INCLUDING GDPR AND COOKIE POLICY

WEBSITE PRIVACY POLICY FOR DAMZO.PL

This Websi­te Pri­va­cy Poli­cy is for infor­ma­tio­nal pur­po­ses only, meaning it does not cre­ate obli­ga­tions for the Websi­te Users. The Pri­va­cy Poli­cy pri­ma­ri­ly outli­nes the prin­ci­ples regar­ding the pro­ces­sing of per­so­nal data by the Admi­ni­stra­tor on the Websi­te, inc­lu­ding the bases, pur­po­ses, and sco­pe of per­so­nal data pro­ces­sing, as well as the rights of indi­vi­du­als who­se data is pro­ces­sed, and infor­ma­tion regar­ding the use of cookies and ana­ly­ti­cal tools on the Website.

The Admi­ni­stra­tor of per­so­nal data col­lec­ted via the Websi­te is DAMIAN GRUSZCZYŃSKI con­duc­ting busi­ness under the name DAMZO DAMIAN GRUSZCZYŃSKI regi­ste­red in the Cen­tral Regi­stra­tion and Infor­ma­tion on Busi­ness (CEIDG) of the Repu­blic of Poland main­ta­ined by the mini­ster respon­si­ble for the eco­no­my, having: busi­ness address and address for servi­ce of docu­ments: Ple­wi­ska, ul. Kmin­ko­wa, nr 170A, lok. 2, 62–064, NIP 7661096928, REGON 365668318, ema­il address: kontakt@damzo.pl, pho­ne num­ber: +48 502 240 792 — here­ina­fter refer­red to as the ‘Admi­ni­stra­tor’ and also the Owner of the Website.

Per­so­nal data on the Websi­te is pro­ces­sed by the Admi­ni­stra­tor in accor­dan­ce with appli­ca­ble law, in par­ti­cu­lar with Regu­la­tion (EU) 2016/679 of the Euro­pe­an Par­lia­ment and of the Coun­cil of 27 April 2016 on the pro­tec­tion of natu­ral per­sons with regard to the pro­ces­sing of per­so­nal data and on the free move­ment of such data, and repe­aling Direc­ti­ve 95/46/EC (Gene­ral Data Pro­tec­tion Regu­la­tion) – here­ina­fter refer­red to as ‘GDPR’ or ‘GDPR Regu­la­tio­n’Of­fi­cial text of the GDPR Regu­la­tion: http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679

Using the Websi­te is volun­ta­ry. Simi­lar­ly, pro­vi­ding per­so­nal data by the User of the Websi­te is volun­ta­ry, with two excep­tions: (1) ente­ring into agre­ements with the Admi­ni­stra­tor: not pro­vi­ding the data in cases and to the extent requ­ired for ente­ring into and per­for­ming a Sales Agre­ement or an agre­ement for the pro­vi­sion of Elec­tro­nic Servi­ces with the Admi­ni­stra­tor will result in the ina­bi­li­ty to conc­lu­de such an agre­ement. Pro­vi­ding per­so­nal data is a con­trac­tu­al requ­ire­ment in such cases, and if the data sub­ject wishes to enter into the agre­ement with the Admi­ni­stra­tor, they are obli­ged to pro­vi­de the requ­ired data. The sco­pe of data requ­ired to conc­lu­de the agre­ement is always spe­ci­fied by the Admi­ni­stra­tor; (2) sta­tu­to­ry obli­ga­tions of the Admi­ni­stra­tor: pro­vi­ding per­so­nal data is a sta­tu­to­ry requ­ire­ment resul­ting from gene­ral­ly appli­ca­ble laws impo­sing on the Admi­ni­stra­tor the obli­ga­tion to pro­cess per­so­nal data (e.g., data pro­ces­sing for keeping tax or acco­un­ting records) and the failu­re to pro­vi­de such data will pre­vent the Admi­ni­stra­tor from ful­fil­ling the­se obligations.

The Admi­ni­stra­tor exer­ci­ses spe­cial care to pro­tect the inte­re­sts of data sub­jects who­se per­so­nal data is pro­ces­sed by him, and in par­ti­cu­lar, is respon­si­ble for and ensu­res that the data he col­lects is: (1) pro­ces­sed law­ful­ly; (2) col­lec­ted for spe­ci­fied, law­ful pur­po­ses and not fur­ther pro­ces­sed in a man­ner incom­pa­ti­ble with tho­se pur­po­ses; (3) fac­tu­al­ly cor­rect and ade­qu­ate to the pur­po­ses for which it is pro­ces­sed; (4) sto­red in a form that allows iden­ti­fi­ca­tion of the data sub­jects for no lon­ger than neces­sa­ry to achie­ve the pur­po­se of pro­ces­sing; and (5) pro­ces­sed in a man­ner that ensu­res appro­pria­te secu­ri­ty of per­so­nal data, inc­lu­ding pro­tec­tion aga­inst unau­tho­ri­zed or unlaw­ful pro­ces­sing and aga­inst acci­den­tal loss, destruc­tion, or dama­ge, using appro­pria­te tech­ni­cal or orga­ni­za­tio­nal measures.

