Privacy Policy

Privacy Policy

The administrator of personal data responsible for their processing is:
Polska Ekologia Sp. z o.o.
ul. 1 Maja 7E
Racibórz 47-400 ​​
sprzedaz@swatt.pl

Phone: 882431730

Thank you for your interest in our online store. Protecting your privacy is very important to us. Below you will find detailed information on how to handle your data.

1. Access data and hosting

Our websites can be visited without providing personal data. For each website call, the server automatically saves only the so-called. server logs, e.g. name of the requested file, your IP address, date and time of call, amount of data transmitted and the internet service provider submitting the inquiry (so-called. access logs) and documents page calls.

These data are analyzed only to ensure the proper functioning of our website and to improve our offer. The above serves in accordance with art. 6 clause. 1 lit. f GDPR securing our legitimate interest, consisting in optimal, correct presentation of our websites and offers. All access data is deleted within seven days of the end of your visit to the site.

 Hosting

Hosting and website display services are partly provided on our behalf by our service providers as part of entrusting data processing. Unless otherwise provided in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have questions about our service providers and the basics of working with them, please contact us. Our contact details can be found under "Our contact details and your rights".

2. Collection and processing of data for the purposes of contract performance, contact and customer account creation

We collect personal data only if you voluntarily provide it to us by placing your order or contacting us (e.g. using the contact form or by e-mail). Mandatory fields are marked as such because the data they contain are necessary to perform the contract or to consider the case in which you contact us. You cannot complete your order or contact us without entering it. What data is collected results directly from the forms into which the data are entered. We use the data you provide in accordance with art. 6 clause. 1 lit. b GDPR to perform the contract and answer your inquiries. In addition, if pursuant to art. 6 clause. 1 lit. and the GDPR will give your consent to set up a customer account - we will process your personal data necessary for this purpose. Further information on the processing of your data, in particular regarding the transfer of data to our service providers for the purpose of orders, payments and shipments, can be found in the following sections of this privacy policy.

After the contract has been fully completed or your customer account has been removed, the processing of your data will be limited, and after the storage periods specified in the tax and accounting laws, these data will be deleted (art. 6 clause. 1 lit. c GDPR), unless you express your consent (art. 6 clause. 1 lit. a GDPR) for the further use of this data or in accordance with applicable law, we reserve the right to continue using data for other purposes, of which - in such a situation we inform you in this privacy policy. Your customer account can be deleted at any time. To do this, please send a message to our contact address indicated in the section "Our contact details and your rights" or use the appropriate function in the settings of your customer account.

The administrator undertakes to make efforts to maintain proper security of the Customer's personal data.

 Goods management system

We also use an external goods management system to handle orders and perform the contract. Our service providers provide us with services in this area under a data entrustment agreement. If you have questions about our service providers and the basics of our cooperation with them, please contact us. Contact details can be found under "Our contact details and your rights"

3. Transferring data for delivery

In order to perform the contract (art. 6 clause. 1 lit. b GDPR) we provide your data to the forwarding company selected by you in the ordering process, which was ordered to deliver the ordered products.

The same applies to the transfer of data to our producers or wholesalers cooperating with us in the event that they take over the shipment on our behalf (dropshipping).Within the meaning of this privacy policy, they are considered to be freight forwarding service providers.

4. Data processing for payment

In order to make payments in our online store, we work with external service providers that support electronic online payments and provide your data to the payment company selected by you in the ordering process. The above serves the performance of the contract (art. 6 clause. 1 lit. b GDPR).

 Data processing to prevent abuse and optimize payments

In some situations, we may provide our service providers with additional information that they may use together with the information necessary to make the payment. These service providers then act on our behalf as processors and provide us with services in the field of fraud prevention and optimization of payment processes (e.g. invoicing, analysis of disputed payments, accounting support). In accordance with art. 6 clause. 1 lit. f GDPR serves to pursue our legitimate interests in the protection against fraud and fraud and in the field of effective payment management.

