In order to ensure the transparency of personal data processing processes, we present the applicable principles of personal data protection established under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the freedom to flow of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”).
1. DATA ADMINISTRATOR
The administrator, i.e. the entity deciding on the purposes and methods of processing personal data, is Gena Katarzyna Zaręb. based in Nowy Targ (34-400), ul. Kokoszków 54F (NIP: 7352245520). In matters related to the processing of personal data, you can also contact us by e-mail at: marketing@gena.pl.
2. HOW DO WE OBTAIN AND PROCESS DATA?
While performing our business functions, we process personal data for various purposes and scope, including:
– Sending an information bulletin (newsletter)
Purpose of processing: Sending a newsletter using electronic means of communication
Legal basis for processing:
– Art. 6 section 1 letter f GDPR, i.e. the legitimate interest of the Administrator, which is the marketing of own products and services
– Art. 6 section 1 letter a GDPR, i.e. consent, in the case of marketing using telecommunications terminal devices or sending commercial information by electronic means Until you withdraw your consent or raise an objection, i.e. you demonstrate in any way that you do not wish to receive information about the activities we undertake
Data storage period: After withdrawing consent or expressing an objection, personal data may be stored for the purposes of demonstrating the correct fulfillment of legal obligations incumbent on the Administrator and related claims (limitation periods for claims counted from the withdrawal of consent or submission of an objection).
– Registering an account in the online store without making a purchase – potential customers
Purpose of processing: Registration of an account in the online store by completing the form on the website.
Legal basis for processing:
Art. 6 section 1 letter b GDPR, i.e. the necessity of processing in order to provide the service of maintaining an account in the online store
Data storage period: Until an objection is raised, i.e. a request to delete the account
– Registration of an account in the online store along with making a purchase – customers
Purpose of processing: Fulfillment of the contract with the customer; pursuing and defending claims
Legal basis for processing:
Art. 6 section 1 letter b GDPR, i.e. the necessity of processing for the implementation of the contract
Art. 6 section 1 letter f GDPR, i.e. implementation of the Administrator’s legitimate interests in the form of pursuing and defending claims
Data storage period: For the duration of the contract, and after its termination – until the deadlines for claims arising from it expire
– Submitting inquiries, complaints and claims by e-mail and via www
Purpose of processing: Considering complaints and complaints and responding to reports and inquiries sent by e-mail and via the website.
Legal basis for processing:
Art. 6 section 1 letter b GDPR, i.e. the necessity of processing for the implementation of the contract
Art. 6 section 1 letter c GDPR, i.e. the legal obligation related to the consideration of complaints and claims
Art. 6 section 1 letter f GDPR, i.e. implementation of the Administrator’s legitimate interests in the form of providing all information related to the implementation of its business goals
Data storage period: For 1 year after the warranty expires or the complaint is settled; For 1 year after responding to an inquiry not related to warranty or complaint
– Negotiating and implementing contracts with contractors (applies to employees and associates of the contractor, as well as contractors who are natural persons)
Purpose of processing: Conclusion and implementation of a contract with a contractor
Legal basis for processing:
Art. 6 section 1 letter b GDPR, i.e. the necessity of processing for the performance of the contract – in the case of contractors who are natural persons
Art. 6 section 1 letter c GDPR, i.e. the legal obligation imposed on the Administrator in connection with the implementation of the contract, in particular in the field of accounting and tax settlements
Art. 6 section 1 letter f GDPR, i.e. implementation of the Administrator’s legitimate interests in the form of enabling the conclusion and implementation of a contract with the contractor – applies to the contractor’s employees and associates
Art. 6 section 1 letter f GDPR, i.e. implementation of the Administrator’s legitimate interests in the form of pursuing and defending claims arising from the concluded contract
Data storage period: Until the limitation periods for claims arising from the contract expire; Until the data storage deadlines specified in the law expire; Until an effective objection is filed (when processing is based on the legitimate interest of the Administrator)
3. WHO CAN HAVE ACCESS TO THE DATA?
In connection with its activities, GENA will disclose your personal data to the following entities:
a) state authorities or other entities authorized under the provisions – if it is necessary to fulfill legal obligations,
b) entities supporting us in our activities on our behalf, in particular: suppliers of external IT systems supporting our activities, subcontractors, entities auditing our activities, appraisers, or entities cooperating with the Administrator as part of marketing campaigns, and such entities will process data for based on an agreement with the Administrator and only in accordance with his instructions,
c) banks – if it is necessary to conduct settlements,
d) an entity providing accounting or legal services – to the extent necessary to ensure the fulfillment of legal obligations or to establish, pursue and defend claims,
e) companies that utilize or archive documents and other media – to the extent that data is stored in paper form or on these media.
4. WHAT RIGHT DO YOU HAVE TO YOUR DATA?
Each person whose data is processed by the Administrator has the right to:
a) access to your personal data,
b) rectification of your personal data,
c) deletion of your personal data,
d) restricting the processing of your personal data,
e) object to the processing of your personal data,
f) transfer your personal data,
g) if processing is based on consent, withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Moreover, the person whose data is processed has the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office.
5. DO YOU HAVE TO PROVIDE YOUR PERSONAL DATA?
Providing data is necessary to conclude and implement sales contracts and settle the business, as well as for the Administrator to fulfill the obligations imposed by law. This means that if you want to take advantage of the GENA offer, you must provide your personal data.
In the remaining scope (in particular as part of processing for marketing purposes), providing data is voluntary.
6. TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
The data will be processed within the European Economic Area, which means that, as a rule, we do not transfer data to third countries. Any transfer may occur in the context of the IT infrastructure used by the Administrator. In such a case, the transfer will take place only if appropriate safeguards are provided, as indicated in the GDPR.
7. WILL YOUR PERSONAL DATA BE PROCESSED IN AN AUTOMATED MANNER?
Personal data will not be processed in a manner leading to automated decision-making, causing legal effects or otherwise significantly affecting the persons whose data we process.
8. COOKIES
During your visit to our website, data such as e.g. IP address, domain name, browser type are automatically collected. Cookies are used to create statistics, allow the computer’s IP address to be automatically recognized during the next visit and enable the maintenance of the logged-in user’s session. They are also used for advertising purposes to provide users with advertising content tailored to their interests. If you do not want to receive cookies, please configure your web browser to delete this type of files, block them, or warn each time about their behavior.
9. CHANGE TO THE PRIVACY POLICY
The data administrator reserves the right to introduce changes to the Privacy Policy, after prior notification of the introduced changes and after setting an appropriate time from which the changes to the GENA Privacy Policy will be effective.