PRIVACY POLICY

version effective from 03.03.2021

previous version of the Privacy Policy is available here

WHAT IS A PRIVACY POLICY?

We would like to inform you about the details of processing your personal data by us, to provide you with complete knowledge and comfort while using our website.

Since we operate in the internet industry ourselves, we understand the importance of protecting your personal data. Therefore, we make special efforts to protect your privacy and the information you provide us.

We carefully select and apply appropriate technical measures, especially those of a software and organizational nature, to ensure the protection of the processed personal data. Our site uses encrypted data transmission (SSL), which protects your identifying data.

In our Privacy Policy, you will find all the most important information regarding the processing of your personal data by us. We ask you to read it and we promise that it will not take more than a few minutes.

Who is the administrator of the website www.mrespekta.com?

The administrator of the website is Grzegorz Respekta, conducting business under the company RG-TECH Grzegorz Respekta, registered in the register of entrepreneurs of the Central Registration and Information on Business, conducted by the minister responsible for the economy at the address Wielopole 137, 33-311 Wielogłowy, NIP 7341423277, REGON 490701177 (i.e., us).

PERSONAL DATA

Which legal act regulates the processing of your personal data?

Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1), commonly known as GDPR. In matters not regulated by the GDPR, the processing of personal data is regulated by the Act on the Protection of Personal Data of May 10, 2018.

Who is the administrator of your personal data?

The administrator of your personal data is Grzegorz Respekta, conducting business under the company RG-TECH Grzegorz Respekta, registered in the register of entrepreneurs of the Central Registration and Information on Business, conducted by the minister responsible for the economy at the address Wielopole 137, 33-311 Wielogłowy, NIP 7341423277, REGON 490701177, phone: +48 608659845, email: mrespekta.com.

For matters concerning your personal data, you can contact us via:

email: kontakt@mrespekta.com, traditional mail: Wielopole 137, 33-311 Wielogłowy, phone: +48 608659845. HOW DO WE PROCESS YOUR PERSONAL DATA THAT YOU PROVIDE TO US?

What personal data do we process and for what purposes do we process it?

On our website, we offer you many different services for which we process various personal data, based on different legal bases.

Purpose Personal Data Legal Basis for Processing Data Retention Period conclusion and performance of the contract name, surname, correspondence address, email address, phone number, bank account number, credit card number art. 6 sec. 1 lit. b) GDPR, i.e., processing to take action at your request before entering into a contract and processing necessary for the performance of a contract you are a party to until the expiry of the limitation period for claims related to the performance of the contract creation and management of an account name, surname, email address, phone number, correspondence address, bank account number, credit card number art. 6 sec. 1 lit. b) GDPR, i.e., processing to take action at your request before entering into a contract and processing necessary for the performance of a contract you are a party to until the expiry of the limitation period for claims related to the performance of the contract adding reviews nick, name, surname, email address art. 6 sec. 1 lit. f) GDPR, i.e., processing to achieve our legitimate interest, which is to present on the website of the online store reviews concerning goods and the course of transactions until you object to the processing of personal data newsletter email address, name, surname art. 6 sec. 1 lit. a) GDPR, i.e., processing based on your consent to the processing of your personal data until you withdraw consent to the processing of personal data contact form name, surname, email address, phone art. 6 sec. 1 lit. f) GDPR, i.e., processing to achieve our legitimate interest, which is to maintain communication continuity and enable contact with us in matters of conducted business until you object to the processing of personal data organization of contests name, surname, email address, image, phone number art. 6 sec. 1 lit. a) GDPR, i.e., processing based on your consent to the processing of your personal data until you withdraw consent to the processing of personal data loyalty program name, surname, email address, phone number art. 6 sec. 1 lit. a) GDPR, i.e., processing based on your consent to the processing of your personal data until you withdraw consent to the processing of personal data traffic analysis on the online store website name, address of stay, IP address Art. 6 sec. 1 lit. f) GDPR, i.e., processing to achieve our legitimate interest, which is to analyze customer traffic on the website of the store until you object to the processing of personal data direct marketing of own goods and services, including remarketing name, address of stay, IP address Art. 6 sec. 1 lit. f) GDPR, i.e., processing to achieve our legitimate interest, which is the direct marketing of own services, including remarketing until you object to the processing of personal data establishment, pursuit, and enforcement of claims and defense against claims in proceedings before courts and other state bodies name, surname, address of residence, PESEL number, NIP, REGON, email address, phone number, IP address, bank account number, credit card number art. 6 sec. 1 lit. f) GDPR, i.e., processing to achieve our legitimate interest, which is to establish, pursue, and enforce claims and to defend against claims in proceedings before courts and other state bodies until the expiry of the limitation period for claims related to the performance of the contract fulfillment of legal obligations arising from legal provisions, in particular tax and accounting provisions name, surname, company, PESEL number, NIP or REGON, email address, phone number, correspondence address, credit card number Art. 6 sec. 1 lit. c) GDPR, i.e., processing is necessary to fulfill legal obligations incumbent on the Administrator, resulting from legal provisions, in particular tax and accounting provisions until the expiration of legal obligations incumbent on the Administrator, which justified the processing of personal data Voluntary Provision of Personal Data