Taking into acco­unt the natu­re, sco­pe, con­text, and pur­po­ses of pro­ces­sing as well as the risk of vary­ing like­li­ho­od and seve­ri­ty for the rights and fre­edoms of natu­ral per­sons, the Admi­ni­stra­tor imple­ments appro­pria­te tech­ni­cal and orga­ni­za­tio­nal measu­res to ensu­re and be able to demon­stra­te that pro­ces­sing is per­for­med in accor­dan­ce with this Regu­la­tion. The­se measu­res are revie­wed and upda­ted as neces­sa­ry. The Admi­ni­stra­tor uses tech­ni­cal measu­res to pre­vent unau­tho­ri­zed per­sons from obta­ining and modi­fy­ing per­so­nal data sent electronically.

All words, expres­sions, and acro­nyms appe­aring in this Pri­va­cy Poli­cy and begin­ning with a capi­tal let­ter (e.g., Websi­te, Elec­tro­nic Servi­ce) sho­uld be under­sto­od in accor­dan­ce with the­ir meaning as defi­ned in this document.

BASIS FOR DATA PROCESSING

The Admi­ni­stra­tor is autho­ri­zed to pro­cess per­so­nal data in cases whe­re – and to the extent that – at least one of the fol­lo­wing con­di­tions is met: (1) the data sub­ject has given con­sent to the pro­ces­sing of the­ir per­so­nal data for one or more spe­ci­fic pur­po­ses; (2) pro­ces­sing is neces­sa­ry for the per­for­man­ce of a con­tract to which the data sub­ject is a par­ty or to take steps at the requ­est of the data sub­ject prior to ente­ring into a con­tract; (3) pro­ces­sing is neces­sa­ry for com­plian­ce with a legal obli­ga­tion to which the Admi­ni­stra­tor is sub­ject; or (4) pro­ces­sing is neces­sa­ry for the pur­po­ses of the legi­ti­ma­te inte­re­sts pur­su­ed by the Admi­ni­stra­tor or by a third par­ty, except whe­re such inte­re­sts are over­rid­den by the inte­re­sts or fun­da­men­tal rights and fre­edoms of the data sub­ject which requ­ire pro­tec­tion of per­so­nal data, in par­ti­cu­lar whe­re the data sub­ject is a child.

The pro­ces­sing of per­so­nal data by the Admi­ni­stra­tor requ­ires the exi­sten­ce of at least one of the bases listed abo­ve. The spe­ci­fic bases for pro­ces­sing per­so­nal data of the Websi­te Users by the Admi­ni­stra­tor are indi­ca­ted in the next sec­tion of the pri­va­cy poli­cy – in rela­tion to the spe­ci­fic pur­po­se of per­so­nal data pro­ces­sing by the Administrator.

PURPOSE, BASIS, PERIOD, AND SCOPE OF DATA PROCESSING ON THE WEBSITE 
The pur­po­se, basis, period, sco­pe, and reci­pients of per­so­nal data pro­ces­sed by the Admi­ni­stra­tor are deter­mi­ned by the actions taken by the respec­ti­ve User on the Website.
The Admi­ni­stra­tor may pro­cess per­so­nal data on the Websi­te for the fol­lo­wing pur­po­ses, on the fol­lo­wing bases, for the fol­lo­wing periods, and within the fol­lo­wing scope:

PURPOSE, BASIS, PERIOD, AND SCOPE OF DATA PROCESSING ON THE WEBSITE
The pur­po­se, basis, period, sco­pe, and reci­pients of per­so­nal data pro­ces­sed by the Admi­ni­stra­tor are deter­mi­ned by the actions taken by the respec­ti­ve User on the Website.
The Admi­ni­stra­tor may pro­cess per­so­nal data on the Websi­te for the fol­lo­wing pur­po­ses, on the fol­lo­wing bases, for the fol­lo­wing periods, and within the fol­lo­wing scope:

RECIPIENTS OF DATA ON THE WEBSITE

For the pro­per func­tio­ning of the Websi­te, it is neces­sa­ry for the Admi­ni­stra­tor to use the servi­ces of exter­nal enti­ties (such as softwa­re pro­vi­ders). The Admi­ni­stra­tor uses only the servi­ces of such data pro­ces­sors who pro­vi­de suf­fi­cient guaran­te­es to imple­ment appro­pria­te tech­ni­cal and orga­ni­za­tio­nal measu­res so that the pro­ces­sing meets the requ­ire­ments of the GDPR Regu­la­tion and pro­tects the rights of data subjects.

