PRIVACY AND COOKIES POLICY
I treat your personal information and its protection very responsibly. This Privacy Policy applies to personal data that I process in connection with my business. The document you are reading is based on personal data laws, including the provisions of the RODO (General Data Protection Regulation of April 27, 2016) or the Data Protection Act of May 10, 2018. The content of the Privacy Policy is subject to change at any time. I will always inform you of changes and provide the current version of the document. I cooperate with entities that provide a high level of protection for the personal data I process.
| Contact me! | For any matter related to the protection of your personal data, you can contact us at sklep@msalamon.pl and at + 48 508 848 177. |
| Data controller | The administrator of your personal data processed in connection with my Internet activity is Mateusz Salamon, conducting business activity with registered office in Gdynia (81-555) at Malopolska 14 Street, disclosed in the Central Register and Information on Business Activity, using NIP 9282047329, REGON number 080517896. |
| What does this privacy policy contain? | Here you will find information about, among other things, the principles of processing your personal data, the purposes for which I process your data and the legal grounds that enable me to do so, the tools I use within the website, as well as the recipients of your data and your rights. |
TABLE OF CONTENTS
- What data do I process, for what purpose and on what basis?
- Your rights related to the processing of personal data
- Recipients of data
- Requirement of personal data
- Automated decision-making and profiling
- How long do I process your data?
- Social media
- Newsletter
- Withdrawal of consent for data processing
- Cookies and tools implemented on the site
- META (Facebook) Pixel
- Google Analytics
- Microsoft Clarity
- Content from external sites
- Server logs
- Final provisions
WHAT DATA DO I PROCESS, FOR WHAT PURPOSE AND ON WHAT BASIS?
I process your personal data, for example, if you contact me, and if you are my customer and make purchases of my products.I process the personal data I receive from you for the following purposes and on the following legal grounds:
| PURPOSE OF PROCESSING | RANGE OF DATA | LEGAL BASIS |
| Contacting you | e-mail address (name and surname), data contained in the body of the message, telephone number, other data provided by you in the body of the correspondence | The legal basis for such processing is Article 6(1)(a) of the RODO, which allows me to process data on the basis of consent in order to respond to your message, and Article 6(1)(f) of the RODO, which allows me to pursue my legitimate interest in ensuring efficient and effective communication between the website administrator and the user. |
| Placing and processing an order for products/services | Name, e-mail address, address of residence, telephone number, in addition: NIP, data on business activity. Provision of data is voluntary, but necessary to complete the order. | The legal basis for such processing is: Article 6(1)(b) of the RODO, which allows us to process data for the purpose of taking steps to enter into a contract and for the purpose of performing a contract concluded by placing an order. |
| Issuing an invoice and fulfilling legal and tax obligations | business details, name, address, TIN | The legal basis for such processing is primarily Article 6(1)(c) of the RODO, which allows personal data to be processed if such processing is necessary for the controller to comply with its obligations under the law. |
| Handling of complaints and processing of withdrawal from the contract | e-mail address, name and surnamedata included in the complaintnumber of bank accountaddress of residencephone number | The legal basis for such processing is firstly Article 6(1)(b) of the RODO, which allows personal data to be processed if it is necessary for the performance of a contract or taking steps to enter into a contract, and secondly Article 6(1)(c) of the RODO, which allows personal data to be processed if such processing is necessary for the controller to comply with its obligations under the law. |
| Marketing objective(newsletter) | e-mail address, first name | The legal basis for such data processing is primarily Article 6(1)(a) of the RODO, i.e. your consent to receive commercial information, marketing content from me, and Article 6(1)(f) of the RODO, which allows personal data to be processed if by doing so the controller pursues its legitimate interest (in this case, it is the purpose of marketing its own services and products). |
| Archival and evidentiary purpose, for the purpose of securing information that can be used to prove facts | all data listed in the table on my data processing | The legal basis for such processing is Article 6(1)(f) of the RODO, which allows the processing of personal data if by doing so the controller pursues its legitimate interest (in this case, the controller’s interest is to have personal data to prove facts related to the use of the site, performance of a contract, processing of data on a legitimate legal basis). |
| Determination, investigation or defense of claims | all the above mentioned data | The legal basis for such processing is Article 6(1)(f) of the RODO, which allows the processing of personal data if, by doing so, the controller pursues its legitimate interest (in this case, the controller’s interest is to have personal data to establish claims, assert claims or defend against claims by users of the site or third parties or customers). |
| Manage the site, use tools to improve the site and analyze data related to the use of the site | IP behavior on the site | The legal basis for such data processing is Article 6(1)(f) of the RODO, which allows personal data to be processed if, by doing so, the controller pursues its legitimate interest (in this case, the controller’s interest is an action aimed at optimizing the site, including content presented on the site, to the needs of users, improving the controller’s offer). |