Credit verification

If you give us your explicit consent in this respect (Article 6. paragraph. 1 lit. a, art. 22 paragraph. 2 lit. c GDPR), we reserve the right to obtain information on your identification data and your creditworthiness from specialized entities in this respect (so-called. business intelligence). We will then provide your personal data necessary to check your creditworthiness to:

Korporacja Ubezpieczeń Kredytów Eksportowych Spółka Akcyjna
Krucza 50
Warsaw 00-025

By seeking information from the so-called. economic intelligence, we implement appropriate measures to protect your rights, freedoms and legitimate interests. You may disagree with the decision and provide us with your point of view by sending us a message to our contact address indicated in the section "Our contact details and your rights". After completing the contract, your data will be deleted, unless in accordance with art. 6 clause. 1 lit. and you agree to continue using this data for other purposes or in accordance with applicable regulations, we reserve the right to continue using the data for purposes that are legally allowed and of which we inform you in this privacy policy. You can withdraw your consent at any time by sending us a message to our contact address indicated in the "Our contact details and your rights" tab. As a consequence, however, this may result in the inability to offer you payment methods in which we provide you with benefits in arrears.

Purchase in installments

If you choose to pay "buy in installments" and give your consent (art. 6 clause. 1 lit. and the GDPR) Your personal data (name, surname, address, e-mail, phone number, date of birth, IP address, sex) together with the data necessary to complete the transaction (article, invoice amount, due date, total amount, invoice number, taxes, currency, date and time of order) will be transferred to our partner Credit Agricole Bank Polska Spółka Akcyjna, Legnicka 48 bud. C-D, Wrocław 54-202, Poland. In order to verify the creditworthiness of the customer making the installment purchase, our partner checks and collects information from publicly available databases as well as from offices and economic information agencies. A list of service providers from whom information is obtained, including information on the customer's creditworthiness determined on the basis of mathematical and statistical models, as well as information on. data processing after they are transferred to our partner Credit Agricole Bank Polska Spółka Akcyjna, you will find in his privacy policy at: https://www.credit-agricole.pl/policyka-privatnosci.

The information received regarding the statistical probability of non-payment is our partner Credit Agricole Bank Polska Spółka Akcyjna will use to make decisions regarding the establishment, implementation or termination of the contractual relationship. You can present your point of view and disagree with the decision by contacting our partner Credit Agricole Bank Polska Spółka Akcyjna for this purpose. Your consent to the transfer of data expressed in the ordering process may be revoked by you without giving a reason at any time with effect for the future.

Use of debt collection services

If, despite the warning and request for payment, our claim for payment arising from the sales contract concluded between you and us is not settled, then we will transfer your data to the debt collection company cooperating with us (Corporation of Export Credit Insurance Spółka Akcyjna, Krucza 50, Warsaw 00-025, Poland). The outstanding amount will be claimed and collected directly by our debt collection partner. Debt collection is used to perform the contract (art. 6 clause. 1 lit. b GDPR) and safeguarding our legitimate interests (art. 6 clause. 1 lit. f GDPR) consisting in effective investigation and enforcement of our contractual claims.

5. Marketing activity channels: e-mail

 Advertisement sent by e-mail after subscribing to the newsletter

If you subscribe to our newsletter, then we will use the data you provide us necessary for the purpose of regularly sending you our newsletter electronically based on your consent (art. 6 clause. 1 lit. and the GDPR). You can unsubscribe from the newsletter at any time by sending us a message to our contact address indicated in the section "Our contact details and your rights" or by using the appropriate link in the newsletter. After deregistration, we will delete your email address, unless you expressly consent to the continued use of your data for other purposes or we do not reserve the right to continue using this data in statutory cases, what we inform you about in this privacy policy in this situation.

 Sending newsletter

The newsletter is sent as part of entrusting data processing to our behalf by an external service provider. If you have questions about our service providers and the basics of our cooperation with them, please contact us. Contact details can be found under "Our contact details and your rights".

6. Cookies and similar technologies

General information

To make your visit to our website more attractive and to enable you to use its key functions, we use technological tools for this purpose, including the so-called. cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called. session cookies). Other cookies are saved on your end device and allow us to recognize your browser the next time you enter the site (so-called. persistent cookies). We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. shopping cart function). These technologies process data such as. Your IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website (e.g. with the contents of the shopping cart). This is used in accordance with art. 6 clause. 1 lit. f GDPR to implement our legitimate interest in optimally presenting our offer.

In addition, we also use technological tools to fulfill the legal obligations to which we are subject (e.g. to prove receipt of consent to the processing of your personal data) as well as for internet analytics and internet marketing. Further information on this subject, including the appropriate legal basis for data processing, can be found in the following sections of this privacy policy.

In the browser's auxiliary menu you will find explanations regarding the change of cookie settings. They are available at the following links: Microsoft Edge ™ / Safari ™ / Chrome ™ / Firefox ™ / Opera ™

When your consent has been given to us for the use of specific technological tools (art. 6 clause. 1 lit. a GDPR), it may be withdrawn by you at any time. In order to withdraw your consent, please contact us via the contact address indicated in the section "Our contact details and your rights".

