We care about your privacy and well-being and your rights are very important to us, therefore we have prepared the following information about our processing of your personal data and about the cookies that are used by our Store. This information has been prepared taking into account the GDPR, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

By making purchases in the Shop, you agree to the collection, processing, storage and use of your data. These data are mainly your name, mailing address, e-mail address, IP address (dynamic and static) and password for your Account in the Shop

Personal data controller

The controller of personal data processed within the scope and purpose necessary to provide services is Pracownia Krawiecka Małgorzata Pawlik, 30 Wesoła Street, 42-202 Częstochowa, Polska entered in the Central Register and Information on Business Activity kept by the Minister of Economy, REGON 386993625, NIP 6511217519 (Controller).

Purpose and grounds for data processing

The data is processed for the purpose of providing services, including the contract, as well as for the purpose of selling the Products, and also in cases when it is necessary for the fulfilment of the Controller's legally justified purposes, in particular for direct marketing of its own products or services, or for other purposes to which the user gives his or her consent, if it is required under the applicable regulations. In particular, it may be a consent to receive correspondence and commercial information concerning the Controller's own products and services as well as partners cooperating with the Controller sent electronically and by telephone.  The data subject has the right to withdraw his/her consent at any time.

The Controller processes data in accordance with the law, collects them for designated, legitimate purposes and does not subject them to further processing in a way incompatible with those purposes. Data shall be collected only to the extent adequate, necessary and appropriate in relation to the purposes for which they are processed. The controller shall not process special categories of personal data.

Data security

The Controller makes every effort to protect the personal data of Buyers and Consumer from unauthorized access by third parties and in this respect applies organizational and technical security measures in accordance with applicable law, including encrypting the connection with the use of SSL certificate.

The Controller does not make personal data available to any unauthorized recipients in accordance with the mandatory provisions of law in this respect. The Controller may entrust another entity, by way of a written agreement, with the processing of personal data on behalf of the Controller. The data may be made available only to entities authorized to receive them under the mandatory provisions of law.

Data retention time

The Controller shall keep the data for the period necessary for the performance of the contract and for a period specified in the applicable law and not longer than necessary for the purposes resulting from legitimate interests pursued by the Controller or by a third party, i.e., for the purpose of pursuing claims for the activities carried out. For the purposes for which the data subject has consented to the processing of his or her personal details, these details are stored until the withdrawal of consent.

Rights of the data subject

The data subject has the right to demand from the Controller access to the content of his or her personal data, the right to rectify, erase or limit the processing and the right to object to the processing in cases specified by law, as well as the right to transfer his or her data. The data subject shall also have the right to lodge a complaint with the supervisory authority in case of finding unlawful processing of his/her personal data.

If the data subject has consented to the processing of his or her personal data for one or more specified purposes, he or she has the right to withdraw consent at any time.

Providing personal data is voluntary, however, failure to provide it marked as necessary makes it impossible to register an Account or place an Order. If the processing of data is required for the execution of a contract to which the data subject is a party, or to take action at the request of the data subject before the conclusion of the contract, it is necessary to provide the necessary and specified scope of data.

Profiling

For the purpose of ensuring the most advantageous, tailored, personalised offer and for the purposes necessary for the conclusion or performance of the Agreement between the data subject and the Controller, as well as in case of the explicit consent of the data subject, the Controller may use 'profiling', which means a form of automated processing of personal data that involves the use of personal data for the assessment of certain personal factors of an individual, in particular for the analysis or forecasting of aspects relating to personal preferences and interests. Decisions on sending a personalized offer or granting a discount or other benefit are made automatically on the basis of criteria such as gender, number, types of Products and frequency of purchases made in the Shop. After determining whether the criteria are met, the IT system automatically sends information about the benefit granted, e.g. a discount. You can use the granted benefit on the terms specified in the information about its granting or resign from it.

In case of data processing for the purposes of direct marketing, including profiling, processing based on the legitimate interest of the Controller, for the purposes of scientific, historical and statistical research, data subjects have the right to object, due to the special situation of the data subject.

The Controller does not make a decision only based on automated processing, including profiling, and which significantly influences the data subject.

The Controller implements appropriate measures to protect rights, freedoms and lawful interest of the data subject, and at least the right to have the Controller intervene, to express one’s own opinion and to object the opinion arising from automated data processing.

Cookies

The Controller may use cookies when the user benefits from the services available through the Shop. Cookie files that can be used on the Shop's pages are associated only with the browser of a given computer - the user is anonymous (without providing the user's name or surname). This is information stored by the Controller server on the user's computer, which can be read by the Controller server each time the user connects to the computer.

Cookies provide statistical data about the users' traffic and their use of particular pages of the Controller's website. The Controller may also place cookies in order to monitor the movement of users in the service.

The user may at any time choose the way of handling cookies in the Internet zone by replacing the automatic handling of cookies with individual handling (user settings). Detailed information in this respect is provided by the providers of programs for the operation of the Internet zone (browsers), usually in the "Internet options" tab or similar. Disabling the option of accepting cookies by the user in your browser - blocking, monitoring them may make it difficult or even impossible to use certain services of the Controller.

Contact with the Controller

If you have any questions, doubts, or wish to update or delete your personal data please send an e-mail to store@sleepdo.eu.