The provision of the required personal data by you is voluntary but constitutes a condition for us to provide services to you (e.g., sending a newsletter or setting up an account).

Recipients of Personal Data

You can find the current list of entities to whom we disclose your personal data here.

Automated Decision-Making (including profiling)

We do not make decisions about you in an automated way nor do we use profiling.

Will we transfer your personal data outside the EEA or to an international organization?

In order to use Google's measurement and marketing tools, your personal data may be transferred to the United States, where Google LLC's servers are located.

Google LLC is listed in the register of entities participating in the Privacy Shield program (link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), and also uses standard contractual clauses regarding data security approved by the European Commission

In order to use Facebook tools, your personal data may be transferred to the United States, where Facebook Inc.'s servers are located.

Facebook Inc. is listed in the register of entities participating in the Privacy Shield program (link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active), thus the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with the Commission Implementing Decision (EU) 2016/1250 of July 12, 2016, on the adequacy of the protection provided by the EU-US Privacy Shield (link: https://eur-lex.europa.eu/legal-content/PL/TXT/HTML/?uri=CELEX:32016D1250&from=EN).

· HOW DO WE PROCESS YOUR PERSONAL DATA, WHICH WE RECEIVE FROM OTHER DATA ADMINISTRATORS (E.G., FACEBOOK)

Our online store allows:

logging into your account in the store using your Facebook profile, logging into your account in the store using your Instagram profile, sharing store content on your Instagram profile, sharing store content on your Facebook profile. In such cases, we receive your personal data not directly from you, but from services providing these functionalities, i.e., Facebook, Instagram. To allow you full control over your data, below we provide information on the processing of your personal data by us.

Categories of Relevant Personal Data

We process the following categories of relevant personal data:

identification data (i.e., personal data that you have published in your profile on Facebook, Instagram, primarily name, surname, nickname, email address, and image). Source of Personal Data

Your personal data comes from the service:

Facebook, administered by Facebook Ireland Ltd., Instagram, administered by Facebook Ireland Ltd. Purposes and Legal Bases for Processing Personal Data

Your personal data, which we have obtained, will be processed for the following purposes:

