any information, except for information contained in cookie files.
2. Cookie files (so-called “cookies”) are IT data, in particular text files, which are stored on the end device (eg computer or mobile device) of the Website User and are intended for the use of the Website pages. Cookies usually contain the name of the website they come from, the storage time on the end device and a unique number, thanks to which we are able to analyze how our Website is used, e.g. to calculate how successful our Website is.
3. The entity placing cookies on the Website User’s end device and accessing them is the Administrator.
4. Cookies are used for the following purposes:
1) adjusting the content of the Website pages to the User’s preferences and optimizing the use of websites; in particular, these files allow to recognize the device of the Website User and properly display the website, tailored to his individual needs;
2) creating statistics that help to understand how Website Users use websites, which allows improving their structure and content;
3) maintaining the Website User’s session (after logging in), thanks to which the User does not have to re-enter the login and password on each subpage of the Website;
4) adjusting the displayed marketing materials to the User’s preferences;
5. The Website uses two basic types of cookies:
– “session cookies” and
– “persistent” cookies.
“Session” cookies are temporary files that are stored on the User’s end device until logging out, leaving the website or turning off the software (web browser).
Persistent cookies are stored on the User’s end device for the time specified in the cookie file parameters or until they are deleted by the User.
6. The website uses the following types of cookies:
1) “necessary” cookies, enabling the use of services available on the Website, eg authentication cookies used for services that require authentication on the Website;
2) cookies used to ensure security, e.g. used to detect fraud in the field of authentication on the Website;
3) “performance” cookies, enabling the collection of information on the use of the website pages;
4) “functional” cookies, enabling “remembering” the settings selected by the User and personalizing the User’s interface, eg in terms of the selected language or region of the User, font size, website appearance, etc .;
5) “advertising” cookies, enabling the delivery of advertising content to Users more tailored to their interests.
7. In many cases, the software used for browsing websites (web browser) allows cookies to be stored on the User’s end device by default. The Website Users can change their cookie settings at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the web browser settings or inform about their every posting on the Website User’s device. Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings.
8. In order not to receive cookies, use the option of the web browser used to connect to the Website and select the option of automatic rejection. These settings usually also allow you to manage cookies.
Below are links to exemplary, official websites of manufacturers of the most commonly used web browsers, which contain information about the steps needed to change the settings of a given browser in the above-described scope:
• Internet Explorer: https://support.microsoft.com/pl-pl/help/17442/windows-internet-explorer-delete-manage-cookies
• Mozilla Firefox: http://support.mozilla.org/pl/kb/ciasteczka
• Google Chrome:
• Opera: http://help.opera.com/Windows/12.10/pl/cookies.html
• Safari: https://support.apple.com/kb/PH5042?locale=en-GB
9. As the Data Administrator, we are not responsible for the content of cookies sent by other websites to which links are placed on the Website pages.
10. Accepting cookies is not obligatory to use the Website. However, we would like to inform you that restricting the use of certain cookies may affect individual functionalities available on the Website’s pages and prevent the Website from functioning properly to the full extent.
11. Cookies placed on the Website User’s end device may also be used by advertisers cooperating with the Website operator.
12. More information on cookies is available at www.wszystkoociasteczkach.pl or in the “Help” section in the web browser menu.