Privacy Policy

 

1.

This Privacy Policy sets out the principles for the processing of personal data obtained through the online shop www.produktynaturalne.pl (hereinafter: "Online Shop").

 

2.

The owner of the Internet Shop and, at the same time, the data controller is the company PRODUKTY NATURALNE BEREZIŃSCY spółka jawna with its registered office in Tuszynek Majoranckim (95-080 Tuszyn), ul. Starościańska 19A, NIP: 7710010939, REGON: 590066795, KRS: 0000707803, hereinafter referred to as NATURALIS.

  

3.

Personal data collected by NATURALIS through the Online Shop are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR.

 

4.

NATURALIS uses its best efforts to respect the privacy of  Customers visiting the Internet Shop.

§ 1 Type of data processed, purposes and legal basis

 

1.

NATURALIS collects information concerning natural persons performing a legal act not directly related to their activity, natural persons conducting business or professional activity on their own behalf and natural persons representing legal persons or organisational entities not being legal persons to which the Act grants legal capacity, conducting business or professional activity on their own behalf, hereinafter collectively referred to as  Customers.

 

2.

Customers' personal data is collected for the purpose of:

 

a)

account registration in the Online Shop, in order to create and manage an individual account. Legal basis: necessary for the performance of the contract for the provision of the Account service (Article 6(1)(b) GDPR);

 

b)

placing an order in the Online Shop, in order to perform the Sales Agreement. Legal basis: necessary for the performance of the Sales Agreement (Article 6(1)(b) of the GDPR);

 

c)

subscription to the newsletter (Newsletter), for the purpose of performance of a contract the subject of which is a service provided electronically. Legal basis - consent of the data subject to the performance of the Newsletter service agreement (Article 6(1)(a) GDPR).

 

3.

In the case of account registration in the Online Shop, a Customer shall provide:

 

a)

e-mail address.

 

4.

During account registration in the Online Shop, a Customer sets an individual password to access his or her account. A Customer may change the password at a later time, according to the Regulations described in §5.

 

5.

When placing an order in the Online Shop, a Customer provides the following data:

 

a)

e-mail address;

 

b)

address details:

 

a.

postal code and town;

 

b.

country (state);

 

c.

street with the house/flat number.

 

c)

full name;

 

d)

telephone number.

 

6.

In the case of Entrepreneurs, the above scope of data is further extended to include:

 

a)

name of company of the Entrepreneur;

 

b)

NIP number.

 

7.

In the case of using the Newsletter service, a Customer only provides his/her e-mail address.

 

8.

When using the Shop's Website, additional information may be collected, in particular: the IP address assigned to a Customer's computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type.

 

9.

Navigation data may also be collected from Customers, including information about links and references they choose to click on or other actions taken in our Online Shop. Legal basis - legitimate interest (Article 6(1)(f) GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services.

 

10.

In order to establish, assert and enforce claims, certain personal data provided by a Customer as part of the use of the functionality in the Online Shop may be processed, such as: name, surname, data on the use of services if the claims arise from the way a Customer uses the services, other data necessary to prove the existence of the claim, including the extent of the damage suffered. Legal basis - legitimate interest (Article 6(1)(f) of the GDPR), consisting of the establishment, investigation and enforcement of claims and the defence against claims in proceedings before courts and other state bodies.

 

11.

Providing personal data to NATURALIS is voluntary in relation to the Sales Agreements concluded or services provided via the Shop's Website, with the reservation, however, that failing to provide the data specified in the forms during the Registration process prevents the Registration and setting up a Customer Account, and in the case of placing an order without registering a Customer Account, it prevents placing and fulfilling a Customer's order.

§ 2 To whom is the data shared or entrusted and how long is it stored?

 

1.

The personal data of a Customer shall be transferred to service providers used by NATURALIS to operate the Online Shop. Service providers to whom personal data are transferred, depending on contractual arrangements and circumstances, are either subject to NATURALIS' instructions regarding the purposes and means of processing these data (processors) or they themselves determine the purposes and means of processing (controllers).