7. Use of cookies and similar technological tools for internet and marketing analytics

If you have agreed to it (art. 6 clause. 1 lit. a GDPR), we use on our website the cookies and other similar technological tools of external service providers indicated below. After completing the purpose of processing and ending the use of a given technological tool, the data collected as part of using these tools will be deleted. The consent given may be withdrawn by you at any time. Detailed information on the possibility of revoking consent and your right to object can be found in the section "Cookies and similar technologies". Further information can be found on the websites of individual service providers. If you have questions about our service providers and the basics of our cooperation with them, please contact us. Contact details can be found under "Our contact details and your rights".

Use of Google services

We use the technology tools listed below from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information collected automatically by Google technologies regarding the use of our website is usually transmitted to a Google LLC server, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued a decision for the US on an adequate level of data protection. Our cooperation is based on standard data protection clauses adopted by the European Commission. If your IP address is processed as part of the use of Google technology tools, then thanks to the IP anonymization enabled, your address is shortened before saving to Google servers. Only in exceptional cases will the full IP address be sent to a Google server and shortened there. Unless otherwise specified for individual Google technologies described in this privacy policy, data processing is based on a personal data co-ordination agreement with Google in accordance with Art. 26 GDPR. Further information on Google's data processing can be found in the privacy policy of Google.

 Google Analytics

For the purpose of analyzing the use of our website, we use Google Analytics - a tool for Google web analytics, which automatically processes your data for this purpose (IP address, time of visit to the site, device and browser information, as well as information regarding the use of our website) and creates pseudonymous user profiles based on them. Cookies may be used for this purpose. As a rule, your IP address is not combined with other data collected by Google. Data processing as part of the Google Analytics service is based on a data entrustment agreement with Google.

For web analytics, we also use the Google Signals tool, which is an extension of Google Analytics services and enables so-called "cross-device tracking" (identifying users using multiple devices). This means that if your devices with internet access are connected to your Google account and you have activated the "personalized advertising" option on your Google account, then Google may generate reports on. how to use our site (in particular the number of users using different devices), even if you change the device. We do not process your personal data in this respect, we only receive statistics based on Google Signals functions and technologies.

 Google Ads

With the help of Google Ads, we promote our website in search results and on third party websites. To do this, when you visit our website, your device will automatically save the Google cookie remarketing file, which, based on the pages you visit, allows you to display ads based on your interests by processing for this purpose using a pseudonymous identifier (ID) Your data (IP address, time of visit to the site, device and browser information, as well as information regarding the use of our website). Further data processing only takes place if you have activated the option of personalizing ads in your Google account settings. In this case - if you are logged in to Google simultaneously during your visit to our website, Google will use your data together with the data collected as part of the Google Analytics service to create and define the so-called. target group lists for remarketing on different devices.

 Google Fonts

In order to ensure consistent presentation of content on our websites, the "Google Fonts" script is integrated with our website, which processes your data (IP address, time of visit to the website, information about the device and browser, as well as information on the use of our website) . We have no influence on the above data processing by Google.

8. Integration with Trusted Shops Trustbadge

In order to display our Trusted Shops Quality Mark, as well as collected customer reviews and Trusted Shops offer available to buyers after ordering - Trusted Shops Trustbadge is integrated with our website.

Integration with Trusted Shops Trustbadge serves our legitimate interests (art. 6 clause. 1 lit. f GDPR), consisting in optimal marketing of our offer by enabling safe purchases. Trustbadge (so-called. trust identifier) and the services advertised through it constitute the offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. Trustbadge is put at our disposal as part of the services of CDN (Content-Delivery-Network). Trusted Shops GmbH uses m. in. from the services of US suppliers. An adequate level of data protection is ensured. More information on data protection principles at Trusted Shops GmbH can be found here.

