PRIVACY POLICY

What is the Privacy Policy?

The privacy policy is a set of rules aimed at informing the User about the process of obtaining, processing and securing their personal data. These processes are carried out on the basis of applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95 / 46 / WE (hereinafter: GDPR) and other provisions on the protection of personal data, in particular the Act of 10 May 2018 on the protection of personal data (i.e. Journal of Laws of 2019, item 1781). The purpose of this Privacy Policy is to fulfill the information obligation resulting from art. 13 GDPR.

Definitions

The terms used in the Privacy Policy mean:

ADMINISTRATOR – Petro Kiryanov Spółka Komandytowa., Registered at ul. Joanna Żubrowej, 15 94-025 Łódź, NIP: 7123309810, REGON: 363951518.

2.PERSONAL DATA – information about a natural person identified or identifiable by the factor / factors determining the physical, physiological, genetic, mental, economic, cultural or social identity (including name and surname, identification number, device IP, location data, Internet ID, information collected via Cookies and other similar technology).

CUSTOMER – User who purchases the Product (s) in the Online Store.
POLICY – this Privacy Policy.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC.
ONLINE STORE – a platform for selling Products and providing services offered by the Seller available on the Internet at www.test.knittons.com.
BLOG – a blog kept on the pages of the Online Store by the Administrator.
USER – a natural person visiting the Online Store and using the services offered by the Administrator and described in the Privacy Policy.
REGISTERED USER – a natural person who has registered in the Online Store, creating a Customer Account.
REGULATIONS – Regulations of the Website, which in the field of Electronic Services are the regulations referred to in Art. 8 of the Act of 18 July 2002 on the provision of electronic services (i.e. Journal of Laws of 2020, item 344), available at the Administrator’s office (stationary store) and at https://kokosek.pl/pages /Shop rules.

III. Personal Data Administrator

The administrator of personal data is Petro Kiryanov Spółka Komandytowa, registered at ul. Joanna Żubrowej, 15 94-025 Łódź, NIP: 7123309810, REGON: 363951518. Contact with the Administrator is possible by sending a written message to the above-mentioned address of the registered office or by sending a message to the e-mail address [email protected]

Purposes and grounds for the processing of personal data and the periods of their processing

In accordance with the scope of the conducted activity, the Administrator processes Users’ personal data for various purposes, however, subject to their processing in accordance with the law. Personal data is processed in connection with the following categories of activities:

Using the Online Store

Data collected about Users using the Online Store (including browsing it) may constitute personal data (especially if they concern a Registered User), therefore personal data in the field of browsing and using the Online Store are processed by the Administrator in one or for several of the following purposes and based on the following legal bases:

provision of electronic services in the field of providing Users with content posted on the pages of the Online Store – legal basis for the processing of personal data: the necessity to process data for the performance of the contract (Article 6 (1) (b) of the GDPR);
remembering the current contents of the basket – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in making it easier for the Customer to conclude a Sales Agreement or to continue an interrupted transaction for various reasons;
analysis and statistics – the legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in constant analysis of Users’ behavior in order to adapt the Online Store to their preferences and ultimately increase the quality of services provided;
streamlining the purchasing process by verifying the location of the end device (in a situation where the function of tracking the location of the end device has been enabled) – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in increasing the quality of services provided ;
possible determination and pursuit of claims or defense against them – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the need to ensure the protection of his rights.

The User’s activity in the Online Store (including his personal data) is recorded in system logs – they are a computer system that stores a chronological record of information on events and activities in the IT system. The information collected in the logs (including personal data) is processed in connection with the Administrator providing certain services and increasing their quality. The administrator also processes them for technical purposes – these data may be temporarily stored and processed in order to ensure the security and proper functioning of IT systems.

To the extent that personal data are processed in connection with the performance of the contract by the Administrator, they will be processed for the duration of the contract, and after this period (for possible determination and pursuing claims) also for the period required by applicable legal regulations. In the scope of data processed in connection with other legitimate interests of the Administrator, the data will be processed until the Administrator achieves the goal or until the data subject submits an effective objection. Providing data is fully voluntary, however, it is necessary in order to use the services offered by the Administrator.

Registration and logging in to the Online Store

Users who create a Customer Account in the Online Store, which is at the same time expressing the will to register in the Online Store, are required to provide an e-mail address, which is necessary to create the above-mentioned. accounts. Personal data provided to the Administrator in the field of registration and logging in to the Online Store are processed for one or more of the following purposes and based on the following legal grounds:

provision of electronic services in the field of providing Users with content posted on the pages of the Online Store – legal basis for the processing of personal data: the necessity to process data for the performance of the contract (Article 6 (1) (b) of the GDPR);
analysis and statistics – the legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in constant analysis of Users’ behavior in order to adapt the Online Store to their preferences and ultimately increase the quality of services provided;
possible determination and pursuit of claims or defense against them – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the need to ensure the protection of his rights.

