Privacy policy & cookies
§ 1 General provisions
§ 2 Personal Data Administrator
§ 3 Contact details
§ 4 Principles of personal data processing
§ 5 Purposes and legal grounds for processing personal data
§ 6 Period of storing personal data
§ 7 Categories of personal data
§ 8 Cookies
§ 9 Sharing of data
§ 10 Clients' rights
§ 1 General provisions
1.This Privacy Policy sets out the rules for the processing and protection of personal data of Customers using the online store available at https://festshop.eu/ (hereinafter referred to as the "Online Store").
This Privacy Policy fulfills the information obligation imposed on the Administrator in accordance with art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation personal data) (hereinafter referred to as "GDPR").
§ 2 Personal Data Administrator
2.The administrator of the Personal Data of the Online Store Customers is Grupa Fest Sp. z o.o. – Szczęśliwicka 54/447 Street, 02-353 Warsaw, Poland, TAX ID: 7011180788 | REGON number: 527254936 (hereinafter referred to as the "Administrator").
§ 3 Contact details
The Administrator can be contacted via the e-mail address: kontakt@festfloor.pl or in writing to the following address: FESTFLOOR, Żytnia 23 Street, 05-850 Duchnice, Poland.
§ 4 Principles of personal data processing
1. The Administrator processes Customers' personal data in accordance with the provisions of the GDPR.
2. The administrator uses the technical and organizational measures required by the provisions of EU law to ensure the protection of personal data being processed and the protection of personal data against disclosure to unauthorized persons, acquisition by unauthorized persons, processing in violation of the provisions and change, loss or destruction.
3. The Administrator declares that providing data marked as required in the Online Store is voluntary, but necessary to use the functionality, including setting up and maintaining a Customer account and placing and processing an order.
§ 5 Purposes and legal grounds for processing personal data
Customers' personal data will be processed for the following purposes:
- execution of orders in the Online Store (Article 6(1)(b) and (c) of the GDPR),
- running the newsletter service (Article 6(1)(a) of the GDPR),
- direct marketing of own services and products, in addition to the newsletter service, which is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR),
- responding to e-mail or telephone contact, which is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR),
- analytical research, consisting in particular in the study and analysis of traffic on our website in order to keep statistics, which is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR),
- archival (evidence) in the event of a legal need to prove facts, which is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR),
- possible determination, investigation or defense against claims being the implementation of the Administrator's legitimate interest (Article 6(1)(f) of the GDPR).
§ 6 Period of storing personal data
Customer data will be stored for the following period:
- data related to the execution of orders - for a period of 5 years from the end of the year in which the sale was made, unless their further storage is justified by the limitation period for claims,
- running the newsletter service - until you unsubscribe from the newsletter,
- data related to the implementation of marketing activities - until the objection is raised,
- data related to responding to e-mail or telephone contact - until the correspondence is conducted or the consent is withdrawn, unless further storage of data is justified by the overriding interest of the Administrator, in the form of e.g. defense against possible claims,
- keeping statistics - until the objection is raised, but no longer than for a period of 50 months from the last activity of the Customer on the website
- archival purposes - for the period necessary to achieve this purpose,
- establishing, investigating or defending against claims - for the period necessary to achieve this goal.
§ 7 Categories of personal data
The administrator collects, processes and stores the following customer data:
- in connection with placing an order: e-mail address, name and surname, address, telephone number, and in the case of entrepreneurs also the company name and tax identification number,
- in connection with e-mail or telephone contact, e-mail address, name and surname and telephone number,
- in connection with the provision of the newsletter service: e-mail address.
- In the remaining scope, the Administrator processes only the data necessary to achieve a given goal.
- When using the Online Store, the Administrator collects and collects automatically information such as: IP address, request URL, device ID, amount of time spent on individual pages, browser type, browser language, date and time of using the website, screen resolution, type and operating system version, and other such information.
§ 8 Cookies
1. The Online Store uses small files called cookies. They are saved on the end device of the person visiting the Online Store, if the web browser allows it.
2. Cookies are IT data, in particular text files, which are stored in the Customer's end device and are intended for using the Online Store. Cookies usually contain the name of the website they come from, their storage time on the end device and a unique number.
3. Cookies are used for the following purpose:
- recognition of the device used by the Customer in order to properly display the content of the website,
- creating statistics that help to understand how customers use websites, which allows improving their structure and content,
- maintaining the Customer's session of the Online Store, thanks to which the Customer does not have to re-enter the login and password on each subpage of the Online Store,
- adjusting the content and functioning of the Online Store by matching an anonymous, randomly generated tracking ID, thanks to which it is possible, among others, to checking where the Customer comes from, what search engine he used, what link he clicked on, what keywords he entered and at what point he stopped using the Online Store,
- collecting general and anonymous data for the implementation of advertising campaigns via remarketing lists, allowing for the display of advertising content tailored to the Customer's preferences.
1. Customers' personal data may be transferred to entities to which the Administrator entrusts the processing of personal data on the basis of contracts and entities authorized to obtain personal data on the basis of legal provisions.
In order to perform the contract concluded via the Online Store and to ensure the proper functioning of the Store, the Administrator provides Customers' personal data, in particular to entities providing services:
- postal, forwarding and courier services as well as order handling,
- electronic payments,
- accounting,
- hosting,
- IT and in the field of software delivery and tools used in particular to conduct analytical research, create statistics, track traffic on our website, marketing automation, CRM systems,
- marketing in the field of operating the online store.
3. Entities providing services to the Administrator may store Customer data outside the European Economic Area. In such situations, Users' data will be transferred only to countries that ensure an adequate level of protection, and to countries that do not provide an adequate level of protection, only if appropriate safeguards are provided, including, among others, based on standard contractual clauses adopted by the European Commission.
§ 10 Clients' rights
1. The customer has the right to access his data and the right to request rectification, deletion or limitation of processing. To the extent that the basis for the processing of personal data is the premise of the legitimate interest of the administrator, the Customer has the right to object to the processing of his personal data.
2. To the extent that the basis for the processing of the Customer's personal data is consent, the Customer has the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
3. To the extent that the Customer's data is processed for the purpose of concluding and performing the Agreement or processed on the basis of consent - the Customer also has the right to transfer personal data, i.e. to receive personal data from the administrator, in a structured, commonly used machine-readable format . The customer may send this data to another data controller.
4. The customer also has the right to lodge a complaint with the supervisory body dealing with the protection of personal data.