When calling Trustbadge, the server automatically remembers the so-called. server logs (log files), containing e.g. Your IP address, date and time of call, amount of data transmitted and the internet service provider submitting the inquiry (access data / so-called. server logs) and documents the call. Server logs are stored to analyze vulnerabilities and are automatically deleted no later than 90 days after they are created. Other personal data is transferred to Trusted Shops GmbH only if, after placing an order in our store, you voluntarily decide to use Trusted Shops products or have already registered to use them. In such cases, a contractual agreement between you and Trusted Shops applies. To this end, personal data is automatically downloaded from the order data. Whether you are already registered as a buyer to use Trusted Shops products is checked automatically based on a neutral parameter - an email address encrypted with cryptological one-way encryption. The email address is encrypted before it is transmitted using a hash value in such a way that it cannot be decrypted by Trusted Shops. After checking compliance, the parameter is automatically deleted. The above is necessary to achieve the goals arising from our and Trusted Shops legitimate interests (art. 6 clause. 1 lit. f GDPR) in the scope of providing services related to each specific order, i.e. buyer protection services (Trusted Shops guarantee) and purchase feedback services. Other information, including your rights, is included in the Trusted Shops privacy policy available above and via the Trustbadge tool.

9. Social media

Social media plugins: Facebook, Instagram

Our website uses so-called. plugins (buttons) of social networks. These plugins are available via an HTML link, which ensures that when you visit our site containing such plugins (buttons), you do not establish an automatic, direct connection to the operator's servers of the social network. After clicking on one of the buttons (plugin) a new window will open your browser displaying the page of a given social network, on which you can approve the use of a given button, e.g. "I like it" or "Share".

Our activity on social networks: Facebook, Instagram, Youtube

If you have given your consent in this respect to a given social network (art. 6 clause. 1 lit. a GDPR), when visiting our account / profile on the above-mentioned social networks, your data will be automatically collected and stored for internet and marketing analytics purposes. Based on this data, pseudonymous user profiles are created. They can be used, for example, for placing on social networks and outside of them so-called. personalized ads that probably suit your interests. Cookies are usually used for this purpose.

Detailed information on the processing and use of your data by individual social networks, as well as information on your rights and the possibility of configuring settings regarding. privacy, as well as contact details for the purpose of submitting an inquiry are described in the privacy policies of individual social networking sites listed below. If you need help in this regard, you can also contact us.

Facebook is a social network offered by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Irish ("Facebook Ireland"). Automatically processed information about your activity and how to use our fanpage on Facebook is usually sent to Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA and saved there. In relation to the USA, the European Commission has not issued a decision establishing an adequate level of data protection. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing as part of fanpage visits on Facebook is carried out in accordance with art. 26 GDPR based on the joint arrangements of joint controllers concluded, which are available here. Further information regarding the processing of your personal data as part of fanpage visits to Facebook (information on. page statistics functions) are available here.

Instagram is a social network offered by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). Automatically processed information about your activity and how to use our fanpage account on Instagram is usually sent to Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA and saved there. In relation to the USA, the European Commission has not issued a decision establishing an adequate level of data protection. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing as part of visiting the fanpage account on Instagram is carried out in accordance with art. 26 GDPR based on the joint arrangements of joint controllers concluded. Further information regarding the processing of your personal data as part of fanpage visits to Facebook (information on. page statistics functions) are available here.

YouTube is a social networking site offered by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Automatically processed information about your activity and how to use our profile on YouTube is usually sent to a Google LLC server, 1600 Amphitheater Parkway Mountain View, CA 94043 in the USA and saved there. In relation to the USA, the European Commission has not issued a decision establishing an adequate level of data protection. Our cooperation is based on standard data protection clauses adopted by the European Commission.

10. Our contact details and your rights

Persons whose data are processed have the following rights:

• in accordance with art. 15 GDPR: the right to obtain information on data processing to the extent specified in this article;
• in accordance with art. 16 GDPR: the right to rectify your incorrect or incomplete personal data ;
• in accordance with art. 17 GDPR: so-called. "The right to be forgotten", i.e. the right to delete your personal data stored with us, unless further processing is necessary:
  • to exercise the right to freedom of expression and information;
  • to comply with a legal obligation ;
  • for reasons of public interest ;
  • to establish, pursue or defend claims;
• in accordance with art. 18 GDPR: the right to limit the processing of personal data, provided that:
  • the correctness of this personal data is questioned by you;
  • the processing is unlawful and you oppose their removal ;
  • we no longer need personal data, but it is needed You to establish, pursue or defend claims;
  • you have lodged pursuant to art. 21 objection to data processing ;
• in accordance with art. 20 GDPR: the right to receive the data provided to us in a structured, commonly used machine-readable format and to send it to another administrator;
• in accordance with art. 77 GDPR: the right to lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection "UODO").

For questions about collection, processing and using your personal data, and also when requesting information, rectification, restrictions on the processing or deletion of data and in order to cancel consents or object to the use of specific data, please contact the data administrator indicated at the beginning of this privacy policy.