| Use of cookies on the site | IP user behavior on the site | The legal basis for such processing is Article 6(1)(a) of the RODO, which allows us to process personal data with your consent. You give your consent during your first visit to the site. |
| Management of administrator’s social media profiles | data that is related to the use of a particular social media platform | The basis for the processing is the administrator’s authorization exercised under Article 6(1)(f) of the RODO, i.e. the administrator’s legitimate interest to manage the profile on a given platform, and your consent (Article 6(1)(a) of the RODO), which you express, for example, by joining a group created by the administrator on a given platform. |
| Fulfillment of personal data protection obligations (e.g., obligation to create registers and records) | the scope of the data is defined by law and varies depending on the content of the given legal obligation on the controller | The basis for the processing is Article 6(1)(c) of the RODO, i.e. it is carried out on the basis of legal provisions that mandate the processing of personal data. |
| Posting comments/opinions on the site | name, e-mail address | The basis for processing is Article 6(1)(a) of the RODO, i.e. your consent, which you give to add a comment on our site. |
INFORM YOU THAT YOU HAVE THE FOLLOWING RIGHTS RELATED TO THE PROCESSING OF YOUR PERSONAL DATA:
| If you want to realize your entitlement, write to sklep@msalamon.pl | The right of access to information – means that every person whose data is processed has the right to know what happens to their personal data. Among other things, the Privacy Policy you are about to read was created for this purpose. Right of access to personal data – means that if I, as the controller of your data, receive a request from you for access to your data, I am obliged to provide you with such information. I am to perform my duties in this regard as a data controller immediately, no later than within one month. If it is not possible to do so within this timeframe, I am obliged to inform you at least whether I am processing your data, and I can then extend the deadline for a complete response to your request by two months. Right to rectification of personal data – means that you can request that the controller of your data rectify incorrect data or complete incomplete data. The right to erasure of personal data, the right to be forgotten – means that you can demand from me, as the administrator of your personal data, to delete it, to inform the person to whom your data has been transferred about its deletion. You also have the right to demand that your data that has been made public by me be subject to deletion by other administrators as well. As the controller of your data, I am also obliged, upon your request, to inform you to which recipients your data subject to deletion has been transferred. The right to restrict processing of personal data – means that you can request that the processing of your personal data be restricted. This happens, for example, when you disagree with the accuracy of the processed data, or when you decide that you no longer need the data for processing purposes. The right to object to the processing of personal data – means that you can object to your data being processed by the controller.The right to data portability – means that under certain conditions you can request that your data be transferred directly to a designated, other controller. Right to lodge a complaint – means that as soon as you consider that my processing of your data violates the law, you can lodge a complaint with the President of the Office for Personal Data Protection. Right to withdraw consent – means that in the case of processing based on your consent, you have the right to withdraw it at any time. The withdrawal of consent does not affect the legitimacy of the processing of your personal data until you withdraw your consent. |
DATA RECIPIENTS
Your personal data may be transferred to third parties whose services I use in connection with the operation of www.msalamon.pl and www.sklep.msalamon.pl and my social media profiles. I assure you that I carefully select the entities with which I cooperate or whose services I use, and I am always guided by the assurance of adequate data protection.
In the case of transfers of personal data outside the European Economic Area, entities that carry out such processing shall maintain an adequate level of data protection in accordance with EU standards by, among other things, applying standard contractual clauses adopted by the European Commission.
Your data may be transferred to entities with which I cooperate, in particular in the field of IT system maintenance services and hosting (maintaining data on the server), newsletter mailing, delivery of orders from the Store, accounting services, leaving reviews, fast online payments and installment payments, embedding files on the website or marketing tools.
REQUIREMENT TO PROVIDE PERSONAL DATA
The provision of personal data is voluntary and depends on your decision, but the provision of certain personal data is necessary to meet your expectations for concluding a contract or using my services. If you place an order for a product – providing your data is necessary to fulfill your requests related to the concluded contract.
If you contact me on any matter related to the site, my products or the services I provide, it may be necessary to provide your contact information to answer your question.
If the requirement to provide your data arises from the law – providing data is your obligation.
Automated decision-making and profiling
Your data is not used by me for automated decision-making that could affect your legal situation or have other similarly momentous effects on you.
The tools implemented as part of the site may profile user behavior in order to improve the site and tailor the content displayed to the user’s preferences, in which case data of a primarily anonymous nature (location, age, interests) is analyzed.
I use cookies and analytics tools like any website. In the following Privacy Policy, I indicate how cookies work and how these actions affect you.
