Facebook Pixel

Privacy Policy

We respect the privacy of Clients visiting our Store’s website. Below you will find the Privacy Policy – a document containing information on the protection and processing of personal data by the online store Miły Duch.

 

1. General information

1.1. Controller of personal data of Clients of the online store operated via www.milyduch.com is METIERS sp. z o.o. Based in Puszczykowo, address: ul. Bolesława Chrobrego 23, 62-040 Puszczykowo, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Poznań – Nowe Miasto I Wilda in Poznań, 8th Economic Department, under the KRS number 0001027613 NIP 7831877784, REGON: 524910759.
1.2. Controller of personal data contact details: rodo@metiers.pl
1.3. Personal data is any information about an identified or identifiable natural person (an identifiable natural person is a person who can be identified directly or indirectly, in particular by name, identification number, location data, Internet identifier or one or more specific factors that determine the physical, physiological, genetic, mental, economic, cultural or social identity of a natural person).
1.4. Processing of personal data – an operation or set of operations performed on personal data or sets of personal data in an automated or non-automated manner, such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, viewing, using, disclosing by transmission, dissemination or otherwise making available, matching or linking, limiting, erasing or destroying.
1.5.  Consent to the processing of personal data – a voluntary, specific, informed and unequivocal demonstration of will by which the data subject, in the form of a statement or explicit affirmative action, consents to the processing of personal data concerning him.
1.6. Client – within the meaning of the Privacy Policy consumer and any other natural person using the services of the Store.
1.7. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L of 2016, No. 119, item 1, as amended).

 

2. Collection of personal data

Personal data is collected for the specific, explicit and legitimate purposes indicated in the Privacy Policy and not further processed in a manner incompatible with those purposes. We limit the amount of data collected to that which is necessary for the use of the Store’s services.

2.1. Source of obtaining personal data – we obtain personal data from visitors to the Store’s website in order to properly perform the services offered. Clients provide data by placing a procurement and registering a Client Account (in accordance with the regulations of the Store) and contacting the Store by phone, email or postal mail.
2.2. Providing personal data is voluntary, but necessary to use the services of the Store, in particular: placing a procurement and its delivery, exercising the right to withdraw from the contract, filing a complaint or using the service (in accordance with the Regulations).

 

3. Processing of personal data

The processing of personal data is carried out fairly, transparently to the Client and in accordance with the provisions of generally applicable laws, in particular the GDPR and in a manner that ensures adequate security of personal data.

Placing an order and its procurement performance involves the processing of personal data.

3.1. Purpose and legal basis for processing personal data:

    • 3.1.1. Conclusion of a contract (Article 6(1)(b) GDPR) – in this case the processing of data is voluntary, but necessary for the conclusion and execution of the contract;
    • 3.1.2. Return of goods (Article 6(1)(a) and (c) GDPR) – in this case, the processing of data is necessary for the return of goods;
    • 3.1.3. Complaint (Article 6(1)(a) and (c) GDPR) – in this case the processing of data is necessary to process a product complaint;
    • 3.1.4. Optional data (Article 6(1)(a) GDPR) – the provision of data is voluntary, and the processing is based on the consent given by the Client (e.g. creation of a Client Account, consent to receive newsletters and marketing information);
    • 3.1.5. Legal obligation (Article 6(1)(c) GDPR) – data processing is necessary to fulfil a legal responsibility of the Controller (e.g., under tax and consumer provisions);
    • 3.1.6. Controller’s legitimate interest (Article 6(1)(f) GDPR) – the processing of personal data of Clients is carried out for the purpose of possible redress or defence against claims, and it protects the rights and interests of the entrepreneur.

3.2. Registered Clients

    • 3.2.1. Registration of the Client’s Account, in accordance with the regulations of the Store, is voluntary.
    • 3.2.2. Registration of the Client’s Account requires the following data: name, address, telephone number and e-mail address.
    • 3.2.3. Client’s Account can be deleted at any time. Deletion of the Client’s Account does not affect the exercise of rights under consumer and personal data protection provisions.
    • 3.2.4. The processing of registered Clients’ data is carried out on the basis of their consent to the processing of personal data in order to use the services of the Store.
    • 3.2.5. The processing of personal data: name, address, phone and email address is necessary for the execution of the contract (placement and delivery of the order).
    • 3.2.6. The processing of data on orders placed is necessary to protect the interests of Clients: to exercise the right of withdrawal from the contract and return the product without stating a reason, to make a complaint about the product or, in the case of products created on an individual order, to benefit from maintenance services.

3.3. Unregistered Clients

    • 3.3.1. Processing of unregistered Clients’ data is based on their consent to the processing of personal data in order to use the services of the Store.
    • 3.3.2. The processing of personal data: name, address, phone and email address is necessary for the execution of the contract (placement and delivery of the order).
    • 3.3.3. The processing of data on orders placed is necessary to protect the interests of Clients: to exercise the right of withdrawal from the contract and return the product without stating a reason, to make a complaint about the product or, in the case of products created on an individual order, to benefit from maintenance services.
    • 3.4. Period of processing of personal data – personal data are kept for the time necessary for the contract performance (order performance and product delivery), as well as for the period necessary for the performance of benefits related to it (withdrawal from the contract, complaints, use of maintenance services).

