Privacy policy and cookies | Cechini

General information

This document defines the rules of the Privacy Policy on the website www.cechini-muszyna.pl (hereinafter referred to as the “Website” or “Website”). The administrator of personal data (hereinafter also referred to as: “Administrator”) is Cechini – Dystrybucja Limited liability company with its registered office in Zazamcze 23, 33-370 Muszyna, NIP: 7343007034. Personal data collected by the Administrator are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (General Data Protection Regulation) (Journal of Laws UE L 119, p. 1), hereinafter referred to as: “GDPR”.

The Administrator makes special efforts to protect the privacy and information provided to him and concerning the users of the Website. The administrator selects and applies appropriate technical measures with due diligence, including programming and organizational measures, ensuring the protection of the processed data, in particular, protects the data against unauthorized disclosure, disclosure, loss and destruction, unauthorized modification, as well as against their processing in violation of applicable law. The addressees of the services available on the Website’s website are not persons under 16 years of age. The personal data administrator does not provide for the deliberate collection of data on persons under 16 years of age. The so-called plugins and other social networking tools, including, in particular, enabling the user to log into an account on the Website using accounts on social and similar websites, such as: Facebook.com, Twitter.com. Google.com or LinkedIn.com, as well as enabling the sharing of content with other users of these websites or their recommendation as part of an account with the provider of a given portal. The providers of these services may also process your personal data as independent administrators. In this case, the Controller and the plug-in provider are joint controllers of the personal data.

Personal data

Personal data administrator – you can contact the personal data administrator using: a. by e-mail: kontakt@cechini-muszyna.pl b. traditional mail: Cechini – Dystrybucja Limited liability company with its registered office in Zazamcze 23, 33-370 c. telephone: 018 571-90-67, 018 471-90-68 Purposes and grounds for processing personal data The personal data administrator processes your personal data for the following purposes and scope:

a. take action before concluding the Agreement at your request (e.g. setting up an account on the Website) – for this purpose, we mainly process the data provided in the registration form on the Website, i.e. e-mail address and password. If the account is registered via an external authentication service (e.g. Google, Facebook, Twitter, LinkedIn), we collect your name and surname;

b. providing services and providing functionalities that require an account – for this purpose we process your data provided in the account;

c. providing services and providing functionalities both requiring and not requiring an account on the Website – we process personal data regarding your activity on the Website;

d. statistics on the use of individual functionalities available on the Website, facilitating the use of the Website and ensuring IT security of the Website – for this purpose, we process personal data regarding your activity on the Website and the amount of time spent on each of the subpages on the Website, your search history, location , IP address, device ID, data regarding your web browser and operating system;

e. establishing, investigating and enforcing claims and defending against claims in court proceedings and other enforcement authorities – for this purpose we can process your personal data provided on the Website, including when setting up an account and other data necessary to prove the existence of a claim or which result from a requirement legal, court order or other legal procedure;

f. considering complaints, complaints and requests as well as answering users’ questions – for this purpose, we process the personal data provided by you in the contact form, complaints, complaints and requests, and questions contained in a different form. For this purpose, we also process some personal data provided by you in your account, as well as data on other services we provide that are the cause of a complaint, complaint or request, questions and data contained in documents attached to complaints, complaints, requests and questions;

g. marketing of our goods and services as well as our clients and partners, including remarketing – for this purpose we process the personal data provided by you when creating the account and updating it, data on your activity on the Website, which are recorded and stored via files ” cookies “, and in particular the search history, clicks on the Website, login and registration dates, history and your activity related to our communication. In the case of remarketing, we use data about your activity in order to reach you with our marketing messages, including personalized advertisements outside the Website, and for this purpose we use the services of external suppliers. These services consist in displaying our messages on websites other than the Website. Details on this subject can be found in the provisions on “cookies” later in this document;

h. organizing contests and loyalty programs, i.e. notifications about accumulated points, notifications about winning and advertising our offer – for this purpose, we use your personal data provided in the account and when registering for a competition or loyalty program. Detailed information on this subject is provided each time in the terms of participation of a given competition or loyalty program;

i. market research, opinions, measurements and statistics by us or our partners – for this purpose we use data such as: your data provided in the account, i.e. e-mail address. Detailed instructions are provided in the information about the survey or in the place where you enter your data. Personalized advertising and social plugins For the full clarity of the activities we perform, we would like to point out once again that the Administrator may use personal data to prepare and present personalized advertisements to you, including the use of third party tools and cookies, which is further indicated later in this document. regarding cookies.

