Processing of personal data and privacy policy at Plantwear.com
Read about the principles of data processing and privacy policy
Contact details – electronic addresses: [email protected],
PW DESIGN SP. Z O.O. Ul. Łapiguz 104, 21-400 Łuków, Poland, KRS: 0001105019, NIP: 8252205935, REGON: 528594433, running the online store plantwear.com under the name Plantwear.
Personal data provided by the Customer are processed by Plantwear, which is the administrator of personal data. Personal data should be understood as information about an identified or identifiable natural person; an identifiable natural person is a person who can be directly or indirectly identified, in particular on the basis of an identifier such as name and surname, identification number, location data, internet identifier, device IP or one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity of a natural person, whereby Plantwear processes only the following data: name, surname, e-mail address, telephone number and delivery address of the Goods (and payment address, if different from the delivery address of the Goods), as well as the IP of the device. The purposes and scope of processed personal data are determined by the scope of consents sent using appropriate forms in the Store, and personal data are collected for the purpose of: 1) performance of the contract for the provision of services by electronic means, including sending newsletters, 2) performance of the Order and the Sales Agreement, and 3) conducting marketing consisting in directing interesting offers or content that is not tailored to his preferences. Such data may be made available to other entities only in connection with the performance of the Sales Agreement, i.e. the DPD courier – by selecting the shipment, tpay.com – by selecting this payment method. In no case is the data transferred to a third country or to other entities that are not parties to the transaction. Personal data, in particular: first name, last name, address of residence, e-mail address, telephone number, login, as well as the IP address of the device from which the Order was placed or the Account was registered, will be processed for the purpose of:
providing services provided electronically – then the legal basis for processing is the necessity of processing to perform the contract (art. 6 sec. 1 letter b of the GDPR),
providing Orders and the Sales Agreement – then the legal basis for processing is the necessity of processing to perform the Order and the Sales Agreement (art. 6 sec. 1 letter b of the GDPR),
providing for claims submitted under the warranty for defects in the sold item, claims resulting from the warranty granted and for the purpose of returning benefits in the event of withdrawal from the Sales Agreement – then the legal basis for processing is the necessity of processing to perform the Order and the Sales Agreement (art. 6 sec. 1 letter b of the GDPR),
in order to possibly determine and pursue claims or defend against them – the legal basis for processing is the legitimate interest of Plantwear (art. 6 sec. 1 letter f of the GDPR) consisting in the protection of its rights,
for the purpose of marketing – then the legal basis for processing is the legitimate interest of Plantwear (art. 6 sec. 1 letter f of the GDPR),
for the purpose of fulfilling the statutory obligations incumbent on Plantwear, resulting in particular from tax regulations – the legal basis for processing is the legal obligation (art. 6 sec. 1 letter c of the GDPR),
for the purpose of providing additional services by Plantwear after the expiry of the guarantee and warranty period, i.e. paid or free (according to Plantwear’s decision) removal of damage to the Goods – then the legal basis for processing is the legitimate interest of Plantwear (art. 6 sec. 1 letter f of the GDPR).
in order to maintain the highest possible standards of customer service, contact details (e-mail address) are transferred to the opineo.pl website (Opineo Sp. z o.o. with its registered office in Wrocław) in order to send a request to the customer to issue an opinion. Opineo Sp. z o.o. processes this data only for the above-mentioned purpose.
Providing personal data is voluntary, but failure to consent to the processing of personal data marked as mandatory may prevent the Seller from performing services, including the execution of the Order, the Sales Agreement or maintaining the Account.
These consents may be withdrawn at any time by sending such a request to the e-mail address provided in Chapter II, paragraph 2 of the Regulations or to the postal address provided in Chapter II, paragraph 3 of the Regulations.
