NIKBUTY.PL ONLINE SHOP PRIVACY POLICY

TABLE OF CONTENTS:

  1. General provisions
  2. Basics of data processing
  3. Purpose, basis, period and scope of data processing in the Online Store
  4. Profiling in the Online Store
  5. Cookies in the Online Store, operating data and analytics
  6. General provisions

General provisions

  1. The administrator of personal data through the online store located in the internet domain www.nikbuty.pl, hereinafter referred to as the "Online Store", is an entrepreneur running a business under the name JAN NURZYŃSKI ZAKŁAD PRODUKCJI OBUWIA "NIK" with headquarters in Dębowica (21-404 Trzebieszów) under number 30, entered in the Central Register and Information on Economic Activity, having the REGON number: 8250005787, NIP: 8250005787, hereinafter referred to as the "Service Provider". Detailed contact details can be found on the "Contact Us" page. Data protection of the indicated personal data is carried out in accordance with the requirements of generally applicable law, and their storage takes place on secured servers.

  2. This Online Store privacy policy, referred to as the "Privacy Policy", is for information purposes only, which means that it is not a source of obligations for Online Store Customers. The privacy policy contains primarily rules regarding the processing of personal data by the Service Provider in the Online Store, including the basics, purposes and scope of processing personal data and the rights of data subjects, as well as information on the use of cookies and analytical tools in the Online Store.

  3. For the purposes of better reception of the Privacy Policy, the term 'GDPR' means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95 / 46 / EC. The official text of the GDPR Regulation: http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679

  4. The service provider respects the privacy of users visiting the website [provide address]. Like most website publishers, the Service Provider collects the IP addresses of users' computers of the website and the necessary information about how to use it, however, this data is used only for technical and administrative purposes (with the exception of the user's geolocation service, which allows directing him to the appropriate subpages municipal services). The service provider does not attempt to identify users. It is used, among others secure communication encryption protocol (SSL).

  5. Personal data provided in the form on the landing page are treated as confidential and are not visible to unauthorized persons.

  6. Using the Online Store, including making purchases, is voluntary. Similarly, providing personal data by the Customer or Customer using the Online Store is voluntary, with two exceptions:
  • concluding contracts with the Administrator - failure to provide, in cases and to the extent indicated on the Online Store website and in the Online Store Regulations and this privacy policy, personal data necessary to conclude and perform a sales contract or contract for the provision of electronic services with the Administrator results in the inability to conclude this contract. Providing personal data is in this case a contractual requirement and if the data subject wants to conclude a given agreement with the Administrator, he is obliged to provide the required data. Each time the scope of data required to conclude a contract is indicated previously on the Online Store website and in the Online Store Regulations;
  • Administrator's statutory obligations - providing personal data is a statutory requirement resulting from generally applicable legal provisions imposing an obligation on the Administrator to process personal data (e.g. processing data for the purpose of keeping tax or accounting books) and failure to provide it will prevent the Administrator from performing these obligations.
  1. The Administrator uses special diligence to protect the interests of persons to whom the personal data processed by him relates, and in particular is responsible and ensures that the data collected by him are:
  • processed in accordance with the law;
  • collected for specified, legitimate purposes and not subjected to further processing incompatible with those purposes;
  • factually correct and adequate in relation to the purposes for which they are processed;
  • stored in a form that allows identification of the persons they concern, no longer than necessary to achieve the purpose of processing;
  • processed in a way that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by appropriate technical or organizational measures.
  1. Taking into account the nature, scope, context and purposes of processing as well as the risk of violation of the rights or freedoms of natural persons of different probability and severity of risk, the Administrator implements appropriate technical and organizational measures to process it in accordance with this Regulation and to be able to demonstrate it. These measures shall be reviewed and updated as necessary. The administrator uses technical measures to prevent the acquisition and modification by unauthorized persons of personal data sent electronically.
  1. All words, expressions and acronyms appearing in this privacy policy and beginning with a capital letter (e.g. Seller, Online Store, Electronic Service) should be understood in accordance with their definition contained in the Online Store Regulations available on the Online Store website.