The trans­fer of data by the Admi­ni­stra­tor does not occur in eve­ry case and not to all reci­pients or cate­go­ries of reci­pients indi­ca­ted in the pri­va­cy poli­cy – the Admi­ni­stra­tor trans­fers data only when it is neces­sa­ry to achie­ve a given pur­po­se of per­so­nal data pro­ces­sing and only to the extent neces­sa­ry to achie­ve it.

The per­so­nal data of the Websi­te Users may be trans­fer­red to the fol­lo­wing reci­pients or cate­go­ries of recipients:
a. Car­riers / ship­pers / courier bro­kers — if you use the method of deli­ve­ry of the Pro­duct by postal or courier servi­ce, the Admi­ni­stra­tor pro­vi­des your col­lec­ted per­so­nal data to the selec­ted car­rier, ship­per, or inter­me­dia­ry per­for­ming the ship­ment on behalf of the Admi­ni­stra­tor to the extent neces­sa­ry to com­ple­te the deli­ve­ry of the Product.

RIGHTS OF THE DATA SUBJECT

Right of access, rec­ti­fi­ca­tion, restric­tion, era­su­re, or por­ta­bi­li­ty – the data sub­ject has the right to requ­est from the Admi­ni­stra­tor access to the­ir per­so­nal data, rec­ti­fi­ca­tion, era­su­re (“right to be for­got­ten”), or restric­tion of pro­ces­sing, and has the right to object to pro­ces­sing, as well as the right to data por­ta­bi­li­ty. Deta­iled con­di­tions for exer­ci­sing the abo­ve-men­tio­ned rights are indi­ca­ted in Artic­les 15–21 of the GDPR Regulation.

Right to with­draw con­sent at any time – a per­son who­se data is pro­ces­sed by the Admi­ni­stra­tor based on expres­sed con­sent (pur­su­ant to Artic­le 6(1)(a) or Artic­le 9(2)(a) of the GDPR Regu­la­tion) has the right to with­draw con­sent at any time witho­ut affec­ting the law­ful­ness of pro­ces­sing based on con­sent befo­re its withdrawal.

Right to lod­ge a com­pla­int with a super­vi­so­ry autho­ri­ty – a per­son who­se data is pro­ces­sed by the Admi­ni­stra­tor has the right to lod­ge a com­pla­int with a super­vi­so­ry autho­ri­ty in the man­ner and mode spe­ci­fied in the pro­vi­sions of the GDPR Regu­la­tion and Polish law, in par­ti­cu­lar the Per­so­nal Data Pro­tec­tion Act. The super­vi­so­ry autho­ri­ty in Poland is the Pre­si­dent of the Per­so­nal Data Pro­tec­tion Office.

Right to object – the data sub­ject has the right to object at any time – on gro­unds rela­ting to the­ir par­ti­cu­lar situ­ation – to the pro­ces­sing of per­so­nal data con­cer­ning them based on Artic­le 6(1)(e) (public inte­rest or tasks) or (f) (legi­ti­ma­te inte­rest of the Admi­ni­stra­tor), inc­lu­ding pro­fi­ling based on tho­se pro­vi­sions. The Admi­ni­stra­tor shall no lon­ger pro­cess the per­so­nal data unless he demon­stra­tes com­pel­ling legi­ti­ma­te gro­unds for the pro­ces­sing which over­ri­de the inte­re­sts, rights, and fre­edoms of the data sub­ject, or for the esta­bli­sh­ment, exer­ci­se, or defen­se of legal claims.

Right to object to direct mar­ke­ting – if per­so­nal data is pro­ces­sed for direct mar­ke­ting pur­po­ses, the data sub­ject has the right to object at any time to the pro­ces­sing of per­so­nal data con­cer­ning them for such mar­ke­ting, inc­lu­ding pro­fi­ling to the extent that it is rela­ted to such direct marketing.

To exer­ci­se the rights refer­red to in this point of the pri­va­cy poli­cy, you can con­tact the Admi­ni­stra­tor by sen­ding an appro­pria­te mes­sa­ge in wri­ting or by ema­il to the Admi­ni­stra­to­r’s address indi­ca­ted at the begin­ning of the pri­va­cy poli­cy or by using the con­tact form ava­ila­ble on the Website.

