Zásady ochrany osobních údajů

DREWDON.COM STORE PRIVACY POLICY

This Privacy Policy (hereinafter referred to as the "Policy") contains information on the processing of your personal data in connection with the use of the online store "DREWDON.COM", operating at the Internet address www.DREWDON.COM (hereinafter referred to as the "Store").

Personal data administrator

The administrator of your personal data is DREWDON Adam Kołosowski with its registered office in Żerniki Wrocławskie (registered office address: ul. Oleśnicka 4, 55-106 Zawonia), NIP: 8991017105 REGON: 931600050, (hereinafter referred to as the "Administrator").

Contact with the Administrator

In all matters relating to the processing of personal data, you can contact the Administrator via:
a) e-mail - at: drewdon.mateusz@gmail.com;
b) by traditional mail - to the following address: DREWDON Adam Kołosowski, ul. Oleśnicka 4, 55-106 Zawonia;
c) by phone - at: +48 577 954 854

Data Protection Officer

You can contact the Data Protection Inspector appointed by the Administrator (Mr. Adam Kołosowski) via:
d) e-mail - at: drewdon.mateusz@gmail.com;
e) by traditional mail - to the following address: DREWDON Adam Kołosowski, ul. Oleśnicka 4, 55-106 Zawonia;
f) by phone - at: +48 577 954 854

Personal data protection measures

Personal data collected via the Online Store are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR.

When processing your personal data, we remember to respect their privacy.
and we exercise particular care at every stage of the processing process, maintaining a level of personal data protection adequate to the needs.

Information about the personal data being processed

Below you will find detailed information about the purposes for which we process your personal data, the legal basis, as well as the processing period and the catalogue of data we process.

Purpose of processing: Conclusion and performance of the Agreement for the provision of the Account Service
Processed personal data:
1) name and surname
2) e-mail address
Legal basis
Article 6, paragraph 1, letter b of the GDPR
(processing is necessary to perform the Agreement on the provision of the Account Service concluded with the data subject or to take steps to conclude it)

Providing the above-mentioned personal data is a condition for concluding and performing an agreement for the provision of the Account Service (providing the data is voluntary, but the consequence of not providing the data will be the inability to conclude and perform the above-mentioned agreement, including creating an Account).

The Administrator will process the above-mentioned personal data until the limitation period for claims arising from the Agreement on the provision of the Account Service.

Purpose of processing: Conclusion and performance of the Sales Agreement
Processed personal data:
1) name and surname
2) e-mail address
3) phone number
4) residential/business address (street, house number, apartment number, city, postal code, country)
5) delivery address (if different from the residential/business address)
6) optionally - company name and Tax Identification Number (if the Buyer is an Entrepreneur or an Entrepreneur with Consumer Rights)
Legal basis
Article 6, paragraph 1, letter b of the GDPR
(processing is necessary to execute the Sales Agreement concluded with the data subject or to take steps to conclude it)

Providing the above-mentioned personal data is a condition for concluding and performing the Sales Agreement (providing them is voluntary, but the consequence of not providing them will be the inability to conclude and perform the Sales Agreement).

The Administrator will process the above-mentioned personal data until the limitation period for claims arising from the Sales Agreement expires.

Purpose of processing: Conclusion and performance of a paid Agreement for the delivery of Digital Goods
Processed personal data:
1) name and surname
2) e-mail address
3) phone number
4) residential/business address (street, house number, apartment number, city, postal code, country)
5) optionally - company name and Tax Identification Number (if the Buyer is an Entrepreneur or an Entrepreneur with Consumer Rights)
Legal basis
Article 6, paragraph 1, letter b of the GDPR
(processing is necessary for the performance of a paid Agreement for the supply of Digital Goods concluded with the data subject or to take steps to conclude it)

Providing the above-mentioned personal data is a condition for concluding and performing a paid Agreement for the supply of Digital Goods (providing them is voluntary, but the consequence of not providing them will be the inability to conclude and perform a paid Agreement for the supply of Digital Goods).

The Administrator will process the above-mentioned personal data until the limitation period for claims arising from the paid Agreement for the supply of Digital Goods expires.

Purpose of processing: conclusion and performance of a free Contract for the supply of Digital Goods
Processed personal data:
1) e-mail address
Legal basis
Article 6, paragraph 1, letter b of the GDPR
(processing is necessary for the performance of the free Contract for the supply of Digital Goods concluded with the data subject or to take steps to conclude it)

Providing the above-mentioned personal data is a condition for concluding and performing the free Agreement for the supply of Digital Goods (providing them is voluntary, but the consequence of not providing them will be the inability to conclude and perform the free Agreement for the supply of Digital Goods).

