Personal data collected by the Online Store Administrator is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1), hereinafter: RODO.
The Administrator of the Online Shop makes special efforts to protect the privacy and information provided to him/her concerning the Customers of the Online Shop. The Administrator selects and applies appropriate technical measures with due diligence, including those of a programming and organisational nature, which ensure protection of the processed data, and in particular protects the data against unauthorised access, disclosure, loss and destruction, unauthorised modification, as well as against their processing in violation of the applicable laws.
Personal data controller
The administrator of your personal data is:
name of DBS Dagmara Bobrowicz ul.Włodarzewska 67 02-348 Warsaw Poland
You can contact the Personal Data Administrator with your personal data using:
traditional: name of DBS Dagmara Bobrowicz ul.Włodarzewska 67 02-348 Warsaw Poland
the contact form, which you can find at https://www.horeca-decor.eu/contact-us/.
Objectives and legal grounds for processing personal data
The personal data controller processes your personal data for the following purposes and scope:
taking action before concluding a contract at your request (e.g. setting up an account), i.e. the data given in the registration form in the Online Shop, i.e. e-mail address and established password, gender; if the registration of the Account takes place through an external authentication service (e.g. Google+, Facebook) we collect your name and surname, and if you register when purchasing the Goods, we collect your name and surname and the data given for the purpose of order processing such as shipping address;
in order to provide Services that require an Account, such as order history maintenance, information on the status of order processing, we process your data provided in your Account and when purchasing Goods;
in order to provide Services that do not require the creation of an Account and purchase of Goods, i.e. browsing the web pages of the Online Store, search engine for Goods, we process personal data concerning your activity in the Online Store, i.e. data concerning the Goods you are viewing, session data of your device, operating system, browser, location and unique ID, IP address;
in order to perform the contract of sale of the Goods (e.g. delivery of the ordered Goods), we process personal data provided by you when purchasing the Goods, such as name and surname, e-mail address, address data, payment data, and if you make a purchase through your Account, additionally established password;
in order to statistics the use of particular functionalities available in the On-line store, to facilitate the use of the On-line store and ensure the IT security of the On-line store, we process personal data concerning your activity in the On-line store and the amount of time spent on each of the subpages in the On-line store, your search history, location, IP address, device ID, data concerning your Internet browser and operating system;
for the purpose of determining, asserting and enforcing claims and defending against claims in court proceedings and other enforcement authorities, we may process your personal data provided when you purchased the Goods or created an Account and other data necessary to prove the existence of a claim or which arises from a legal requirement, court order or other legal procedure;
in order to process your complaints, grievances and requests and to respond to your questions, we process the personal data you provide in the contact form, complaints and requests or to respond to questions in another form and some of the personal data you provide in your Account as well as data relating to the order of the Goods and other Services provided by us giving rise to complaints, grievances or requests and data contained in the documents accompanying your complaint, grievance and request;
for the purpose of marketing our Goods and Services and our customers and partners, including remarketing, for this purpose we process the personal data you provide when you create and update your Account, data relating to your activity in the Online Shop, including orders that are recorded and stored through cookies, and in particular your order history, search history, clicks on the Online Shop, login and registration dates, history and your activity relating to our communications with you. In the case of remarketing, we use the data about your activity in order to reach you with our marketing messages outside the Online Shop and we use external providers for this purpose. These services consist of displaying our messages on websites other than the Online Shop. You will find details about this in the cookie records;
In order to organize contests and loyalty programs, i.e. notifications about the points collected, notifications about winning and advertising our offer, we use your personal data provided in your Account and during registration in the contest or loyalty program. Detailed information on this subject is given each time in the terms and conditions of participation in a given competition or loyalty programme;
for the purpose of market research and opinion polling by us or our partners, i.e. information about the order, your data given in your Account or when purchasing the Goods, your e-mail address. The data collected in the course of market research and opinion surveys are not used by us for advertising purposes. For detailed guidance, please refer to the survey information or the place where you enter your data.
Categories of personal data concerned
The controller processes the following categories of relevant personal data:
data concerning activity in the Online Shop;
data concerning orders in the Online Shop;
data concerning complaints and requests;
data concerning marketing services.
Voluntary provision of personal data
Providing the required personal data by you is voluntary and is a condition for the Administrator to provide services via the Online Shop.
Data processing time
Personal data will be processed for the period necessary to carry out orders, services, marketing activities and other services provided to the Customer. Personal data will be deleted in the following cases:
when the data subject asks for their removal or withdraws their consent;
when the data subject does not act for more than 10 years (inactive contact);
after being informed that the stored data is outdated or inaccurate.