PROFILING ON THE WEBSITE

The GDPR Regu­la­tion impo­ses an obli­ga­tion on the Admi­ni­stra­tor to inform abo­ut auto­ma­ted deci­sion-making, inc­lu­ding pro­fi­ling, refer­red to in Artic­le 22(1) and (4) of the GDPR Regu­la­tion, and – at least in tho­se cases – meaning­ful infor­ma­tion abo­ut the logic invo­lved, as well as the signi­fi­can­ce and the envi­sa­ged con­se­qu­en­ces of such pro­ces­sing for the data sub­ject. Con­si­de­ring this, the Admi­ni­stra­tor pro­vi­des infor­ma­tion regar­ding possi­ble pro­fi­ling in this point of the pri­va­cy policy.

The Admi­ni­stra­tor may use pro­fi­ling on the Websi­te for direct mar­ke­ting pur­po­ses, but deci­sions based on pro­fi­ling by the Admi­ni­stra­tor do not con­cern the conc­lu­sion or refu­sal to conc­lu­de a Sales Agre­ement, or the possi­bi­li­ty of using Elec­tro­nic Servi­ces. The effect of using pro­fi­ling may be, for exam­ple, gran­ting a disco­unt to a given per­son, sen­ding them a disco­unt code, remin­ding them of unfi­ni­shed pur­cha­ses, sen­ding a pro­po­sal for a Pro­duct that may match the inte­re­sts or pre­fe­ren­ces of a given per­son, or offe­ring bet­ter con­di­tions com­pa­red to the stan­dard offer. Despi­te pro­fi­ling, it is up to the indi­vi­du­al to deci­de whe­ther they want to take advan­ta­ge of the rece­ived disco­unt or bet­ter con­di­tions and make a purchase.

Pro­fi­ling on the Websi­te invo­lves the auto­ma­tic ana­ly­sis or pre­dic­tion of a given per­so­n’s beha­vior on the Websi­te, for exam­ple by adding a spe­ci­fic Pro­duct to the cart, brow­sing a spe­ci­fic Pro­duct page. The con­di­tion for such pro­fi­ling is that the Admi­ni­stra­tor has the per­so­nal data of a given per­son to be able to send them, for exam­ple, a disco­unt code.

The data sub­ject has the right not to be sub­ject to a deci­sion based sole­ly on auto­ma­ted pro­ces­sing, inc­lu­ding pro­fi­ling, which pro­du­ces legal effects con­cer­ning them or simi­lar­ly signi­fi­can­tly affects them.

COOKIES ON THE WEBSITE, USAGE DATA, AND ANALYTICS

Cookies are small text files in the form of text files sent by a server and saved on the side of the per­son visi­ting the Websi­te (e.g., on the hard dri­ve of a com­pu­ter, lap­top, or on a smart­pho­ne­’s memo­ry card – depen­ding on the devi­ce used by the visi­tor to our Websi­te). Deta­iled infor­ma­tion abo­ut cookies, as well as the­ir histo­ry, can be found, among others, here: http://pl.wikipedia.org/wiki/Ciasteczko.

The Admi­ni­stra­tor may pro­cess the data con­ta­ined in cookies when visi­tors use the Websi­te for the fol­lo­wing purposes:

• adju­sting the con­tent of the Websi­te to the indi­vi­du­al pre­fe­ren­ces of the User (e.g., regar­ding colors, font size, page lay­out) and opti­mi­zing the use of the Website;
• con­duc­ting ano­ny­mo­us sta­ti­stics pre­sen­ting the way of using the Website;

By default, most web brow­sers ava­ila­ble on the mar­ket accept saving cookies by default. Eve­ry­one has the option of deter­mi­ning the con­di­tions for using cookies thro­ugh the­ir brow­ser set­tings. This means that you can, for exam­ple, par­tial­ly limit (e.g., tem­po­ra­ri­ly) or com­ple­te­ly disa­ble the possi­bi­li­ty of saving cookies – in the lat­ter case, howe­ver, it may affect some func­tio­na­li­ties of the Website.

Brow­ser set­tings regar­ding cookies are impor­tant from the per­spec­ti­ve of con­sent to use cookies by our Websi­te – in accor­dan­ce with the regu­la­tions, such con­sent may also be expres­sed thro­ugh brow­ser set­tings. In the absen­ce of such con­sent, you sho­uld appro­pria­te­ly chan­ge your web brow­ser set­tings regar­ding cookies.

Deta­iled infor­ma­tion on chan­ging cookie set­tings and the­ir inde­pen­dent dele­tion in the most popu­lar web brow­sers are ava­ila­ble in the brow­se­r’s help sec­tion and on the fol­lo­wing pages (just click the given link):

• in the Chro­me browser
• in the Fire­fox browser
• in the Inter­net Explo­rer browser
• in the Ope­ra browser
• in the Safa­ri browser
• in the Micro­soft Edge browser