Privacy Policy

   Privacy Policy

   1. DETAILS OF THE CONTROLLER

1. The Controller of the personal data collected using the on-line form is Wiejak Sp. z o.o., a company entered into the register of entrepreneurs of the National Court Register kept by the District Court in Olsztyn, VIII Commercial Division, under KRS (National Court Register) no. 0000179215, REGON (National Business Registry Number) 511340750, NIP (Tax Identification Number) 9840125613.
2. The Data Controller can be contacted in writing, via traditional mail or electronic mail, as well as by telephone in the following way:
1. Address: 13-100 Nidzica, Litwinki 16;
2. Tel.: (0-89) 625-33-09;
3. E-mail: wiejak@wiejak.pl.
3. In accordance with the applicable regulations concerning the personal data protection, in particular with the content of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the GDPR), in order to provide the data subjects with appropriate protection of their personal data, the Controller hereby presents the information concerning the processed personal data.
4. The Controller shall make every effort to provide all measures of physical, technical and organisational protection of the personal data against their accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable provisions of law.

   2. PURPOSE OF, LEGAL BASIS FOR AND DURATION OF PERSONAL DATA PROCESSING

The personal data provided while filling in the form and placing an order are used:

1. In order to establish and execute a contractual relationship, i.e. to perform a contract for the sale of products and to deliver the products to the Customers, as well as to ensure the appropriate quality of the service – for the duration of the contract and while carrying out transactions after its completion, as well as for the duration of the limitation period for claims – Article 6(1)(b) of GDPR;
2. In order to fulfil legal obligations, e.g. issue and store invoices and accounting documents, respond to complaints within the time limit and in the form provided for by the law – while fulfilling the said obligations and for the document retention period prescribed by the law – Article 6(1)(c) of GDPR;
3. In order to establish, defend, and exercise claims – for the duration of the limitation period for claims arising from the contract – Article 9(2)(f) or GDPR;
4. For analytical and statistical purposes – for the duration of the Controller's business needs – based on the legitimate interests pursued by the Controller, i.e. the advertising of their own products – Article 6(1)(f) of GDPR (the detailed processing method has been described in Article 5);
5. For advertising purposes – for the duration of the Controller's business needs – based on the consent to receive marketing communications, information about the store, the product offer and portfolio – Article 6(1)(a) of GDPR. If you consent to the processing of your data, the content of your consent will specify the exact purpose for which your data will be processed.

3. SCOPE OF THE PROCESSED PERSONAL DATA

1. In order to perform the contract, the Controller requires the following personal data: identification details (first name, surname, NIP (Tax Identification Number), PESEL (Personal Identification Number), series and number of the ID card) and address details (e-mail address, street, place of residence, postal code). The failure to provide such data renders the order impossible to complete.
2. The Controller may additionally request that the Customer provide optional data (e.g. a contact telephone number), which does not affect the conclusion of the contract, but facilitates the communication with the Customer and thus influences the efficient processing and completion of the order.
3. The data is processed in accordance with the requirements of the applicable law and with the terms and conditions agreed upon in the contract.

4. TRANSFER OF DATA TO OTHER ENTITIES (DATA RECIPIENTS)

The data recipient is a natural or legal person, a public authority, an entity or any other body to whom the Controller discloses your personal data.

We transfer your data to:

1. The entities which process the data on behalf of the Controller and participate in the performance of the Controller's activities, i.e. in the process of providing services to the Customers (e.g. to subcontractors or suppliers)
2. The entities which operate our communication and information systems and provide us with communication and information tools;
3. The entities which provide accounting and tax services to the Controller;
4. The entities which provide advisory services/ legal assistance or auditing services to the Controller.