Maintaining a Customer Account and consent to automatic data completion

Users who have created a Customer Account, which is at the same time expressing the will to register in the Online Store, receive access to the account service panel. To service the account, it is necessary to process the e-mail address, therefore, failure to provide it by the User at the stage of setting up a Customer Account in the Online Store or its subsequent removal makes it impossible to keep the account. To make it easier for the User to place orders via the Online Store, in the Customer Account editing panel, the User may provide additional data and consent to their processing in order to automatically complete the data at the stage of placing the order. The additional data provided by the User may be updated or deleted at any time – their provision is fully voluntary, and failure to provide them does not have any impact on the use of the Customer Account and the Online Store. In the case of maintaining a Customer Account, the Registered User order history is available in the account service panel. Personal data provided to the Administrator are processed for one or several of the following purposes and based on the following legal grounds:

provision of electronic services in the field of providing Users with content posted on the pages of the Online Store – legal basis for the processing of personal data: the necessity to process data for the performance of the contract (Article 6 (1) (b) of the GDPR);
analysis and statistics – the legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in constant analysis of Users’ behavior in order to adapt the Online Store to their preferences and ultimately increase the quality of services provided;
possible determination and pursuit of claims or defense against them – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the need to ensure the protection of his rights;
automatic completion of data at the stage of placing an order by the User in order to facilitate the order placement – legal basis for the processing of personal data: voluntary consent of the User, which he has the right to withdraw at any time (Article 6 (1) (a) of the GDPR) with a reservation, that the withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal;
marketing purposes of the Administrator – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the possibility of promoting Products offered via the Online Store.

To the extent that personal data are processed in connection with the performance of the contract by the Administrator, they will be processed for the duration of the contract, and after this period (for possible determination and pursuing claims) also for the period required by applicable legal regulations. In the scope of data processed in connection with other legitimate interests of the Administrator, the data will be processed until the Administrator achieves the goal or until the data subject submits an effective objection. Data processed on the basis of a voluntarily expressed consent will be processed until the goal is achieved by the Administrator, unless the User withdraws consent earlier.

Placing an Order in the Online Store Placing an Order (i.e. purchasing a Product / Products) by the User in the Online Store is closely related to the processing of his personal data. Providing data marked as mandatory is voluntary, however, it is necessary for the proper performance of the Order and its delivery – failure to provide this data results in the inability to conclude a Sales Agreement. Issuing a VAT invoice in connection with the Order placed by the User also involves the processing of his personal data. Providing data marked as mandatory is necessary in order to conclude a Sales Agreement – failure to provide this data results in the inability to conclude a Sales Agreement. Providing other data is voluntary and has no impact on the implementation of the Order. Personal data provided in the scope of submitting an Order in the Online Store are processed for one or more of the following purposes and based on the following legal grounds:

conclusion of the Sales Agreement and execution of the order placed – legal basis for the processing of personal data: necessity to process data for the performance of the contract (Article 6 (1) (b) of the GDPR);
issuing a VAT invoice and storing it for the period specified in generally applicable legal regulations, as well as the implementation of other statutory obligations incumbent on the Administrator, which result directly from tax regulations and accounting regulations – legal basis for the processing of personal data: the necessity of processing to fulfill the legal obligation on the Administrator (Article 6 (1) (c) of the GDPR);
performance of other statutory obligations incumbent on the Administrator – legal basis for the processing of personal data: the necessity of processing to fulfill the legal obligation incumbent on the Administrator (Article 6 (1) (c) of the GDPR);
analysis and statistics – the legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in constant analysis of Users’ behavior in order to adapt the Online Store to their preferences and ultimately increase the quality of services provided;
possible determination and pursuit of claims or defense against them – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the need to ensure the protection of his rights.

Contact via the Contact Form

In the Online Store, the Administrator has made available to the Users the possibility of contacting him via the contact form. Using the form is fully voluntary, but it is required to provide personal data necessary for subsequent contact with the User and handling his inquiry – failure to provide this data results in the inability to use from the form. Failure to provide other data does not affect the possibility of contacting the Administrator. Personal data provided to the Administrator as part of contact via the Contact Form are processed for one or more of the following purposes and based on the following legal grounds:

identification of the sender of the inquiry and handling his inquiry sent via the Contact Form – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the need to properly handle Users’ inquiries;
analysis and statistics – the legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in constant analysis of Users’ behavior in order to adapt the Online Store to their preferences and ultimately increase the quality of services provided;
possible determination and pursuit of claims or defense against them – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the need to ensure the protection of his rights.