Basics of data processing 

  1. The service provider is the administrator of his clients' data. This means that if the User uses the services of www.nikbutik.pl, the Service Provider may process his personal data in the scope referred to in paragraph 3.2.

  2. The service provider is also the administrator of people subscribed to the newsletter.

  3. The administrator is entitled to process personal data in cases where - and to the extent that - at least one of the following conditions is met:
  • the data subject has given his consent to the processing of their personal data in one or more specific objectives;
  • processing is necessary for the performance of a contract to which the data subject is party or to take action at the request of the data subject before the conclusion of the contract;
  • processing is necessary to fulfill the legal obligation incumbent on the Administrator;
  • processing is necessary for the purposes of legitimate interests pursued by the Administrator or by a third party, except for situations where the interests or fundamental rights and freedoms of the data subject, which require protection of personal data, prevail over these interests, in particular when the data subject is a child.
  1. The processing of personal data by the Administrator requires each time at least one of the grounds indicated in paragraph 2.1. The specific grounds for processing personal data of Online Store Customers by the Administrator are indicated in the next section of the privacy policy - in relation to the given purpose of processing personal data by the Administrator.

Purpose, basis, period and scope of data processing in the online store

 

  1. Each time the purpose, basis, period and scope as well as the recipient of personal data processed by the Administrator results from the actions taken by the given Service User or Customer in the Online Store. For example, if the Customer decides to make purchases in the Online Store and chooses personal collection of the purchased product instead of courier, his personal data will be processed in order to perform the concluded contract of sale, but will no longer be made available to the carrier performing the shipment at the request of the Administrator.

  2. The Administrator may process personal data in the Online Store for the following purposes, on the following grounds, in periods and in the following scope:

Purpose of data processing

Legal basis for processing and storage period

The scope of processed data

Performance of the sales contract or contract for the provision of electronic services or taking action at the request of the data subject before the conclusion of the above-mentioned contracts

Article 6 1 lit. b) GDPR (performance of the contract)

The data is stored for the period necessary to perform, terminate or otherwise terminate the contract.

Maximum range: name and surname; e-mail address; contact phone number; delivery address (street, house number, apartment number, zip code, city, country), address of residence / business / registered office (if different from the delivery address).


In the case of Customers who are not consumers, the Administrator may additionally process the company name and the Customer's tax identification number (NIP).

The range provided is maximum - for e.g. personal pickup, it is not necessary to provide the delivery address.

direct marketing

Article 6 1 lit. f) GDPR (administrator's legitimate interest)

The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of claims against the data subject for the business activity conducted by the Administrator. The limitation period is determined by law, in particular the Civil Code (the basic limitation period for claims related to conducting business activity is three years, and for a sales contract - two years).

The administrator may not process data for direct marketing purposes if the data subject has successfully objected to it.

E-mail address 

Marketing

Article 6 1 lit. a) GDPR (consent)

The data is stored until the data subject withdraws his consent for further processing of his data for this purpose.

First name, e-mail address

Customer's opinion about the concluded sales contract

Article 6 1 lit. a) GDPR

The data is stored until the data subject withdraws his consent for further processing of his data for this purpose.

E-mail address 

Keeping tax or accounting books

Article 6 1 lit. c) GDPR in connection from art. 86 § 1 of the Tax Code, i.e. of January 17, 2017 (Journal of Laws of 2017, item 201) or Art. 74 section 2 of the Accounting Act, i.e. of 30 January 2018 (Journal of Laws of 2018, item 395)

The data is stored for the period required by law requiring the Administrator to store tax books (until the expiry of the limitation period for tax liability, unless tax acts provide otherwise) or accounting (5 years from the beginning of the year following the financial year to which the data relate).

First name and last name; address of residence / business / registered office (if different from the delivery address), company name and tax identification number (NIP) of the Customer

Determining, investigating or defending claims that may be raised by the Administrator or which may be raised against the Administrator

Article 6 1 lit. f) GDPR

The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of claims against the data subject for the business activity conducted by the Administrator. The limitation period is determined by law, in particular the Civil Code (the basic limitation period for claims related to conducting business activity is three years, and for a sales contract - two years).

First name and last name; contact phone number; e-mail address; delivery address (street, house number, apartment number, zip code, city, country), address of residence / business / registered office (if different from the delivery address).

