Privacy and cookie policy

PRIVACY POLICY

This Privacy Policy (hereinafter referred to as the " Policy ") contains information on the processing of your personal data in connection with the use of the AlmiDecor online store, operating at the Internet address www.almidecor.com (hereinafter referred to as the " Store ").

All capitalized terms not otherwise defined in the Policy have the meaning given to them in the Store Regulations, available at: [https://almidecor.com/pl/regulamin].

Personal data administrator

The administrator of your personal data is Fargotex limited liability company with its registered office in Łomża (registered office address: Aleja Legionów 114C, 18-400 Łomża), entered into the register of entrepreneurs of the National Court Register maintained by the District Court in Białystok, 12th Commercial Division of the National Court Register, under the number: 0000183232, Tax Identification Number (NIP): 7181721036, National Business Registry Number (REGON): 450692080 (hereinafter: " Administrator ").

Contact with the Administrator

In all matters related to the processing of personal data, you can contact the Administrator electronically by sending an e-mail to the following address: sklep@almidecor.com .

Personal data protection measures

The Administrator applies modern organizational and technical security measures to ensure the best possible protection of your personal data and guarantees that it processes them in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as " GDPR "), the Act of 10 May 2018 on the protection of personal data and other provisions on the protection of personal data.

Information about the personal data being processed

Using the Store requires the processing of your personal data. Below you will find detailed information about the purposes and legal basis of processing, as well as the processing period and the obligation or voluntary nature of their provision.

