Privacy policy

This document sets out the terms and conditions for the processing of personal data (hereinafter also referred to as “data”) and cookies in the area of the blu-lifestyle.eu online shop, operated via the website provided at the URL: blu-lifestyle.eu, hereinafter referred to as the “Shop”.

§1. HOW TO CONTACT THE DATA CONTROLLER

The administrator of the personal data processed within the Shop is Katarzyna Cieślińska, conducting business under the name K&A Katarzyna Cieślińska, with registered office in Parzniew (05-808) at Działkowa street 113/16, registered in the Central Register of Business Activity and Information maintained by the Minister of Development, under NIP number 7521389240 and REGON number 388232630. The Data Controller can be contacted at the following telephone number: +48 661 712 472 and by e-mail: kontakt.kanda@gmail.com.

§2. ON WHAT BASIS WE PROCESS YOUR DATA

When collecting personal data, we always inform you of the legal basis for its processing. It stems from the provisions of RODO (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of individuals with regard to the processing of personal data on the free movement of such data and the repeal of Directive 95/46/EC – General Data Protection Regulation). When we report on:

Art.6(1)(a) RODO – this means that we process personal data on the basis of consent received,
Art.6(1)(b) RODO – this means that we process personal data because it is necessary for the performance of a contract or for taking action prior to entering into a contract, at your request,
Art.6(1)(c) RODO – this means that we process personal data in order to comply with a legal obligation,
Art.6(1)(f) RODO – this means that we process personal data in order to pursue legitimate interests.

§3. INFORMATION ON DATA PROCESSING FOR THE CONCLUSION AND PERFORMANCE OF CONTRACTS, POSSIBLE REDRESS AND DEFENCE OF CLAIMS

We may process personal data necessary for the performance of the contract you have entered into with us. However, even before it is concluded, we may process the personal data necessary to take action on your request. The processing of these data is carried out on the basis of Art. 6(1)(b) RODO.
During and after the performance of the contract, we process the personal data of a party to the contract for the purpose of possible processing of claims and the assertion of claims. Our legitimate interest is, for example, to be able to respond to a possible complaint, which we are obliged to do under separate civil law provisions. In this case, we will process your personal data on the basis of our legitimate interest in defending against or pursuing possible claims. The processing of these data is carried out on the basis of Art. 6(1)(f) RODO.
We will retain this data for the period necessary to fulfil the designated purposes, but no later than until the statute of limitations for claims under separate legal provisions.
You have the right of access, rectification, erasure, restriction of processing, the right to data portability, as well as the right to lodge a complaint with a supervisory authority. Where data is processed for the purpose set out in point 2, you also have the right to object to the processing.
The provision of this data is voluntary, but failure to provide this data will prevent the conclusion of the contract or its execution.6 The recipients of this data are our web host, our email service provider, our IT service provider, our shipping service provider, our accounting and invoicing software provider, our electronic payment and banking service provider, our legal, advisory and debt collection service provider and other service providers we use for the designated purpose.

§4. INFORMATION ON DATA PROCESSING FOR SENDING THE NEWSLETTER

We make it possible to sign up to be a recipient of our newsletter. If you have used this functionality, we process your personal data precisely for the purpose of sending it. The newsletter may contain advertising, commercial or marketing content.
The processing of this data is based on your consent and thus Art. 6(1)(a) RODO.
You have the right to withdraw the consent you have given at any time. However, the withdrawal of consent does not affect the lawfulness of previous data processing.
We will keep your data until you withdraw the consent you have given. In case you never revoke it, we will process your data until we stop sending the newsletter.
You have the right of access, rectification, erasure, restriction of processing, the right to data portability, as well as the right to lodge a complaint with a supervisory authority.
The provision of this data is voluntary, but failure to provide this data will prevent the newsletter from being sent.
The recipients of this data are our web host, IT service provider, email service provider and newsletter sending service provider.

§5. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF SENDING NOTIFICATIONS

We allow you to subscribe to the list of recipients of our notifications, displayed via your web browser. If you have used this functionality, we process your personal data precisely for the purpose of sending it. Notifications may contain advertising, commercial or marketing content.
The processing of this data is based on your consent and thus Art. 6(1)(a) RODO.
You have the right to withdraw the consent you have given at any time. However, the withdrawal of consent does not affect the lawfulness of previous data processing.
We will keep your data until you withdraw the consent you have given. In the event that you never withdraw it, we will process your data until we stop sending you notifications.
You can withdraw your consent to data processing in your web browser.
You have the right of access, rectification, erasure, restriction of processing, the right to data portability, as well as the right to lodge a complaint with a supervisory authority.
The provision of this data is voluntary, but failure to provide this data will prevent notifications from being sent.
The recipients of this data are: our web host and the provider of the notification sending service.

§6. INFORMATION ON DATA PROCESSING FOR DIRECT MARKETING PURPOSES

We may process your personal data for direct marketing purposes. This happens, for example, when we respond to your message with details of our offer.
The processing of these data is carried out on the basis of Art. 6(1)(f) RODO.
We will keep your data until the time necessary for the purpose of performance.
You have the right of access to your data, rectification, erasure, restriction of processing, the right to data portability, the right to object to data processing, and the right to lodge a complaint with a supervisory authority.
The provision of this data is voluntary and failure to provide this data will prevent direct marketing activities.
The recipients of this data are: our web host, IT service provider, email service provider.