Purpose Personal Data Legal Basis for Processing Data Retention Period sharing content on your Facebook profile name, surname, image Art. 6 sec. 1 lit. f) GDPR, i.e., processing to achieve the legally justified interest of the Administrator, consisting of enabling you to disseminate store content via the functionality of the Facebook service until you object to the processing of personal data logging into the store account using a profile in the Facebook service name, surname, image Art. 6 sec. 1 lit. f) GDPR, i.e., processing to achieve the legally justified interest of the Administrator, consisting of enabling you to log into the store account using your profile in the Facebook service until the deletion of the store account sharing content on your Instagram profile nick, image Art. 6 sec. 1 lit. f) GDPR, i.e., processing to achieve the legally justified interest of the Administrator, consisting of enabling you to disseminate store content via the functionality of the Instagram service until you object to the processing of personal data logging into the store account using a profile in the Instagram service name, surname, image Art. 6 sec. 1 lit. f) GDPR, i.e., processing to achieve the legally justified interest of the Administrator, consisting of enabling you to log into the store account using your profile in the Facebook service until the deletion of the store account WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH THE PROCESSING OF YOUR PERSONAL DATA BY US?

Under the GDPR, you have the right to:

request access to your personal data, request correction of your personal data, request deletion of your personal data, request restriction of processing of personal data, object to the processing of personal data, request the transfer of personal data. In case you submit any of the above requests to us without undue delay – and in any case within a month of receiving the request – we will provide you with information about the actions taken in connection with your request.

If necessary, we may extend the one-month period by another two months due to the complex nature of the request or the number of requests.

In any case, we will inform you within a month of receiving the request about the extension of the period and provide you with the reasons for the delay.

Right of Access to Personal Data (Art. 15 GDPR)

You have the right to obtain information whether we process your personal data. If we process your personal data, you have the right to:

access to personal data, obtain information about the purposes of processing, the categories of processed personal data, the recipients or categories of recipients of this data, the planned period of storage of your data or the criteria for determining this period, the rights you have under the GDPR, and the right to lodge a complaint with the President of the Office for Personal Data Protection, the source of this data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of this data outside the European Union; obtain a copy of your personal data. If you want to request access to your personal data, submit your request to: kontakt@mrespekta.com.

Right to Rectification of Personal Data (Art. 16 GDPR)

If your personal data is incorrect, you have the right to request us to immediately correct your personal data. You also have the right to request us to supplement your personal data. If you want to request correction or supplementation of your personal data, submit your request to: kontakt@mrespekta.com.

Right to Deletion of Personal Data, the so-called "right to be forgotten" (Art. 17 GDPR)

You have the right to request the deletion of your personal data when:

your personal data is no longer necessary for the purposes for which it was collected or otherwise processed; you have withdrawn a specific consent, to the extent that personal data was processed based on your consent; your personal data was processed unlawfully; you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of personal data is related to direct marketing; you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legally justified interests pursued by us or a third party. Despite submitting a request for deletion of personal data, we may further process your data to establish, pursue, or defend claims, about which you will be informed.

If you want to request the deletion of your personal data, submit your request to: kontakt@mrespekta.com.

Right to Request Restriction of Processing of Personal Data (Art. 18 GDPR)

You have the right to request the restriction of processing of your personal data when:

you contest the accuracy of your personal data – in such a case, we will restrict the processing of your personal data for a period allowing us to verify the accuracy of this data; the processing of your data is unlawful, and instead of deleting personal data, you request the restriction of the processing of your personal data; your personal data is no longer needed for the purposes of processing, but they are needed to establish, pursue, or defend your claims; you have objected to the processing of your personal data – until it is determined whether our legally justified interests are overriding the grounds indicated in your objection. If you want to request the restriction of processing of your personal data, submit your request to: kontakt@mrespekta.com.

Right to Object to the Processing of Personal Data (Art. 21 GDPR)

You have the right at any time to object to the processing of your personal data, including profiling, in connection with:

processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legally justified interests pursued by the personal data administrator or a third party; processing for direct marketing purposes. If you want to object to the processing of your personal data, submit your request to: kontakt@mrespekta.com.

Right to Request the Transfer of Personal Data (Art. 20 GDPR)

You have the right to receive from us your personal data in a structured, commonly used format that is machine-readable and to transfer it to another personal data administrator. We will typically provide your personal data in CSV format. If you prefer the data to be provided in another format, indicate the preferred format in your request. To the extent possible, we will try to provide you with the data in the format you prefer.

