Shop By Categories

Legal Notice

PRIVACY POLICY OF THE ONLINE STORE

WWW.CARKEYSWYSOCKI.COM

§ 1

GENERAL PROVISIONS

  1. The Administrator of personal data collected via the Online Store www.carkeyswysocki.com is the company PAWEŁ WYSOCKI CAR KEYS WYSOCKI with its registered office in Prudnik, postal code: 44-200, ul. Piastowska 28-30, NIP: 7551913697, REGON: 161601795, e-mail address: biuro@carkeyswysocki.com, hereinafter referred to as the “Administrator” and also the “Service Provider”.
  2. Personal data collected by the Administrator via the website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR.
  3. All terms or expressions written with a capital letter in this Privacy Policy shall be understood in accordance with their definition contained in the Terms and Conditions of the Online Store www.carkeyswysocki.com.

§ 2

TYPES OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION

  1. PURPOSE OF PROCESSING AND LEGAL BASIS. The Administrator processes the personal data of the Service Users of the Store www.carkeyswysocki.com in the following cases:
    • registration of an Account in the Store, in order to create an individual account and manage it, on the basis of Art. 6(1)(b) GDPR (performance of the contract for the provision of electronic services in accordance with the Terms and Conditions of the Store),
    • placing an order in the Store, in order to perform the sales contract, on the basis of Art. 6(1)(b) GDPR (performance of the sales contract),
    • subscription to the Newsletter for the purpose of sending commercial information electronically. Personal data is processed after separate consent has been given, on the basis of Art. 6(1)(a) GDPR.

2. TYPES OF PERSONAL DATA PROCESSED. The Service User provides, in the case of:

  1. Account: first name and last name, login, address, e-mail address.
  2. Order: first name and last name, address, VAT number, e-mail address, telephone number.
  3. Newsletter: first name and last name, e-mail address.
  4. STORAGE PERIOD OF PERSONAL DATA. Personal data of Service Users is stored by the Administrator:
    • in the case where the legal basis for processing is the performance of a contract – for as long as necessary to perform the contract, and thereafter for a period corresponding to the statute of limitations for claims. Unless otherwise provided by specific provisions, the limitation period is six years, and three years for periodic claims and claims related to business activity.
    • in the case where the legal basis for processing is consent – until the consent is withdrawn, and after withdrawal for a period corresponding to the statute of limitations for claims that the Administrator may raise and that may be raised against him. Unless otherwise provided by specific provisions, the limitation period is six years, and three years for periodic claims and claims related to business activity.
    • During the use of the Store, additional information may be collected, in particular: the IP address assigned to the Service User's computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type.
    • After giving separate consent, on the basis of Art. 6(1)(a) GDPR, data may also be processed for the purpose of sending commercial information electronically or making telephone calls for direct marketing purposes – respectively in connection with Art. 10(2) of the Act of 18 July 2002 on the provision of electronic services or Art. 172(1) of the Act of 16 July 2004 – Telecommunications Law, including targeted profiling, provided that the Service User has given appropriate consent.
    • Navigation data may also be collected from Service Users, including information about links and references clicked on, or other activities undertaken in the Store. The legal basis for such activities is the legitimate interest of the Administrator (Art. 6(1)(f) GDPR), consisting in facilitating the use of services provided electronically and improving their functionality.
    • The provision of personal data by the Service User is voluntary.
    • The Administrator exercises special diligence to protect the interests of the persons whose data is concerned, and in particular ensures that the collected data is:
    • processed lawfully,
    • collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes,
    • factually correct and adequate in relation to the purposes for which they are processed, and stored in a form that permits identification of the persons concerned for no longer than is necessary to achieve the purpose of processing.

§ 3

DISCLOSURE OF PERSONAL DATA

  1. Personal data of Service Users is transferred to service providers used by the Administrator in running the Store, in particular to:
    • entities delivering Products,
    • payment system providers,
    • accounting office,
    • hosting provider,
    • software providers enabling business operations,
    • mailing system providers,
    • software providers necessary to run the online store.
  2. The service providers referred to in point 1 of this paragraph, to whom personal data is transferred, depending on contractual arrangements and circumstances, either act on the instructions of the Administrator as to the purposes and means of processing such data (processors) or determine independently the purposes and means of their processing (controllers).
  3. Personal data of Service Users is stored exclusively within the European Economic Area (EEA), subject to §5 point 5 and §6 of this Privacy Policy.

