Privacy Policy and protection of personal data

This document is an integral part of the Terms of Use of the AntiqueBeauty.eu store.

1. The Privacy Policy sets out the rules for the processing of personal data obtained through the online store www.antiquebeauty.eu (hereinafter referred to as “Online Store”).
2. The data Administrator is Antique Beauty Sp. z o.o. based in Opole at ul. Technologiczna 2, entered in the Register of Entrepreneurs kept by the District Court in Opole, 8th Commercial Department of the National Court Register under KRS number: 0000587126, NIP (Tax Identification Number): 6272743698 (hereinafter referred to as “AB”).
3. Personal data collected by the "AB" via the Online Store is processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing of Directive 95/46/WE (general regulation on data protection), also known as the GDPR.

 

The type of processed data

1. Customers’ personal data is collected in the case of:
   1. Account registration with the Online Store in order to create an individual account and to manage this account. Legal basis: indispensability to fulfill the contract to provide the Account service (Article 6(1)(b) of the GDPR).
   2. To submit queries via the contact form with the Online Store in order to respond customer inquiries. Legal basis: indispensability to respond to customer inquiries (Article 6(1)(b) of the GDPR).
   3. To place an order with the Online Store in order to perform the contract of sale. Legal basis: indispensability to perform the contract of sale (Article 6(1)(b) of the GDPR).
   4. To subscribe to the Newsletter in order to perform the contract, the subject of which is the service provided electronically. Legal basis: consent of the data subject to perform the contract for the provision of the Newsletter service (Article 6(1)(b) of the GDPR).
   5. In the case of an account registration with the Online Store, the Customer provides:
      1. E-mail address
      2. Address data:

                                          i.    ZIP code and city

                                         ii.    Country

                                        iii.    Street and house/apartment number

                                       iv.    Phone number

1. When registering an account with the Online Store, the Customer sets an individual password to access his/her account. The Customer can change the password at a later time.
2. In the case of submitting inquiries via the contact form with the Online Store, the Customer provides the following data: e-mail address, phone number, name, and last name.
3. In the case of placing an order with the Online Store, the Customer provides the following data:
   1. E-mail address
   2. Address data:

                                          i.    ZIP code and city

                                         ii.    Country

                                        iii.    Street and house/apartment number

                                       iv.    Phone number

1. In the case of Entrepreneurs, the aforementioned scope of data is additionally extended to the entrepreneur’s business and the NIP number.
2. In the case of using the Newsletter service, the Customer provides only his/her e-mail address.
3. When using the Website of the Online Store, additional information may be downloaded, in particular: the IP address assigned to the Customer’s computer or the external IP address of the Internet provider, domain name, browser type, access time, type of operating system.
4. Navigation data from the Customers may also be collected, including information about links they decided to click on or other activities undertaken with our Online Store. Legal basis – the legitimate interest of undertakings (Article 6 (1)(f) of the GDPR), consisting in facilitating the use of electronic services and improving the functionality of these services.
5. The transfer of personal data to the “AB” is voluntary in connection with concluded contracts of sale, or the provision of services via the Online Store’s Website.

 

Whom the data is shared with or entrusted to, and how long it is stored for

1. The Customer’s personal data is transferred to service providers used by the “AB” to run the Online Store. Service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, either are subject to the “AB’s” requests as to the purposes and methods of data processing (processors) or independently determine the purposes and methods of its processing (administrators).
   1. Processors The “AB” uses providers who process personal data only on the “AB’s” request. These include companies providing hosting services, accounting services or system for analyzing the effectiveness of marketing campaigns.
   2. Administrators The “AB” uses providers who do not act solely at the request and set the goals and methods of using personal data of the Customers. They provide electronic and bank payment services.
   3. Location Service providers are based mainly in Poland and other countries of the European Economic Area (EEA).
   4. Customers’ personal data is stored:
      1. If the basis for the processing of personal data is consent, then the personal data of the Customer is processed by the “AB” until the consent is revoked; and after revoking the consent for a period of time corresponding to the period of limitation of claims that the “AB” can raise, and which can be raised against it. Unless a special regulation states otherwise, the period of limitation is ten years, and for claims for periodic provisions and claims related to running a business – three years.
      2. If the basis for data processing is the performance of the contract, then the personal data of the Customer is processed by the “AB” as long as it is necessary to perform the contract; and after that time for a period corresponding to the period of limitation of claims. Unless a special regulation states otherwise, the period of limitation is ten years, and for claims for periodic provisions and claims related to running a business – three years.
      3. In the event of making a purchase with the Online Store, personal data may be transferred: to a courier company or a transport company – in order to deliver the ordered goods.
      4. In the event that the Customer selects a payment through the PayU system, his/her personal data is transferred to the extent necessary for the payment execution by PayU S.A. based in Poznań.
      5. In the event that the Customer subscribes to the Newsletter, the “AB” will send to his/her e-mail address electronic messages containing commercial information regarding specials and new products available in the Online Store.
      6. In the case of sending a request, the “AB” makes personal data available to authorized state authorities, in particular to the organization units of the Prosecutor’s Office, the Police, the President of the Office for Personal Data Protection, the President of the Office of Competition and Consumer Protection, or the President of the Office of Electronic Communications.

 

Cookie files policy

1. The “AB” website uses cookie files to improve its functioning.
2. For statistical purposes, the “AB” website is integrated with its own statistical system and the Google Analytics statistical mechanisms.
3. For statistical purposes and to reach other users more effectively, the website uses cookies provided by Google AdWords and Facebook.
4. Cookies also make storing information about your session possible.
5. The Customer can specify the conditions for storing or accessing cookies in his/her browser – detailed information can be found, among others, in its instruction (help file) or the “settings” tab.
6. Cookie files do not change the configuration of the Customer’s device.

 

The rights of data subjects

1. The right to revoke the consent given to the “AB” – legal basis: Article 7(3) of the GDPR.
2. The right to object to data processing – legal basis: Article 21 of the GDPR.
3. The right to delete all or some personal data (“the right to be forgotten”) – legal basis: Article 17 of the GDPR.
4. The right to limit data processing – legal basis: Article 18 of the GDPR.
5. The right of access to data – legal basis: Article 15 of the GDPR.
6. The right to rectify data – legal basis: Article 16 of the GDPR.
7. The right to transfer data – legal basis: Article 20 of the GDPR.
8. In the situation when the Customer files a claim resulting from the above rights, the “AB” meets the request or refuses to meet it immediately; however, not later than within one month after receiving it. However, if – due to the complexity of the request or the number of requests – the “AB” will not be able to meet the request within a month, the request will be met within the next two months by informing the Customer beforehand, within one month from receiving the request, of the intended extension and its reasons. All requests mentioned in points 1 to 7 should be sent to the “AB” via e-mail: info@antiquebeauty.eu.
9. The Customer may submit complaints to the Administrator, inquiries and requests regarding the processing of his/her personal data and the exercise of his/her rights.
10. The Customer has the right to lodge a complaint to the President of the Office for Personal Data Protection regarding infringement of his/her rights to protect his/her personal data or other rights conferred by the GDPR.

 

Changes to the Privacy Policy

1. The Privacy Policy is a subject to change, on which the “AB” will inform the Customers 7 days in advance.
2. Questions related to the Privacy Policy should be directed to: info@antiquebeauty.eu

The date of last modification: 25.05.2018