In the case of Customers who are not consumers, the Administrator may additionally process the company name and the Customer's tax identification number (NIP).

  1. Any person whose data subject (if the Service Provider is the administrator) has the right of access, rectification, erasure or restriction of processing, the right to object, the right to lodge a complaint to the supervisory authority in accordance with the Regulations.
  1. The Service Provider reserves the right to process User's data after termination of the Agreement or withdrawal of consent only to the extent of the need to pursue any claims before a court or if national or EU regulations or international law oblige us to retain data.

  2. The Service Provider has the right to disclose User's personal data and other data to entities authorized under applicable law (e.g. law enforcement authorities).

  3. The deletion of personal data may occur as a result of withdrawing consent or filing a legally admissible objection to the processing of personal data.

  4. The Service Provider informs that anonymously the Customer can only view the range of products offered for purchase via the Online Store. The User may not make purchases via the Online Store or Online Rental anonymously or via a pseudonym. To place an order, it is necessary to provide personal data specified in this Policy.

  5. In order to exercise the rights referred to in this point of the privacy policy, you can contact the Administrator by sending an appropriate message in writing or by e-mail to the Administrator's address indicated at the beginning of the privacy policy or using the contact form available on the Online Store website.

Profiling in the online store

  1. The provisions of the GDPR impose an obligation on the Administrator to provide information on automated decision making, including profiling referred to in art. 22 paragraph 1 and 4 of the GDPR, and - at least in these cases - relevant information about the rules for their taking, as well as about the significance and anticipated consequences of such processing for the data subject. With this in mind, the Administrator provides information on possible profiling in this section of the privacy policy.

  2. The Administrator may use profiling for direct marketing in the Online Store, but the decisions taken on the basis of it by the Administrator do not relate to the conclusion or refusal to conclude a sales contract or the possibility of using electronic services in the Online Store. The effect of using profiling in the Online Store may be, for example, granting a given person a discount, sending them a rebate code, reminding about unfinished purchases, sending a product proposal that may correspond to the interests or preferences of a given person, or offering better conditions compared to the standard offer of the Online Store . Despite profiling, a given person makes a free decision whether they want to take advantage of the discount received in this way, or better conditions and make a purchase in the Online Store.

  3. Profiling in the Online Store is based on the automatic analysis or forecast of a given person's behavior on the Online Store website, e.g. by adding a specific product to the basket, browsing a specific product page in the Online Store, or by analyzing the history of purchases made in the Online Store. The condition for such profiling is that the Administrator has personal data of a given person in order to be able to subsequently send them, e.g. a rebate code.

  4. The data subject has the right to not be subject to a decision that is based solely on automated processing, including profiling, and has legal effects on that person or similarly significantly affects him.

Cookies in the online store, operating data and analytics

  1. The website www.nikbuty.pl uses cookies ("cookies"). These are small text files sent by the web server and stored by the browser computer software. When the browser reconnects to the site, the site recognizes the type of device the user connects to. Parameters allow reading the information contained therein only to the server that created them. Cookies therefore facilitate the use of previously visited websites. Detailed information about cookies, as well as the history of their creation can be found, among others here: http://en.wikipedia.org/wiki/Ciasteczko.

  2. The administrator may process the data contained in cookies when visitors use the Online Store website for the following purposes:
  •  identify Clients as logged in to the Online Store and show that they are logged in;
  • remembering products added to the basket to place an order;
  • remembering data from completed order forms, surveys or login data to the Online Store;
  • adapting the content of the Online Store website to individual customer preferences (e.g. regarding colors, font size, page layout) and optimizing the use of Online Store websites;
  • keeping anonymous statistics showing how to use the Online Store website;
  • remarketing, i.e. research on the characteristics of the behavior of visitors to the Online Store by anonymous analysis of their activities (e.g. repeated visits to specific websites, keywords, etc.) in order to create their profile and provide them with advertisements tailored to their anticipated interests, also when they visit other websites in the Google Inc. advertising network and Facebook Ireland Ltd.
  1. By default, most web browsers available on the market accept saving cookies by default. Everyone has the ability to specify the conditions for the use of cookies using their own web browser settings. This means that you can, for example, partially restrict (e.g. temporarily) or completely disable the ability to save cookies - in the latter case, however, this may affect some of the functionality of the Online Store (for example, it may be impossible to go through the order path through the order form due to for not remembering products in the basket during the next steps of placing the order).
  1. The web browser settings for cookies are important from the point of view of consent to the use of cookies by our Online Store - in accordance with the law, such consent may also be expressed through the web browser settings. In the absence of such consent, please change your web browser settings in the field of cookies.