Due to the use of the so-called social plugins, including those enabling the customer to log into the account on the Website using accounts on social networks and similar, such as: Facebook.com, Twiter.com or Google.com, as well as sharing content or their instructions with other users of these websites as part of their account with the provider of a given portal, the providers of these services may also process your personal data as independent administrators. When you visit our Website, the browser you use may make a direct connection to the servers of entities providing these plug-ins / tools, thanks to which these entities receive information about your use of our website and, inter alia, Your IP address. Such information may be sent regardless of whether you have an account on the website of such entity and whether you are currently logged in to it. If you have an account with such an entity and you are logged in to it, this information may additionally be linked and assigned to your account on the social network. In the event of using the plug-in, including in particular using your account on the website of an external entity to log in to the account on our website, information about it may also be sent directly to that entity. Certain content may also be published as part of your profile on social networking sites and visible to other users of such sites, including in particular those with whom you establish relationships. If you do not want the providers of plug-ins / tools / social networking sites to assign your data collected during your visits to our Website to your profile with a given provider, then before visiting our Website, make sure you log out of this social network. Remember that you can also prevent the loading of plugins on the website by using appropriate mechanisms within the browser you use – in accordance with its settings.

The administrator tries to exercise due diligence to select only software, including the above-mentioned plugins, from reputable entities that broadly define their rules for the protection of personal data. The purposes, scope and rules for the collection and further processing of personal data by these entities can be found in their privacy protection rules. We encourage you to read them, you will find them, among others at the following addresses: http://www.facebook.com/policy.php; https://twitter.com/en/privacy; https://policies.google.com/privacy; https://www.linkedin.com/legal/privacy-policy.

Categories of Personal Data Relevant The personal data controller processes the following categories of relevant personal data:

a.contact details (contact form);

b. data on activity on the Website, including adding comments on the Website;

c. data related to the account on the Website;

d. data on complaints, complaints and requests;

e. data on marketing services (newsletter).

Voluntary provision of personal data Providing the required personal data by you is voluntary and is a condition for the Administrator to provide services via the Website. Time of data processing Personal data will be processed for the period necessary to provide services provided electronically on the Website, marketing activities and other services performed for the Website user.

Personal data will be deleted in the following cases:

a.when the data subject requests their removal or withdraws the consent granted;

b.when the data subject does not take action for more than 10 years (inactive contact);

c. after receiving information that the stored data is out of date or inaccurate.

Some data in the field of: e-mail address, name and surname, address may be stored for the next 3 years for evidence purposes, considering complaints, complaints and claims related to the services provided by the Website. This data will not be used for marketing purposes. Data on competitions and loyalty programs in the scope covering the data necessary to keep accounting books and settlements will be stored for a period of 5 years from the end of the calendar year in which the tax payment deadline expired. We store data on users who are not logged in for a period corresponding to the life cycle of “cookies” saved on devices or until they are deleted in the customer’s device by the customer. Your personal data regarding preferences, behaviors and selection of marketing content may be used as a basis for making automated decisions to determine the capabilities of the Website.