 

a)

Personal data processing entity. NATURALIS uses suppliers who process personal data exclusively at the direction of NATURALIS. These include, but are not limited to, providers of hosting services, accounting services, providers of marketing systems, systems for analysing traffic on the Online Shop, systems for analysing the effectiveness of marketing campaigns;

 

b)

Controllers. NATURALIS uses Sellers who do not act solely on instruction and who themselves determine the purposes and uses of Customers' personal data. They provide electronic payment and banking services.

 

2.

Location. The Service Providers are primarily based in Poland and other European Economic Area (EEA) countries.

 

3.

Customers' personal data is stored:

 

a)

If the basis for the processing of personal data is consent, then a Customer's personal data are processed by NATURALIS as long as the consent has not been revoked, and after revoking the consent for a period of time corresponding to the period of limitation of claims that NATURALIS may raise and that may be raised against it. Unless otherwise provided by special law, the limitation period shall be six years, and for claims for periodic benefits and claims related to the conduct of business activities - three years.

 

b)

If the basis for data processing is the execution of an agreement, then a Customer's personal data are processed by NATURALIS as long as it is necessary for the execution of the agreement, and after that time for the period corresponding to the period of limitation of claims. Unless otherwise stipulated by a specific provision, the limitation period is six years, and for claims for periodic benefits and claims related to the conduct of business activities - three years.

 

4.

If you make a purchase in the Shop, your personal data may be transferred to R2G Polska Sp. z o.o. with its registered seat in Warsaw and the contracted courier companies, in order to deliver the ordered goods.

 

5.

If a Customer chooses to pay via the Shoper PAYMENTS system, his/her personal data are transferred to the extent necessary for the execution of payment to Dreamcommerce S.A. with its registered seat in Kraków (31-280), at ul. Władysława Łokietka 79, entered into the register of entrepreneurs kept by the District Court for Kraków Śródmieście in Kraków, XI Commercial Division of the National Court Register under KRS number 0000395171.

 

6.

Navigation data may be used to provide better service to Customers, to analyse statistical data and to adapt the Internet Shop to Customers' preferences, as well as to administer the Internet Shop.

 

7.

In the event that a Customer subscribes to the newsletter (Newsletter), NATURALIS will send electronic messages containing commercial information about promotions and new products available at the Online Shop to a Customer's email address.

 

8.

If requested, NATURALIS shall make personal data available to authorised state authorities, in particular to organisational units of the Prosecutor's Office, the Police, the President of the Office for Personal Data Protection, the President of the Office for Competition and Consumer Protection or the President of the Office of Electronic Communications.

§ 3 Cookie mechanism, IP address

 

1.

The Internet Shop uses small files called cookies. They are saved by NATURALIS on the end device of the person visiting the Online Shop if the Internet browser allows it. A cookie file usually contains the name of the domain it came from, its "expiry time" and an individual, random number identifying the file. Information collected by means of such files helps to adjust products offered by NATURALIS to individual preferences and real needs of visitors to the Online Shop. They also make it possible to prepare general statistics of visits to the presented products in the Online Shop.

 

2.

NATURALIS uses two types of cookies:

 

a)

Session cookies: once the browser session ends or the computer is switched off, the saved information is deleted from the device memory. The mechanism of session cookies does not allow collecting any personal data or any confidential information from Customers' computers.

 

b)

Persistent cookies: are Shopd in the memory of a Customer's terminal equipment and remain there until they are deleted or expire. The mechanism of persistant cookies does not allow collecting any personal data or any confidential information from a Customers' computer.

 

3.

NATURALIS uses its own cookies in order to:

 

a)

authenticate a Customer in the Internet Shop and ensure a Customer session in the Internet Shop (after logging in), thanks to which a Customer does not have to re-enter the login and password on each sub-page of the Internet Shop;

 

b)

analyze and research, as well as audience audits, and in particular to create anonymous statistics which help to understand how Customers use the Shop's Website, which makes it possible to improve its structure and content.

 

4.

The cookie mechanism is safe for the computers of Customers of the Internet Shop. In particular, this way it is not possible for viruses or other unwanted software or malware to get into Customers' computers. Nevertheless, Customers have the possibility to limit or disable access of cookies to their computers in their browsers. If this option is used, the use of the Internet Shop shall be possible, except for functions which by their nature require cookies.

