Privacy Policy - Luisa Cerano Boutique Bydgoszcz

PERSONAL DATA CONTROLLER

The controller of personal data is CONSYL SYLWIA STRONIAWSKA, with its registered office in Bydgoszcz (85-005), ul. Gdańska 83, VAT ID (NIP): 556 24 58 735, REGON: 363836390, hereinafter referred to as the Controller. The terms used in this Privacy Policy – Store and Customer are to be understood in accordance with the definitions set out in the Store Terms and Conditions. This privacy policy is for information purposes only and is not a source of obligations for the Customers of the Store.

PURPOSE AND SCOPE OF PERSONAL DATA COLLECTION

Personal data means any information about the Customer that makes it possible to identify them, for example first name and surname, contact details, order number, payment details and information about access to our website. The Customer's personal data is collected when they place an order, create an account, use our website or contact the Store's customer service.

In particular, information belonging to the following categories is collected:

– first name and surname, residential/business address, e-mail address, telephone number, delivery address (street, house number, flat number, postcode, town, country), the Customer's company name and tax identification number (NIP), bank account number required for refunds to an account, credit/debit card details or other payment details;

– information about the purchase of products;

– information about the use of our website;

– communication with the Customer by post, e-mail, social media and telephone;

The Customer's data may be used for the following purposes:

– ensuring performance of the contract for the sale of the products ordered by the Customer, in particular the operational handling of the order, the dispatch or delivery of the ordered products, the fulfilment of obligations arising from the statutory warranty and the guarantees granted, and the pursuit of receivables

– contacting the Customer where changes to the order are necessary, for example due to the unavailability of certain products;

– verification/checking of a credit card or other payment card: payment information is used for accounting and invoicing purposes and in order to detect and/or prevent any fraudulent activity;

– for administrative or legal purposes: the Customer's data may be used to respond to claims or complaints and to exercise other rights and obligations arising from applicable law;

– marketing purposes: from time to time the Customer may receive electronic information about promotions covering the products we offer for sale; the Customer has the right to accept or opt out of receiving such messages, and every electronic message we send will include the option to indicate that the user no longer wishes to receive direct marketing materials from us.

DISCLOSURE OF PERSONAL DATA

The Customer's personal data may be disclosed, for the purposes described in this Privacy Policy, to the following third parties, which have appropriate technical and organisational safeguards in place to protect the Customer's personal data in accordance with Polish and EU law:

– entities involved in performing the contract of sale, in order to perform it properly, e.g. Poczta Polska S.A. and courier companies such as DPD;

– companies handling payment transactions – in particular, this concerns the transfer of personal data to PayTel S.A. where payment is made using the on-line payment system; the transfer covers only the personal data necessary for PayTel S.A. to process the payment, as well as to verify the payment for any irregularities and to ensure the security of the transaction;

PERSONAL DATA PROTECTION RIGHTS

The Customer has the right to:

– information as to whether their personal information is stored and, if so, what information is stored and for what purpose we store/use it.

– access their personal information (a so-called „data subject access request”). This makes it possible to obtain a copy of the personal information we hold about the user and to check that we are processing it lawfully.

– rectification of the personal information we hold about the user. The user may complete any incomplete data or correct any inaccurate information concerning them that we hold.

– erasure of personal information. The user may request the deletion or removal of personal information where there are no grounds justifying its further processing. The user also has the right to ask us to delete or remove personal information where they have exercised the right to object to processing (see below).

– object to the processing of the user's personal information where we process it on the basis of our legitimate interest (or that of a third party) and, in the user's particular situation, there is any reason why they wish to object to processing on that basis. The user also has the right to object where we process their personal information for direct marketing purposes.

– Object to automated decision-making, including profiling, i.e. to object to automated decisions being made about the user using their personal information, or to object to being profiled.

– restriction of the processing of personal information. The user may request that the processing of personal information concerning them be suspended, for example where the user wants us to establish its accuracy or the reason for processing it.

– transfer of personal information in an electronic and structured form to the user or another person (the so-called right to „data portability”). This makes it possible to obtain data from us in a format that allows it to be used electronically, and to transfer the user's data to another person in a format that allows it to be used electronically.

– withdraw consent. In limited circumstances, where the user has consented to the collection, processing and transfer of personal information for a specific purpose, they have the right to withdraw consent to such processing at any time. As soon as we receive notice that consent has been withdrawn, we will stop processing the user's information for the purpose or purposes to which they originally consented, unless we have another legitimate ground for such processing.

DISCLOSURE OF PERSONAL DATA

– entities involved in performing the contract of sale, in order to perform it properly, e.g. Poczta Polska S.A. and courier companies;