 

4. Transfer of Clients’ personal data

Clients’ personal data may be transferred to entities with which the Store cooperates to provide its services. These are:

4.1. Courier companies – the transfer of data is necessary for the delivery of purchased products;
4.2. Payment processors – depending on the method of payment selected by the Client, personal data are transferred to the appropriate payment processor;
4.3. Entities handling the transmission of marketing information – applies to Clients who have agreed to receive marketing content;
4.4. Legal, accounting and IT service providers;
4.5. Public authorities – personal data may be provided to the relevant public authorities or third parties if their request and the necessity to provide access is based on the provisions of generally applicable law.

 

5. Marketing

Toutes les activités de marketing n’ont lieu qu’avec le consentement du client à recevoir une lettre d’information à l’adresse électronique ; des messages SMS/MMS au numéro de téléphone mobile fourni.

Le consentement aux activités de marketing peut être retiré à tout moment. Le retrait du consentement n’affecte pas la légalité du traitement effectué avant son retrait.

L’Administrateur informe les Clients qu’il confie le traitement des données personnelles aux entités suivantes :
– EDRONE sp. z o.o., ul. Lekarska1, 31-203 KRAKÓW, NIP : 676-248-20-64, KRS : 0000537197 – afin d’utiliser le système d’envoi edrone.me pour l’envoi de la lettre d’information ;
– EDRONE sp. z o.o., ul. Lekarska1, 31-203 KRAKÓW, NIP : 676-248-20-64, KRS : 0000537197 – à des fins de marketing uniquement pour les campagnes de courrier électronique, de SMS et de médias sociaux lancées ou indiquées par l’administrateur à l’aide du système edrone.

L’administrateur informe qu’il utilise les technologies suivantes pour suivre les actions effectuées par le Client sur le site de la boutique :
– codes de suivi edrone – dans le but d’analyser les statistiques du site web du magasin, ainsi qu’à des fins de marketing uniquement dans le cadre d’une campagne d’email, de sms, de médias sociaux lancée ou indiquée par l’administrateur à l’aide du système edrone.

 

6. Cookies

All marketing activities take place only with the Client’s consent to receive newsletters to e-mail address; SMS/MMS messages to the provided cell phone number.

Consent for marketing activities can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

The Controller informs Clients that he entrusts the processing of personal data to the following entities:
• EDRONE sp. z o.o., ul. Lekarska1, 31-203 KRAKÓW, NIP: 676-248-20-64, KRS (National Court Register ID): 0000537197 – in order to use the edrone.me mailing system for sending newsletters;
•EDRONE sp. z o.o., ul. Lekarska1, 31-203 KRAKÓW, NIP: 676-248-20-64, KRS (National Court Register ID): 0000537197 – for marketing purposes only for the purposes of an email, text message, social media campaign launched or indicated by the Controller using the edrone system.
The Controller informs that it uses the following technologies to track the actions taken by the Client within the Store website:
• Edrone tracking codes – for the purpose of analysing the statistics of the Store’s website, as well as for marketing purposes only for the purposes of e-mail, text message, social media campaigns launched or indicated by the Controller using the edrone system.

 

7. Data Subject Rights

7.1. Contract (order of goods and their delivery) is conditional on your name, address, telephone number and e-mail address.
7.2. Clients whose personal data is processed have the right to:

    • 7.2.1. Request from the Controller access to your personal data (Article 15 GDPR);
    • 7.2.2. Request immediate correction of incorrect personal data, as well as completion of incomplete personal data (Article 16 of GDPR);
    • 7.2.3. Request erasure of personal data (“right to be forgotten,” Article 17 GDPR) – if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the data subject has withdrawn the consent on which the processing is based; the data subject raises an objection under Article 21(1) 1 to the processing and there are no overriding legitimate grounds for the processing, or the data subject objects under Article 21(2) to the processing; the personal data have been unlawfully processed; the personal data must be erased in order to comply with a legal obligation under common law (Article 17 GDPR);
    • 7.2.4. Requests to restrict the processing of personal data (Article 18 GDPR);
    • 7.2.5. Object to the processing of personal data, including but not limited to profiling and direct marketing (Article 21 GDPR).
    • 7.2.6. File a complaint with the supervisory authority – the President of the Data Protection Office (President of the DPO).

7.3. If the processing of data is carried out on the basis of consent given by the Client, the Client has the right to withdraw consent at any time without affecting the legality of the processing carried out on the basis of consent before its withdrawal.
7.4. The Client is entitled to obtain confirmation from the Controller of personal data relating to him, and if this is the case, he is entitled to access it and the following information:

    • 7.4.1. Processing purpose;
    • 7.4.2. Categories of personal data processed;
    • 7.4.3. Information about recipients or categories of recipients to whom personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
    • 7.4.4. The planned period of storage of personal data, and when this is not possible, the criteria for determining this period;
    • 7.4.5. Information about the right of the Controller to request rectification, erasure or restriction of the processing of personal data concerning the Client, and to object to such processing;
    • 7.4.6. Information about the right to file a complaint with the supervisory authority;
    • 7.4.7. If the personal data was not collected from the data subject – any available information about its source;
    • 7.4.8. Information about automated decision-making.

7.5. The Controller shall inform any recipient to whom personal data have been disclosed of the rectification or deletion of personal data or the restriction of processing, which he has done in accordance with Articles 16, 17(1) and 18 of the GDPR, unless this proves impossible or requires disproportionate effort. The Controller shall inform the data subject of these recipients if the data subject so requests.

8. The Privacy Policy is effective as of October 10, 2023.

 

Devise / Waluta
Polish złoty
Euro