You can also request that we transfer your personal data directly to another administrator (if it is technically possible).

If you want to request the transfer of your personal data, submit your request to: kontakt@mrespekta.com.

Can you withdraw your consent to the processing of personal data?

You can withdraw your consent to the processing of your personal data at any time. Withdrawal of consent to the processing of personal data does not affect the legality of processing carried out by us based on your consent before its withdrawal.

If you want to withdraw your consent to the processing of your personal data, submit your request to: kontakt@mrespekta.com.

In the event that you want to withdraw consent to the processing of personal data for the purpose of providing the "Newsletter" service, you can unsubscribe here.

Complaint to the Supervisory Authority

If you believe that the processing of your personal data violates the provisions of personal data protection, you have the right to lodge a complaint with the supervisory authority, in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the President of the Office for Personal Data Protection, who replaced the GIODO on May 25, 2018.

More information can be found here.

"Cookies" Files

General Information

While browsing the web pages of the Online Store, "cookies", hereinafter referred to as Cookies, are used, i.e., small text information that is stored on your terminal device in connection with the use of the Online Store. Their use is aimed at the proper functioning of the websites of the Online Store.

These files allow the identification of the software used by you and customize the Online Store individually to your needs.

Cookies usually contain the name of the domain they come from, the time they are stored on the device, and the assigned value.

Safety

The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to get into your devices through Cookies.

Types of Cookies

We use two types of Cookies:

Session Cookies: are stored on your device and remain there until the end of the session of the given browser. The stored information is then permanently deleted from the memory of your device. The session Cookies mechanism does not allow for retrieving any personal data or any confidential information from your device. Permanent Cookies: are stored on your device and remain there until they are deleted. Ending the session of the given browser or turning off the device does not cause their deletion from your device. The permanent Cookies mechanism does not allow for retrieving any personal data or any confidential information from your device. Purposes

We also use third-party Cookies for the following purposes:

configuration of the Online Store; presentation of the Certificate of Conformity, through the website solidnyregulamin.pl, administered by APM Poniatowska-Maj Law Firm sp. k., located in Gdańsk, Privacy Policy available at the following link: – http://solidnyregulamin.pl/polityka-prywatnosci/; promotion of the online store on the Facebook service, administered by Facebook Ireland Ltd. The privacy policy of Facebook is available at the following link: https://pl-pl.facebook.com/privacy/explanation. promotion of the online store on the Instagram service, administered by Facebook Ireland Ltd. The privacy policy of Instagram is available at the following link: https://help.instagram.com/519522125107875, creating statistics that help understand how users of the website use the web pages, which enables improving their structure and content through the analytical tools of Google Analytics, administered by Google Ireland Ltd. based in Ireland, Google's privacy policy is available at the following link: https://policies.google.com/privacy?fg=1; determining the Customer's profile in order to display tailored materials in advertising networks, using the Google Adwords online advertising tool, administered by Google Inc. based in the USA, Google's privacy policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/. To learn about the rules for using Cookies, we recommend that you familiarize yourself with the privacy policies of the above-mentioned companies.

Cookies may be used by advertising networks, particularly the Google network, to display ads tailored to your preferences. For this purpose, information about the way you navigate the network or the time you spend on the website may be stored.

To browse and edit information about your preferences collected by the Google advertising network, you can use the tool available at the link https://www.google.com/ads/preferences/.

Using the settings of the internet browser or the configuration of the service, you can independently and at any time change the settings concerning Cookies, specifying the conditions for their storage and access by Cookies to your device. You can change these settings so that the automatic handling of Cookies is blocked in the settings of the internet browser or inform about their placement on your device each time. Detailed information about the possibility and ways of handling Cookies is available in the settings of your software (internet browser).