§ 4

RIGHT TO CONTROL, ACCESS, AND RECTIFY PERSONAL DATA

  1. The data subject has the right to access their personal data and the right to rectify, erase, restrict processing, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  2. Legal grounds for the Service User’s request:
    Access to data – Art. 15 GDPR.
    Rectification of data – Art. 16 GDPR.
    Erasure of data (the so-called right to be forgotten) – Art. 17 GDPR.
    Restriction of processing – Art. 18 GDPR.
    Data portability – Art. 20 GDPR.
    Objection – Art. 21 GDPR.
    Withdrawal of consent – Art. 7(3) GDPR.
  3. To exercise the rights referred to in point 2, an appropriate e-mail may be sent to: biuro@carkeyswysocki.com.
  4. In the event that the Service User exercises the rights referred to above, the Administrator shall comply with the request or refuse to comply with it immediately, but no later than within one month after receiving the request. However, if due to the complex nature of the request or the number of requests, the Administrator cannot comply within one month, the request shall be fulfilled within the next two months, and the Service User shall be informed within one month of receiving the request about the intended extension of the deadline and the reasons for it.
  5. If it is found that the processing of personal data violates GDPR provisions, the data subject has the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO).

§ 5

COOKIES

  1. The Administrator’s website uses “cookies”.
  2. The installation of “cookies” is necessary for the proper provision of services on the Online Store website. “Cookies” contain information necessary for the proper functioning of the website, and they also allow the development of general statistics of website visits.
  3. Two types of “cookies” are used on the website: “session” and “persistent”. “Session cookies” are temporary files stored in the Service User's device until logging out (leaving the website). “Persistent cookies” are stored in the Service User's device for the time specified in the parameters of the “cookies” or until deleted by the Service User.
  4. The Administrator uses own cookies to better understand the interaction of Service Users with the website content. The files collect information about how the Service User uses the website, the type of site from which the Service User was redirected, and the number of visits and time spent on the website. This information does not record specific personal data of the Service User, but is used to develop statistics on the use of the website.
  5. The Administrator uses external cookies to collect general and anonymous statistical data via Google Analytics tools (external cookies administrator: Google Inc., USA).
  6. Cookies may also be used by advertising networks, in particular Google, to display ads tailored to the way the Service User uses the Store. For this purpose, they may retain information about the Service User's navigation path or time spent on a given page.
  7. The Service User has the right to decide on the access of “cookies” to their computer by selecting them in advance in their browser window. Detailed information on the possibilities and ways of handling “cookies” is available in the settings of the web browser software.

§ 6

ADDITIONAL SERVICES RELATED TO USER ACTIVITY IN THE STORE

  1. The Store uses so-called social plugins (“plugins”) of social networking sites. When displaying the website www.carkeyswysocki.com containing such a plugin, the Service User's browser establishes a direct connection with the servers of Facebook and YouTube.
  2. The content of the plugin is transmitted by the given service provider directly to the Service User's browser and integrated with the website. Thanks to this integration, the service providers receive the information that the Service User’s browser displayed the page www.carkeyswysocki.com, even if the Service User does not have a profile with the given service provider or is not currently logged in. Such information (along with the Service User's IP address) is sent directly from the browser to the service provider's server (some servers are located in the USA) and stored there.
  3. If the Service User is logged into one of the above-mentioned social networking sites, the service provider will be able to directly assign the visit to the page www.carkeyswysocki.com to the Service User's profile in that social network.
  4. If the Service User uses the plugin, e.g., by clicking the “Like” button or the “Share” button, the relevant information will also be sent directly to the service provider's server and stored there.
  5. The purpose and scope of data collection and its further processing and use by service providers, as well as the rights of the Service User in this regard and the possibility of privacy settings are described in the privacy policies of the service providers:
    https://www.facebook.com/policy.php
  6. If the Service User does not want social networks to assign the data collected during their visit to the website www.carkeyswysocki.com directly to their profile in the given service, they must log out of that service before visiting the website www.carkeyswysocki.com. The Service User can also completely prevent plugins from being loaded on the website by using appropriate extensions for their browser, e.g., script blockers such as “NoScript”.
  7. The Administrator uses remarketing tools such as Google AdWords, which involves the use of Google LLC cookies related to the Google AdWords service. Within the cookie management mechanism, the Service User can decide whether the Service Provider will be able to use Google AdWords (external cookies administrator: Google Inc., USA) in relation to them.

§ 7

FINAL PROVISIONS

  1. The Administrator applies technical and organizational measures to ensure the protection of processed personal data appropriate to the risks and categories of data protected, and in particular secures the data against being disclosed to unauthorized persons, taken by an unauthorized person, processed in violation of applicable provisions, and changed, lost, damaged, or destroyed.
  2. The Administrator provides appropriate technical measures to prevent unauthorized persons from acquiring and modifying personal data sent electronically.
  3. In matters not regulated by this Privacy Policy, the provisions of the GDPR and other relevant provisions of Polish law shall apply accordingly.