Privacy policy
INFORMATION OBLIGATION
On May 25, 2018, new provisions on the protection of personal data (GDPR) came into force. The idea of this information is to present you with the full rights you have in connection with the new provisions on the protection of personal data and the obligations that we must fulfill towards you on the basis of, among others, article 13 GDPR (so-called information obligation).
1. GDPR, is an abbreviation of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. Therefore, whenever we use this abbreviation, we will refer to this legal act. We will also often use the term “General Data Protection Regulation” interchangeably.
2. The data administrator, i.e. the entity deciding for what purpose and how your data will be processed, is: MIRAcle Robert Biegiański Małgorzata Bauer Sp. J. with its registered office in Łódź, ul. Piotrkowska 145 90-434 Łódź.
3. The processing of personal data takes place for the following purposes:
1). to the extent necessary to establish, shape the content, change, terminate and properly perform services, including those provided electronically and the execution of orders placed by the Customer;
2). in order to fulfill orders placed for products in the online store’s assortment;
3). in order to consider complaints and return benefits in the event of withdrawal from the contract (return of goods);
4. Legal basis for the processing of personal data:
1) art. 9 sec. 2 letter a GDPR and art. 6 sec. 1 lit. a GDPR – based on your consent to the processing of your personal data;
2) art. 6 sec. 1 lit. c GDPR, art. 9 sec. 2 lit. i GDPR;
3) art. 6 sec. 1 lit. c GDPR in connection with joke. 7. sec. 1 and 3 GDPR, as well as pursuant to art. 9 sec. 2 lit. j GDPR – e.g. for archival purposes;
4) art. 6 sec. 1 lit. b GDPR – in the scope of personal data regarding concluded contracts.
5. We will also be able to share your data with entities with whom we have concluded an entrustment agreement pursuant to art. 28 GDPR. In particular, data may be entrusted to providers of technological solutions (providers of ICT services), organizational solutions (companies dealing with the transport of goods and people, logistics support services).
6. We will process your data no longer than necessary.
1) In the scope of data processed on the basis of your consent – art. 9 sec. 2 letter a GDPR and art. 6 sec. 1 lit. a GDPR – until revoked;
2) In the scope of data that the Administrator processes based on art. 6 sec. 1 lit. c GDPR, art. 9 sec. 2 lit. j GDPR – for the period necessary under the law, e.g. for accounting purposes and for tax reasons, we will process them as long as we are obliged to do so by law. Under the current regulations, it is a period of 5 years counted from the end of the calendar year in which the tax obligation arose;
3) After the primary purpose for which your data was collected (e.g. performance of the contract), your data will be processed for archival purposes for the period in accordance with the applicable archival regulations / for the period necessary to protect against claims;
4) If personal data will be processed by us in order to pursue claims (including in court proceedings), we will be able to process them for this purpose for the period of limitation of claims in accordance with generally applicable regulations.
7. We inform you that you have:
1) the right to access their personal data, obtain information about them and receive a copy thereof;
2) the right to rectify (correct) your data;
3) the right to delete data – if in your opinion there are no grounds for us to process this data, you may request that we delete it;
4) the right to limit data processing – you may request that we limit the processing of your personal data only to their storage or performance of activities agreed with you, if in your opinion we have incorrect data about you or we process them unjustifiably; or you do not want us to remove them because they are needed to establish, pursue or defend claims; or for the duration of the objection to data processing;
5) the right to object to data processing;
6) the right to transfer data – you have the right to receive from us in a structured, commonly used machine-readable format your personal data that we have on the basis of a contract or your consent. You can also instruct us to send this data directly to another entity;
7) the right to lodge a complaint with the supervisory authority – if you believe that we are processing your data unlawfully, you may submit a complaint to the President of the Office for Personal Data Protection or other competent supervisory authority;
8) the right to withdraw consent to the processing of personal data – you may withdraw your consent to the processing of personal data that we process on the basis of your consent at any time. Withdrawal of consent will not affect the lawfulness of the processing that was made on the basis of consent before its withdrawal. Withdrawal of consent may be made in the same form in which consent was given. In order to exercise your rights, please send your request to the email address: miracle@brawo.pl. Please remember that before exercising your rights, we will have to make sure that you are the person you claim to be, i.e. identify you accordingly.
8. We inform you that:
1) In the scope of personal data that the Administrator processes on the basis of your consent – providing your personal data is voluntary, but often necessary.
2) In the scope of data that the Administrator processes based on art. 6 sec. 1 lit. c GDPR – providing your personal data is mandatory. Your personal data will be processed in an automated manner. We process them both in the paper version and many times in IT systems. However, this does not involve automatic decision making, including profiling.