The Customer has the right to:
information on the processing of personal data – on this basis, Plantwear provides information on whether data concerning a given Customer (person) is processed at all, and if so, on the scope of processing, including in particular the purposes and legal basis of processing, the scope of data held, entities to whom personal data is disclosed and the planned date of their deletion,
rectification – on this basis, Plantwear corrects errors concerning the processed personal data, and supplements or updates them if they are incomplete or have changed,
deletion of data – on this basis, you can request the deletion of personal data, the processing of which is no longer necessary to achieve any of the purposes for which they were collected,
restriction of processing – on this basis, Plantwear refrains from processing personal data (except for the situations provided for in the GDPR), e.g. in the event that the processing is carried out unlawfully or Plantwear no longer needs the personal data for the purposes of processing. Before lifting the processing restriction, Plantwear informs the Customer about the lifting of such a restriction – Plantwear informs the Customer each time, also at their request, about the rectification, deletion of personal data or the limitation of processing, unless this proves impossible or requires a disproportionately large effort,
data transfer – on this basis, to the extent that the data is processed in connection with the expressed consent or submitted Orders/concluded Sales Agreement, Plantwear issues personal data provided by the Customer,
objection to data processing – on this basis, the Customer may file an objection to Plantwear against: i) the processing of personal data related to direct marketing, including profiling, and from that time on, Plantwear may not process personal data for such a purpose, ii) the processing of personal data for other purposes (related to the legitimate interests pursued by Plantwear, including profiling), in accordance with the GDPR,
complaints – in the event that the processing of personal data by Plantwear violates applicable legal provisions regarding the protection of personal data, including the GDPR, the Customer may file a complaint to the President of the Office for Personal Data Protection. The entrusted personal data is stored and secured in accordance with the principles specified in applicable legal regulations: GDPR, the Act of 10 May 2018 on the protection of personal data (consolidated text Journal of Laws No. 101 of 2002, item 926, as amended), the Act of 18 July 2002 on the provision of services by electronic means (Journal of Laws No. 144, item 1204, as amended).
The provision of personal data by the customer in contact forms is related to the processing of personal data provided in these forms by Plantwear, in order to identify the sender and handle their inquiry sent via the provided form – the legal basis for processing is the necessity of processing to perform the contract for the provision of the service (Article 6 paragraph 1 letter b of the GDPR).
Plantwear processes the personal data of Customers visiting Plantwear profiles maintained in social media (Facebook, YouTube, Instagram, Twitter, Google +, Pinterest). This data is processed solely for the purpose of maintaining the profile, including for the purpose of informing Customers about Plantwear’s activities and promoting various events, services and products, as well as for the purpose of communicating with Customers via functionalities available in social media. The legal basis for the processing of personal data by Plantwear for this purpose is its legitimate interest (Article 6, paragraph 1, letter f of the GDPR) consisting in promoting its own brand and building and maintaining a community associated with the brand. Plantwear provides appropriate technical and organizational measures to ensure the security of personal data provided by Customers, in particular preventing third parties from accessing them or processing them in violation of the law, preventing data loss, damage or destruction. In addition, Plantwear conducts an analysis of the risks associated with disclosing personal data in a manner contrary to applicable law or in connection with unauthorized actions of third parties. Plantwear declares that only authorized employees and associates of Plantwear have access to personal data, but only to the extent necessary to achieve the purposes specified in paragraph 3. Plantwear processes personal data only for the period of time necessary to achieve the purposes specified in paragraph 3. Personal data are processed in principle for the time necessary to provide services electronically and to execute Orders and Sales Agreements. After this time, personal data are deleted by Plantwear, unless the nature of the purpose specified in paragraph 3 requires longer processing of personal data (e.g. in order to fulfill claims related to warranty and guarantee for the duration of the warranty and guarantee).
Files generated directly by the Store cannot be read by other services. External cookies can be read by an external server.
The Online Store uses cookies to:
maintain the Customer’s session (own files),
adapt the content of pages to the Customer’s preferences (own files),
ensure data security (own files),
create statistics (anonymous) that allow for optimizing the usability of the service (external files),
combine the functions of the service with other external services used by the Customer (external files),
display advertising information in line with the Customer’s preferences and limit the number of ad displays (external files).
The Store uses two basic types of cookies:
session cookies – deleted at the end of the Customer’s session,
persistent cookies – ending the Customer’s session does not result in their deletion.
Each Customer can delete the cookies saved on their device at any time, in accordance with the instructions of the manufacturer of the web browser. The Store may store http queries, therefore some information may be saved in the server log files, including the IP address of the computer from which the query came, the name of the Client’s station – identification carried out by the http protocol, if possible, the date and system time of registration in the service and receipt of the query, the number of bytes sent by the server, the URL address of the page previously visited by the Client, if the Client entered via a link, information about the Client’s browser, information about errors that occurred during the execution of the http transaction.
Logs may be collected as material for the proper administration of the Store. Only persons authorized to administer the IT system have access to the information.
Log files may be analyzed in order to prepare traffic statistics in the Store and errors. The summary of such information does not identify the Client.