Privacy Policy - Koloride

Privacy Policy

Privacy Policy of the online store KOLORIDECYCLING.COM

1. GENERAL PROVISIONS

1.1. The Administrator of personal data collected through the online store www.koloridecycling.com is HUS Inwestycje spółka z ograniczoną odpowiedzialnością (transformed into Koloride) with its registered office in Puszczykowo, address: 62-040 Puszczykowo, ul. Chabrowa number 7, REGON 365621251, NIP 7773270426, entered into the National Court Register under KRS number 0000639439, email address: hello@koloride.com, phone number: +48 663 786 394, hereinafter referred to as the “Administrator” and also referred to as the “Service Provider.”

1.2. Personal data collected by the Administrator through the website are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

1.3. Any words or phrases written in uppercase in this Privacy Policy shall be understood according to their definition contained in the Terms and Conditions of the online store koloridecycling.pl.

2. TYPES OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION

2.1. Types, scope, purpose, and legal basis for collecting personal data

When are personal data collected?What personal data is collected?For what purpose?The legal basis.
Registration of a Customer Account in the Online Storefirst name and last name; street; postal code; city; email address; phone number; company name (optional); Tax Identification Number (optional);To create an individual account and manage it.The necessity to perform the agreement for the provision of the Account service (Art. 6(1)(b) of the GDPR) – execution of the agreement for the provision of the electronic service in accordance with the Store Regulations.
Placing an order in the Online StoreFirst name and last name; street; postal code; city; email address; phone number; company name (optional); Tax Identification Number (optional);To execute a sales agreement.The necessity to perform a sales contract (Article 6(1)(b) of the GDPR) – execution of a sales contract.
Using the contact form service on the Online Store.first name and last name; email address;In order to fulfill a contract provided electronically.The necessity to perform a contact form service contract (Article 6(1)(b) of the GDPR) – legitimate interest of the entrepreneur.
Using the newsletter servicefirst name and last name; email address;
In order to send newsletters.Legitimate interest, consisting of conducting direct marketing (Article 6(1)(f) of the GDPR) – legitimate interest of the entrepreneur.

2.2. Data retention period

Personal data of Service Recipients is stored by the Administrator:
a) In the case where the processing of data is based on the execution of a contract, for as long as it is necessary to execute the contract, and thereafter for a period corresponding to the statute of limitations for claims. If a specific provision does not specify otherwise, the limitation period is six years, and for claims related to periodic services and business activities – three years.
b) In the case where the processing of data is based on consent, until the consent is revoked, and after revocation of consent for a period corresponding to the statute of limitations for claims that the Administrator may raise or that may be raised against the Administrator. If a specific provision does not specify otherwise, the limitation period is six years, and for claims related to periodic services and business activities – three years.

2.3. When using the Store, additional information may be collected, including: the IP address assigned to the Service Recipient’s computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type.
2.4. Upon separate consent, based on art. 6 sec. 1 lit. a) of the GDPR, data may also be processed for the purpose of sending commercial information electronically or making telephone calls for direct marketing – accordingly in connection with art. 10 sec. 2 of the Act of 18 July 2002 on the provision of electronic services or art. 172 sec. 1 of the Act of 16 July 2004 – Telecommunications Law, including those directed as a result of profiling, provided that the Service Recipient has given appropriate consent.
2.5. Navigational data may also be collected from Service Recipients, including information about links and references they decide to click on or other actions taken in the Store. The legal basis for such activities is the legitimate interest of the Administrator (art. 6 sec. 1 lit. f of the GDPR), consisting of facilitating the use of services provided electronically and improving the functionality of these services.
2.6. Providing personal data by the Service Recipient is voluntary.
2.7. The Administrator takes special care to protect the interests of the individuals whose data is processed, ensuring that the data collected by them are:
a) processed lawfully,
b) collected for specified, lawful purposes and not subject to further processing incompatible with those purposes,
c) factually correct and relevant to the purposes for which they are processed, and stored in a form that enables the identification of the individuals concerned, not longer than necessary to achieve the purpose of processing.

3. SHARING OF PERSONAL DATA

3.1. Personal data of Service Recipients are transferred to service providers used by the Administrator in operating the Store, especially to:
a) entities carrying out Product delivery,
b) payment system providers,
c) accounting office,
d) hosting provider,
e) software providers enabling business operations,
f) mailing system providers,
g) software providers necessary for operating the online store.
3.2. Service providers mentioned in point 1 of this paragraph, to which personal data is transferred, depending on contractual agreements and circumstances, either follow the instructions of the Administrator regarding the purposes and methods of processing this data (data processors) or independently determine the purposes and methods of their processing (data controllers).
3.3.Personal data of Service Recipients are stored exclusively within the European Economic Area (EEA), subject to §5 point 5 and §6 of the Privacy Policy.

