PRIVACY POLICY OF crudoog

 

This Privacy Policy (hereinafter: "Policy") contains information on the processing of your personal data in connection with the use of the crudoog online store, operating at the internet address www.crudoog.com (hereinafter: "Store").

 

All capitalized terms that have not been defined otherwise in the Policy have the meaning given to them in the Regulations, available at: https://www.crudoog.com/en/content/3-terms-and-conditions

 

ADMINISTRATOR/ DATA CONTROLLER

 

The administrator of your personal data is HR Connection limited liability company with its seat in Oleszcze (seat address: Oleszcze 44 99-3200 Żychlin, entered into the register of entrepreneurs of the National Court Register kept by the District Court for Łódź - Śródmieście, 20th Commercial Division of the National Court Register under the number KRS: 0000661575, with NIP: 7252178505, REGON number: 366475290, with share capital in the amount of PLN 50,000 (fifty thousand zlotys), fully paid up (hereinafter: "Administrator").

 

CONTACT WITH ADMINISTRATOR

 

In all matters related to the processing of personal data, you may contact the Administrator via:

a)       e-mail at: shop@crudoog.com;

b)      post: address of headquarter.

 

PERSONAL DATA PROTECTION MEASURES

 

The administrator uses modern organizational and technical security measures to ensure the best protection of your personal data and guarantees that it processes it in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (General Data Protection Regulation) (hereinafter: "GDPR"), the Act of May 10, 2018 on the protection of personal data and other provisions on the protection of personal data.

 

PERSONAL DATA PROCESSING

 

Using the Store requires the processing of your personal data. Below you will find detailed information about the purposes and legal basis for processing, as well as the period of processing and the obligation or voluntary nature of their provision.

 

Purpose

Processed data

Legal basis

Conclusion and performance of the Agreement for the provision of the Account Service

1)      name;

2)      surname;

3)      e-mail address;

4)      phone number.

art. 6 sec. 1 lit. b Polish GDPR

(processing is necessary to perform the Account Service Agreement concluded with the data subject, or to take action to conclude it)

Providing the above-mentioned personal data is a condition for the conclusion and performance of the contract for the provision of the Account Service (providing them is voluntary, but failure to provide them will result in the inability to conclude and perform the above-mentioned contract, including the creation of an Account).

 

The administrator will process the above-mentioned personal data until the claims arising from the above-mentioned are limited.

 

 

Purpose

Processed data

Legal basis

Conclusion and performance of the Sales Agreement

1)      name;

2)      surname;

3)      phone number;

4)      e-mail address,

5)      delivery address (detailed address, street, ZIP, city)

6)      delivery method;

7)      payment method;

8)      NIP/ tax ID;

art. 6 sec. 1 lit. b Polish GDPR

(processing is necessary to perform the Account Service Agreement concluded with the data subject, or to take action to conclude it)

Providing the above-mentioned personal data is a condition for the conclusion and performance of the Sales Agreement, Agreement for the supply of digital content or a mixed Agreement (providing them is voluntary, but failure to provide them will result in the inability to conclude and perform the above-mentioned Agreement or Agreements).

 

The administrator will process the above-mentioned personal data until the claims arising from the above-mentioned are limited.

 

 

Purpose

Processed data

Legal basis

Conducting the complaint procedure

1)      name;

2)      surname;

3)      e-mail address;

4)      numer telefonu;

5)      correspondence address (detailed address, street, ZIP, city)

art. 6 sec. 1 lit. b Polish GDPR

 

(processing is necessary to fulfill the legal obligation by the Administrator, in this case obligations:

        responding to a complaint - art. 7a of the Consumer Rights Act;

        exercising the Buyer's rights under the warranty - art. 556 and following of the Civil Code)

Providing the above-mentioned personal data is a condition for receiving a response to the complaint or exercising the Buyer's rights resulting from the warranty (providing them is voluntary, but failure to provide them will result in the inability to receive a response to the complaint and exercise the rights resulting from the warranty).