The Administrator will process the above-mentioned personal data until the limitation period for claims arising from the free Agreement for the supply of Digital Goods expires.

The purpose of processing: conclusion and performance of the Newsletter Delivery Agreement
Processed personal data:
1) e-mail address
Legal basis
Article 6 paragraph 1 letter b of the GDPR and Article 6 paragraph 1 letter f of the GDPR
(processing is necessary to execute the Agreement on the provision of the Newsletter concluded with the data subject, or to take action to conclude it, and to pursue the legitimate interest of the Administrator, in this case informing about new products and promotions available in the Store).

Providing the above personal data is voluntary, but necessary to receive the Newsletter (the consequence of not providing them will be the inability to receive the Newsletter).

The Administrator will process the above-mentioned personal data until an objection is effectively filed or the purpose of processing is achieved, or until the claims arising from the Newsletter Delivery Agreement expire (depending on which of the above-mentioned events occurs first).

Purpose of processing: conducting a complaint procedure
Processed personal data:
1) name and surname
2) e-mail address
Legal basis
Article 6, paragraph 1, letter c of the GDPR
(processing is necessary to fulfil the legal obligation incumbent on the Administrator, in this case the obligations: to respond to a complaint – Art. 7a of the Act on Consumer Rights; to exercise the Customer’s rights arising from the provisions on the Administrator’s liability in the event of non-compliance of the Physical Goods with the Sales Agreement or the Subject of Digital Provision with the Agreement relating to it).

Providing the above-mentioned personal data is a condition for receiving a response to a complaint or exercising the Customer's rights resulting from the provisions on the Administrator's liability in the event of non-compliance of the physical Goods with the Sales Agreement or the Subject of the digital provision with the Agreement relating to it (providing them is voluntary, but the consequence of not providing them will be the inability to receive a response to the complaint and exercising the above-mentioned rights).

The Administrator will process the above-mentioned personal data for the duration of the complaint procedure, and in the event of the implementation of the above-mentioned Client rights – until their limitation period expires.

Purpose of processing: sending e-mail notifications
Processed personal data:
1) e-mail address
Legal basis
Article 6, paragraph 1, letter f of the GDPR
(processing is necessary to implement the legitimate interest of the Administrator, in this case informing Customers about activities undertaken related to the performance of Agreements concluded with Customers)

Providing the above personal data is voluntary, but necessary in order to receive information about activities related to the performance of Agreements concluded with Clients (the consequence of not providing them will be the inability to receive the above information).

The Administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved (depending on which of the above events occurs first).

Purpose of processing: handling inquiries submitted by Customers
Processed personal data:
1) name
2) e-mail address
3) other data contained in the message to the Administrator
Legal basis
Article 6, paragraph 1, letter f of the GDPR
Processing is necessary to pursue the legitimate interest of the Administrator, in this case to respond to the inquiry received.

Providing the above personal data is voluntary, but necessary in order to receive a response to the inquiry; failure to provide them will result in the inability to receive a response.

The Administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved (depending on which of the above events occurs first).

Purpose of processing: fulfillment of tax obligations
Processed personal data:
1) name and surname/company
2) address of residence/registered office
3) Tax Identification Number
Legal basis
Article 6, paragraph 1, letter c of the GDPR
Processing is necessary to fulfil a legal obligation incumbent on the Administrator, in this case obligations arising from tax law.

Providing the above-mentioned personal data is voluntary, but necessary for the Administrator to fulfill its tax obligations, and the consequence of not providing them will be the inability of the Administrator to fulfill the above-mentioned obligations.

The Administrator will process the above-mentioned personal data for a period of 5 years from the end of the year in which the deadline for paying the tax for the previous year expired.

The purpose of processing: fulfillment of the Administrator's obligations towards the data subject
Processed personal data:
1) name and surname
2) contact details (e-mail address; correspondence address; telephone number)
Legal basis
Article 6, paragraph 1, letter c of the GDPR
Processing is necessary to fulfil a legal obligation incumbent on the Administrator, in this case the obligations arising from the provisions on personal data protection.

Providing the above personal data is voluntary, but necessary for the proper performance by the Administrator of the obligations resulting from the provisions on the protection of personal data, including the implementation of the rights granted by the GDPR. The consequence of not providing the above data will be the inability to properly implement the above rights.

