NadenafPatterns

PRIVACY POLICY
Table of Contents:
§ 1 General Provisions
§ 2 Personal data administrator
§ 3 Contact details
§ 4 Principles of personal data processing
§ 5 Purposes and legal basis of personal data processing
§ 6 Data storage period
§ 7 Categories of personal data
§ 8 Cookies
§ 9 Data sharing
§ 10 Rights of Customers

§ 1 General Provisions

This Privacy Policy sets out the principles for the processing and protection of personal data of Customers using the online store available at www.nadenafpatterns.etsy.com (hereinafter referred to as the Online Store).
This privacy policy fulfills the information obligation incumbent on the Administrator pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the GDPR).
§ 2 Personal data administrator

The administrator of the personal data of the Customers of the Online Store is Dorota Kurczyńska, conducting business under the name Starter Dorota Kurczyńska with its registered seat in Pogórze (81-198 Pogórze), address: ul. Sobieskiego 2A, NIP: 5861042474, REGON: 190954309 (hereinafter referred to as the Administrator).

§ 3 Contact details

The Administrator can be contacted by e-mail: nadenaf.patterns@gmail.com or in writing to the address ul. Sobieskiego 2A 81-198 Pogórze.

§ 4 Principles of personal data processing

The Administrator processes Customers' personal data in accordance with the provisions of GDPR.
The Administrator shall apply the technical and organizational measures required by the provisions of the European Union law which ensure the protection of the processed personal data and protect them against unauthorized access, takeover by unauthorized persons, processing in violation of the provisions of the law, and against change, loss or destruction.
The Administrator declares that providing data marked as required in the Online Store is voluntary, but necessary to use the functionality, including placing and processing an order.
§ 5 Purposes and legal basis of personal data processing

Customers' personal data is processed on the basis of consent, which the Customer has the right to withdraw at any time. Providing personal and contact data is voluntary, but necessary to place and complete an order in the Online Store.
Customers' personal data will be processed for the following purposes:
Processing of orders in the Online Store (Article 6(1)(b) of the GDPR),
Direct marketing of the Administrator's own services and products which are a legitimate interest of the Administrator (Article 6(1)(f) of the GDPR),
archival (evidential) in case of a legal need to indicate facts, which is a legitimate interest of the Administrator (Article 6(1)(f) GDPR),
possible establishment, investigation or defense against claims, being the realization of the Administrator's legitimate interest (Article 6(1)(f) GDPR).
The Customers' personal data will not be subject to profiling.
§ 6 Personal data storage period

Customers’ data will be stored for the following period:
data related to the execution of orders - for 5 years from the end of the year in which the sale took place, unless their further storage is justified by the statute of limitations for claims,
data related to marketing activities - until the moment of raising an objection,
archival purposes - for the period necessary to fulfill this purpose,
for the purpose of determining, investigating or defending against claims - for the period necessary to achieve this purpose.
§ 7 Categories of personal data

The Administrator collects, processes and stores the following Customers’ data:
During the use of the Online Store, the Administrator collects and gathers automatically information such as IP address, request URL, device identifier, amount of time spent on individual pages, browser type, browser language, date and time of use, screen resolution, operating system type and version, and other such information.
in connection with placing an order: e-mail address, name and surname, address, telephone, and in the case of entrepreneurs also Tax Identification Number and company name;
in the remaining scope, the Administrator processes data necessary for the realization of the given purpose.
§ 8 Cookies

The Internet store uses small files, called cookies. They are saved on the end device of the person visiting the Online Store, if the Internet browser allows it.
Cookies are IT data, in particular text files, which are stored on the Customer's end device and are intended for use by the Online Store. Cookies usually contain the name of the website they come from, the time of storage on the end device and a unique number.
Cookies are used for the following purposes:
Web browsers usually allow the storage of cookies on the Customer's end device by default. Customers can change their settings in this regard. Internet browsers allow to delete stored cookies, as well as to block them automatically. For details, please refer to the help or documentation of your web browser.
recognizing the device used by the Customer in order to properly display the content of the Website,
creating statistics that help to understand how customers use websites, which enables improving their structure and content,
adjusting the content and functioning of the Online Store by matching an anonymous, randomly generated tracking ID, which makes it possible, among other things, to find out where the Customer comes from, which search engine they used, which link they clicked on, which keywords they typed in, and at what point they stopped using the Online Store.
§ 9 Data sharing

Customers' personal data may be transferred to entities to which the Administrator entrusts the processing of personal data on the basis of contracts, and to entities entitled to obtain personal data on the basis of legal regulations.
In order to execute the agreement concluded through the Online Store and to ensure proper functioning of the Store, the Administrator shall make available the Customers' personal data, in particular to entities providing the following services:
postal,
electronic payments,
accounting,
hosting,
marketing for the operation of the Online Store.
Third Customers' personal data will not be transferred to countries outside the European Economic Area, which consists of the European Union countries and Iceland, Norway and Liechtenstein.
§ 10 Rights of Customers

The Customer has the right to access their data and the right to demand its rectification, erasure or restriction of processing. To the extent that the basis for the processing of personal data is the premise of the legitimate interest of the Administrator, the Customer has the right to object to the processing of their personal data.
To the extent that the basis for the processing of the Customer's personal data is consent, the Customer has the right to withdraw consent at any time. Withdrawal of consent does not affect the legality of processing, which was performed on the basis of consent before its withdrawal.
To the extent that the Customer's data is processed for the purpose of concluding and performing the Agreement or processed on the basis of consent, the Customer also has the right to data portability, i.e. to receive personal data from the Administrator in a structured, commonly used machine-readable format. The Customer may send this data to another data Administrator.
The Customer also has the right to lodge a complaint to the supervisory authority in charge of personal data protection - the President of the Office for Personal Data Protection, in case the processing of personal data violates the provisions on personal data protection (GDPR).