 

The administrator will process the above-mentioned personal data for the duration of the complaint procedure (but no longer than 14 days), and in the case of the exercise of the consumer's rights under the warranty - until their expiry.

 

 

 

Purpose

Processed data

Legal basis

Sending the Newsletter

1)      name,

2)      e-mail address

art. 6 sec. 1 lit. b Polish GDPR

(processing is necessary to implement the Administrator's legitimate interest, in this case, informing about new products and promotions available in the Store)

Providing your e-mail address is voluntary, but necessary in order to receive the Newsletter (failure to do so will result in the inability to receive the Newsletter).

 

The administrator will process the e-mail address until the user withdraws the consent to use its e-mail address.

 

 

Purpose

Processed data

Legal basis

Sending e-mail notifications

(e.g. informing about the progress of the Order) "

1)      name;

2)      surname;

3)      e-mail address.

art. 6 sec. 1 lit. b Polish GDPR

(processing is necessary to implement the Administrator's legitimate interest, in this case informing customers about activities related to the provision of services)

Providing the above-mentioned personal data voluntarily, but necessary in order to receive information about activities related to the provision of services (failure to provide them will result in the inability to receive the above-mentioned information).

 

The administrator will process the above-mentioned personal data the user withdraws the consent to use its e-mail address.

 

 

Purpose

Processed data

Legal basis

 

Support for the contact form

1)      name and surname;

2)      e-mail address.

art. 6 sec. 1 lit. b Polish GDPR

 

(the processing of personal data takes place on the basis of the consent granted)

Providing the above-mentioned personal data is voluntary, but necessary to receive an answer to the request (failure to provide it will result in the inability to receive an answer).

 

The administrator will process the above-mentioned personal data until the consent is withdrawn, but no longer than until the answer to the request is provided.

 

 

 

Purpose

Processed data

Legal basis

Fulfilling tax obligations (e.g. issuing a VAT invoice, keeping accounting documentation)

1)      name and surname/company;

2)      address/ headquarter;

3)      NIP/ TAX ID;

4)      Order number;

art. 6 sec. 1 lit. b Polish GDPR

 

(processing is necessary to fulfill the legal obligation by Administrator, in this case obligations arising from tax law)

Providing the above-mentioned personal data is voluntary, but necessary for the Administrator to fulfill the tax obligations (failure to do so will result in the Administrator's inability to meet the above-mentioned obligations).

 

The administrator will process the above-mentioned personal data for a period of 5 years from the end of the year in which the tax payment deadline for the previous year expired. "

 

 

 

 

Purpose

Processed data

Legal basis

Fulfillment of obligations related to the protection of personal data

1)      name;

2)      surname;

3)      correspondence data (e-mail address, correspondence address, phone number)

art. 6 sec. 1 lit. b Polish GDPR

 

(processing is necessary to fulfill the legal obligation by Administrator, in this case the obligations arising from the provisions on the protection of personal data)

Providing the above-mentioned personal data is voluntary, but necessary for the Administrator to properly perform the obligations arising from the provisions on the protection of personal data, including the implementation of the rights granted to you by the GDPR (failure to provide the above-mentioned data will result in the inability to correctly implement the above-mentioned rights) .

 

The administrator will process the above-mentioned personal data until the claims arising from the above-mentioned are limited.

 

 

 

 

Purpose

Processed data

Legal basis

Establishing, investigating or defending against claims

1)      name;

2)      surname;

3)      company;

4)      e-mail address;

5)      place of residence /headquarter;

6)      PESEL/ Personal identification Number or KRS/ National Court Register Number;

7)      NIP/ TAX ID

art. 6 sec. 1 lit. b Polish GDPR

 

(processing is necessary to implement the Administrator's legitimate interest, in this case to establish, investigate or defend against claims that may arise in connection with the performance of Agreements concluded with the Administrator)

Providing the above-mentioned personal data is voluntary, but necessary to establish, investigate or defend against claims that may arise in connection with the performance of Agreements concluded with the Administrator (failure to provide the above-mentioned data will make it impossible for the Administrator to take the above-mentioned actions)

 

The administrator will process the above-mentioned personal data until the expiry of the limitation periods for claims that may arise in connection with the performance of contracts concluded with the Administrator.

