Privacy policy valid until 4.01.2022

PRIVACY POLICY OF THE SKLEP DLA LEKARZA ONLINE SHOP

1. PERSONAL DATA

The controller of personal data provided on the sklepdlalekarza.com website is Piotr Wojciechowski, conducting business activity on the basis of an entry in the Central Register and Information on Business Activity (CEIDG), kept by the minister responsible for the economy, under the business name NATURFARM Piotr Wojciechowski, address: ul. Jaśminowa 12, 62-070 Poznań, NIP (tax ID) 7791278674, REGON 300017155.
The Controller may process the following data characterising the way in which the User uses the service provided by electronic means (operational data):
identifiers of the User assigned on the basis of the User's other data;
identifiers of the telecommunications network termination point or ICT system used by the User, including the IP address;
information on the start, end and scope of each use of the service provided by electronic means;
information on the User's use of services provided by electronic means.
In addition, if the User consents to the processing of data for statistical or marketing purposes, the Controller may also process data on the way the User uses the Website and on the activities undertaken on the Website.
Data are processed only in electronic form.
Only persons holding the appropriate written authorisation of the Controller have access to the personal data collected on the Website.
The Controller is aware of the risks arising from the processing of personal data on the Internet and declares that it makes every effort to ensure an appropriate level of privacy protection and security for Users. The tools used have been selected to ensure proper protection of the processing of personal data in accordance with the requirements of law. The Controller implements and operates the necessary organisational and technical measures to ensure proper protection of personal data against disclosure to unauthorised persons, taking by an unauthorised person, processing in breach of the law, and alteration, loss, damage or destruction, in particular:
access to the IT system in which personal data are collected is protected by a password known only to the Controller and to persons authorised to process personal data.
data are stored on secured servers located in premises to which only authorised persons have access.
The Controller supervises compliance with the rules and regulations on the protection of personal data.
In matters not regulated by this Privacy Policy, the provisions of the Terms and Conditions of the sklepdlalekarza.com Website apply accordingly.

2. PURPOSES, LEGAL BASES AND METHODS OF PROCESSING PERSONAL DATA

Data collected via the Website are used to perform the agreement for the provision of services by electronic means concluded with the User – to the extent specified in Article 18 of the Act on the provision of electronic services, to perform the Sales Agreement and to enable the website to function properly, and also to make it easier and better for the User to use the website, which constitutes the legitimate interest of the data controller.
Data collected via the Website may be transferred to employees and associates of the Controller and to entities providing IT services to the Controller, to forwarding and courier companies, and to banks and payment operators.
Data collected via the Website will be stored for the period during which services are provided to the User by electronic means, and after that period they may also be stored for the period during which the User may raise claims against the Controller in connection with the provision of these services (the limitation period for claims) and for the period during which authorised state authorities may demand access to these data in the course of inspections. In this case, the Controller will process personal data on the basis of the legitimate interest of the data controller, which is pursuing and defending against claims and fulfilling obligations arising from the law.
Providing personal data is voluntary, but necessary to use certain functions of the Website.
In addition, if on entering the Website the User gave consent in the pop-up information on the cookies processed on the website, the Controller will process the User's personal data for statistical and marketing purposes. In this case, data will be processed on the basis of the User's consent. Providing data for these purposes is voluntary. The recipients of such data may be providers of IT solutions, including cookies, used on the Website. Because of the provision of services related to the Website, cookies are transferred to Google Analytics (Google LLC) and to the entities operating the Facebook service and the Hotjar software. Google LLC uses cookies to identify sessions – the files, to the extent transferred to Google LLC, do not store or transmit any personal data. If data are transferred to an entity from a third country, the Controller ensures that the transfer takes place to a country for which the European Commission has found that it ensures an adequate level of personal data protection, and where this is not the case, the Controller ensures appropriate safeguards for personal data, including by concluding an agreement containing standard contractual clauses.
The Controller also processes the personal data of persons who place orders with it without using the Website. Such data are processed in order to perform the sales agreement concluded with such persons. The provisions of §2(2) and (3), and §4(1)–(2) and (4)–(6) of this Privacy Policy apply accordingly in such a situation, subject to the data subject in such a situation not having the right to data portability.

3. COOKIES POLICY

The Website may use cookies – files containing information saved by the Controller's server on the User's computer. The use of cookies makes it easier for the User to use the Website and makes it possible to improve the quality of services by storing preferences. Cookies are also used to compile general statistics on how Users use the Website, and may also be used for advertising purposes – to deliver personalised advertising content to Users.
Two basic types of cookies are used on the Website: "session" cookies and "persistent" cookies. "Session" cookies are temporary files that are stored on the User's terminal device until logging out, leaving the website or closing the software (web browser). "Persistent" cookies are stored on the User's terminal device for the time specified in the cookie parameters or until they are deleted by the User.
The following types of cookies are used on the Website:
1. "necessary" cookies, enabling the use of services available on the Website, e.g. authentication cookies used for services requiring authentication on the Website;
2. cookies used to ensure security, e.g. used to detect abuse of authentication on the Website;
3. "performance" cookies, enabling the collection of information on how the Website pages are used;
4. "functional" cookies, enabling the "remembering" of settings selected by the User and personalisation of the User interface, e.g. with regard to the selected language or region of origin of the User, font size, appearance of the website, etc.;
5. "advertising" cookies, enabling the delivery to Users of advertising content better tailored to their interests.
In many cases, the software used to browse websites (web browser) allows cookies to be stored on the User's terminal device by default. Users of the Website may change their cookie settings at any time. These settings may be changed in particular so as to block the automatic handling of cookies in the web browser settings, or to inform each time cookies are placed on the device of the Website User. Detailed information on the options and methods of handling cookies is available in the settings of the software (web browser).
The use of cookies does not allow any personal or address data of the User or any confidential information to be obtained from the User's computer. Cookies cannot be used if the option allowing cookies to be saved has been disabled in the web browser. In principle, this does not prevent browsing the Website, but it may cause certain difficulties, including slowing down the Website.
Cookies placed on the User's terminal device may also be used by advertisers and partners cooperating with the Controller.
The conditions for storing or receiving cookies can be changed by configuring the settings in web browsers.
The Controller is not responsible for the privacy policies of websites to which links are placed on the Website pages.

4. RIGHTS OF USERS

The User has the right at any time to request from the Controller access to their personal data, their rectification, erasure or restriction of processing, the right to object to processing, and the right to data portability.
The User also has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
Where data are processed for advertising or statistical purposes, the User has the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal, and the right not to be subject to a decision based solely on automated processing, including profiling.
The User's rights are exercised at the User's request sent to the postal or e-mail address given in point 3.1 of the Terms and Conditions of the Website.
The right to erasure is exercised by deleting the data without undue delay, including by deleting the data from the registers kept by the Controller, in accordance with the law.
The Controller may refuse to delete the User's data in the cases specified in Article 17(3) GDPR, including where there is a suspicion that the User's conduct has breached the Terms and Conditions binding on the User, this Privacy Policy or the provisions of applicable law, and the information held may help to establish the User's liability.
Personal data are transferred (data portability) as follows:
1. the Controller transfers data in a "structured", "commonly used" and "machine-readable" format, i.e. in XML, JSON or CSV formats;
2. if the Controller finds that the User does not have the right to data portability in a given situation and therefore does not intend to take action on the User's request, it informs the data subject of the reasons for not taking action.

ver. 1.03. dated 16 February 2021

Earlier versions of the documents can be found at:
https://sklepdlalekarza.com/pl/content/category/9-dokumenty-archiwalne