The Administrator will process the above-mentioned personal data until the expiry of the limitation periods for claims for violation of the provisions on personal data protection.

Purpose of processing: pursuing or defending against legal claims
Processed personal data:
1) name and surname/company
2) e-mail address
3) address of residence/registered office
4) PESEL number
5) Tax Identification Number
Legal basis
Article 6, paragraph 1, letter f of the GDPR
Processing is necessary for the purposes of pursuing the legitimate interest of the Administrator, in this case determining, pursuing or defending against claims that may arise in connection with the performance of Agreements concluded via the Store.

Providing the above personal data is voluntary, but necessary to pursue or defend against claims that may arise in connection with the performance of Agreements concluded with the Administrator. The consequence of not providing the above data will be the inability of the Administrator to take the above actions.

The Administrator will process the above-mentioned personal data until the expiry of the limitation periods for claims.

The purpose of processing: analysis of your activity in the Store
Processed personal data:
1) date and time of visit
2) IP number of the device
3) type of device operating system
4) approximate location
5) type of internet browser
6) time spent in the Store
7) Browsed Products
8) visited subpages and other actions taken within the Shop
Legal basis
Article 6, paragraph 1, letter f of the GDPR
Processing is necessary to pursue the legitimate interest of the Administrator, in this case obtaining information about your activity in the Store.

Providing the above-mentioned personal data is voluntary, but necessary for the Administrator to obtain information about the Customers’ activity in the Store; the consequence of not providing them will be the inability of the Administrator to obtain the above-mentioned information.

The Administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved.

Purpose of processing: administration of the Store
Processed personal data:
1) IP address
2) server date and time
3) information about the web browser
4) information about the operating system
Legal basis
Article 6, paragraph 1, letter f of the GDPR
The above data is saved automatically in the so-called server logs, each time the Store is used (its administration without the use of server logs and automatic saving would not be possible).

Processing is necessary to pursue the legitimate interest of the Administrator, in this case ensuring the proper operation of the Store.

The Administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved.

Profiling
In order to create your profile for marketing purposes and to direct marketing to you tailored to your preferences, the Administrator will process your personal data in an automated manner, including profiling them – however, this will not produce any legal effects for you or significantly affect your situation in a similar manner.

The scope of profiled personal data corresponds to the scope indicated above in relation to the analysis of your activity in the Store and the data you save in your Account.

The legal basis for the processing of personal data for the above purpose is Article 6 paragraph 1 letter f of the GDPR, according to which the Administrator may process personal data in order to pursue its legitimate interest, in this case conducting marketing activities tailored to the preferences of recipients. Providing the above personal data is voluntary, but necessary to achieve the above purpose (the consequence of not providing them will be the inability of the Administrator to conduct marketing activities tailored to the preferences of recipients).

The Administrator will process personal data for the purpose of profiling until an objection is effectively raised or the purpose of processing is achieved.

Recipients of personal data
The recipients of personal data processed by us via the Store will be the following entities cooperating with the Administrator:
a) hosting company;
b) logistics operator and courier companies;
c) providers of online payment systems;
d) newsletter service provider;
e) companies providing tools for analysing activity in the Store and directing direct marketing to people using it (including Google Analytics);
f) a company providing accounting services;

In addition, personal data may also be transferred to public or private entities if such an obligation results from generally applicable legal provisions, a final court judgment or a final administrative decision.

Transfer of personal data to a third country
In connection with the use by the Administrator of services provided by Google LLC, your personal data may be transferred to the following third countries: Great Britain, Canada, USA, Chile, Brazil, Israel, Saudi Arabia, Qatar, India, China, South Korea, Japan, Singapore, Taiwan (Republic of China), Indonesia and Australia. The basis for transferring data to the above-mentioned third countries is:

• in the case of the United Kingdom, Canada, Israel and Japan – decisions of the European Commission establishing the adequate level of protection of personal data in each of the above-mentioned third countries;
• in the case of the USA, Chile, Brazil, Saudi Arabia, Qatar, India, China, South Korea, Singapore, Taiwan (Republic of China), Indonesia and Australia - contractual clauses ensuring an adequate level of protection, in line with the standard contractual clauses set out in Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries under Regulation (EU) 2016/679 of the European Parliament and of the Council.

You may obtain from the Controller a copy of the data transferred to a third country.