Purpose of processing	Processed personal data		Legal basis
Conclusion and performance of a contract for the provision of services by electronic means	1) name; 2) name; 3) e-mail address; 4) telephone number; 5) optionally – correspondence address, date of birth, and in the case of Clients who are entrepreneurs – company name, company headquarters address, Tax Identification Number.		Article 6, paragraph 1, letter b of the GDPR (processing is necessary to perform the contract for the provision of electronic services concluded with the data subject or to take steps to conclude it)
Providing the above-mentioned personal data is a condition for concluding and performing an agreement for the provision of services by electronic means (providing them is voluntary, but the consequence of not providing them will be the inability to conclude and perform the above-mentioned agreement, including creating an Account). The Administrator will process the above-mentioned personal data until the limitation period for claims arising from the agreement for the provision of services by electronic means expires.
Purpose of processing	Processed personal data		Legal basis
Conclusion and performance of the Agreement	1) name; 2) name; 3) e-mail address; 4) telephone number; 5) delivery address (street, house number, apartment number, postal code, city, country); 6) in the case of Clients who are entrepreneurs - company name, company headquarters address, Tax Identification Number.		Article 6, paragraph 1, letter b of the GDPR (processing is necessary to perform the Agreement concluded with the data subject or to take steps to conclude it)
Providing the above-mentioned personal data is a condition for concluding and performing the Agreement (providing them is voluntary, but the consequence of not providing them will be the inability to conclude and perform the above-mentioned agreement). The Administrator will process the above-mentioned personal data until the limitation period for claims arising from the Agreement expires.
Purpose of processing	Processed personal data		Legal basis
Conducting the complaint procedure	1) name; 2) name; 3) e-mail address; 4) telephone number; 5) correspondence address (street, house number, apartment number, postal code, city, country); 6) in the case of Clients who are entrepreneurs - company name, company headquarters address, Tax Identification Number.		Article 6, paragraph 1, letter c of the GDPR (processing is necessary to fulfil the legal obligation incumbent on the Administrator, in this case the obligations: · responding to a complaint – Article 7a of the Consumer Rights Act; · implementation of the Customer's rights arising from the warranty - art. 556 et seq. of the Civil Code)
Providing the above-mentioned personal data is a condition for receiving a response to a complaint or exercising the Customer's rights arising from the warranty (providing such data is voluntary, but the consequence of not providing them will be the inability to receive a response to a complaint and to exercise the rights arising from the warranty). The Administrator will process the above-mentioned personal data for the duration of the complaint procedure (but no longer than 14 days), and in the event of the Customer's rights arising from the warranty being exercised - until their limitation period expires.
Purpose of processing	Processed personal data		Legal basis
Sending the Newsletter	email address		Article 6, paragraph 1, letter f of the GDPR (processing is necessary to implement the legitimate interest of the Administrator, in this case informing about new products and promotions available in the Store)
Providing an e-mail address is voluntary, but necessary in order to receive the Newsletter (the consequence of not providing it will be the inability to receive the Newsletter). The Administrator will process the e-mail address until the objection is effectively raised or the purpose of processing is achieved.
Purpose of processing	Processed personal data		Legal basis
Providing answers to inquiries about the Product	1) name; 2) email address.		Article 6, paragraph 1, letter a of the GDPR (personal data processing is based on consent)
Providing the above personal data is voluntary, but necessary in order to receive a response to an inquiry about the Goods (the consequence of not providing them will be the inability to receive a response). The Administrator will process the above-mentioned personal data until the consent granted is withdrawn, but no longer than until the response to the inquiry is provided.
Purpose of processing	Processed personal data		Legal basis
Fulfilling tax obligations (including issuing VAT invoices, storing accounting documentation)	1) name and surname/company; 2) address of residence/registered office; 3) Tax Identification Number; 4) Order number.		Article 6, paragraph 1, letter c of the GDPR (processing is necessary to fulfil the legal obligation incumbent on the Administrator, in this case the obligations arising from tax law)
Providing the above-mentioned personal data is voluntary, but necessary for the Administrator to fulfil its tax obligations (the consequence of not providing them will be the inability of the Administrator to fulfil the above-mentioned obligations). The Administrator will process the above-mentioned personal data for a period of 5 years.
Purpose of processing	Processed personal data		Legal basis
Fulfillment of obligations related to personal data protection	1) name; 2) name; 3) the contact details you provide (e-mail address; correspondence address; telephone number).		Article 6, paragraph 1, letter c of the GDPR (processing is necessary to fulfil the legal obligation incumbent on the Administrator, in this case the obligations arising from the provisions on personal data protection)
Providing the above-mentioned personal data is voluntary, but necessary for the proper performance by the Administrator of the obligations arising from the provisions on the protection of personal data, including the implementation of the rights granted to you by the GDPR (the consequence of not providing the above-mentioned data will be the inability to properly implement the above-mentioned rights). The Administrator will process the above-mentioned personal data until the expiry of the limitation periods for claims for violation of the provisions on personal data protection.
Purpose of processing	Processed personal data		Legal basis
Establishing, pursuing or defending against claims	1) name; 2) name; 3) company; 4) email address; 5) correspondence/registered office address; 6) Tax Identification Number.		Article 6, paragraph 1, letter f of the GDPR (processing is necessary to pursue the legitimate interest of the Administrator, in this case to determine, pursue or defend against claims that may arise in connection with the performance of contracts concluded with the Administrator)
Providing the above-mentioned personal data is voluntary, but necessary for the purpose of determining, pursuing or defending against claims that may arise in connection with the performance of contracts concluded with the Administrator (the consequence of not providing the above-mentioned data will be the inability of the Administrator to take the above-mentioned actions) The Administrator will process the above-mentioned personal data until the expiry of the limitation periods for claims that may arise in connection with the performance of contracts concluded with the Administrator.
Purpose of processing	Processed personal data		Legal basis
Analysis of your activity in the Store	1) date and time of visit; 2) IP number of the device; 3) type of device operating system; 4) approximate location; 5) type of web browser; 6) time spent in the Store; 7) viewed Goods; 8) visited subpages and other actions undertaken within the Store.		Article 6, paragraph 1, letter f of the GDPR (processing is necessary to implement the legitimate interest of the Administrator, in this case obtaining information about your activity in the Store)
Providing the above-mentioned personal data is voluntary, but necessary in order for the Administrator to obtain information about your activity in the Store (the consequence of not providing them will be the inability of the Administrator to obtain the above-mentioned information). The Administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved.
Purpose of processing	Processed personal data		Legal basis
Store Administration	1) IP address; 2) server date and time; 3) information about the web browser; 4) operating system information. The above data is saved automatically in the so-called server logs, each time the Store is used (its administration without the use of server logs and automatic saving would not be possible).		Article 6, paragraph 1, letter f of the GDPR (processing is necessary to implement the legitimate interest of the Administrator, in this case ensuring the proper operation of the Store)
Providing the above personal data is voluntary, but necessary to ensure the proper functioning of the Store (the consequence of not providing them will be the inability to ensure the proper functioning of the Store). The Administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved.