Some data in the scope of: e-mail address, name and surname, may be stored for the next 3 years for the purposes of evidence, complaint handling, complaints and claims related to the services provided by the Online Shop – these data will not be used for marketing purposes.
Data concerning orders for Paid Goods and services, contests and loyalty programs will be stored for a period of 5 years from the date of order delivery.
Data concerning Customers not logged on we store for a period of time corresponding to the life cycle of cookies stored on devices or until they are removed from the Customer’s device by the Customer.
Your personal data concerning your preferences, behaviour and choice of marketing content may be used as a basis for making automated decisions in order to determine the sales opportunities of the Online Store.
Recipients of personal data
We pass on your personal data to the following categories of recipients:
state authorities, e.g. prosecutor’s office, police, GIODO, President of the Office of Competition and Consumer Protection, if they ask us to do so.
Rights of the data subject
On the basis of the RODO you have the right to:
demand access to your personal data;
demand the correction of your personal data;
demand the deletion of your personal data;
demand a restriction of personal data processing;
object to the processing of your personal data;
request the transfer of personal data.
The personal data controller shall, without undue delay – and in any case within one month of receiving the request – provide you with information on the actions taken in relation to your request. If necessary, the one-month period may be extended by another two months due to the complexity of the request or the number of requests.
In any case, the personal data controller will inform you about such an extension within one month of receiving the request, giving the reasons for the delay.
Right of access to personal data (Article 15 of the GCRL)
You have the right to obtain information from the Administrator whether your personal data is being processed.
If the Administrator is processing your personal data you have the right to:
access to your personal data;
to obtain information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of these data, the planned period of storage of your data or the criteria for determining this period, your rights under the TYROM and the right to lodge a complaint with the supervisory authority, the source of these data, automated decision making, including profiling, and the safeguards applicable to the transfer of these data outside the European Union;
obtain a copy of your personal data.
If you wish to request access to your personal data, please send your request to the address: [email@example.com.
Right of rectification of personal data (Article 16 PCO)
If your personal data is incorrect, you have the right to request the Administrator to correct your personal data immediately.
You also have the right to request the Administrator to complete your personal data.
If you wish to request that your personal data be corrected or supplemented, please send your request to: firstname.lastname@example.org.
If you have registered in the Online Shop, you can correct and complete your personal data yourself after logging into the Online Shop.
Right to delete personal data, the so-called “right to be forgotten”. (Article 17 TYPE)
You have the right to request the Administrator to delete your personal data when:
Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
you have withdrawn your specific consent, to the extent that your personal data has been processed based on your consent;
Your personal data has been unlawfully processed;
you have objected to the processing of your personal data for the purposes of direct marketing, including profiling, to the extent that the processing of personal data is related to direct marketing;
you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the Controller or a third party.
Despite the request to delete your personal data, the Personal Data Controller may process your data further for the purpose of establishing, asserting or defending claims, of which you will be informed.
If you wish to request the deletion of your personal data, please send your request to: email@example.com.
Right to request a restriction of the processing of personal data (Article 18 of the GCRC)
You have the right to request a restriction on the processing of your personal data when:
you question the correctness of your personal data – the Administrator will limit the processing of your personal data for a period of time that allows for checking the correctness of the data;
when the processing of your data is unlawful, and instead of deleting your personal data, you request a restriction on the processing of your personal data;
Your personal data is no longer needed for the purposes of processing, but is needed to establish, assert or defend your claim;
where you have objected to the processing of your personal data – until such time as it has been determined whether the legitimate interests of the Data Controller take precedence over the grounds for objection.
If you wish to request a restriction on the processing of your personal data, please send your request to firstname.lastname@example.org.
Right to object to the processing of personal data (Article 21 of the GCRL)
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the Administrator or a third party;
processing for direct marketing purposes.
If you wish to object to the processing of your personal data, please send your request to: email@example.com.
Right to request portability of personal data (Article 20 TYPE)
You have the right to receive your personal data from the Administrator in a structured, commonly used machine-readable format and send it to another personal data administrator.
You may also request that it is the Administrator of personal data to send your personal data directly to another Administrator (if technically possible).
If you wish to request the transfer of your personal data, please send your request to: firstname.lastname@example.org.
Right to revoke consent
You can revoke your consent to the processing of your personal data at any time.
Withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
If you wish to withdraw your consent to the processing of your personal data, please send your request to email@example.com or use the appropriate functionalities in your Account.
Complaint to the supervisory authority
If you believe that the processing of your personal data violates RODO, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged infringement was committed.
In Poland, the supervisory authority within the meaning of the RODO is the General Inspector for Personal Data Protection (GIODO).