§7. INFORMATION ON DATA PROCESSING FOR SECURITY PURPOSES

From the moment you launch our website, we process data such as:
- the public IP address of the device from which the request came,
- browser type and language,
- date and time of enquiry,
- number of bytes sent by the server,
- the URL of the page previously visited, in the event that the visit was made via a link,
- information about errors that occurred in the execution of the request.
Our legitimate interest in this processing is to keep server event logs and protect the Shop from potential hacking attacks and other abuse. This includes the ability to determine the IP address of a person carrying out an unauthorised activity in the Shop area, such as attempting to breach security or publish prohibited content, or attempting unauthorised activities using our servers.
The processing of these data is carried out on the basis of Art. 6(1)(f) RODO.
We will retain this data for the period necessary to fulfil the designated purposes, but no later than until the statute of limitations for claims under separate legal provisions.
You have the right to access, rectify, erase, restrict the processing of your data, object to its processing, as well as the right to lodge a complaint with a supervisory authority.
The provision of this data is a condition for the use of the Shop. Failure to provide this data will make it impossible to use the Shop.
The recipient of this data is our web host and IT service provider.

§8. INFORMATION ON DATA RECIPIENTS

When processing personal data, we use external services. Therefore, the recipients of your personal data may be third parties. When collecting personal data, we always inform about these recipients, but for the primacy of the readability of the message, we do so briefly. Therefore, we hereby clarify that when we report on specific categories of recipients, these are as follows:

Delivery service provider / couriers: InPost S.A, Wielicka Street 28, 30-552 Kraków; DPD Polska Ltd. Mineralna Street 15, 02-274 Warszawa.
IT service provider: Blue Owl Ltd. Wiosenna Street 19, 60-592 Poznań.
Hosting provider: home.pl S.A, Zbożowa Street 4, 70-653 Szczecin.
Email service provider: Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States.
Accounting service provider: Marta Lipińska Accounting Office, Baśniowa Street 7, 05-805 Kanie.
Supplier of invoice processing software: Fakturownia Ltd. Juliana Smulikowskiego Street 6/8, 00-389 Warsaw.
Legal/advisory/collection service provider – these service providers are established on a case-by-case basis as each need arises.
Newsletter service provider: OnTheGoSystems Ltd., 22 / F 3 Lockhart Road, Wanchai, Hong Kong.
Provider of electronic payment services: PayPal (Europe) S.Ã r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luksemburg; PayU S.A., ul. Grunwaldzka 186, 60-166 Poznań.
Banking service provider: ING Bank Śląski S.A., Sokolska Street 34, 40-086 Katowice.

§9. INFORMATION ON TRANSFERS OF DATA TO THIRD COUNTRIES

As we use third-party providers, your personal data may be transferred outside the zone of the European Economic Area, namely to countries: United States of America (USA) and the People’s Republic of China.
The European Commission has found that some countries outside the European Economic Area (EEA) adequately protect personal data.
As the country to which we transfer personal data is not recognised as a secure country, the transfer of data is based on a contract containing standard data protection clauses adopted by the European Commission.

§10. ABSOLUTE RIGHTS OF DATA SUBJECTS

When we write about the rights relating to the processing of your personal data, we refer to the rights described below. The possibility of exercising the following rights is independent of the legal basis for the processing of personal data.

Right of accessstrong
You have the right to obtain confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have the right to access this data and to receive additional information about:

processing purposes,
categories of data concerned,
the recipients or categories of recipients to whom the data have been or will be disclosed, in particular recipients in third countries or international organisations,
where possible, the intended period of data retention and, where this is not possible, the criteria for determining that period,
the right to request us to rectify, erase or restrict the processing of your data, to object to such processing, and the right to lodge a complaint with a supervisory authority,
the source of the data, if your data was not collected from you,
automated decision-making, including profiling, and the modalities of such decision-making, as well as the significance and anticipated consequences of such processing for you.Upon receipt of such a request, we are obliged to provide a copy of the personal data being processed. If such a request is received electronically and if no other objection is received, we will also provide the information electronically.

Right of rectification
You have the right to request that we immediately rectify personal data concerning you that is inaccurate. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by providing an additional statement.

Right to erasure (to be forgotten)
You have the right to request us to delete personal data concerning you without delay. We are then obliged to delete the personal data without undue delay if one of the following circumstances applies:

you have withdrawn your consent to process your personal data and we have no other basis for processing it,
you have raised an effective objection to the processing of data concerning you,
Your personal data was processed unlawfully,
Your personal data must be deleted in order to comply with a legal obligation,
Your data has been collected in connection with the offering of information society services.

