General provisions
- This document constitutes an information clause in accordance with Article 13 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter RODO) for persons (Customers) using the services of the data controller.
- The administrator of the personal data within the meaning of Article 4 point 4 of RODO is Katarzyna Koczdańska-Szymańska performing business activity under the name Ksis Katarzyna Koczdańska-Szymańska at the address 03-286 Warsaw, 14d Malborska St., premises 19, NIP: 1181687017, REGON: 145957895; e-mail address: showroom@ksis.pl.
- The controller pursuant to Article 32(1) of the RODO shall observe the principle of personal data protection and shall use appropriate technical and organizational measures to prevent accidental or unlawful destruction, loss, modification, unauthorized disclosure of or unauthorized access to personal data processed in connection with its operations.
- Provision of personal data by the customer is voluntary, but it is a condition for the conclusion of a contract, the subject of which is the services provided by the administrator or the products offered by it. The customer is obliged to provide personal data, and the consequence of failure to provide data is the inability to use the administrator’s offer. ACTIVITY.
Purpose and basis of personal data processing
- The Administrator processes personal data for the following purposes:we w następujących celach:
(a) the conclusion and performance of contracts the subject of which are services or products offered by the data controller in its online store;
(b) provision by electronic means of services available on the controller’s website, including enabling the placement of orders through forms available on the website and maintaining the customer account of the online store;
c) sending marketing information regarding the controller’s product or service offerings;
(d) responding to inquiries addressed to the data controller using the contact form available on its website.kontaktu dostępnego na jego stronach internetowych.
- The basis for processing personal data is:
(a) taking action to conclude and perform a contract (Article 6(1)(b) RODO) for the purposes mentioned in paragraph 1(a)-(b);
(b) the legitimate interest of the controller, and in addition the consent of the data subject if required by applicable law (Article 6(1)(a) and (f) RODO) for the purpose referred to in paragraph 1(c);
(c) legitimate interest of the data controller (Article 6(1)(f) of the DPA) for the purpose referred to in paragraph 1(d).
Recipients of data. Transfer of data to third countries
- Recipients of the personal data processed by the controller may be entities that act as intermediaries in supplying or making deliveries to persons purchasing the controller’s products and electronic payment operators.
- The data controller may transfer personal data by means of a contract of entrustment of personal data processing to entities performing on his behalf and for his benefit some of the tasks related to the processing of personal data, among others: accounting offices, law firms, providers of hosting services.
- Personal data will not be transferred to entities based outside the European Economic Area.
Period of storage of personal data
The data controller shall keep personal data for a period of time related to the term of the contract, the performance of which is related to the processing of data, and in the event of termination of the contract no longer than:y nie dłużej niż:
The data controller shall keep personal data for a period of time related to the term of the contract, the performance of which is related to the processing of data, and in the event of termination of the contract no longer than:
b) for a period of 5 years for personal data on billing documents (invoices) in accordance with the Accounting Act;
(c) until you withdraw your consent to process your personal data.
Rights of the data subject
- Each person whose personal data is processed by the controller has the right to access the content of his or her data, the right to rectification, erasure (“right to be forgotten”), restriction of processing, the right to data portability, the right to object, and the right to withdraw consent to data processing at any time.
- Any person who believes that his or her personal data is being processed by the controller in violation of the provisions of RODO has the right to lodge a complaint with the President of the Office for Personal Data Protection.
Profiling
Personal data obtained by the controller may be processed by automated means – including profiling. The profiling of personal data carried out by the controller consists of evaluating selected information about the data subject for the purpose of analyzing and forecasting personal preferences and interests, in particular for the possibility of providing the data subject with a personalized offer.
Automated processing carried out by the data controller does not produce any legal consequences for the data subject. The data subject may object to the automated processing of his or her data at any time.