PRIVACY POLICY
At Varleca.pl we are very committed to ensuring that your privacy is fully respected and that your personal data is protected, adapted to the requirements of GDPR.
We have created this Privacy Policy to explain to you what our processing of your personal data entails, indicate the legal basis for the processing, and outline the rights of data subjects.
1. Data Administrator.
The Administrator of your personal data, i.e., the entity that determines the purposes and means of processing your personal data, is VARLESCA Beata Gęsicka, with headquarters at ul. Wejherowska 56a / 3 in Reda (84-240), NIP: 5882465576, REGON: 388067390, KRS: 0000881258.
The Administrator has appointed a Data Protection Officer, who can be contacted at the following e-mail address: [email protected]. Questions concerning the processing of personal data by the Administrator can also be sent in writing to the mailing address of VARLESCA.
2. What is personal data, and what is its processing?
According to the definition indicated in the Regulation of the European Parliament and the Council of the EU 2016/679 of 27 April 2016 on the protection of natural persons concerning the processing of personal data and the free movement of such data and repealing Directive 95/4/EC (GDPR), personal data is any information that allows an individual to be identified, directly or indirectly. The scope of this type of data includes, among others, data that identifies the User (e.g., name, surname, home address, e-mail address, telephone number, photo), as well as data specifying the User’s preferences (e.g., concerning the types of products selected) and demographic and geolocation data (e.g., gender, age, location). Personal data includes financial and transactional data (e.g., payment or payment card data, information regarding orders, purchases, complaints, and returns) and commercial information (e.g., potential interest in an offer). The processing of your personal data by us occurs according to the processing process. These include the following procedures:
User registration on the website - for this purpose, we will process your personal data to create an account, identify, and grant access to particular functions and products. The legal basis for processing this data is Article 6(1)(f) GDPR. We will process the data necessary for this process as long as you hold the status of a registered user (i.e., until you decide to unsubscribe from our online store);
- Performance of the contract - for this purpose, we process your data within the framework of, among other things:
- notify you of updates to your order or provide you with information related to the products you have ordered,
- managing payments for purchased products,
- Managing any exchanges or returns after purchase,
- Managing product availability requests,
- product reservations,
- invoice and issue receipts for purchases made,
- management and use of gift cards.
The legal basis for processing these data is Article 6 (1)(b) GDPR.
We will process the data necessary for this process for the time required to manage the purchase process, including executing any returns and complaints;
- Taking action on your request or demand - for this purpose, we process your data only to the extent necessary to fulfill your requests or demands. You can contact us by phone, e-mail, postal mail to our registered address, as well as through instant messaging services. If you use the chat service of a social network, some of your personal data will be imported from your user account. You must know that sending data through this communication channel will also be shared with the social network, which has a separate privacy policy. Remember to review your privacy settings for more detailed information on how we use it.
The legal basis for the processing of data necessary to take action on your request or demand is Article 6(1)(f) GDPR, 6(1)(b) GDPR, 6(1)(c) GDPR. Data necessary for this process will be processed for the time needed to handle the action on your request or demand;
- Marketing - for this purpose, your data is processed to:
personalize the offer to your needs and propose products based on your preferences,
manage your subscriptions and tailor them to your individual needs and consent,
send you information via e-mail, SMS, and PUSH notifications
display online advertisements for our products to you when you browse our website (these advertisements may be displayed on other websites as well as on social media that you are a user),
carry out promotional activities such as organizing contests or reminders about products stored on your user profile,
distribute the photos you have shared with us based on your separate consent on our social media profiles.
The legal basis for processing these data is Article 6(1)(a) GDPR. Data necessary for marketing purposes will be processed until you withdraw your consent;
- Improving our website - your data is processed, e.g., within the scope of performing analytical and static activities. The legal basis for processing these data is Article 6(1)(f) of the GDPR. We will process the data necessary to carry out this process until the completion of a specific action conducted by us;
- Defence against possible claims - as part of this process, we will process data based on Article 6(1)(f) of the GDPR until the statute of limitations for possible claims has expired.
3. What rights do you and other data subjects have?
The GDPR gives data subjects a number of rights, which we ensure are exercised. You can request the exercise of your rights by e-mailing us at: [email protected], indicating the reason for your request and the right you wish to exercise. You are entitled to:
- The right of access to the content of your data - by exercising this right, you can obtain information on what data, how, and for what purpose we process,
- Right of rectification - by exercising this right, you may notify us of the need to correct or complete your data,
- Right to delete data - in exercising this right, you may request that we erase your data. If your request is justified, we will delete your data immediately. However, this right does not apply if the personal data is processed to comply with obligations imposed on us by law.
- Right to restrict processing - in exercising this right, you may request that the processing be limited where the accuracy of the data being processed is contested. If the request is justified, we may only store the data, and further processing may take place after the reasons justifying the restriction of processing cease to exist,
- The right to withdraw consent to data processing (in the case of processing based on consent) - you can withdraw your consent at any time without affecting the legality of previous processing, i.e., the processing performed before the withdrawal of consent,
- The right to receive a copy of the data in a structured format for everyday use, readable by specific devices,
- The right to transfer the data to another Controller, if technically possible,
- The right to object to the processing of your data for the purpose of a possible defense against or investigation of claims.
You also have the right to complain to the supervisory authority - the President of the Office for Personal Data Protection, if you consider that the processing of personal data by us violates the law.
4. Providing personal data
The Administrator shares the data of www.varlesca.pl website users with cooperating service providers with whom entrustment contracts have been signed. Among the service providers entrusted with the data are e-mail and server hosting providers, companies providing postal, courier, transport, and delivery services, technology and analytical service providers, customer service providers, marketing agencies, and other providers and partners in the provision of services related to marketing and advertising (e.g., social networks).
In order to make our services as effective as possible, some of the service providers listed are based in countries outside the European Economic Area. In light of the possibility that your data may be transferred outside the EEA, we have implemented additional safeguards in the form of, among other things, standard contractual clauses and appropriate supplementary measures. You can find out more about our safeguards by contacting us.
5. Sharing of third-party data by the User.
We offer gift cards in case of activation and dispatch, of which the User authorizes a third party to collect the order. In this case, we assume that you have informed the aforementioned person of the purposes and manner of processing of their data. The third party’s data will be used to fulfill the order in question per the restrictions of this Privacy Policy.
6. Cookies.
Our website uses cookies. These are small text files sent by a web server and stored by your browser software. When the browser reconnects to the site, the site recognizes the type of device the user is connecting from. The parameters allow only the server that created them to read the information they contain. Cookies, therefore, facilitate the use of previously visited sites. The data collected relates to the IP address, the type of browser used, the language, the type of operating system, the time and date information, the location, and the information sent to the site through the contact form. We use the information we collect to monitor and review how visitors use our sites to improve site operations and provide a more efficient and seamless navigation experience. We monitor user information using the Google Analytics tool, which records user behavior on the site. We use cookies to ensure the highest standard of convenience on our website, and the collected data is used to optimize operations. At any time, you can disable or restore the option of managing cookies by changing the settings in your web browser.
7. Changes to the Privacy Policy.
This Privacy Policy is subject to change at our discretion. We will notify all users through available communication channels if we make changes.
Thank you for reviewing our Privacy Policy.