Recipients of personal data We provide your personal data to the following categories of recipients: a.state authorities, e.g. the prosecutor’s office, the Police, the Office for Personal Data Protection, if they ask us for it; b. service providers with whom we cooperate, in particular to provide services provided electronically on the Website. Depending on contractual arrangements and circumstances, these entities act on our behalf or independently define the purposes and methods of their processing. Below is a list of suppliers: – Configuration and maintenance of the Website pages: Cechini – Dystrybucja Limited liability company based in Zazamcze 23, 33-370 Muszyna NIP: 7343007034. – Service of sending the newsletter: Cechini – Dystrybucja Limited liability company based in Zazamcze 23, 33-370 Muszyna NIP: 7343007034 Personal data may also be transferred to other entities – suppliers of tools whose cookies we use. Information on these entities and the purposes of using cookies can be found in the cookies section, further in this document. Our suppliers are based mainly in the countries of the European Economic Area (EEA), but also outside the EEA. Your personal data transferred outside the EEA will be secured with appropriate legal safeguards so that our suppliers guarantee a high level of personal data protection. These guarantees result in particular from the obligation to use standard contractual clauses adopted by the Commission (EU) or participation in the Privacy Shield program established under the Commission Implementing Decision (EU) 2016/1250 of July 12, 2016 on the adequacy of the protection provided by the Shield EU-US Privacy.

Rights of the data subject Under the GDPR, you have the right to:

1) access to personal data (Article 15 of the GDPR) – you can obtain information from the Administrator whether your data is being processed and if it is being processed, you have the right to: a.access to data; b. obtain information about the purposes of processing, categories of personal data processed, recipients or categories of recipients of these data, the planned period of storage of your data or the criteria for determining this period, about your rights under the GDPR and the right to lodge a complaint with the supervisory authority, the sources of these data, about automated decision making, including profiling, and about the security measures used in connection with the transfer of these data outside the European Union; c. obtain a copy of your personal data.

2) rectification of personal data (Article 16 of the GDPR) – if your personal data is incorrect, you can request the Administrator to rectify it immediately. You can also request the Administrator to supplement this data. If you have an account on the Website, you can also rectify and complete your personal data yourself after logging into your account on the Website.

3) deletion of personal data, the so-called “The right to be forgotten” (Article 17 of the GDPR) – you can request it when:

a. your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

b. you have withdrawn your specific consent to the extent that personal data was processed based on your consent;

c. your personal data has been processed unlawfully;

d. you objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent to which the processing of personal data is related to direct marketing;

e. you objected to the processing of your personal data in connection with the processing necessary for the performance of a task carried out in the public interest or the processing necessary for purposes arising from legitimate interests pursued by the Administrator or a third party. Despite submitting a request to delete personal data, the Administrator may process your data further in order to establish, assert or defend claims, about which you will be informed.

4) submitting a request to limit the processing of personal data (Article 18 of the GDPR) – you can request it when: a.you question the correctness of your personal data – the personal data administrator will limit the processing of your personal data for a period allowing for the correctness of this data to be checked; b.when the processing of your data is unlawful, and instead of deleting personal data, you request the restriction of the processing of your personal data; c. your personal data are no longer needed for the purposes of processing, but they are needed to establish, assert or defend your claims; d. when you objected to the processing of your personal data – until it is determined whether the legitimate interests of the Personal Data Administrator override the grounds indicated in your objection.

5) objection to the processing of personal data (Article 21 of the GDPR) – you can object at any time to the processing of your personal data, including profiling, in connection with: a.processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Administrator or a third party; b. processing for the purposes of direct marketing.

6) requests to transfer personal data (Article 20 of the GDPR) – you have the right to receive your personal data from the Administrator in a structured, commonly used machine-readable format and send them to another personal data administrator or request that the Administrator sends your data directly personal data to another administrator (if technically possible).

7) withdraw consent to the processing of personal data – you can do it at any time. This does not affect the lawfulness of the processing carried out on the basis of your consent before its withdrawal.

8) complaints to the supervisory body – if you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory body, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

You can exercise all your rights by contacting the Administrator at the contact addresses indicated in this Privacy Policy.

The administrator, without undue delay – and in any case within one month of receiving the request – will provide you with information about the actions taken in connection with your request.