 

5.

Below we show you how to change the settings of popular web browsers regarding the use of cookies:

 

a)

Internet Explorer browser;

 

b)

Microsoft EDGE browser;

 

c)

MozillaFirefox browser;

 

d)

Chrome browser;

 

e)

Safari browser;

 

f)

Opera browser.

 

6.

NATURALIS may collect Customers' IP addresses. IP address is a number assigned to the computer of the person visiting the Online Shop by the Internet Service Provider. The IP number allows access to the Internet. In most cases, it is assigned to the computer dynamically, i.e. it changes with each Internet connection. IP address is used by NATURALIS to diagnose technical problems with the server, create statistical analyses (e.g. to determine which regions are visited the most), as useful information for administration and improvement of the Internet Shop as well as for security purposes and possible identification of server-overloading, unwanted automatic programs for browsing the Internet Shop content.

 

7.

The Internet Shop contains links and references to other websites. NATURALIS shall not be liable for the Privacy Protection Policy applicable there.

§ 4 Data subjects' rights

 

1.

Right to withdraw consent - legal basis: Article 7(3) of the GDPR.

 

a)

A Customer has the right to withdraw any consent it has given to NATURALIS.

 

b)

Withdrawal of consent shall take effect from the time of withdrawal.

 

c)

Withdrawal of consent shall not affect the processing carried out by NATURALIS in accordance with the law before its withdrawal.

 

d)

Withdrawal of consent does not entail any negative consequences for a Customer, however, it may prevent further use of services or features that, according to the law, NATURALIS can only provide with consent.

 

2.

Right to object to data processing - legal basis: article 21 of the GDPR.

 

a)

A Customer shall have the right to object at any time - for reasons related to his/her particular situation - to the processing of his/her personal data, including profiling, if NATURALIS processes his/her data on the basis of legally justified interests, e.g. marketing NATURALIS products and services, keeping statistics on the use of particular features of the Online Shop and facilitating the use of the Online Shop, as well as satisfaction surveys.

 

b)

Opting out in the form of an email from receiving marketing communications about products or services will imply a Customer's objection to the processing of their personal data, including profiling for these purposes.

 

c)

If a Customer's objection proves to be legitimate and NATURALIS has no other legal basis for processing personal data, a Customer's personal data will be deleted, the processing of which a Customer has objected to.

 

3.

Right to delete ("right to be forgotten") - legal basis: article 17 of the GDPR.

 

a)

A Customer has the right to request the deletion of all or some personal data.

 

b)

A Customer has the right to request the deletion of personal data if:

 

a.

personal data are no longer necessary for the purposes for which they were collected or for which they were processed;

 

b.

he/she has withdrawn specific consent, to the extent that personal data were processed on the basis of his or her consent;

 

c.

he/she has objected to the use of your data for marketing purposes;

 

d.

personal data are processed unlawfully;

 

e.

personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State to which NATURALIS is subject;

 

f.

personal data was collected in connection with the offering of information society services.

 

c)

Despite the request to delete personal data, in connection with filing an objection or withdrawing consent, NATURALIS may retain certain personal data to the extent that the processing is necessary to establish, assert or defend claims, as well as to comply with a legal obligation requiring processing under EU law or the law of a Member State to which NATURALIS is subject. This applies in particular to personal data including: name, surname, e-mail address, which data shall be retained for the purpose of handling complaints and claims related to the use of NATURALIS services or, additionally, home address/correspondence address, order number, which data shall be retained for the purpose of handling complaints and claims related to the concluded Sales Agreements or provision of services.

 

4.

Right to restrict data processing - legal basis: article 18 of the GDPR.

 

a)

A Customer has the right to request the restriction of the processing of his/her personal data. Submitting the request, until it is considered, prevents the use of certain functionalities or services, the use of which will be connected to the processing of the data covered by the request. NATURALIS will also not send any messages, including marketing messages.