  2. The customer should be aware that disabling cookies may affect how the page will display in the browser. Failure to change the cookie settings means that they will be placed on the user's end device, and thus the Service Provider may access them.

  3. The use of the Online Store by the Customer without changing the browser settings means acceptance of the above rules for the use of cookies and consent to their use by the Service Provider.

  4. The customer can at any time disable or restore the option of collecting cookies by changing the settings in the web browser. Cookie management instructions are available at:
    http://www.allaboutcookies.org/manage-cookies

  5. Detailed information on changing the settings for cookies and their self-removal in the most popular web browsers are available in the help section of the web browser and on the following pages (just click on the link):
  • in the Chrome browser
  • in Firefox
  • in Internet Explorer
  • in the Opera browser
  • in Safari
  • in the Microsoft Edge browser
  1. The information collected relates to the IP address, type of browser used, language, type of operating system, Internet service provider, time and date information, location and information sent to the website via the contact form.
  1. The collected data is used to monitor and check how users use our websites to improve the functioning of the website by providing more efficient and trouble-free navigation. We monitor information about users using the Google Analitics tool, which records the user's behavior on the website.
  2. Cookies identify the user, which allows him to tailor the content of the website he uses to his needs. By remembering his preferences, he allows to tailor ads targeted to him. We use cookies to guarantee the highest standard of convenience for our website, and the collected data is used only within the Service Provider's organization to optimize operations.
  3. On our website, the Service Provider uses the following cookies:
  • necessary "cookies, enabling the use of services available on the website, e.g. authentication cookies used for services that require authentication on the website;
  • cookies used to ensure security, e.g. used to detect fraud in the field of authentication on the site;
  • "Performance" cookies, enabling the collection of information on the use of website pages;
  • "Functional" cookies, enabling "remembering" the settings selected by the user and personalizing the user interface, e.g. in terms of the language or region of the user's origin, font size, website appearance, etc .;
  • "Advertising" cookies, enabling users to provide advertising content more tailored to their interests.
  1. The Service Provider as an Administrator may use the services of Google Analytics, Universal Analytics provided by Google Inc. in the Online Store. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA) and the Facebook Pixel service provided by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland). These services help the Administrator analyze traffic in the Online Store. The collected data are processed as part of the above services in an anonymous manner (these are the so-called operational data that prevent identification of a person) to generate statistics helpful in administering the Online Store. These data are aggregate and anonymous, i.e. they do not contain identification features (personal data) of persons visiting the Online Store website. The Administrator using the above services in the Online Store collects such data as sources and medium of acquiring visitors to the Online Store and how they are stored on the Online Store website, information on the devices and browsers from which they visit the website, IP and domain, geographical data and demographic data (age , gender) and interests.
  1. It is possible for a person to easily block sharing of Google Analytics information about his activity on the Online Store website - for this purpose, you can install the browser add-on provided by Google Inc. available here: https://tools.google.com/dlpage/gaoptout?hl=en

General provisions 

  1. The Online Store may contain links to other websites. The Service Provider urges you to read the privacy policy established there after switching to other websites. The Privacy Policy applies only to the Service Provider's Online Store.

  2. The operator reserves the right to change the privacy policy and cookie policy at any time. The uniform text of the privacy policy and cookie policy after the changes will be available in the Online Store main page in the "Privacy Policy" tab. Any change to the privacy policy and cookies will be visible in the "Privacy Policy" tab on the main page of the Online Store and Online Rental.

Accept

Strona korzysta z plików cookie w celu realizacji usług zgodnie z Polityką prywatności. Możesz określić warunki przechowywania lub dostępu do cookie w Twojej przeglądarce lub konfiguracji usługi.