Privacy policy
Privacy Policy
Contact
Grand Globe Store Sylwia Schneider
56/74 Grochowska Street
04-282 Warsaw
Tax Identification Number (NIP): 5262267391, National Business Registry Number (REGON): 140116381
The company is registered in the Central Register and Information on Economic Activity (CDEIG) of the Ministry of Entrepreneurship and Technology.
1. The data controller of the personal data processed to the extent necessary for providing services is Grand Globe Store, located at 56/74 Grochowska Street, 04-282 Warsaw, Tax Identification Number (NIP): 5262267391, National Business Registry Number (REGON): 140116381, email: kontakt@agrafka.com.pl, phone: 22 599 4510 (call cost according to the customer's operator tariff). The Central Register and Information on Economic Activity maintain the registration files for the company.
2. The online store processes your personal data for the following purposes:
A) to provide services, including fulfilling agreements such as sales agreements for Products. It is also processed when necessary to achieve the legally justified goals of the data controller, especially for direct marketing of their own products or services or other purposes for which the user gives consent if required by applicable regulations. This may include consenting to receive correspondence and commercial information regarding products and services from the Data Controller and its collaborating partners, sent electronically or by telephone. The data subject has the right to withdraw their consent at any time.
B) to transfer your personal data to ING Bank Śląski S.A. ("Bank") in connection with:
- providing the online store with the service of making online payments available (legal basis: Article 6(1)(f) of the Regulation),
- handling and settling payments made by online store customers through online payment instruments (legal basis: Article 6(1)(f) of the Regulation),
- verifying proper performance of agreements concluded with the online store, especially to ensure protection of payers' interests concerning their complaints (legal basis: Article 6(1)(f) of the Regulation).
C) to transfer your personal data to Twisto Polska sp. z o.o. in connection with the possibility of proposing payments for purchased goods or services by Twisto Polska sp. z o.o. under a commission agreement including the "Buy with Twisto" purchasing formula. This is also done for verifying proper performance of such commission agreements by Twisto Polska Sp. z o.o. (legal basis: Article 6(1)(f) of the Regulation).
3. The Data Controller processes data lawfully, collects it for specific, lawful purposes, and does not further process it in a manner incompatible with those purposes. Data is collected only in a relevant, necessary, and adequate scope in relation to the purposes for which it is processed. The Data Controller does not process special categories of personal data.
In connection with the processing of personal data for the purposes specified in paragraphs 3 and 4, your personal data may be provided by the online store to other recipients or categories of recipients of personal data, including:
a) ING Bank Śląski S.A.
b) Twisto Polska sp. z o.o.
4. The Data Controller makes every effort to protect customers' and users' personal data against unauthorized access by third parties, and for this purpose, they implement organizational and technical security measures at a high level. The Data Controller does not disclose personal data to any unauthorized recipients according to the relevant laws and regulations in this regard. The Data Controller may entrust another entity with the processing of personal data in writing, and the data may be disclosed only to entities entitled to receive it based on the applicable laws.
5. The Data Controller stores data for the period necessary to fulfill the agreement and for the time specified in the relevant laws and regulations, but no longer than necessary for the purposes resulting from the legally justified interests pursued by the data controller or by a third party, particularly in the case of claims arising from the conducted activity. Personal data processed based on consent are stored until the consent is withdrawn.
6. The data subject has the right to request access to their personal data, the right to rectification, erasure, or restriction of processing, as well as the right to object to processing in certain legally defined cases. The data subject also has the right to data portability. The data subject has the right to lodge a complaint with the supervisory authority if they consider that the processing of their personal data is not compliant with the law.
7. If the data subject has given consent to the processing of their personal data for one or more specific purposes, they have the right to withdraw their consent at any time.
8. Providing personal data is voluntary, but not providing data marked as necessary may prevent registration or placing an order. If the processing of data is necessary for the performance of an agreement in which the data subject is a party or to take action at the request of the data subject before entering into an agreement, providing the necessary and specified data is essential.
9. To ensure the most advantageous, tailored, and personalized offer for its customers and users, and for purposes necessary for the conclusion or performance of an agreement between the data subject and the Data Controller, as well as in the case of the explicit consent of the data subject, the Data Controller may apply "profiling." This means automated processing of personal data involving the use of personal data to evaluate certain personal aspects of a natural person, especially to analyze or predict aspects concerning personal preferences and interests. Decisions regarding the sending of personalized offers, discounts, or other benefits are made automatically based on criteria such as gender, date of birth, the address of the store where purchases were made, the number, and frequency of purchases made on www.agrafkasklep.com.pl. After verifying whether the criteria are met, the computer system automatically sends information about the granted benefit, e.g., a discount. The granted benefit can be used based on the terms specified in the information about its granting or renounced. If personal data is processed for the purposes of direct marketing, including profiling, or for processing based on the legitimate interest of the Data Controller, for scientific, historical, or statistical research, the data subject has the right to object due to their particular situation. The Data Controller does not make decisions based solely on automated processing, including profiling, that significantly affect the data subject. The Data Controller implements adequate measures to protect the rights, freedoms, and legitimate interests of the data subject, at least the right to obtain human intervention on the part of the Data Controller, to express their own position, and to challenge a decision resulting from automated data processing.
10. Cookies. The Data Controller may use cookies when the user uses services available through the website. Cookies used on the website are associated solely with the user's browser - the user remains anonymous (without providing their name or username). These are pieces of information stored by the Data Controller's server on the user's computer, which can be read by the Data Controller's server during each connection. Cookies provide statistical data on user traffic and their use of individual pages of the Data Controller's website. The Data Controller may also use cookies to monitor user traffic on the website. The user can choose how to handle cookies in their web browser by replacing automatic cookie handling with individual handling (user settings). Detailed information in this regard is provided by providers of software for managing the web browser (browsers), usually in the "Internet options" or similar tab. Disabling the option of accepting cookies by the user in their web browser - blocking, monitoring them may make it difficult or even impossible to use some of the Data Controller's services.
11. Matters not regulated by these regulations are governed by the provisions of the Civil Code, relevant Polish laws, and the laws of the European Union, in particular, the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).