 

b)

A Customer has the right to request the restriction of the use of personal data in the following cases:

 

a.

if he/she questions the correctness of their personal data - then NATURALIS restricts their use for the time needed to check the correctness of the data, but for no longer than 7 days;

 

b.

when the processing is unlawful and instead of erasing the data, a Customer requests the restriction of its use;

 

c.

when the personal data are no longer necessary for the purposes for which they were collected or used, but are needed by a Customer to establish, assert or defend a claim;

 

d.

when he/she raised an objection to the use of his/her data - then the restriction is made for the time needed to consider whether, due to the particular situation, the protection of a Customer's interests, rights and freedoms outweighs the interests pursued by the Controller while processing a Customer's personal data.

 

5.

Right of access to data - legal basis: article 15 GDPR.

 

a)

A Customer has the right to obtain confirmation from the Controller as to whether it is processing personal data, and if this is the case, a Customer has the right:

 

a.

gain access to his/her personal data;

 

b.

obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data, the planned period for which a Customer's data are to be stored or the criteria for determining this period (when it is not possible to determine the planned period of data processing), a Customer's rights under GDPR and the right to lodge a complaint to the supervisory authority, the source of such data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;

 

c.

obtain a copy of his/her personal data.

 

6.

Right to rectification of data - legal basis: article 16 GDPR.

 

a)

A Customer has the right to request the Controller to promptly rectify personal data concerning him or her that is inaccurate. Taking into account the purposes of the processing, a Customer to whom the data pertains has the right to request the completion of incomplete personal data, including by providing an additional declaration, by addressing the request to the e-mail address in accordance with §6 of the Privacy Policy.

 

7.

Right to data portability - legal basis: article 20 GDPR.

 

a)

A Customer has the right to receive his/her personal data that he/she has provided to the Controller and then send it to another personal data controller of his/her choice. A Customer also has the right to request that the personal data be sent by the Controller directly to such a controller, if technically possible. In this case, the Controller will send a Customer's personal data in the form of a file in csv format, which is a commonly used, machine-readable format that allows for the transmission of the received data to another personal data controller.

 

8.

In the event that a Customer makes a request based on the above rights, NATURALIS shall either fulfill the request immediately or refuse to do so no later than within one month after receiving the request. However, if - due to the complexity of the request or the number of requests - NATURALIS will not be able to fulfill the request within one month, it shall fulfill the request within the following two months informing a Customer in advance - within one month of receiving the request - about the intended extension of the deadline and the reasons for it.

 

9.

A Customer may lodge complaints, queries and requests to the Controller regarding the processing of his/her personal data and the exercise of his/her rights.

 

10.

A Customer has the right to request NATURALIS to provide a copy of the standard contractual clauses by directing a request as indicated in §6 of the Privacy Policy.

 

11.

A Customer shall have the right to lodge a complaint with the President of the Office for Personal Data Protection regarding infringement of its data protection rights or other rights granted under the GDPR.

§ 5 Security management - Password

 

1.

NATURALIS provides a Customers with a secure and encrypted connection when sending personal data and when logging into a Customer's Account on the Website. NATURALIS uses the SSL certificate issued by one of the world's leading companies in the field of security and encryption of data transmitted over the Internet.

 

2.

In the event that a Customer with an account in the Online Shop has lost the access password in any way, the Online Shop shall make it possible to generate a new password. NATURALIS does not send password reminders. The password is stored in an encrypted form in a way that makes it impossible to read. In order to generate a new password, the e-mail address shall be provided in the form available under the link "You have forgotten your password" given at the log-in form to the account in the Online Shop. A Customer shall receive an e-mail message to the e-mail address provided during registration or saved in the last change of the account profile, containing a redirection to a dedicated form made available on the Shop's Website, where a Customer shall have the opportunity to set a new password.

 

3.

NATURALIS never sends any correspondence, including electronic correspondence, asking for login details, especially the password to access a Customer's account.

§ 6 Changes to the Privacy Policy

 

1.

The Privacy Policy is subject to change, about which NATURALIS will inform a Customers 7 days in advance.

 

2.

For questions related to the Privacy Policy, please contact: naturalis@produktynaturalne.pl

 

3.

Date of last revision: 08.06.2020

up
Shop is in view mode
View full version of the site
Sklep internetowy Shoper.pl