I Data of the Personal Data Administrator
The administrator of personal data is: Eiffelty Consult Michel Strassel , based in Marki, address: ul. DUZA 5e / 42 , 0 5 - 270 Marki , NIP: 5252 479298 , REGON: 142325380, hereinafter referred to as "Personal Data Administrator" or "ADO". Contact with PDC in all matters related to the protection of personal data is possible at the following e-mail address: firstname.lastname@example.org.
II Purposes and grounds for processing personal data
The personal data provided by the user will be processed by PDC in accordance with the scope of his activity. The purposes of processing personal data entrusted to PDA are different, however, this processing always takes place in accordance with applicable law.
Below we present the individual categories of personal data that will be processed and the purposes for which these data are necessary.
In order to provide the service, the following will be processed:
name and surname ,
home and delivery address ,
order number ,
registration date ,
phone number .
The legal basis for the processing of the above data is Art. 6 sec. 1 lit. b GDPR, which entitles PDC to process personal data if they are necessary to perform the contract or take steps to conclude a contract. Without providing this data, it will not be possible to create an account in the online store at www.marchedeparis.pl, place an order in it (i.e. conclude a contract for the sale of goods) or deliver the ordered products.
In order to consider the complaint, the following will be processed:
name and surname ,
order number ,
home address or delivery address, if different from your home address
possibly the bank account number - in the case of a refund,
The legal basis for the processing of the above data is Art. 6 sec. 1 lit. b GDPR, which entitles you to process personal data if they are necessary to perform the contract or take steps to conclude a contract. If it turns out that the services provided by PDC in accordance with the Online Store Regulations require a complaint, without providing the above data, PDA will not be able to consider such a complaint, therefore providing the above data is necessary.
name and surname
The legal basis for the processing of the above data is Art. 6 sec. 1 lit. f GDPR, which entitles you to process personal data, if in this way the Personal Data Administrator carries out its legitimate interest. In this case, the legitimate interest is informing users about activities related to the provision of the service in order to increase the comfort of using the Store.
In order to issue an invoice and meet other obligations arising from tax law, such as, for example, keeping accounting records for 5 years, the following will be processed:
name and surname ,
home address or registered office address,
tax identification number ,
order number .
The legal basis for the processing of the above data is Art. 6 sec. 1 lit. c GDPR, which allows the processing of personal data, if such processing is necessary for the Personal Data Administrator to fulfil its obligations under the law.
In order to create registers and records related to the GDPR, including the register of customers objecting in accordance with the GDPR will be processed:
name and surname ,
phone number .
The legal basis for the processing of the above data is Art. 6 sec. 1 lit. c GDPR, which allows the processing of personal data, if such processing is necessary for the Personal Data Administrator to fulfil its obligations under the law. In this case, these obligations are documentation obligations to demonstrate compliance and accountability.
In order to provide the Newsletter service, the following will be processed:
name and surname ,
The legal basis for the processing of the above data is Art. 6 sec. 1 lit. a GDPR, which allows the processing of personal data, if the data subject has consented to the processing of his personal data for one or more specific purposes. In this case, if the user would like to receive messages sent as part of the Newsletter, he should consent to its receipt and to the processing of personal data by ADO necessary to send such messages.
On the website of the Online Store, ADO uses the so-called cookies, i.e. short text information saved on a computer, phone, tablet or other user's device. This information can be read not only by the ADO system, but also by systems belonging to other entities whose services ADO uses (e.g. hosting provider).
The functions fulfilled by cookies on the Store's website include:
ensuring security - cookies help to authenticate users and prevent unauthorized use of the user's account. It is a kind of protection of personal data against unauthorized access;
impact on the processes and efficiency of using the website (Online Store) - cookies are used so that the Store website works efficiently and that you can use its functions, which is possible, among others, by remembering the settings between subsequent visits to the Store website;
session status - cookie files contain information on how users use the Store's website, which helps to improve services and increase the comfort of browsing;
maintaining the session status - after logging in to the User Account, cookies allow you to maintain the session, which means that when you go to the next subpage, you do not have to re-enter your login and password each time;
Many cookies are anonymized for PDA, which means that without additional information, PDA cannot identify the user on their basis.
IV Right to withdraw consent
If the processing of the personal data provided is based on the user's consent, such consent may be withdrawn at any time.
To withdraw consent to the processing of personal data, please send an e-mail to PDC at email@example.com.
If the processing of personal data was based on consent, its withdrawal does not make the processing of personal data up to that point illegal.
V The requirement to provide personal data
Providing any personal data is voluntary and depends on the user's decision, however, in some cases, providing certain personal data is necessary to enable users to use the services provided by ADO.
VI Automated decision making and profiling
PDA does not perform automated decision-making, including based on profiling.
VII Recipients of personal data
Personal data entrusted to PDC may be transferred:
entities supporting the payment ,
hosting providers ,
a courier company ,
other entities providing delivery services,
an insurance company (e.g. in the event of a need to redress a damage),
lawyers providing services to ADO,
In addition to the entities indicated above, PDA may also entrust personal data to other public or private entities on the basis of an appropriate legal provision or decision of a competent authority.
VIII Transfer of personal data to third countries
None of the personal data provided will be transferred to third countries.
IX Period of personal data processing
The personal data entrusted to PDC are processed for the time needed to achieve the set goal, and after this period, their irreversible removal or destruction will take place.
Depending on the type of personal data, these data are processed for the period of:
the duration of the contract - in the case of personal data processed in order to conclude and perform the contract;
3 years or 6 years + 1 year - in the case of personal data processed for the purpose of establishing, investigating or defending claims (the length of the period depends on whether both parties are entrepreneurs or not); an additional year is added in this case in the event that the claim is submitted shortly before the expiry of the limitation period or in the event of delivery of the request or in the event of an incorrect limitation period for the user's claim.
5 years - in the case of personal data related to the fulfilment of obligations under tax law;
until the consent is withdrawn or the purpose of processing is achieved, but not longer than for 5 years - in the case of personal data processed on the basis of consent;
until the objection is effectively raised or the purpose of processing is achieved, but not longer than for 5 years - in the case of personal data processed on the basis of the legitimate interest of ADO;
The periods specified in the preceding paragraph are counted from the end of the calendar year in which the processing of personal data began.
X Rights of persons whose personal data concern
Entities whose personal data entrusted to PDC are entitled to:
access to your personal data;
rectification of personal data ;
deletion of personal data ;
restrictions on the processing of personal data ;
object to the processing of personal data;
transferring personal data .
PDA respects the rights resulting from the provisions on the protection of personal data and tries to facilitate their implementation as much as possible.
Listed in sec. 1 the rights are not absolute. This means that in some situations PDC has the right to refuse the user to comply with his request. Such a refusal may only take place after careful analysis and only when the refusal to accept the request is necessary.
At any time, the user has the right to object to the processing of personal data, which takes place on the basis of the legitimate interest of ADO (they are listed in point II of this Policy) in connection with a specific situation. ADO can , however, refuse to take into account the opposition , if it proves , that :
there are legitimate grounds for processing that override the interests, rights and freedoms of the user or
there are grounds for establishing, investigating or defending claims.
The user can exercise his rights by sending an e-mail to ADO to the e-mail address firstname.lastname@example.org or by sending information to the address of the ADO seat, indicated in point I.
XI The right to lodge a complaint
If the user finds that his personal data is processed contrary to the applicable law, he / she may lodge a complaint with the President of the Personal Data Protection Office.
XII Final Provisions