Profiling

In order to create your profile for marketing purposes and to direct marketing to you tailored to your preferences, the Administrator will process your personal data in an automated manner, including profiling them – however, this will not produce any legal effects for you or significantly affect your situation in a similar manner.

The scope of profiled personal data corresponds to the scope indicated above in relation to the analysis of your activity in the Store and the data you save in your Account.

The legal basis for the processing of personal data for the above purpose is Article 6 paragraph 1 letter f of the GDPR, according to which the Administrator may process personal data in order to pursue its legitimate interest, in this case conducting marketing activities tailored to the preferences of recipients. Providing the above personal data is voluntary, but necessary to achieve the above purpose (the consequence of not providing them will be the inability of the Administrator to conduct marketing activities tailored to the preferences of recipients).

The Administrator will process personal data for the purpose of profiling until an objection is effectively raised or the purpose of processing is achieved.

Recipients of personal data

The recipients of personal data will be the following external entities cooperating with the Administrator:

• entities providing analytical services and opinion research on the Internet;
• entities carrying out mailing campaigns;
• advertising agencies;
• banks;
• tax advisors;
• law firms;
• courier companies;
• payment operators;
• software service companies;
• providers of statistical and marketing tools used in the Store (hereinafter: " Partners "):
• Google AdWords
• Google Analytics
• DoubleClick
• Criteo
• TradeDoubler
• Hotjar
• Facebook

In addition, personal data may also be transferred to public or private entities if such an obligation results from generally applicable legal provisions or a final decision.

Transfer of personal data to a third country

In connection with the use of statistical and marketing tools (e.g. Google Analytics) by the Administrator, your personal data may be transferred to the following third countries: USA, Chile, Singapore and Taiwan (Republic of China).

You may obtain from the Controller a copy of the data transferred to a third country.

Right

In connection with the processing of personal data, you have the following rights:

• the right to information about what personal data concerning you is processed by the Administrator and to receive a copy of this data (the so-called right of access). The issuance of the first copy of the data is free of charge, for subsequent ones the Administrator may charge a fee;
• if the processed data becomes outdated or incomplete (or otherwise incorrect), you have the right to request its rectification;
• in certain situations you may ask the Administrator to delete your personal data (e.g. when the data is no longer needed by the Administrator for the purposes it has informed you about; when the consent to data processing is effectively withdrawn - unless the Administrator has the right to process the data on a different legal basis; when the processing would be unlawful; when the need to delete the data results from a legal obligation incumbent on the Administrator);
• in the event that personal data are processed by the Administrator on the basis of consent granted for processing or for the purpose of performing a contract concluded with him, you have the right to transfer your data to another administrator;
• if personal data are processed by the Administrator on the basis of your consent to processing, you have the right to withdraw this consent at any time (withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal);
• if you believe that the personal data being processed is incorrect, the processing is unlawful, or the Administrator no longer needs specific data, you may also request that for a specified period of time (e.g. to verify the correctness of the data or to pursue claims) the Administrator does not perform any operations on the data, but only stores it;
• you have the right to object to the processing of personal data based on the legitimate interest of the Administrator. In the event of an effective objection, the Administrator will cease processing personal data for the above purpose;
• You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the provisions of the GDPR.

