1.1. The administrator of personal data - in short PDA, persons using the Online Store https://ostrovit.com, including Buyers and Users, is Robert Szulborski (Fitness Trading Agent owner Robert Szulborski) available at Gołębie-Leśniewo 11 07-305 Andrzejewo).
1.2. The administrator processes personal data in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter referred to as "GDPR").
2. Data collected
The collected personal data includes: name and surname, name (company), tax identification number, business address, delivery address, telephone number, e-mail, credit card information, bank account number, username and password, IP address of the computer from which the registration was made or an order has been placed. Personal data is collected at the User's registration, filling in the Order form, the subscription form for the newsletter, during communication with the data subject. The store also retains the Buyer's purchase history.
3. Data Processing purposes
The data will be processed in order to:
3.1. Provision of the Account service - for the period of keeping the Account for the Buyer, until the liquidation of the Buyer's Account at the Buyer's request - pursuant to art. 6 par. 1 lit. b) GDPR;
3.2. Conclusion and implementation of Contracts for the sale of products via the Online Store - pending completion of the contract - pursuant to art. 6 par. 1 lit. b) and art. 9 par. 2 lit. h) GDPR;
3.3. Implementation by the Administrator of its legal obligations, in particular resulting from the provisions of the tax law - for a period of 5 years, counting from the end of the calendar year in which the payment deadline for due tax was concluded in connection with the conclusion and implementation of the product sale agreement via the Online Store, or longer if required by law - pursuant to art. 6 par. 1 lit. c) and art. 9 par. 2 lit. h) GDPR;
3.4. determine, investigate or defend against claims that the Administrator or the Buyer may have in relation to each other (including data contained in the User's Account, data on contracts for the sale of products via the Online Store - pursuant to Article 6 (1) letter f) and Article 9 par. 2 lit. h) GDPR - during periods of limitation of claims, specified in legal provisions;
3.6. Sending a newsletter with information content regarding health care, products offered by the Administrator - until withdrawal of consent - pursuant to art. 6 par. 1 lit. a) GDPR;
3.7. Display of personalized ads on the Online Store website, including understanding of the purchasing processes and links between products, based on the purchase history, products in the customer's basket and the history of the products viewed - up to the objection - pursuant to art. 6 par. 1 lit. f) GDPR;
4. Voluntary data provision, consent to processing
4.1. Providing the data is voluntary. In the scope indicated in the Regulations, providing data is necessary for the purpose of Registration or submission and implementation of the Order.
4.2. The Buyer may provide his personal data without consenting to their processing in order to receive the newsletter.
4.3 If the User consents to the processing of the Buyer's data for the above purposes, the Buyer may withdraw this consent at any time by contacting the Customer Service Department at email@example.com tel .: (+48) 669094455. You may withdraw your consent to receive the newsletter also by clicking on the appropriate link, placed in each newsletter. Withdrawal of consent shall not affect the lawfulness of the processing which has been carried out on the basis of consent prior to its withdrawal.
5. Rights related to the processing of personal data
5.1. Anyone whose personal data is processed has the right to access personal data relating to him, rectification, deletion or the right to object to the processing (if it is possible under the law), processing restrictions, as well as the right to data transfer. The person whose data is processed also has the right to file a complaint with the data protection authority.
5.2. Contact with the Personal Data Administrator or a person authorized by him is possible at the following address: firstname.lastname@example.org
5.3. The foreseen recipients of personal data are the entities which the Administrator entrusts data processing, in order to implement the Sales Agreement, and to service the business of the company / Seller:
- providing technical infrastructure used to run the Online Store (IAI S.A. with its registered office in Szczecin, Aleja Piastów 30, 71-064 Szczecin, as the operator of the IdoSell Shop software);
- Optima ERP servicing software - warehouse and accounting service for the Seller's company (DAMCOM GRUPA Sp. zo.o. with headquarters in Warsaw, Nowogrodzka 31 00-511 Warsaw - as a partner of Comarch).
- logistics service providers - mail order sales (INPOST PACZKOMATY (Parcel locker) Sp. z oo with its registered office in Krakow, Wielicka 28, 30-552 Kraków) and (DPD Polska sp. z oo with its registered office in Warsaw, 15-15 Mineralna St. 274 Warsaw).
- the entity to which the Administrator commissioned accounting and advisory services (Kancelaria Podatkowa Saldo S.A. with registered office in Ostrów Mazowiecka, Dubois 1/25, 07-300 Ostrów Mazowiecka).
- the entity to which the Administrator commissioned the service of sending an e-mail (GetResponse Sp. o.o. with the registered office in Gdańsk, Arkońska 6, A3 80-387 Gdańsk)
5.4. PDA may refuse to delete Data if there are any premises resulting from legal provisions.
6. Data Protection
6.1. PDA applies appropriate technical and organizational measures to ensure the protection of data being processed, and in particular, protects data from being disclosed to unauthorized persons, processing in violation of the law and change, loss, damage or destruction.
6.2. Only the persons authorized by PDA are allowed to process the Buyer's data within the organization.
7. Other provisions
7.1. The data may be made available to entities authorized to receive it under applicable law, including the competent judicial authorities. The administrator transfers collected personal data to state administration bodies, law enforcement authorities and judicial authorities at their express request and only in cases specified by law.
7.2. The seller is a participant in the "Trusted Reviews" program as part of the service provided by Ceneo Sp. z o.o. with registered office in Poznań (60-166), ul. Grunwaldzka 182, entered into the register of entrepreneurs kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań, 8th Commercial Department of the National Court Register under KRS number: 0000493884, tax identification number: 7792420393, and participant of the "Credible Reviews" program provided by Opineo Sp. z o.o. with headquarters in Wrocław (53-333), ul. Powstańców Śląskich 2-4, entered into the Register of Entrepreneurs kept by the District Court for Wrocław-Fabryczna in Wrocław, VI Commercial Division of the National Court Register, under KRS number: 0000357466, NIP: 8971762604, consisting of sending via e-mail by Ceneo Sp. z o.o. and Opineo Sp. z o.o. - after obtaining the consent of the Buyer - surveys to obtain from the Buyer opinions on the transaction and the product purchased, as well as posting on the site available in the domain Ceneo.pl and Opineo.pl opinions expressed by Buyers as a result of receiving surveys.
7.3. The Buyer making the purchase in the Online Store may voluntarily agree to the transfer of his personal data, including e-mail address, to Ceneo Sp. z o.o. and Opineo Sp. z o.o. and for processing by Ceneo Sp. z o.o. and Opineo Sp. z o.o. his personal data - only to complete the questionnaire referred to in paragraph 7.2.