Privacy Policy

Privacy Policy and Cookie Usage in Annasamkow.com Online Store

General Information

This document defines the Privacy Policy rules in the Online Store (hereinafter referred to as the "Online Store"). The administrator of the Online Store is Anna Samków, conducting business activity under the name ANNA SAMKOW Anna Samków, entered into the business register of the Central Register and Information on Economic Activity maintained by the Minister of Development at ul. Bagatela 10/26, 00-585 Warsaw.

NIP: 5211808440, REGON: 012693689.

Words capitalized have the meaning assigned to them in the regulations of this Online Store.

Personal data collected by the Online Store Administrator is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as: GDPR.

The Online Store Administrator takes special care to protect the privacy and information provided to them concerning the Online Store Customers. The Administrator carefully selects and applies appropriate technical measures, including programming and organizational measures, ensuring the protection of processed data, in particular, protecting data against unauthorized access, disclosure, loss, destruction, unauthorized modification, as well as against processing in violation of applicable law.

The recipient of the possibility of using the Goods and Services available on the website are not children under 16 years of age. The personal data administrator does not intend to deliberately collect data concerning children under 16 years of age.

Personal Data

Personal Data Administrator

The administrator of your personal data is:

ANNA SAMKOW Anna Samków
ul. Bagatela 10/26, 00-585 Warsaw

Regarding your personal data, you can contact the Personal Data Administrator via:

  • e-mail: kontakt@annasamkow.com
  • traditional mail: ul. Bagatela 10/26, 00-585 Warsaw
  • phone: +48 604 09 09 93

Purposes and legal bases for processing personal data

The Personal Data Administrator processes your personal data for the following purposes and scope:

  • to take actions before concluding a contract at your request (e.g., setting up an account), i.e., data provided in the registration form in the Online Store, such as e-mail address and established password, gender; if Account registration occurs via an external authentication service (e.g., Google+, Facebook), we collect your name and surname, and if you register when purchasing Goods, we collect your name and surname and data provided for order fulfillment, such as shipping address; in order to provide Services requiring Account setup, such as: maintaining order history, informing about the status of order fulfillment, we process your data provided in the Account and during the purchase of Goods;
  • to provide Services not requiring Account setup and purchase of Goods, i.e., browsing the Online Store website, product search engine, we process personal data regarding your activity in the Online Store, i.e., data regarding the Goods you viewed, data regarding your device session, operating system, browser, location, and unique ID, IP address;
  • to execute the contract for the sale of Goods (e.g., delivery of ordered Goods), we process personal data provided by you when purchasing Goods, such as name and surname, e-mail address, address data, payment data, and if you make a purchase through the Account, additionally the established password;
  • for statistical purposes of using individual functionalities available in the Online Store, facilitating the use of the Online Store and ensuring the IT security of the Online Store, we process personal data regarding your activity in the Online Store and the amount of time spent on each subpage in the Online Store, your search history, location, IP address, device ID, data regarding your web browser and operating system;
  • for the purpose of establishing, pursuing and enforcing claims and defending against claims in court proceedings and other enforcement bodies, we may process your personal data provided when purchasing Goods or setting up an Account and other data necessary to prove the existence of a claim or resulting from a legal requirement, court order or other legal procedure;
  • for the purpose of handling complaints, grievances and requests and answering customer questions, we process personal data provided by you in the contact form, complaints, grievances and requests, or to answer questions contained in another form and some personal data provided by you in the Account, as well as data regarding the order of Goods and other Services provided by us that are the cause of the complaint, grievance or request and data contained in documents attached to complaints, grievances and requests;
  • for the marketing of our Goods and Services and those of our clients and partners, including remarketing, for this purpose we process personal data provided by you when creating and updating your Account, data regarding your activity in the Online Store including orders, which are registered and stored via cookies, and in particular order history, search history, clicks in the Online Store, login and registration dates, history and your activity related to our communication with you. In the case of remarketing, we use data about your activity to reach you with our marketing messages outside the Online Store and we use external providers for this purpose. These services consist of displaying our messages on websites other than the Online Store. You can find details on this in the provisions regarding Cookies;
  • for the organization of competitions and loyalty programs, i.e., notifications about accumulated points, notifications about winnings and advertising our offer, we use your personal data provided in the Account and during registration in the competition or loyalty program. Detailed information on this is provided each time in the terms of participation of a given competition or loyalty program;
  • for market research and opinion polls by us or our partners, i.e., order information, your data provided in the Account or during the purchase of Goods, e-mail address. Data collected as part of market research and opinion polls are not used by us for advertising purposes. Detailed instructions are provided in the information about the given survey or where you enter your data.