Cookies

1. Cookies (so-called cookies) are computer data, in particular text files, which are stored on your end device. Through cookies, the server of the Store's website is able to store information, e.g. about the preferences and settings of the computer, mobile phone or other device you use, which are reproduced during the next visit.
2. The Store does not automatically collect any information except for information contained in cookies. The Store collects both persistent and session files. Persistent files are stored on your device for a longer period of time, while session files are automatically deleted when you close the browser window.
3. The shop uses the following types of cookies:
   1. “performance” cookies, enabling the collection of information on how the Store is used;
   2. "functional" cookies, which enable "remembering" the settings you have selected and personalising the interface, e.g. in terms of the selected language or region, font size, appearance of the website, etc.;
   3. “advertising” cookies, which enable us to provide you with advertising content tailored to your interests;
   4. “essential” cookies, enabling the use of services available within the Store, e.g. authentication cookies used for services that require authentication;
   5. cookies used to ensure security, e.g. used to detect authentication abuse.
4. The following tools using cookies are used within the Store:
   1. […]
5. Using cookies, the Administrator collects only anonymous statistical data, including:
   1. the URL of the website you visited before arriving at the Store and the websites you visit after visiting the Store;
   2. your IP address;
   3. proxy server;
   4. operating system;
   5. Internet browser and its add-ons;
   6. your device identifier and its features;
   7. name of your ISP or mobile service provider.

The collected data will be used for profiling and personalizing content, advertisements and other services that are visible in the Store and on other websites that you browse. Our Partners listed in the Privacy Policy will also use the above data for the same purposes.

6. The Administrator uses cookies for the following purposes:
   1. optimisation of the Store, in particular adapting its content to your preferences. The collected files allow to recognise your device and properly display the Store website, tailored to your individual needs;
   2. creating anonymous, aggregated statistics that help us understand how you use the Store and, as a result, improve its structure and content, excluding your identification;
   3. analysis of the use of the Store, allowing for the systematic improvement of its structure and content to best meet the needs of the Administrator’s current and potential Customers;
   4. measuring the effectiveness of marketing activities;
   5. matching the content and forms of advertising targeted to customers;
   6. remembering whether a given Customer has given specific consent (e.g. to display selected content) or has not given it.
7. All data collected by the Administrator using cookie technology is protected using rational technical and organizational measures and security procedures in order to protect them against access by unauthorized persons or their unauthorized use. Entities associated with the Administrator, in particular service providers cooperating with us, have undertaken to manage data in accordance with applicable security and privacy protection requirements. The Store's website may contain references to other websites that apply their own privacy policies. The Administrator recommends that you familiarize yourself with the principles of these policies, as he is not responsible for the privacy principles applicable on these websites.
8. Cookies do not cause any configuration changes on your device or in the software installed on it.
9. You can control cookies through your browser settings and other tools. Cookies are only allowed if you accept them (express consent) in your browser (subject to the situations described below) and do not delete them. The process of expressing consent to the use of cookies varies depending on the browser you are using. Detailed information on the possibilities and methods of handling "cookies" is available in the software settings of each web browser.
10. You may opt out of the Administrator's use of cookies at any time by selecting the appropriate settings in your web browser. If you wish to delete existing cookies, you should select the appropriate settings in your web browser or delete cookies manually. The process of deleting cookies varies depending on the browser you are using.
11. If you use software for browsing websites that allows cookies to be stored on your end device by default, you can also change your cookie settings at any time. These settings can be changed in particular to block automatic cookie handling in your web browser settings or to inform you each time they are placed on your device. Detailed information about the possibilities and methods of handling cookies is available in the settings of the appropriate web browser.
12. Limiting the use of cookies may affect some of the functionalities available on the Store's website.

Final provisions

To the extent not regulated by this Policy, generally applicable provisions on personal data protection apply.

This Policy is effective from September 9, 2020.