Privacy Policy

PRIVACY POLICY OF THE SKLEPPAPIEROWKA.PL STORE

1. General Information

This Privacy Policy sets forth the rules for the processing and protection of personal data of Users who use the online store available at www.skleppapierowka.pl, hereinafter referred to as the “Store.”

The Data Controller takes special care to protect Users’ privacy and the security of the personal data it processes.

2. Data Controller

The controller of personal data processed in connection with the use of the Store is:

Anna Borowiak - Papierówka
, with its registered office in Osieczna
, NIP: 6972251690
, REGON: 302370341

You can contact the Data Controller using the contact information provided in the “Contact” tab available on the Store.

3. Legal Basis for Data Processing

Users’ personal data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (“GDPR”).

Personal data may be processed, in particular:

a) based on the User’s consent—in cases where consent is required by law;

b) for the purpose of entering into and performing a contract, in particular a sales contract concluded through the Store;

c) to fulfill the Controller’s legal obligations, in particular tax and accounting obligations;

d) to pursue the Controller’s legitimate interests, in particular those related to serving Users, ensuring the security of the Store, pursuing or defending against claims, and conducting marketing activities for its own products and services, to the extent permitted by applicable law.

4. Scope and Purpose of Data Collection

The Store collects personal data voluntarily provided by the User, in particular through forms available on the Store’s website, when placing an order, creating an account, contacting the Store, or subscribing to the newsletter.

The scope of the data processed may include, in particular:

  • first and last name,
  • email address,
  • phone number,
  • delivery address,
  • information necessary to issue a sales document,
  • information regarding orders placed,
  • information provided by the User when contacting the Store.

Personal data is processed, in particular, for the following purposes:

  • fulfilling and processing orders,
  • concluding and performing a sales contract,
  • processing payments and deliveries,
  • issuing accounting documents,
  • handling complaints, returns, and contract cancellations,
  • responding to User inquiries,
  • maintaining the User’s account, if one has been created,
  • sending newsletters and marketing communications—provided the required consent has been given,
  • conducting marketing and analytical activities to the extent permitted by law.

5. Data Provided Through Forms

Data provided by the User in forms is processed for the purpose specified by the function of the particular form.

In particular, it may be used to:

  • processing an order,
  • handling communication with the User,
  • handling product inquiries,
  • processing newsletter subscriptions,
  • providing other services available in the Store.

Providing data is voluntary; however, in some cases it may be necessary to provide a specific service or to enter into and perform a contract.

6. Newsletter and Marketing Communications

If a User subscribes to the newsletter, their data—in particular their email address—may be processed for the purpose of sending information about products, promotions, news, the Store’s offerings, and other marketing content, in accordance with the consent provided and applicable laws.

To manage the newsletter and marketing communications, the Controller uses the edrone system, provided by:

edrone Sp. z o.o.
, ul. Lekarska 1
, 31-203 Kraków
, NIP: 676-248-20-64
, KRS: 0000537197

The Controller entrusts edrone with the processing of personal data to the extent necessary to use the edrone system, in particular to manage the newsletter, marketing communications, and the implementation of marketing campaigns and automation initiatives launched by the Controller.

The user may opt out of receiving the newsletter at any time by using the unsubscribe link included in every marketing message or by contacting the Administrator.

7. The edrone System and Tracking Technologies

The Administrator uses the edrone system to conduct marketing activities, analyze User activity, and automate communications.

As part of the Store’s integration with the edrone system, information regarding the User’s activity in the Store may be processed, in particular information regarding:

  • products viewed,
  • products added to the shopping cart,
  • orders placed, including information about products and the order value,
  • subscribing to the newsletter,
  • delivery, opening, and clicking on messages sent via edrone,
  • interactions with edrone marketing elements, if used in the Store.

The scope of the information processed depends on the edrone system features activated by the Administrator.

The Administrator also uses edrone tracking codes, which may be used to analyze Store statistics and to carry out marketing activities and communication automation conducted via the edrone system.

edrone may process personal data and data regarding the User’s activity in the Store to the extent necessary to provide services to the Administrator.

Detailed information regarding the cookies and other tracking technologies used can be found in the Cookie Policy available on the Store.

8. Entities to Which Personal Data Is Disclosed

In connection with the operation of the Store, the Controller may use the services of third parties to whom—to the extent necessary to achieve specific purposes—it entrusts the processing of personal data.

These entities may include, in particular:

  • the provider of the online store system and hosting services,
  • IT service providers,
  • payment processors,
  • courier companies and carriers,
  • entities providing accounting or legal services,
  • the provider of the email marketing and marketing automation system—edrone Sp. z o.o.,
  • other entities whose involvement is necessary for the proper functioning of the Store and the fulfillment of orders.

Personal data is not sold to third parties.

Data is transferred to entities cooperating with the Controller only to the extent necessary to achieve a specific purpose and on the basis of an appropriate legal basis.

9. Cookies

The Store uses cookies and other technologies to, among other things, ensure the proper functioning of the Store, remember the User’s settings, analyze traffic, and conduct marketing activities.

The Store may use cookies and technologies provided by third parties, including edrone.

edrone technologies may be used, among other things, to identify the User, analyze their activity in the Store, and carry out marketing activities.

Detailed information regarding the types of cookies used, their purposes, retention periods, and options for managing consent can be found in the Store’s Cookie Policy.

10. User Rights

A User whose data is processed by the Controller is entitled—in cases specified by the GDPR—to the following rights:

  • the right to access their personal data,
  • the right to rectify data,
  • the right to erasure,
  • the right to restrict the processing of data,
  • the right to data portability,
  • the right to object to the processing of your data,
  • the right to withdraw consent to data processing at any time, if the processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.

To exercise these rights, the User may contact the Controller using the contact information provided in the “Contact” tab.

The User also has the right to lodge a complaint with the competent supervisory authority if they believe that the processing of their personal data violates data protection regulations.

11. Data Retention Period

Personal data is retained for the period necessary to fulfill the purpose for which it was collected, and thereafter for the period required by law or necessary to safeguard against potential claims.

Data processed on the basis of consent is retained until such consent is withdrawn, unless further retention of the data is justified by another legal basis.

Data related to the fulfillment of orders may be retained for the period required by law, in particular by tax and accounting regulations.

12. Data Security

The Data Controller implements appropriate technical and organizational measures to protect the personal data being processed against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

The Controller takes ongoing measures to ensure data security and compliance of data processing methods with applicable laws.

13. Links to Other Websites

The Store may contain links to other websites.

These websites operate independently of the Store and are not supervised by the Administrator. They may have their own privacy policies, terms of service, and rules for processing personal data.

The Administrator recommends that you review the privacy policies in effect on the websites you visit via links posted on the Store.

14. Changes to the Privacy Policy

The Administrator reserves the right to amend this Privacy Policy in the event of changes in the law, technological advancements, changes in the Store’s operations, or an expansion of the scope of services provided.

Users will be notified of significant changes to the Privacy Policy in an appropriate and conspicuous manner on the Store.

15. Contact

If you have any questions regarding this Privacy Policy or the processing of personal data, you may contact the Administrator using the contact information provided in the “Contact” tab on the Store’s website.

This Privacy Policy is effective as of the date of its publication in the Store.