 

Categories of relevant personal data

The Personal Data Administrator processes the following categories of relevant personal data:

  • contact details;
  • data regarding activity in the Online Store;
  • data regarding orders in the Online Store;
  • data regarding complaints, grievances and requests;
  • data regarding marketing services.

Voluntary nature of providing personal data

Providing the required personal data by you is voluntary and is a condition for the provision of services by the Personal Data Administrator via the Online Store.

Data processing time

Personal data will be processed for the period necessary to fulfill orders, services, marketing activities and other services performed for the Client. Personal data will be deleted in the following cases:

  • when the data subject requests their deletion or withdraws their consent;
  • when the data subject does not take action for more than 10 years (inactive contact);
  • after obtaining information that the stored data is outdated or inaccurate.

Some data, such as e-mail address, name and surname, may be stored for a further 3 years for evidentiary purposes, handling complaints, grievances and claims related to services provided by the Online Store - this data will not be used for marketing purposes.

Data regarding orders for Goods and paid services, competitions and loyalty programs will be stored for a period of 5 years from the delivery date of the order.

Data regarding non-logged-in Customers is stored for a period corresponding to the lifecycle of cookies stored on devices or until they are deleted by the Customer on the Customer's device.

Your personal data regarding preferences, behavior and choice of marketing content may be used as a basis for making automated decisions to determine the sales opportunities of the Online Store.

Recipients of personal data

We transfer your personal data to the following categories of recipients:

  • state authorities, e.g., prosecutor's office, police, GIODO, President of UOKiK, if they request it from us,
  • service providers that we use to run the Online Store, e.g., to fulfill an order. Depending on contractual arrangements and circumstances, these entities act on our behalf or independently determine the purposes and methods of their processing. A list of providers can be found below:

ENTITY

PURPOSE

PayU S.A. with its registered office in Poznań

Payment processing

Paypal Polska sp. z o.o. with its registered office in Warsaw

Payment processing

Dotpay S.A. with its registered office in Krakow

Payment processing

           InPost

Order fulfillment

UPS Polska sp. z o.o. with its registered office in Warsaw

Order fulfillment

GP Kancelaria Poniatowska-Maj Strzelec-Gwóźdź sp. p. with its registered office in Krakow

Presentation of the Certificate of Compliance via the solidnyregulamin.pl Internet Service

Magdalena Szmidt - Accounting office with its registered office in Warsaw

Company accounting services

Google Inc. (Google Cloud, Google Analytics, Google Analytics 360, Fabric Software) with its registered office in the USA

Measuring website traffic, reporting application errors, creating statistics

Google Inc. with its registered office in the USA

Determining Customer profile –

Google AdSense and Google Adwords

Google Inc. with its registered office in the USA

Analyzing Customer activity

Google Ireland Ltd (Google Adwords, Double Click Manager, Double Click Search, Remarketing Service, Firebase) with its registered office in Ireland

Measuring the effectiveness of advertising campaigns, managing advertising campaigns

Facebook Ireland with its registered office in Ireland

Promoting the Online Store using the Facebook.com social network

Instagram LLC. with its registered office in the USA

Promoting the Online Store using the Instagram.com social network

 

  • Rights of the data subject

Under GDPR, you have the right to:

  • request access to your personal data;
  • request rectification of your personal data;
  • request erasure of your personal data;
  • request restriction of processing of personal data;
  • object to the processing of personal data;
  • request data portability.

The Personal Data Administrator shall provide you with information on the actions taken in connection with your request without undue delay – and in any case within one month of receipt of the request. If necessary, the one-month period may be extended by another two months due to the complex nature of the request or the number of requests.

In each case, the Personal Data Administrator will inform you of such an extension within one month of receipt of the request, stating the reasons for the delay.

Right of access to personal data (Art. 15 GDPR)

You have the right to obtain from the Personal Data Administrator confirmation as to whether or not your personal data is being processed.

If the Administrator processes your personal data, you have the right to:

  • access personal data;
  • obtain information about the purposes of processing, categories of personal data processed, recipients or categories of recipients of such data, the planned period of storage of your data or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with a supervisory authority, the source of this data, automated decision-making, including profiling, and safeguards applied in connection with the transfer of this data outside the European Union;
  • obtain a copy of your personal data.