Right to restrict processing
You have the right to request us to restrict processing in the following cases:

where you question the accuracy of the data, for a period of time to allow us to check the accuracy of the data,
the processing is unlawful and you object to the erasure of the data, requesting instead that its use be restricted,
we no longer need your personal data for the purposes of processing, but you need them to establish, assert or defend your claims,
you have objected to the processing of your data – until it is determined whether the legitimate grounds on our side override the grounds for your objection.

Automated decisions, including profiling
You have the right not to be subject to a decision that is based solely on automated processing, including profiling, and produces legal effects on you or similarly significantly affects you.
The law does not apply if this decision:

is necessary for the conclusion or performance of a contract between you and us,
is allowed by Union law or the law of the Republic of Poland and which provides for appropriate measures to protect your rights, freedoms and legitimate interests, or
is based on your explicit consent.

Right of action
You have the right to lodge a complaint in relation to the processing of your personal data, to the supervisory authority: President of the Office for the Protection of Personal Data, Stawki Street 2, 00-193 Warsow, tel. 22 531 03 00, fax. 22 531 03 01, e-mail: kancelaria@uodo.gov.pl.

§11. RELATIVE RIGHTS OF DATA SUBJECTS

When we write about the rights relating to the processing of your personal data, we refer to the rights described below. The possibility of using them depends on the legal basis for processing personal data in each case.

Right to withdraw consent to processing
Where we process your personal data on the basis of your consent to do so, you have the right to withdraw your consent at any time. Naturally, the withdrawal of the consent given does not affect the lawfulness of the previous processing of personal data.

Right to data portability
You have the right to receive the personal data you have provided to us, in a structured and commonly used machine-readable format. You also have the right to send this personal data to another controller without hindrance on our part if the processing takes place:

on the basis of consent or on the basis of a contract, and
in an automated manner.

When exercising your right to data portability, you have the right to request that we send your personal data directly to another controller, insofar as this is technically possible. This right must not adversely affect the rights and freedoms of others.

Right to object
Where we process your personal data on the basis of Art. 6(1)(f) RODO, you have the right to object to the processing of this data on grounds relating to your particular situation.
We are then no longer allowed to process this personal data unless we can demonstrate the existence:

valid, legitimate grounds for processing, such grounds being overridden by the interests, rights and freedoms of your person, or
grounds for the establishment, assertion or defence of claims.

Also, if you object to the processing of your personal data for direct marketing purposes, then we will not be able to process it for such purposes.

§12. COOKIES – INTRODUCTION

The Shop website uses cookies. These are commonly used, small files containing a string of characters that are sent to and stored on the end device (e.g. computer, laptop, tablet, smartphone) used when visiting the Shop. This information is sent to the memory of the browser used, which sends it back on subsequent visits to the website. We can categorise cookies according to three methods of division.

In terms of the purposes for which cookies are used, we distinguish between three categories:

Essential cookies – these cookies enable the website and its functionality to function properly, e.g. authentication or security cookies. Without their storage on your device, the use of the website will be impossible.
Analytics files – these files enable monitoring of web page views, traffic sources, time spent on the website. Without saving them, the use of the website’s functionality will not be restricted.

In terms of their duration of validity, we distinguish between two categories of cookies:

session files – existing until the end of a given session,
permanent files – existing after the session has ended.

In terms of differentiating the entity administering the cookies, we distinguish between:

our cookies,
third-party cookies.

§13. DATA CONTROLLER COOKIES

The cookies we administer allow:

access authentication,
maintaining the session after logging in,
securing the Shop against hacking attacks,
“remembering” by the browser the content of the fields of forms that are completed (optional),
“remembering” by the browser of items added to the basket.

This makes using the Shop’s functionality easier and more enjoyable.

§14. CONSENT TO THE USE AND MANAGEMENT OF COOKIES

With the exclusion of essential cookies, their processing is based on the user’s consent.

Consent to the processing of cookies is voluntary and can be withdrawn at any time. Please note, however, that if you do not consent to the use of certain cookies, this may result in restrictions on the use of the Shop and its functionality or even prevent you from using it.

You can give your consent to the processing of cookies:

by means of the software settings installed on the telecommunications terminal equipment used by the user,
by using the button containing a declaration of consent to the processing of cookies or confirming that you have read its terms and conditions,
using the settings available in the website area.

§15. CACHE

When you use the Shop website, we may automatically use the cache memory installed on your device. Within local storage, it is possible to store data inter-sessionally, i.e. between successive visits to the Shop’s website. The purpose of using a cache is to speed up the use of the Store by eliminating the situation where the same data would be repeatedly downloaded from the Store, thereby overloading the user’s Internet connection. The cache can also store data such as the login password.

§16. LINKS TO OTHER WEBSITES OR SOFTWARE

The shop may contain links to other websites or software. We are not responsible for the privacy and cookie processing policies of these websites or this software. We recommend that you read the privacy and cookie policies of these websites or software after accessing them or before installing them.

§17. CHANGES TO THE PRIVACY AND COOKIES POLICY

The privacy and cookies policy comes into force on the date of publication on the Shop website.
The Privacy and Cookies Policy is amended by publishing its new content on the Shop’s website.
We will publish information about changes to the Privacy and Cookies Policy in the area of the Shop’s website no later than 3 days prior to the effective date of its new wording.