   5. COOKIES AND OPERATIONAL DATA<

1. Cookies are small pieces of textual information in the form of text files, sent by the server and saved on the device of the user who visits the website (e.g. on the hard drive of a desktop computer, a laptop or on a smartphone memory card – depending on the device you use to visit our website). The detailed information concerning the cookies and their origin is available at: http://pl.wikipedia.org/wiki/Ciasteczko.
2. This website uses the following types of cookies:
1. session cookies, which collect the information about the User's actions and exist only during the given session, which begins when the Website is opened and ends when it is closed,
2. persistent cookies, which are stored on the User's communication and information device (a computer, a telephone or another device of the User from which the User has accessed the Website) and remain there for a longer period of time after the web browser is closed.
3. While the visitors are using the website, the Controller processes the data contained in the cookies in order to:
1. increase the website loading speed,
2. enable certain features of the website,
3. collect (anonymous) statistical data, except for the personal identification details,
4. collect data for the purpose of displaying advertisements.
4. Normally, most web browsers available on the market accept cookies by default. You can define how the cookies are going to be used by modifying the settings of your web browser. This means that you can, for example, partially restrict (e.g. temporarily) or fully disable the storage of cookies on your computer; the latter, however, may affect some of the website's features (e.g. it may not be possible to go through the Order using the Order Form).
5. Your web browser’s settings concerning the cookies are important from the perspective of the consent to the use of those files by the Controller – pursuant to the provisions of law, such consent may also be given by way of your web browser's settings; as regards the explicit consent, you will be informed of the same on a case-by-case basis.
6. The detailed information on how to change the settings concerning the cookies and how to manually delete the cookies in the most popular web browsers can be found in the help section of each web browser. The most commonly used web browsers include: Mozilla, Firefox, Microsoft, Internet Explorer, Chrome, Opera.
7. The Controller also collects the operational data (the so-called logs – the IP address, the domain), which are stored for an indefinite period of time and used to generate statistics.  This type of data is aggregate and anonymous in nature, i.e. it does not contain any features which would allow the identification of the persons who visit the Online Store. The usernames are not disclosed to third parties.
8. The cookies used by the partners of the website operator are subject to their own privacy policies.

   6. RIGHTS OF THE DATA SUBJECT

1. The Controller ensures the following rights which can be exercised by submitting a request for:
1. Rectification (correction) of the data which is incorrect, in particular since it was collected with errors or since it has changed after it was collected. This right shall also apply to supplementing the missing data;
2. Deletion of the data which has been unduly processed or placed on our websites. You can exercise this right only if:
3. Your data is no longer necessary for the purposes for which it was collected, in particular if the period for which the Controller planned or was required to process the personal data has expired;
4. You have withdrawn your consent, on which the right to process your personal data was based, unless the Controller has another legal basis for the processing;
5. You have objected to the processing and there are no overriding legitimate bases for the same.

The Controller may refuse to comply with the request to delete the personal data in the cases provided for by law, in particular where further processing is necessary in order to fulfil a legal obligation which requires such data to be processed under the European Union or national law, in order to establish, exercise or defend a claim.

3. Restriction of processing (suspension of the operations on the data – according to the submitted request) when:
4. You question the correctness of your personal data – for a period which allows the Controller to verify the correctness of such data;
5. The processing is unlawful and you object to the deletion of your personal data, and demand instead that the processing (use) of your data be restricted;
6. The Controller does not need the data, but you require it in order to establish, exercise, and defend claims.
4. Access to the data (information about the data processed by us and a copy of such data), including a copy of the personal data subject to processing. The first copy shall be free of charge. The Controller may charge a reasonable fee for each subsequent copy you request from them, based on the administrative costs (postal charges, costs of photocopying, etc.);
5. Transfer of the data to another controller. In this case, you have the right to receive your personal data in a structured, commonly used and machine-readable format, and you have the right to send it to another controller;
6. The right to object to the processing of your data when such processing is based on the legitimate interests of the Controller. The Controller may no longer process the data unless they demonstrate that there are compelling, legitimate bases for the processing which override the interests, rights and freedoms of the data subject;
7. The right to withdraw your consent to the processing of your data at any time (if the processing was based on your consent). However, the withdrawal of your consent shall not affect the lawfulness of the processing carried out prior to the withdrawal.
2. You can exercise the rights specified in Paragraph 1 by submitting a request at the registered office of the Controller or by calling the number provided in Article 1 (Details of the Controller). The Controller may request additional information which allow the authentication of the person who exercises the rights in question. In order to verify whether you have the right to submit a request, we may ask for additional information which will enable us to authenticate you.
3. If the use of the received data by the Controller is not necessary in order to perform a contract or fulfil a legal obligation, or does not constitute a legitimate interest of the Controller, they may request your consent to a specific method of data processing. The consent can be withdrawn at any time (this will not affect the lawfulness of the use of the data prior to the withdrawal).
4. The data subject has the right to file a complaint with the President of the Office for Personal Data Protection if they believe that the processing of their data violates the law.