Due to the suspension of Hoolay Barbara Szerszeń from 29.05.2018 from 13.00 there is no possibility to register new users in the Online Store at www.hoolay.pl, thus the Store Administrator does not collect personal data of new Users.
1. GENERAL PROVISIONS
1.2. Administrator of personal data of Store users within the meaning of art. 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC ("RODO" ) is Hoolay Barbara Szerszeń, address: Kornela Ujejskiego 27 05-820 Piastów, NIP: 7010009035, e-mail address: firstname.lastname@example.org, owner of the Store, hereinafter referred to as the "Administrator".
2. SCOPE OF COLLECTED DATA
2.1. The Administrator collects User's personal data in the scope required to execute orders placed via the Store, register in the Store or perform other services.
2.2. The scope of collected data includes: name and surname, e-mail address, telephone number, bank account number, PayPal user name, delivery address: street, postal code, city, country, as well as profile data from Facebook. The scope of data processed depends on the type of service chosen by the User.
3. DATA PROCESSING GOAL
3.1. The Administrator processes User's personal data only for the purpose of:
a. to allow the User to use the Store, which should be understood as the implementation of services provided in accordance with the Regulations, including in particular orders placed in the online store, providing contact with the User, issuing invoices and handling complaints;
b. register an account in the Administrator's online store, provide account servicing and transactions made by the User, including technical problems solving;
c. ensuring the security of services provided by the Administrator by electronic means, in particular in order to enforce compliance by the Users with the Regulations and to prevent and counter fraud and abuse;
d. performing duties resulting directly from applicable legal provisions;
e. statistical and archiving;
f. pursuing claims arising from the business activity conducted by the Administrator.
3.2. The Administrator processes Users' personal data only for the purposes indicated above. 3.3. Users' personal data will not be transferred to countries outside the European Economic Area (to countries other than European Union countries and Iceland, Norway and Liechtenstein).
3.4. Providing data is voluntary, but necessary in order for the Administrator to provide services via the Store.
4. LEGAL BASIS FOR PROCESSING OF PERSONAL DATA
4.1. The administrator processes Users' personal data based on the following provisions:
1. art. 6 par. 1 lit. a RODO - the data subject has consented to the processing of his personal data for one or more specific purposes;
2. art. 6 par. 1 lit. b RODO - processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject before concluding the contract;
3. art. 6 par. 1 lit. f RODO - processing is necessary for the purposes resulting from legitimate interests pursued by the Administrator.
5. USER AUTHORITY
5.1. Users' personal data are collected at the external server used by Administrator.
5.2. The User has the right to:
a. access to his personal data held by the Administrator;
b. request for correction of personal data if it believes that the personal data stored by the Administrator is out of date, incomplete or untrue;
c. requests to limit the processing of personal data;
d. request removal of personal data;
e. requesting copies of personal data;
f. to object to the processing of personal data in the cases specified in art. 21 RODO;
g. requesting the transfer of personal data to another personal data administrator, if technically possible;
h. withdrawal of consent at any time (without affecting the legality of the processing which was made on the basis of consent before its withdrawal),
5.3. Execution of rights referred to in point 5.2. above, the User may make by submitting to the Administrator the appropriate statement of will:
a. via e-mail to the following address: email@example.com;
b. via the account panel in the Store.
5.4. The User is also entitled to file a complaint to the supervisory body for personal data protection, ie the President of the Office for Personal Data Protection (PUODO).
5.5. The Administrator reserves the right to refuse to delete the User's data, if their behavior is necessary to implement claims or if required by applicable law.
6. COOKIES MECHANISM
6.1. The Store's website uses text files called Cookies.
6.2. Cookies are saved by the server on the User's computer.
6.3 In order to use the Website, it is necessary to allow Cookies to be stored on the User's computer. Lack of authorization may mean that there is no possibility or difficulty in using the Website.
6.4. Cookies are not used to collect your personal data.
6.5. Cookies do not change the User's computer configuration, they do not serve to install or uninstall any computer program, they do not interfere with the integrity of the User's system or data.
6.6. The Administrator reserves the right to use the services of third parties in the field of developing statistics on the use of the Website. The Administrator declares that in such a case, no data identifying Users will be made available to such entities.
6.7. The Website uses three types of cookies: "session" (session cookies), "fixed" (persistent cookies) and "analytical". Session cookies are temporary files that are stored on the User's end device until they log out (leave the page). Persistent cookies are stored on the User's device for the time specified in the cookie file parameters or until they are deleted by the User. "Analytical" cookies allow a better understanding of how the User interacts with the content of the Website's website. They collect information about the manner of using the website, the type of page from which the User was redirected, and the number of visits and time of the User's visit to the Store. This information does not record the User's specific personal data, but is used to develop statistics on the use of the Store's website.
6.8. In accordance with the applicable provisions of the Act of 16 July 2004 Telecommunications Law (ie, Journal of Laws of 2017, item 1907), the User has the right to decide on the access of cookies to his computer by selecting them in the window of his browser.
6.9. How to manage cookies - it is recommended to check the manufacturer's instructions for the browser used.
7. IP ADDRESS
7.1. The Administrator reserves the right to collect IP addresses visiting the Store website, which may be helpful in diagnosing technical problems with the server, creating statistical analyzes (eg determining which regions the most visits are listed on). In addition, they can be useful when administering and improving the Website.
8. ACCESS TO THE THIRD PARTIES DATABASE
8.1. The User's personal data will not be made available by the Administrator to other entities or to third parties, except when: a. User agrees; b. it is necessary for the purpose of providing services provided by the Administrator via the Website, i.e. the Users' personal data may be made available to entities such as Poczta Polska SA with headquarters in Warsaw, courier companies (DHL, DPD), payment operators (PayPal), etc. In this case, the Administrator provides only personal data that are necessary for the implementation of the abovementioned services. More information on the manner in which these entities use Users' personal data can be found in their privacy policies and cookies; c. it is necessary to detect and prevent fraud, as well as to solve other problems related to fraud, security and technical issues; d. this is required by applicable law or legitimate demand of state institutions and judicial authorities.
8.2. In addition, the Administrator may provide Users' personal data to entities which he has authorized or entrusted with the processing of personal data, i.e .: 1. providers of legal and advisory services in the event of the Administrator seeking claims related to business operations; 2. providers of technical and organizational services enabling the Administrator to provide services via the Store;
9. PERIOD OF STORING PERSONAL DATA
9.1. Users' personal data will be stored no longer than it will be necessary for the proper provision of services within the Shop, as well as for the period of limitation of civil claims of the Administrator towards the User.
10. SECURITY AND PROTECTION OF PERSONAL DATA
10.1. The Administrator declares that he processes Users' personal data in accordance with the requirements of the RODO and other applicable provisions on the protection of personal data that complement and / or implement the GDPR, including primarily that he applies technical and organizational measures to ensure data protection appropriate to the threats and categories of data covered protection, in particular, protects Users' personal data against making them available to unauthorized persons, loss or damage.
12. CONTACT WITH US