INFORMATION ON THE PROCESSING OF PERSONAL DATA

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, „GDPR”), Pamiątki z Polski Jakub Dyjak, with its registered office in Zielonka, ul. Poniatowskiego 109, hereby informs you of the rules for the processing of your personal data and of the rights you have in this respect. The rules set out below apply from 25 May 2018. If you have any questions concerning the manner and scope of the processing of your personal data by Pamiątki z Polski, as well as the rights to which you are entitled, please contact Pamiątki z Polski electronically at: it@bady.pl or in writing at ul. Poniatowskiego 109, 05-220 Zielonka.

I. Identification of the controller

The controller of your personal data is Pamiątki z Polski Jakub Dyjak, with its registered office in Zielonka, ul. Poniatowskiego 109

II. Purposes and legal basis for the processing of your personal data

Pamiątki z Polski processes your personal data for the following purposes:

1. to take steps at your request with a view to concluding a purchase contract with Pamiątki z Polski, or where this is necessary for the performance of a contract with Pamiątki z Polski (Article 6(1)(b) GDPR),
2. to take complaint-handling steps at your request

III. Obligation to provide personal data to P.H.U. BADY

The provision of your personal data is a condition for the conclusion and performance of the contract concluded with Pamiątki z Polski, results from the performance of the purchase contract and is necessary in order to achieve the purposes arising from the aforementioned contract. Failure to provide all the required personal data will constitute an obstacle to the conclusion of the contract and to the provision of services by Pamiątki z Polski for your benefit. To the extent that personal data are collected on the basis of consent, the provision of personal data is voluntary.

IV. Information on the recipients of your personal data

In connection with the processing of your personal data for the purposes indicated in point II, your personal data may be disclosed to the following recipients or categories of recipients:

1. public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes arising from the provisions of law, e.g. the Tax Office
2. entities carrying out the delivery of the consignment (Poczta Polska, courier company)
3. entities performing tasks arising from the provisions of law, such as an Accounting Office, if you select the option of purchase with a VAT invoice.

V. Periods of personal data processing

Your personal data will be processed for the period necessary to achieve the purposes indicated in point II, i.e. as regards the performance of the contract concluded by you with Pamiątki z Polski, for the period up to the completion of its performance, and thereafter for the period and to the extent required by the provisions of law, and in the event that you consent to the processing of data after the termination or expiry of the contract, until that consent is withdrawn.

VI. Profiling

P.H.U. Bady will not profile its customers.

Profiling is to be understood as any form of automated processing of personal data consisting in the use of such data to evaluate certain personal aspects of a natural person, in particular to analyse or predict aspects concerning behaviour in the sphere of purchases made, choices, etc.

VII. Rights of the data subject

Pamiątki z Polski wishes to assure you that all persons whose personal data are processed by Pamiątki z Polski are entitled to the relevant rights arising from the GDPR. Accordingly, you have the following rights:

1. the right of access to personal data, including the right to obtain a copy of such data;
2. the right to request the rectification (correction) of personal data – where the data are inaccurate or incomplete;
3. the right to request the erasure of personal data (the so-called „right to be forgotten”) – where:
   i) the data are no longer necessary for the purposes for which they were collected or otherwise processed,
   ii) the data subject has objected to the processing of the data,
   iii) the data subject has withdrawn the consent on which the processing is based and there is no other legal basis for the processing,
   iv) the data are processed unlawfully,
   v) the data must be erased in order to comply with an obligation arising from the provisions of law;
4. the right to request the restriction of the processing of personal data – where:
   i) the data subject contests the accuracy of the personal data,
   ii) the processing of the data is unlawful and the data subject opposes the erasure of the data, requesting instead the restriction of their use,
   iii) the controller no longer needs the data for its purposes
   iv) the data subject has objected to the processing of the data – pending the verification of whether the legitimate grounds of the controller override the grounds of the objection;

VIII. Right to withdraw consent to the processing of personal data

To the extent that you have given consent to the processing of personal data, you have the right to withdraw it. The withdrawal of consent does not affect the lawfulness of the processing of data carried out on the basis of consent before its withdrawal.

IX. Right to lodge a complaint with a supervisory authority

Should you consider that the processing of your personal data by Pamiątki z Polski infringes the provisions of the GDPR, you have the right to lodge a complaint with the competent supervisory authority.

X. Transfer of personal data to entities outside the European Economic Area („EEA”) or to international organisations

P.H.U. BADY does not disclose your personal data to entities established outside the EEA.