 

 

 

 

Purpose

Processed data

Legal basis

Analysis of your activity in the Store

1)      date and time of visit;

2)      device IP number;

3)      device operating system type;

4)      approximate location;

5)      type of web browser;

6)      time spent in the Store;

7)      viewed Products;

8)      visited subpages and other activities undertaken as part of the Store.

art. 6 sec. 1 lit. b Polish GDPR

 

(processing is necessary to implement the Administrator's legitimate interest, in this case, to obtain information about your activity in the Store)

Providing the above-mentioned personal data is voluntary, but necessary in order for the Administrator to obtain information about your activity in the Store (failure to do so will result in the Administrator's inability to obtain the above-mentioned information).

 

The administrator will process the above-mentioned personal data until the consent is withdrawn.

 

 

 

 

Purpose

Processed data

Legal basis

Store administration

1)      IP address;

2)      server date and time;

3)      information about the web browser;

4)      information about the operating system.

 

The above data is saved automatically in the so-called server logs, each time the Store is used (administering it without the use of server logs and automatic saving would not be possible).

art. 6 sec. 1 lit. b Polish GDPR

(processing is necessary to implement the Administrator's legitimate interest, in this case to ensure the proper operation of the Store)

Providing the above-mentioned personal data is voluntary, but necessary to ensure the proper operation of the Store (failure to provide them will result in the inability to ensure the Store's operation in a proper manner).

 

The administrator will process the above-mentioned personal data until the consent is withdrawn.

 

 

 

PROFILING

In order to create your profile for marketing purposes and to direct marketing to you according to your preferences, the Administrator will process your personal data in an automated manner, including profiling it - however, it will not cause any legal effects to you, or in a similar way significantly affect your situation.

The scope of the profiled personal data corresponds to the scope indicated above in relation to the analysis of your activity in the Store and the data that you save in the Account.

 

The legal basis for the processing of personal data for the above purpose is Art. 6 sec. 1 lit. f GDPR, according to which the Administrator may process personal data in order to implement its legitimate interest, in this case, conducting marketing activities according to the preferences of recipients. Providing the above-mentioned personal data is voluntary, but necessary to implement the above-mentioned purpose (failure to provide them will result in the Administrator's inability to conduct marketing activities tailored to the preferences of recipients).

 

The administrator will process personal data for the purpose of profiling them until the consent is withdrawnor the purpose of processing is achieved.

 

RECIPIENTS OF PERSONAL DATA

 

The recipients of personal data will be the following external entities cooperating with the Administrator:

 

a)       hosting company;

b)      logistics operator and courier companies;

c)       online payment system providers;

d)      newsletter service provider;

e)      companies providing tools for analyzing activity in the Store and directing direct marketing to people using it (including Google Analytics)

f)        company providing accounting services;

g)       entities providing IT support for the store

h)      In addition, personal data may also be transferred to public or private entities, if such an obligation will result from generally applicable provisions of law, a legally binding court judgment or a legally valid administrative decision.

 

TRANSFERRING PERSONAL DATA TO THIRD COUNTRIES

 

Due to the fact that Administrator uses the tools such as Google Analytics, your personal data may be transferred to the following third countries: USA, Chile, Singapore and Taiwan (Republic of China). The basis for the transfer of data to the above-mentioned third countries are contractual clauses ensuring an adequate level of protection, in line with standard contractual clauses set out in the decision of the European Commission of 5 February 2010 on standard contractual clauses for the transfer of personal data to data processors established in third countries under Directive 95/46 / EC of the European Parliament and of the Council.

 

You may obtain from the Administrator a copy of the data transferred to a third country.