If necessary, the monthly period may be extended by another two months due to the complexity of the request or the number of requests. In any case, the Administrator will inform you about such extension within one month of receiving the request, stating the reasons for the delay.

“COOKIES” General information

While browsing the website of the Website, “cookies” are used, hereinafter referred to as Cookies, i.e. small text information that is saved on your end device in connection with the use of the Website. Their use is aimed at, inter alia, correct operation of the Website pages. These files allow you to identify the software used by you and adjust the Website individually to your needs. Cookies usually contain the name of the domain they come from, their storage time on the device and the assigned value. Security The cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to enter your devices through cookies.

Types of cookies

We use two types of cookies:

a. Session cookies: they are stored on your device and remain there until the end of the browser session. The saved information is then permanently deleted from the memory of your device. The session cookies mechanism does not allow the collection of any personal data or any confidential information from your device.

b. Permanent cookies: they are stored on your device and remain there until they are deleted. Ending a browser session or turning off the device does not delete them from your device. The persistent cookies mechanism does not allow the collection of any personal data or any confidential information from your device. Objectives: We also use third party cookies. The main purposes for which we use cookies are technical, analytical, marketing / advertising and social purposes. Below we indicate in detail for what purpose they are used and by which entities. Each of these entities also independently determines the principles of their privacy – links to these principles of individual suppliers can also be found below.

We encourage you to read them

a. configuration and optimization of the Website (technical purposes);

b. creating statistics that help to understand how Website users use websites, which allows improving their structure and content through Google Analytics analytical tools, the administrator of which is Google Inc based in Ireland. Details on Google’s privacy protection rules can be found in its Privacy Policy available at the following link: https://policies.google.com/privacy/;

c. preparing and presenting advertisements to users with the use of Google Ads advertising tools, the administrator of which is Google Inc based in Ireland. Google’s privacy policy is available at the following link:

https://policies.google.com/privacy/;

d. logging in to the account on the Website and popularizing the Website using the social network Facebook.com, the administrator of which is Facebook Inc. based in the USA or Facebook Ireland based in Ireland. Facebook’s privacy policy is available at the following link: https://www.facebook.com/help/cookies/;

e. popularizing the Website using the Instagram.com social network, the administrator of which is Instagram LLC. based in the USA. The Instagram.com privacy policy is available at the following link: https://help.instagram.com/155833707900388;

f. popularizing the Website through YouTube. The privacy policy is available at the following link: https://policies.google.com/privacy?hl=pl&gl=pl;

g. popularizing the Website using the Pinterest.com social network, the administrator of which is Pinterest Inc. based in the USA, the Pinterest.com Privacy Policy is available at the following link: https://about.pinterest.com/pl/privacy-policy;

h. popularizing the Website by means of the Twitter.com social network, the administrator of which is Twitter Inc. based in the USA, the twitter.com Privacy Policy is available at the following link: https://support.twitter.com/articles/20170514.

Personalized ads

Cookies can be used by advertising networks, in particular the Google network, to display advertisements tailored to your preferences, including the presentation of personalized advertisements. For this purpose, information may be stored, including, in particular, information on how you navigate the web, search terms and the time you use the website. Personalized ads (sometimes also referred to as interest-based advertising) are tools that can help to improve the matching of ads to your preferences and interests. Editing, exclusive, lock To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at https://www.google.com/ads/preferences/ and https://policies.google.com/technologies/partner -sites. By using the web browser settings or by using the service configuration, you can change your Cookie settings at any time, specifying the conditions for their storage and access to your device via Cookies. You can change these settings so as to block the automatic handling of cookies in your web browser settings or inform about their every posting on your device. Detailed information on the possibilities and methods of handling cookies is available in the settings of your software (web browser). At the same time, you can also disable or withdraw consent to the use of cookies of external suppliers, as well as remareting pixels, using Network Advertising at: https://optout.networkadvertising.org/?c=1.