 

If you wish to request access to your personal data, please submit your request to: kontakt@annasamkow.com

Right to rectification of personal data (Art. 16 GDPR)

If your personal data is inaccurate, you have the right to request from the Administrator without undue delay the rectification of your personal data.

You also have the right to request from the Administrator the completion of your personal data.

If you wish to request the rectification or completion of personal data, please submit your request to: kontakt@annasamkow.com.

If you have registered in the Online Store, you can correct and supplement your personal data yourself after logging into the Online Store.

Right to erasure of personal data, the so-called "right to be forgotten" (Art. 17 GDPR)

You have the right to request from the Personal Data Administrator the erasure of your personal data when:

  • your personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
  • you have withdrawn specific consent, to the extent that personal data was processed based on your consent;
  • your personal data has been unlawfully processed;
  • you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of personal data is related to direct marketing;
  • you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Personal Data Administrator or a third party.

Despite submitting a request for erasure of personal data, the Personal Data Administrator may continue to process your data for the purpose of establishing, pursuing or defending claims, about which you will be informed.

If you wish to request the erasure of your personal data, please submit your request to: kontakt@annasamkow.com.

Right to request restriction of personal data processing (Art. 18 GDPR)

You have the right to request restriction of processing of your personal data when:

  • you contest the accuracy of your personal data – the Personal Data Administrator will restrict the processing of your personal data for a period enabling them to verify the accuracy of the data;
  • the processing of your data is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead;
  • your personal data is no longer needed for the purposes of processing, but it is required by you for the establishment, exercise or defense of legal claims;
  • you have objected to the processing of your personal data – pending the verification whether the legitimate grounds of the Personal Data Administrator override your grounds stated in your objection.

If you wish to request restriction of processing of your personal data, please submit your request to: kontakt@annasamkow.com.

Right to object to the processing of personal data (Art. 21 GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

  • processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Personal Data Administrator or a third party;
  • processing for direct marketing purposes.

If you wish to object to the processing of your personal data, please submit your request to: kontakt@annasamkow.com.

Right to request data portability (Art. 20 GDPR)

You have the right to receive your personal data from the Data Controller in a structured, commonly used, and machine-readable format and to transmit it to another data controller.

You may also request that the Data Controller directly transmit your personal data to another controller (if technically feasible).

If you wish to request the transfer of your personal data, please send your request to: kontakt@annasamkow.com.

Right to withdraw consent

You may withdraw your consent to the processing of your personal data at any time.

The withdrawal of consent to the processing of personal data does not affect the lawfulness of processing based on your consent before its withdrawal.

If you wish to withdraw consent to the processing of your personal data, please send your request to: kontakt@annasamkow.com.

Complaint to the supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the General Inspector for Personal Data Protection (GIODO).

"Cookies"

General information

When browsing the websites of the Online Store, "cookies", hereinafter referred to as Cookies, are used. These are small text information files that are stored on your end device in connection with using the Online Store. Their purpose is to ensure the proper functioning of the Online Store's websites.

These files allow us to identify the software you use and adapt the Online Store individually to your needs.

"Cookies" typically contain the domain name from which they originate, their storage time on the device, and an assigned value.

Security

The "cookies" we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malicious software to get into your devices through "cookies".

Types of "cookies"

We use two types of cookies:

  • Session cookies: these are stored on your device and remain there until the end of the browser session. The stored information is then permanently deleted from your device's memory. The session cookie mechanism does not allow the collection of any personal data or confidential information from your device.
  • Persistent cookies: these are stored on your device and remain there until they are deleted. Ending a given browser session or turning off the device does not remove them from your device. The persistent cookie mechanism does not allow the collection of any personal data or confidential information from your device.

Purposes

We also use third-party "cookies" for the following purposes:

To learn about the rules for using Cookies, we recommend that you familiarize yourself with the privacy policies of the aforementioned companies.

Cookies may be used by advertising networks, particularly the Google network, to display advertisements tailored to your preferences. For this purpose, information about how you navigate the network or when you use the website may be saved.

To view and edit information about your preferences collected by the Google advertising network, you can use the tool provided at the link https://www.google.com/ads/preferences/.

Using browser settings or service configuration, you can independently and at any time change the settings regarding Cookies, specifying the conditions for their storage and access by Cookies to your device. You can change these settings to block the automatic handling of Cookies in your web browser settings or to inform about their placement on your device each time. Detailed information about the possibilities and methods of handling Cookies is available in the settings of your software (web browser).