 

PERMISSIONS

 

Due to the fact that your personal data are being processed, you have the following rights:

1)      the right to information which personal data concerning you are processed by the Administrator and to receive a copy of this data (the so-called access right). The first copy of the data is free of charge, the Administrator may charge a fee for subsequent copies;

2)      if the processed data becomes out of date or incomplete (or otherwise incorrect), you have the right to request their adjustment;

3)      in certain situations, you may ask the Administrator to delete your personal data, e.g. when:

a)       the data will no longer be needed by the Administrator for the purposes he informed about;

b)      you have successfully withdrawn your consent to data processing - unless the Administrator has the right to process data on a different legal basis;

c)       the processing is illegal,

d)      there is a need to delete data results from the legal obligation imposed on the Administrator;

4)      in the event that personal data is processed by the Administrator on the basis of the consent granted for processing or in order to perform the Agreement concluded with it, you have the right to transfer your data to another administrator;

5)      in the event that personal data are processed by the Administrator on the basis of your consent to processing, you have the right to withdraw this consent at any time (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal);

6)      if you decide that the personal data being processed is incorrect, their processing is illegal, or the Administrator no longer needs certain data, you can request that for a specific, necessary time (e.g. data validation or redress), the Administrator does not make any changes on the data. operations, but only stored them;

7)      you have the right to object to the processing of personal data, the processing of which is based on the legitimate interest of the Administrator. In the event of an effective objection, the Administrator will cease to process personal data in the above-mentioned purpose;

8)      you have the right to lodge a complaint with the President of the Personal Data Protection Office, if you believe that the processing of personal data violates the provisions of the GDPR.

 

COOKIES

 

1.       The administrator informs that the Store uses "cookies" (cookies) installed on your end device. These are small text files that can be read by the Administrator's system, as well as by systems belonging to other entities whose services are used by the Administrator (e.g. Facebook, Google).

2.       The administrator uses cookies for the following purposes:

a)       ensuring the proper operation of the Store - thanks to cookies, it is possible for the Store to operate efficiently, use its functions and conveniently move between individual subpages;

b)      increasing the comfort of browsing the Store - thanks to cookies, it is possible to detect errors on some subpages and to constantly improve them;

c)       creating statistics - cookies are used to analyze the way users use the Store. Thanks to this, it is possible to constantly improve the Store and adapt its operation to the preferences of users;

d)      conducting marketing activities - thanks to cookies, the Administrator can direct advertisements to users according to their preferences.

3.       The administrator can place both permanent and temporary (session) files on your device. Session files are usually deleted when the browser is closed, while closing the browser does not delete persistent files.

4.       Information about cookies used by the Administrator is displayed in the panel at the bottom of the Store's website. Depending on your decision, you can enable or disable cookies of individual categories (except for the necessary cookies) and change these settings at any time.

5.       The data collected using cookies do not allow the Administrator to identify you.

6.       The administrator uses the following cookies or tools that use them:

DEVICES

DELIVERER

FUNCTIONS AND COLLECTED DATA

DURATION

Necessary cookies

Administrator

The operation of these files is necessary for the proper functioning of the Store's website, so you cannot turn them off. Thanks to these files (which collect, among others, the IP number of your device), it is possible, among others, to inform you about cookies operating on the Store's website

Most of the necessary cookies are session cookies, but some remain on your end device until they are deleted;

Google Analytics

Google

This tool enables the collection of statistical data on how the Store is used by customers, including about the number of visits, duration of visits, search engine used, location. The collected data helps to improve the Store and make it more customer-friendly.

up to 2 years or until they are removed (whichever occurs first)

Facebook Pixel

Facebook

This tool makes it possible to determine that you have visited the Store, also to direct to you advertisements displayed on Facebook and Instagram social networks and to measure their effectiveness.

up to 3 months or until they are removed (whichever occurs first)

 

 

 

7. Using most commonly used browsers, you can check whether cookies have been installed on your end device, as well as delete installed cookies and block their installation in the future by the Store. However, disabling or limiting the use of cookies may cause quite serious difficulties in using the Store, e.g. in the form of the need to log in to each subpage, a longer period of loading the Store's website, restrictions in the use of certain functionalities.

 

FINAL PROVISIONS

 

In matters not covered by the Policy, generally applicable provisions on the protection of personal data shall apply.

 

The policy is valid since 01/01/2021.