To the extent that personal data are processed in connection with the handling of the inquiry, they will be processed for the duration of this process, and after this period (for possible determination and pursuit of claims) also for the period required by applicable legal regulations. In the scope of data processed in connection with other legitimate interests of the Administrator, the data will be processed until the Administrator achieves the goal or until the data subject submits an effective objection.

Contact by phone and e-mail with the Customer Service Office

The administrator enables the Users to contact the Customer Service Office. The use of this form of contact, depending on the communication channel (e-mail or telephone), is associated with the User providing a telephone number or e-mail address. In order to obtain help or to answer an inquiry sent by the User, it may be necessary to provide other personal data – providing the data indicated by the employees of the Customer Service Office may be required in order to accept and properly handle the inquiry. Their provision is voluntary, however, failure to provide this data may result in the inability to use the help of the Customer Service Office. Providing unnecessary data is completely voluntary. Personal data provided to the Administrator by e-mail or by phone in the scope of contacting the Customer Service Office are processed for one or more of the following purposes and based on the following legal bases:

identification of the sender of the inquiry and handling his inquiry – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the need to properly handle Users’ inquiries;
analysis and statistics – the legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in constant analysis of Users’ behavior in order to adapt the Online Store to their preferences and ultimately increase the quality of services provided;
possible determination and pursuit of claims or defense against them – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the need to ensure the protection of his rights.

Possibility to use the Newsletter

In the Online Store, the Administrator has provided the Users with the possibility of using the free Newsletter service regarding the Products offered by the Administrator in the Online Store by the Administrator, temporary promotions or other matters related to the functioning of the Online Store. In order to send the Newsletter, the User’s voluntary consent to receive commercial information via e-mail and other forms of electronic communication is necessary in accordance with the Act of 18 July 2002 on the provision of electronic services (Journal of Laws of 2019, item 123). ). The consent to receive the Newsletter may be withdrawn by the User at any time, and the withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal. Detailed provisions regarding the Newsletter service are described in the Regulations of the Website. Providing the e-mail address by the User is fully voluntary, but necessary to receive the Newsletter. Personal data provided to the Administrator in the scope of sending the Newsletter are processed for one or more of the following purposes and based on the following legal grounds:

sending the Newsletter – the legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the possibility of promoting the Products offered in the Online Store via the Newsletter sent;
analysis and statistics – the legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in constant analysis of Users’ behavior in order to adapt the Online Store to their preferences and ultimately increase the quality of services provided;
possible determination and pursuit of claims or defense against them – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the need to ensure the protection of his rights.

Personal data processed for marketing purposes will be processed until the Administrator’s goals are achieved or an objection is submitted – no longer than until the User withdraws his consent to receive commercial information in accordance with the Act of 18 July 2002 on the provision of electronic services (Journal of Laws No. . of 2019, item 123). To the extent that personal data are processed in connection with the handling of the inquiry, they will be processed for the duration of this process, and after this period (for possible determination and pursuit of claims) also for the period required by applicable legal regulations. In terms of data processed in connection with the Administrator’s other legitimate interests, the data will be processed until the Administrator’s goal is achieved or until an effective objection is raised by the data subject. Providing data is fully voluntary, but necessary to subscribe to the Newsletter – failure to do so makes it impossible to receive the Newsletter.

Marketing

The Administrator may process the Users’ personal data obtained in order to carry out their marketing activities – the legal basis for this activity is the Administrator’s legitimate interest (Article 6 (1) (f) of the GDPR) consisting in the possibility of promoting his own business and the Products offered via the Online Store. These actions may include:

displaying to the User marketing content not adapted to his preferences, but only to the content of the browsed websites (contextual advertising);
displaying to the User marketing content corresponding to his interests (behavioral advertising), however, in this case, data processing is based on the User’s voluntary consent (Article 6 (1) (a) of the GDPR).

Personal data processed by the Administrator for marketing purposes will be processed until the Administrator’s goals are achieved or until the data subject submits an effective objection. On the other hand, in the case of personal data processed on the basis of consent voluntarily expressed by the User – until its withdrawal, however, with the proviso that the withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

Blog

The administrator runs a Blog in his Online Store, the posts of which can be commented on by Users. For anti-spam verification, it is necessary for the User to provide data in the form of a name and e-mail address (which, however, will not be made public). Providing this data is voluntary, but necessary to publish a comment on the Blog – failure to do so prevents the User from commenting on the posts. Providing other data is voluntary and does not affect the possibility of commenting the post. Personal data provided to the Administrator in terms of comments by the User on posts on the Blog are processed for one or more of the following purposes and based on the following legal grounds:

provision of electronic services in the field of providing Users with content posted on the pages of the Online Store – legal basis for the processing of personal data: the necessity to process data for the performance of the contract (Article 6 (1) (b) of the GDPR) consisting in providing the User with the possibility of commenting on blog entries;
analysis and statistics – the legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the constant analysis of Users’ behavior in order to adjust the Store Internet connection to their preferences and ultimately the increase in the quality of services provided;
possible determination and pursuit of claims or defense against them – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the need to ensure the protection of his rights;
marketing purposes of the Administrator – legal basis for the processing of personal data: legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the possibility of promoting Products offered via the Online Store.

