The provision of the User’s personal data, as well as the User’s consent to its processing, is completely voluntary. Any personal data provided to the
Administrator shall be processed only to the extent and for the purpose for which the User has given his/her consent. However, if the User decides not to
provide the Administrator with the data necessary for the execution of the order and does not consent to its processing, the Administrator will not be able to
execute the order.
Concerned with the security of the entrusted data, the Administrator has developed internal procedures and recommendations to prevent data from being
made available to unauthorised persons. The Administrator controls their implementation and constantly checks their compliance with the relevant legal
acts – the Personal Data Protection Act, the Act on the Provision of Electronic Services, as well as all kinds of executive acts and acts of Community law.
The User’s personal data will be processed only until the legal obligation ceases to exist or until the User, whose data are concerned with the account
service in the online Store, resigns (termination of the contract for the provision of services by electronic means).The User whose data are processed by the
Administrator on the basis of an expressed consent has the right to withdraw the consent at any time without affecting the legality of the processing
performed on the basis of the consent before its withdrawal.
Contact details:
contact@karenarcanjo.com
The administrator of the personal data of KARENARCANJO.COM is:
KA Sp. z o.o.
ul. Olsztyńska 2/7
11-130 Orneta
NIP: 7432049442
REGON: 527583634
Users’ personal data will be processed for the purposes of:
- The conclusion and execution of orders and Sales Contracts between the Administrator and the User under the conditions described in these Terms and Conditions;
- Marketing the Administrator’s own Products and services, including by sending, with prior consent, messages containing commercial information, in particular in the form of a Newsletter, in the form of an Availability Notice on the basis of the Administrator’s legitimate interest pursued by the Administrator or on the basis of separately granted consent;
- Sending commercial information by electronic means pursuant to Article 10(2) of the Act on Providing Services by Electronic Means of 18 July 2002 (i.e. Journal of Laws of 2017, item 1219 as amended) – on the basis of separately granted consent;
- Other, resulting from the legitimate interests of the Administrator. Providing personal data by the User is voluntary, but it is necessary in order to carry out transactions within the Store. When the User subscribes to a newsletter, electronic messages containing commercial information about promotions and new Products available in the Store will be sent to his/her e-mail address.
When placing an order in the Store, the User provides the following personal data:
- E-mail address
- Address details: shipping address, postal code, city
- Phone number
- Name and surname
When using the Newsletter or Availability Notification service, the User only provides his/her email address. Navigation data may also be collected from Users, including information on links and references they choose to click on or other actions they take in the Store. If a request is made, the Administrator shall make personal data available to authorised state authorities. Your personal data is protected by the Administrator against unauthorised use, modification or destruction by using appropriate technical and organisational measures.
The Administrator also collects the, so-called, exploitation data (which are not personal data) of Users visiting the Store website. The collected data is used
to generate statistics and advertising services. The Administrator collects such data as the visits, navigation path and the extent of use of the Store’s
functions by the User, the time of staying on the Store’s website, information on the devices and browsers from which the User visits the Store, as well as
geographical data and interests. The usage data of Store visitors may be used to run online advertising campaigns selected according to Users’ interests.
The Administrator uses personalised retargeting services in order to offer Users interesting advertising content. These advertisements are displayed based
on the User’s activity in the Store. For this purpose, the Administrator uses external advertising platforms such as Facebook, Google, Instagram, etc., which
match the User’s profile in their database in order to determine the optimal time and place to show the User an advertisement of interest.
THE TRANSFER OF PERSONAL DATA TO OTHER ENTITIES
The User’s personal data shall be processed by the Administrator in accordance with the applicable legal provisions, in particular in accordance with
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing
of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to
as „RODO” or „RODO Regulation”.
The User’s personal data is transferred to the service providers used by the Administrator in the operation of the Store. In particular, personal data may be
forwarded to:
- payment providers (e.g. PayPal or tpay.com) in order to process payments
- courier companies (e.g. DPD) to deliver the Product to the indicated address
- credit providers / lessors
- providers of feedback surveys
- service providers who supply the Administrator with technical, IT and organisational solutions enabling the Administrator to conduct his business activity, including the Internet Store and Services provided through it
- suppliers of accounting, legal and advisory services providing the Administrator with accounting, legal or advisory support (in particular an accounting office, a law firm or a debt collection company).
The personal data will not be made available by the Administrator to other entities, apart from those who have an appropriate legal basis, in particular if the
personal data is necessary for the performance of a contract to which the User is a party