PRIVACY POLICY AND COOKIES
This Privacy Policy sets out the rules for storing and accessing information on the User's devices by means of Cookies files, used for the provision of electronically supplied services requested by the User, by FIRMA PRODUKCYJNO-HANDLOWA BACO GRZEGORZ DEJCZ.
§ 1 Definitions
Administrator, hereinafter also referred to as the Service Provider or the Seller – the entity providing electronic sales services through the online store under the terms set out in these Terms and Conditions, namely Amber by Baco, an entrepreneur conducting business under the name FIRMA PRODUKCYJNO-HANDLOWA BACO GRZEGORZ DEJCZ, NIP: 5841012056, REGON: 192503930, ul. Kadetów 7, 80-298 Gdańsk, who stores and gains access to information on the User's devices.
Cookies – IT data, in particular small text files, stored and saved on the devices through which the User uses the Service website.
Administrator's Cookies – Cookies placed by the Administrator, related to the provision of electronic services by the Administrator through the Service.
External Cookies – Cookies placed by the Administrator's partners through the Service website.
Service – the website or application through which the Administrator operates the online store at: www.amberbybaco.pl
Device – an electronic device through which the User accesses the Service.
User – an entity for whom electronic services may be provided in accordance with the Terms and Conditions and applicable law, or with whom an agreement for the provision of electronic services may be concluded, and who has created an Account in the Online Store.
Personal Data – personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation. Personal data are collected and processed in accordance with applicable law, including GDPR.
§ 2 Collection and Disclosure of Personal Data
The Service collects only information voluntarily provided by the User during the registration process and uses it solely for purposes related to the performance of the concluded agreement – that is, pursuant to Article 6(1)(b) GDPR.
The Service does not automatically collect any information, except for information contained in Cookies files.
The services offered by the Administrator are intended for adults. Therefore, the Administrator does not knowingly process children's data.
The Users' personal data collected by the Administrator are used for:
a) contacting the User,
b) informational purposes and other activities related to the Service Recipient's activity on the Service website.
The Administrator processes User data for the following purposes:
a) performance of the concluded agreement,
b) providing Users with content,
c) measuring and improving content,
d) ensuring the security of data processing by the Administrator,
e) managing IT systems.
To the extent that Users' personal data are processed for measuring and improving content on the Service, the legal basis for processing is the Administrator's legitimate interest. It is in the Administrator's interest to provide and improve content, ensure its best quality, and inform Users about it.
The legal basis for data processing by the Administrator may also be the User's consent, of which the User will be informed.
As a rule, the Administrator does not disclose the User's personal data to third parties, except where there is a legal basis for doing so, upon request from authorized entities, or where it is necessary for the provision of services to the Administrator – in such cases this is done on the basis of data processing agreements concluded with entities providing services to the Administrator.
The User's data may be disclosed at the request of public authorities or other entities acting on the basis of applicable law.
The User's data may also be accessed by third parties whose services are used by the Administrator in order to provide its services. This applies in particular to entities providing hosting, payment, and IT support services to the Administrator. In such cases, the Administrator has concluded appropriate data processing agreements with such entities, under which those entities, when processing data on behalf of the Administrator, have undertaken to protect such data against access by unauthorized persons.
§ 3 Types of Cookies Used
The Cookies used by the Administrator are safe for the User's Device. In particular, it is not possible for viruses, unwanted software, or malicious software to enter the User's Device by this means. These files make it possible to identify the software used by the User and to customize the Service individually for each User. Cookies usually contain the name of the domain from which they originate, the time they are stored on the Device, and an assigned value.
The entity placing Cookies files on the end device of the User of the Service and obtaining access to them is the Administrator of the Service.
The Administrator uses two types of Cookies:
a) Session Cookies: temporary files stored on the User's end device. They remain there until the end of the browser session (logging out, leaving the website, closing the browser). After the session ends, the stored information is permanently deleted from the Device's memory. The session Cookies mechanism does not allow the collection of any personal data or any confidential information from the User's Device.
b) Persistent Cookies: these are stored on the User's Device and remain there for the time specified in the Cookies parameters or until they are deleted by the User. Ending the browser session or turning off the Device does not remove them from the User's Device. The persistent Cookies mechanism does not allow the collection of any personal data or any confidential information from the User's Device.
