Privacy Policy
The privacy policy applies to the processing and protection of Users' personal data in connection with the use of the online store www.blow.pl, hereinafter referred to as the "Website", administered by XLAND Magdalena Głowska-Skąpska, based in 62-081 Przeźmierowo, at Rynkowa 120a, NIP: 7871846459, REGON: 301204089 (hereinafter referred to as the "Administrator"), which is the administrator of Users' personal data within the meaning of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (hereinafter also referred to as RODO).
To contact the administrator, send an email to shop@blow.en.
The Company respects the need to maintain the confidentiality of information and personal data. By providing us with information about you and your personal data, you consent to us using, reviewing and processing it for the purposes indicated below. We encourage you to carefully read the Policy below, as it applies to all personal information you provide to us through the Service.
1. INFORMATION OBLIGATION OF THE ADMINISTRATOR
1.1. the Administrator is XLAND Magdalena Głowska-Skąpska, based in 64-500 Szamotuły Dworcowa 39 , NIP: 7871846459, REGON: 301204089, hereinafter referred to as the "Administrator".
1.2. the Administrator obtains personal data from the Users of the online store www.blow.en. The primary way to obtain data is by voluntarily filling out a form. The administrator thus obtains the name, address, telephone number and e-mail address of the User.
1.(3) The Website also has an automated integrated system that allows monitoring of User behavior and matching content to User interest.
1.(4) The administrator processes personal data only for the purposes:
- the execution of the order placed by the User
- sending Users commercial information related to the functioning of the Service, with new content available through the Service and commercial information
The basis for processing here is the legitimate interests of the Administrator and third parties, i.e. Art. 6(6). 1 litre. (f) RODO.
The newsletter service in question is activated through a form available on the Site, and then after clicking on the link sent to the e-mail address provided by the User during the subscription process. The user may cancel this service at any time and with immediate effect by submitting an appropriate request to the Administrator. Each of the messages sent by the Administrator as part of the provision of the newsletter service contains a link that allows you to terminate the service in such a way (opt-out link option). The Administrator, by means of relevant messages sent to the e-mail address provided by the User, confirms both the commencement and termination of the newsletter service.
At all times, consent is voluntary and is a contractual requirement and is necessary for the performance of the contract. The contract consists of the sale of the products you have ordered. This means that without your consent to the processing of your personal data, we will not be able to process your order or contact you.
1.5. we keep your data for no longer than necessary for the proper performance of services. After this time, the data is kept only for the purpose of securing a claim.
2. USERS' RIGHTS
2.1. user rights:
- The user has the right to request from the Administrator the immediate rectification of personal data concerning him/her that is incorrect. Taking into account the purposes of the processing, the Data Subject User has the right to request the completion of incomplete personal data, including by providing an additional statement.
- You have the right to request from the Administrator the immediate deletion of personal data concerning you, and the Administrator is obliged to delete personal data without undue delay if one of the following circumstances "Right to Forget"):
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- the data subject has withdrawn the consent on which the processing is based in accordance with Art. 6(6). 1 litre. (a) and there is no other legal basis for processing;
- the data subject raises an objection under Art. 21 mouth. 1 RODO against the processing and there are no overriding legitimate grounds for the processing, or the data subject raises an objection under Art. 21 mouth. 2 RODO against processing;
- personal data were processed illegally;
- personal data must be deleted in order to comply with a legal obligation under Union or Member State law to which the controller is subject;
- personal data was collected in connection with the offering of information society services referred to in Art. 8 ust. 1 RODO.
- The Data Subject has the right to request the Administrator to restrict processing in the following cases:
- The user questions the accuracy of the personal data - for a period of time that allows the Administrator to verify the accuracy of the data;
- processing is unlawful, and the user, objects to the deletion of personal data, requesting instead the restriction of its use;
- The controller no longer needs the personal data for the purposes of processing, but it is needed by the user to establish, assert or defend claims;
- the user has lodged an objection under Art. 21 mouth. 1 RODO against processing - until it is determined whether the legitimate grounds on the part of the Controller override the grounds of the data subject's objection.
- A data subject has the right to receive in a structured, commonly used machine-readable format personal data concerning him or her that he or she has provided to the Controller, and has the right to send such personal data to another controller without hindrance from the Controller, if:
- the processing is based on consent pursuant to Art. 6(6). 1 litre. (a) RODO or on the basis of a contract pursuant to Art. 6(6). 1 litre. (b) the RODO; and
- processing is carried out by automated means.
- You have the right to object at any time to the processing of your personal data for the purposes of the Administrator's direct marketing, including profiling, to the extent that the processing is related to such direct marketing.
- The user has the right to lodge a complaint to the supervisory authority - the President of the Office for Personal Data Protection.
- After logging in to the Website, the User may change his/her personal information collected during registration and used to log in to the Website. You may also opt out of receiving the newsletter yourself or completely remove your account from the Service by contacting Customer Service at the following email address shop@blow.en or by letter. Each of the messages sent by the Administrator as part of the provision of the newsletter service contains a link that allows you to terminate the service in such a way (opt-out link option).
- Where your Personal Data is processed on the basis of consent (i.e., pursuant to Art. 6(6). 1 litre. a RODO) you may withdraw the consent you have given at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
2.(2) To exercise the above rights, the User should contact the Administrator by sending an email to: shop@blow.en
The Administrator executes the User's request immediately. Deletion, restriction, transfer, and objection to data processing will affect the services provided and will likely result in the inability to perform those services properly. You should be aware that your data is processed only for the purpose of processing your order and providing you with personalized commercial information.
2.(3) Each User shall also have the right to lodge a complaint with the Office for Personal Data Protection when it is justified that your personal data is processed by the Administrator in violation of the General Data Protection Regulation of April 27, 2016.
3. PROTECTION OF COLLECTED DATA
3.(1) The Administrator shall make every effort to protect the processed data from unauthorized access, unauthorized modification or deletion of the collected personal data. We assure you that your personal data and any other information is safe with us. We use appropriate data security measures, in particular measures to protect against malware. Only authorized personnel, trained in personal data and IT system security, as well as obliged to maintain strict confidentiality, have access to the processed personal data.
3.(2) The administrator does not require registration from people using the service.
3.3. all forms used to enter private information, are placed in a secure area of the site. Connecting with them is done using a special certificate, as a result of which all personal data of customers are encrypted and, even in case of interception of transmission, impossible to read by unauthorized persons.
4. USE OF PERSONAL DATA AND LIABILITY
4.1. the data in question shall be processed only for the purposes for which the User has given his/her consent.
4.(2) The data in question shall not be made available to third parties.
4.(3) Exception to the rule referred to in paragraph. 4.2. of the Privacy Policy, constitutes a situation in which a court, prosecutor's office or other authorities make a request to the company for access to such data, having first indicated the legal basis for their request. In such a situation, the Administrator provides the above data to the extent that it is required.
4.(4) The Administrator may also provide access to the data in question in the event of violation by the User or Customer of the Regulations of the Online Store.
5. EXECUTION OF REQUESTS
5.1 In order to facilitate the fulfillment of requests under the provisions of the regulation, we have launched an additional e-mail address: shop@blow.en, to which all: demands, inquiries and requests arising from the application of the RODO should be addressed.