Data subject rights
In connection with the processing of personal data, you have the following rights:

1) the right to access information about what personal data concerning you is processed by the Administrator and to receive a copy of this data. The issuance of the first copy of the data is free of charge, for subsequent ones the Administrator may charge a fee;

2) the right to rectification if the processed data becomes outdated or incomplete,

3) in certain situations you may ask the Administrator to delete your personal data, e.g. when:
a) the data will no longer be necessary for the Administrator for the purposes communicated;
b) the processing is unlawful;
c) you have effectively withdrawn your consent to data processing - unless the Administrator has the right to process the data on a different legal basis;
d) the need to delete the data results from a legal obligation incumbent on the Administrator;

4) if personal data are processed by the Administrator on the basis of the consent granted for processing or for the purpose of performing the Agreement concluded with it, you have the right to transfer your data to another Administrator;

5) you have the right to withdraw your previously granted consent at any time (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal);

6) if you believe that the personal data being processed are incorrect, their processing is unlawful, or the Administrator no longer needs specific data, you may request that for a specified period of time (e.g. to verify the correctness of the data or to pursue claims) the Administrator not perform any operations on the data, but only store them;

7) you have the right to object to the processing of personal data based on the legitimate interest of the Administrator. In the event of an effective objection, the Administrator will cease processing personal data for the above purpose;

8) you have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the provisions of the GDPR.

Cookies
1. The Administrator informs that the Store uses "cookies" files installed on your end device. These are small text files that can be read by the Administrator's system, as well as by systems belonging to other entities whose services the Administrator uses (e.g. Facebook, Google).

2. 
   The Administrator uses cookies for the following purposes:
   a) ensuring the proper operation of the Store – thanks to cookies, it is possible to ensure the efficient operation of the Store, use its functions and conveniently move between individual subpages;
   b) increasing the comfort of browsing the Store – thanks to cookies, it is possible to detect errors on some subpages and constantly improve them;
   c) creating statistics – cookies are used to analyze how users use the Store. This allows for continuous improvement of the Store and adjustment of its operation to user preferences;
   d) conducting marketing activities – thanks to cookies, the Administrator can direct advertisements to users tailored to their preferences.
3. 
   The Administrator may place both persistent and temporary (session) files on your device. Session files are usually deleted when you close your browser, but closing your browser does not delete persistent files.
4. 
   Information about cookies used by the Administrator is displayed in the panel located at the bottom of the Store's website. Depending on your decision, you can enable or disable cookies of individual categories (except for essential cookies) and change these settings at any time.
5. 
   Data collected using cookies does not allow the Administrator to identify you.
6. 
   The Administrator uses the following cookies or tools that use them:

Necessary cookies
The operation of these files is necessary for the proper functioning of the Store's website, so you cannot disable them. Thanks to these files (which collect, among other things, the IP number of your device), it is possible to, among other things, inform you about the cookies operating on the Store's website

OPERATION PERIOD: Most necessary cookies are session cookies, but some remain on your end device for a period of 3 months or until you delete them;

Google Analytics
The provider of this tool is Google. This tool enables the collection of statistical data on how the Store is used by Customers, including the number of visits, duration of visits, search engine used, location. The collected data helps to improve the Store and make it more friendly to Customers.

EFFECTIVE PERIOD: up to 2 years or until they are deleted (depending on which
of the listed events will occur earlier)

Facebook Pixel

The Facebook tool enables us to determine that you have visited the Store, then redirect ads displayed on the social networking sites Facebook and Instagram to you, and measure their effectiveness.

EFFECTIVE PERIOD: up to 3 months or until they are removed (whichever comes first)

7. 
   The website user may independently disable cookies by changing the settings in their web browser, as it is possible to configure the web browser in such a way that prevents cookies from being stored on the User's end device.

The links below provide information on how to delete cookies in the most popular web browsers:

• Firefox: http://support.mozilla.org/pl/kb/usuwanie-ciasteczek
• Opera: http://help.opera.com/Linux/9.60/pl/cookies.html
• Internet Explorer: http://support.microsoft.com/kb/278835/pl
• Chrome: http://support.google.com/chrome/bin/answer.py?hl=pl&answer=95647
• Safari: http://support.apple.com/kb/HT1677?viewlocale=pl_PL

Blocking cookies on mobile phones, tablets and other mobile devices is an individual matter for each phone model and they may support this function in a different way. Therefore, you should familiarize yourself with the privacy options in the documentation on the website of the manufacturer of the mobile device.

Please note, however, that disabling or limiting the use of cookies may cause difficulties in using the Store and prevent it from functioning properly to the full extent.

Final provisions
To the extent not regulated by this Policy, generally applicable provisions on personal data protection apply.

The policy is effective from 13/12/2024.