Personal data will be processed for the period required by generally applicable legal regulations, and after this period (in order to possibly establish and pursue claims) also for the period required by applicable legal regulations. In the scope of data processed in connection with other legitimate interests of the Administrator, the data will be processed until the Administrator achieves the goal or until the data subject submits an effective objection. Personal data processed for marketing purposes will be processed until the Administrator achieves the goal or submits an objection.

Recipients of personal data
The administrator in his activities regarding the Online Store uses the help of other entities, which involves the need to provide personal data. Therefore, Users’ personal data may be transferred to courier companies, Poczta Polska, companies and a logistics operator, product suppliers, IT system operators, entities operating systems for e-mail or telephone marketing, payment operator, as well as audit, legal, advisory and marketing companies. .
In addition to the recipients indicated above, the Administrator may transfer personal data to third parties or public administration authorities in accordance with the current provisions on data protection, when required by law or the Administrator is authorized to do so.
Users’ rights in the field of personal data
Users whose personal data concern have the following rights:

a.right to information about the processing of personal data – on this basis, the Administrator provides the person making the request with information about the processing of personal data (purposes and legal grounds for the processing of personal data, the scope of the data held, the recipients of personal data, the date of deletion of personal data);

the right to obtain a copy of the data – on this basis, the Administrator provides the person making the request with a copy of the processed data concerning that person;
the right to rectify personal data – on this basis, the Administrator removes, at the request of a given person, any possible inconsistencies or errors processed personal data, and also updates them if necessary;
the right to delete personal data – on this basis, the User may request the Administrator to delete data, the processing of which is no longer necessary to achieve any of the purposes for which they were collected;
the right to limit processing – on this basis, the Administrator, at the request of a given User, ceases to perform operations on personal data (except for operations to which the data subject has consented and for their storage in accordance with the adopted retention rules or until the reasons for limiting processing have ceased to exist personal data);
the right to transfer data – on this basis, to the extent that the data is processed in connection with the concluded contract or consent, the Administrator issues data provided by the data subject in a computer-readable format;
the right to object to the processing of data for marketing purposes – the data subject may at any time effectively object to the processing of personal data for marketing purposes without giving any reasons;
the right to object to other purposes of data processing – the data subject may at any time effectively object to the processing of personal data on the basis of the legitimate interest of the Administrator. The objection in this respect should contain a justification and is subject to the Administrator’s assessment.
If the Administrator processes personal data on the basis of the consent expressed by the User, the User may withdraw this consent at any time. If the Administrator processes personal data on the basis of the expressed consent, until its withdrawal, the Administrator has the right to process personal data and the revocation of the consent does not affect the legality of the current processing.
A request regarding the exercise of the rights described above or an objection to the processing of personal data may be submitted by the User in writing to the address of Petro Kiryanov Spółka Komandytowa., Ul. Joanny Żubrowej 15, 94-025 Łódź or by writing to the e-mail address [email protected] The application should precisely indicate what the request is for:

who submits the application;
what entitlement the person submitting the application wants to use from the abovementioned;
what purposes of personal data processing the request relates to.

If the Administrator is unable to determine the content of the request or identify the person submitting the application based on the data contained in the application, he reserves the right to ask the applicant for the necessary information. The answer to the application will be given immediately, but not later than within one month of receiving the application. If it is necessary to extend this period, the Administrator will inform the applicant about the reasons for a possible extension. The answer will be given by the Administrator to the e-mail address from which the application was sent, and in the case of applications sent by letter, by registered mail to the address indicated by the applicant (except when the content of the application indicates the User’s desire to receive feedback to the e-mail address (if the User provided it).

VII. The right to lodge a complaint with the President of the Personal Data Protection Office

In a situation where the User believes that his personal data is being processed contrary to the applicable law, he may file a complaint with the President of the Personal Data Protection Office.

VIII. Transfer of personal data to third countries and international organizations

As a rule, Users’ personal data are not transferred to Third Countries.

Final remarks
In matters not covered by this Privacy Policy, the provisions of the GDPR and Polish generally applicable provisions on the protection of personal data shall apply.
An integral part of this Privacy Policy is the Cookie Policy available at the Administrator’s office (stationary store) and at https://knittons.com/pl/polityka-plikow-cookies.
The Privacy Policy is valid from the moment of its publication in the Online Store, ie from November 17, 20, and is available at the Controller’s seat (stationary store) and at https://knittons.com/polityka-prywatnosci.