HOW LONG DO I PROCESS YOUR DATA?
In accordance with applicable laws, I will process your data only for the time needed to achieve the stated purpose. After this period, your personal data will be irreversibly deleted or destroyed. The additional year associated with the processing of personal data collected for the performance of a contract is due to the fact that an application may be made by you just before the expiration of the statute of limitations.
I process your data for a period of time:
| 3 or 6 years + 1 year | for personal data processed for the purpose of establishing, asserting or defending claims; the choice of 3 or 6 years depends on whether both parties are businesses or not; |
| Until such time as an objection is successfully raised or the purpose of the processing is achieved | with respect to personal data processed on the basis of a legitimate interest of the controller; |
| until obsolete or no longer useful | with respect to personal data processed primarily for website administration purposes; |
| Until your consent is withdrawn or no longer useful | with respect to personal data processed on the basis of your consent, unless explicitly indicated otherwise at the time of consent. |
SOCIAL MEDIA
I maintain profiles on social media platforms, and my website includes plug-ins redirecting to them.
I am the administrator of a profile on a given platform, and I process your data (name, nickname, other data indicated by you on your profile) mainly for the purpose of managing my profile, creating a community and interacting with observers.
The provider of a given social media platform determines the rules of the platform and the rules for processing data for its own purposes, so I encourage you to read the rules and policies of each platform. I do not process data collected by social media platforms for my own purposes.
Plug-ins leading to my profiles allow you to link directly to my profile when you click on the platform icon. The social platform may acquire information that you are using my site, especially when you are logged in as a user of the platform.
If you do not want social networks to obtain information about your activities, I recommend logging out of your profiles and using your browser in incognito mode.
Within my site you will find plug-ins that redirect you to my profiles on the platforms indicated below, I also indicate the privacy policies of the platforms so that you can read them in accordance with my recommendations:
- Facebook: https://www.facebook.com/msalamonpl and https://www.facebook.com/sklepmsalamon
Platform privacy policy: https://www.facebook.com/privacy/explanation - Instagram https://www.instagram.com/msalamon_pl/ and https://www.instagram.com/sklep_msalamon_pl/
Platform privacy policy: https://help.instagram.com/519522125107875?helpref=page_content - Twitter : https://twitter.com/szajamon
Platform privacy policy: https://twitter.com/en/privacy - YouTube: https://www.youtube.com/@msalamon
Platform privacy policy: https://support.google.com/youtube/answer/7671399 - LinkedIn: https://www.linkedin.com/in/mateusz-salamon-907b16121/
Platform privacy policy: https://www.linkedin.com/legal/privacy-policy - GitHub: https://github.com/lamik
Platform privacy policy: https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement
NEWSLETTER
Your data provided in the newsletter subscription form (name, surname) is processed for the purpose of sending the newsletter and based on your consent. Remember to confirm your subscription to my newsletter after you receive the first message.
Your data will not be transferred to a third country outside the European Union for the purpose of sending the newsletter. The data you provide in the newsletter sign-up form is voluntary, but necessary to send you the newsletter based on your consent, as well as to send you information about marketing of our own products or services based on my, as the administrator, legitimate interest (i.e., Article 6(1)(f) of the RODO) and to pursue possible claims in connection with sending the newsletter.
You will continue to receive my newsletter until you stop subscribing or I stop sending the newsletter. If you do not subscribe for 6 months, I may stop sending the newsletter, in which case I will remove you from my subscriber list.
The mechanism for unsubscribing from the newsletter service is not complicated and consists in clicking on the active link with the information I unsubscribe from the newsletter. Once you have exercised this right and unsubscribed from the newsletter, your newsletter subscription data will be stored for the period necessary to defend against potential claims. This is my legitimate interest as data controller.
I may provide personal data provided when signing up for the newsletter to the following entities: IT system maintenance and hosting service provider, email service provider, newsletter service provider, and third parties supporting me in sending the newsletter, with whom I have entered into relevant agreements.
As in any case where I process your data, you have the right to access the content of your data, to receive a copy of it, the right to rectification, deletion, restriction of processing, the right to data portability, the right to object, the right to withdraw consent at any time.
However, keep in mind that if you withdraw your consent to data processing, this fact will not affect the lawfulness of data processing that was carried out on the basis of your consent before its withdrawal.
You also have the right to lodge a complaint with the President of the Office for Personal Data Protection as soon as you consider that the processing of your data violates the law. Your data will not be processed by automated means.
WITHDRAWAL OF CONSENT TO DATA PROCESSING
If the processing of personal data is based on consent, you may withdraw this consent at any time – at your own discretion. If you would like to withdraw your consent to the processing of personal data, to do so, simply send an email directly to the administrator’s address indicated at the beginning of this document.