The User may limit or disable Cookies access to their Device. If this option is used, it will still be possible to use the Service, except for features which by their nature require Cookies.
§ 4 Purposes for Which Cookies Are Used
Cookies files are used for the following purposes:
a) configuring the Service and adapting the content of the Service's websites to the User's preferences and optimizing the use of the websites; these files in particular allow the recognition of the User's device and the proper display of the website, tailored to the User's individual needs;
b) analyses and research, audience measurement, and creation of statistics that help understand how Users of the Service use the websites, which makes it possible to improve their structure and content;
c) maintaining the session of the User of the Service (after logging in), thanks to which the User does not have to re-enter their login and password on each subpage of the Service;
d) carrying out processes necessary for the full functionality of the websites and ensuring their security and reliability.
§ 5 Options for Determining the Conditions of Storing or Accessing Cookies
The User may independently and at any time change the settings regarding Cookies files, specifying the conditions for storing them and gaining access by Cookies files to the User's Device. The User may make these changes using the settings of the web browser or the configuration of the service. These settings may in particular be changed in such a way as to block the automatic handling of Cookies in the web browser settings or to inform the User each time Cookies are placed on the User's Device. Detailed information about the possibilities and methods of handling Cookies is available in the software settings (web browser).
The User may delete Cookies at any time using the functions available in the web browser they use.
Restricting the use of Cookies may affect some functionalities available on the Service website.
The Administrator informs that changes to the User's web browser settings may affect access to certain functions of the Service website, for example by limiting them.
§ 6 Handling of "Cookies"
The handling and storage of "Cookies" is the direct responsibility of the web browser used by the User. As a standard, software used for browsing websites (web browser) allows Cookies to be stored on the User's end device by default.
Users of the Service may change the settings regarding Cookies at any time. These settings may in particular be changed so as to block the automatic handling of Cookies in the web browser settings or to inform the User each time they are placed on the Device of the User of the Service.
Further detailed information on the possibilities and methods of handling Cookies is available in the software settings (web browser).
The Administrator informs that restrictions on the use of Cookies may affect some functionalities available in the Online Store.
§ 7 User Rights
The User has the following rights:
the right of access to their data – at the User's request, the Administrator will confirm what data is being processed and provide the User with a copy of the data;
the right to rectify personal data – if the User's data are incorrect or incomplete, the User may request that the Administrator rectify or complete them;
the right to erasure of personal data – in situations specified in the GDPR, the User may request that the Administrator erase their personal data;
the right to restriction of processing – in certain situations, the User may request that the Administrator restrict the processing of their data, for example when the User contests the accuracy of the personal data;
the right to data portability – in certain situations, the User has the right to receive their data in a structured, commonly used, machine-readable format in order to transmit them to another controller;
the right to object – the User may request the cessation of personal data processing for reasons related to their particular situation with regard to data processing, among others, where it is not based on the Administrator's legitimate interest. The Administrator should then cease processing the User's data unless it demonstrates compelling legitimate grounds for processing overriding the interests, rights, and freedoms of the User, or grounds for establishing, pursuing, or defending claims;
the right to lodge a complaint with the supervisory authority – where the User believes that the data are being processed improperly.
§ 8 Personal Data Retention Period
As a rule, the Administrator stores User data only for as long as necessary to achieve the purposes for which the data were collected. After this period, the data are deleted.
Personal data may also be stored for such period as required by law or, where necessary, for the establishment, exercise, or defense of claims by the Administrator against Users.
§ 9 Changes to the Privacy Policy
The Administrator keeps the content of the Privacy Policy up to date on the Service.
§ 10 Contact
Any questions, requests, or comments regarding this Privacy Policy may be sent by the User to: amberbybaco@gmail.com.
BACO Grzegorz Dejcz
+48 602 216 247
We work from Monday to Friday
from 08:00 to 16:00
amberbybaco@gmail.com
ul. Kadetów 7/18
80-298 Gdańsk