4. RIGHT TO CONTROL, ACCESS OWN DATA CONTENT, AND CORRECT IT

4.1. The person whose data is concerned has the right to access the content of their personal data and the right to correct, delete, limit processing, the right to data portability, the right to object, the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
4.2. Legal bases for the Service Recipient’s request:
a) right to access their data and receive a copy – art. 15 GDPR,
b) right to rectify (correct) their data – art. 16 GDPR,
c) right to erase data (so-called right to be forgotten) – art. 17 GDPR,
d) right to limit data processing – art. 18 GDPR,
e) right to data portability – art. 20 GDPR,
f) right to object to data processing – art. 21 GDPR,
g) right to withdraw consent for processing personal data, if you have previously given such consent – art. 7(3) GDPR,
h) right to lodge a complaint with the supervisory authority of the President of the Personal Data Protection Office.
4. 3. To exercise the above rights, you can send an appropriate email to: hello@koloridecycling.com
4.4. In the event of a Service Recipient exercising a right resulting from the above rights, the Administrator fulfills the request or refuses to fulfill it promptly, but no later than one month after receiving it. However, if, due to the complex nature of the request or the number of requests, the Administrator cannot fulfill the request within one month, it will be fulfilled within the next two months, informing the Service Recipient in advance within one month from receiving the request about the intended extension of the deadline and the reasons for it.
4.5. If it is found that the processing of personal data violates the GDPR provisions, the person whose data is concerned has the right to lodge a complaint with the President of the Personal Data Protection Office.

5. COOKIES

5. 1. The Administrator’s website uses “cookies”.

5.2. The installation of “cookies” is necessary for the proper provision of services on the Store’s website. The “cookies” contain information necessary for the proper functioning of the site and also allow for the development of general visit statistics to the website.

5.3. Two types of “cookies” are used on the site: “session” and “persistent”.

a) ”Session” cookies are temporary files that are stored on the User’s end device until logout (leaving the site).

b) ”Persistent” cookies are stored on the User’s end device for a specified period of time or until they are deleted by the User.

5.4.The Administrator uses their own cookies to better understand the interaction of Users with the content of the site. These files collect information about how the User uses the website, the type of site from which the User was redirected, as well as the number of visits and the time spent by the User on the website. This information does not record specific personal data of the User but is used to compile usage statistics for the site.

5.5.The Administrator also uses external cookies to collect general and anonymous statistical data through Google Analytics tools (external cookies administrator: Google LLC. based in the USA).

5.6. Cookies may also be used by advertising networks, especially the Google network, to display ads tailored to the way the User uses the Store. For this purpose, they may store information about the User’s navigation path or time spent on a particular page.

5.6. The User has the right to decide on the access of “cookies” to their computer by making a prior choice in their browser’s settings. Detailed information about the possibilities and methods of handling “cookies” is available in the software settings (web browser).

6. ADDITIONAL SERVICES RELATED TO USER ACTIVITY IN THE STORE

6.1. The Store utilizes so-called social plugins (“plugins”) from social media services. By displaying the koloridecycling.com website containing such a plugin, the user’s browser will establish a direct connection with the servers of Facebook and Instagram.
6.2. The content of the plugin is transmitted directly from the respective service provider to the user’s browser and integrated into the website. Through this integration, service providers receive information that the user’s browser has accessed the locabikes.pl website, even if the user does not have a profile with the respective service provider or is not currently logged in. This information (along with the user’s IP address) is transmitted directly from the browser to the server of the respective service provider (some servers are located in the USA) and stored there.
6.3. If the user logs into one of the above-mentioned social media services, that service provider will be able to directly associate the visit to the locabikes.pl website with the user’s profile on that social media platform.
6.4. If the user uses a particular plugin, such as clicking the “Like” button or “Share” button, the relevant information will also be transmitted directly to the server of the respective service provider and stored there.
6.5. The purpose and scope of data collection, as well as their further processing and use by service providers, as well as the possibility of contact and the user’s rights in this regard, including the ability to make privacy settings, are described in the privacy policies of the service providers:

6.6. If the user does not want social media services to directly associate the data collected during visits to the locabikes.pl website with their profile on that service, they must log out of that service before visiting the locabikes.pl website. The user can also completely prevent the loading of plugins on the website by using appropriate browser extensions, such as script blocking with “NoScript.”
6.7. The Administrator uses remarketing tools on their website, such as Google Ads, which involves the use of cookies from Google LLC for Google Ads services. As part of the cookie settings management mechanism, the user has the option to decide whether the Service Provider can use Google Ads (external cookies administrator: Google LLC, USA) regarding them.

7. FINAL PROVISIONS

7.1. The Administrator employs technical and organizational measures to ensure the protection of processed personal data appropriate to the risks and categories of data under protection, especially by safeguarding data from unauthorized disclosure, appropriation by unauthorized persons, processing in violation of applicable regulations, as well as alteration, loss, damage, or destruction.

7.2. The Administrator provides appropriate technical measures to prevent unauthorized acquisition and modification of electronically transmitted personal data by unauthorized persons.
7.3. In matters not covered by this Privacy Policy, the provisions of the GDPR and other relevant Polish laws shall apply accordingly.

8. CONTACT WITH THE ADMINISTRATOR

8.1. If you have any questions, uncertainties, or need further clarification, please contact us at: hello@koloridecycling.com

The current version of the Privacy and Cookies Policy was adopted and is effective from 01.02.2024.