If the processing of your personal data was carried out on the basis of your consent, revoking it does not make the processing of your personal data up to that point illegal. In other words, until you revoke your consent, I have the right to process your personal data and revoking it does not affect the lawfulness of the previous processing.
COOKIES AND TOOLS IMPLEMENTED ON THE SITE
This website, like many others, uses cookies. Cookies are short text information stored on the device you use to browse the web. They can be read by me (“own cookies”, which I use to make this website work properly, to improve my offerings), as well as by systems belonging to other entities whose services I use (“external cookies”). Remember that you have the right to change the cookie settings from your browser or to delete them.
When you visit the site for the first time, information about the use of cookies is displayed -.
My website uses the following tracking technologies:
- social plugins redirecting to my social profiles, which I mentioned more above,
- Analytical and marketing tools, such as Google Analytics, META (Facebook) Pixel, Hotjar.
META (Facebook) Pixel
META (Facebook) Pixel is an analytics tool, a piece of code implemented on the site, that allows me to target marketing efforts to people who have visited the site or are interested in my activities.
The data collected as part of the tool is anonymous (location, gender, age, online activity), though the provider may combine it with data it has collected about you as part of your use of its platform.
META (Facebook) Pixel helps me determine the effectiveness of my ads, reach a specific audience and shows their reactions to my actions.
You can read more about the tool on the vendor’s website:
https://pl-pl.facebook.com/business/help/742478679120153?id=1205376682832142.
Google Analytics
Google Analytics allows you to analyze your online services and activities. Google Analytics uses cookies, which are stored on your computer and enable analysis of your use of the site.
You have the option to disable the function of storing cookies by appropriate settings within your browser. However, there is a risk that you will lead to a situation where you will not be able to fully use all the functions of this website.
The data collected as part of the tool is anonymous (location, gender, age, online activity), though the provider may combine it with data it has collected about you as part of your use of its browser and/or its services.
I use Google Analytics to analyze the use of the website by its users and to improve it according to the users’ preferences. Thanks to the statistics obtained, I can, for example, adjust my offer.
Details about Google Analytics are available by clicking on the link: https://analytics.google.com/analytics/web/provision/?hl=pl#/provision.
Google ensures that it uses the data protection and security mechanisms provided by European regulations. Details of Google’s data protection are available at the following link: https://policies.google.com/privacy?hl=pl.
Microsoft Clarity
Microsoft Clarity is an analytics tool that allows me to analyze the behavior of my site’s users and allows me to improve my efforts to make the site easier to use and more relevant to my audience’s preferences.
Microsoft Clarity is a tracking code implemented on my site that records the activities of each user of a particular website and allows me to replicate your activities within a particular website that I maintain. The tool allows me to create an activity map and shows me, interest in particular elements of my website.
The data recorded within Microsoft Clarity does not identify a person (I have access to information such as the browser you use, the time you spend on a particular website, the opening of sub-pages within my website, the places you click while I cannot see the data you enter if you use the forms available within the website).
You have the option to disable the storage of cookies through the appropriate settings within your browser(https://www.hotjar.com/policies/do-not-track/).
Details about Microsoft Clarity are available by clicking on the link: https://clarity.microsoft.com/terms.
Microsoft Clarity ensures that it uses the data protection and security mechanisms provided by the European regulation. Details of Microsoft Clarity’s data protection are available at the following link: https://privacy.microsoft.com/privacystatement.
Content from external sites
I may post content from external services on my site, such as audiovisual or sound recordings, and the services may note when you play the content. If you have an account with a particular service, I recommend logging out of that service before playing content within my site if you don’t want the service to know about it.
Server logs
Using my site involves sending requests to the server where the site is hosted.
Each request to the server is recorded in the server logs, which include, for example: the IP address, the date and time of the server, information about the web browser and the operating system you are using.
The data recorded in the server logs are not associated with specific users of the site and are used as supporting material for administrative purposes.
The contents of the server logs are not disclosed to anyone except those authorized to administer the server.
FINAL PROVISIONS
The materials posted on this website are the administrator’s own intellectual creation and are subject to legal protection.
Use of shared content outside of permitted personal use may result in the risk of criminal and civil liability.
If you have a doubt about the legal nature of the content provided or how you can legally use it, please write me a message, (email address indicated at the beginning of this document) and I will give you a comprehensive answer.
Remember, too, that the content provided is for educational purposes and does not constitute or replace individual expert advice.
Finally, I would like to remind you that the content of this Privacy Policy is subject to change, such as when I change my service provider or the scope of functionality on the site. For your convenience, the date the Privacy Policy is updated is listed at the beginning.
That’s all I have to share with you now.
Thank you for your time.