privacy policy

1. Preliminary Provisions

Data protection is a matter of trust, and user trust is very important to us. In order for users to feel safe when visiting our website, we strictly comply with the provisions of generally applicable law when processing personal data. At this point, we would like to inform you about our data processing principles. The following data protection statement informs you about what user data is collected via our website and which of these data, how they are processed, and who to contact in matters related to this

2. General information

Personal data is any information relating to an identified or identifiable natural person. These include, for example, name, telephone number, address and all basic data that you provided to us when registering and creating a customer account, as well as data regarding your personal preferences.

The processing of personal data includes all activities that are undertaken in connection with the use of personal data, for example: collecting, recording, storing, viewing, using. The administrator of user data, and therefore the entity responsible for the processing of personal data within the meaning of MB Marta Banaszek. Contact with the Data Administrator is possible under the contact details provided below:

a. By traditional mail at the address: MB Marta Banaszek, with its registered office at ul.
Bronikowski 53 lok. 3. 02-796, Warsaw b. By e-mail: studio@martabanaszek.pl

The administrator informs that the processing of user data is carried out on the basis of and in accordance with the provisions of generally applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "GDPR". The purpose, basis and scope of processing the user's personal data depends on the type of activity carried out by the Administrator. We process user data for the following purposes: processing an order placed by a customer, customer service, maintaining a user account, conducting marketing activities and sending a newsletter.  

3. Purposes, grounds and scope of data processing.

In order to provide full and transparent information on the processing of user data, below we indicate for what purposes, to what extent and on what grounds we process users' personal data depending on the activity undertaken. 

Fulfillment and handling of orders. 

We process user data as part of the purchase service, including any subsequent complaint procedures, in order to provide our services provided via our website. We need your e-mail address so that we can confirm receipt of your order and dispatch, as well as for communication with you in general. For the proper execution and handling of the order, including the organization of delivery by the method chosen by the customer, the Administrator processes the user's data indicated in the order form in the following scope:

• name
• surname
• e-mail
address • home address
• mobile phone number

In connection with the execution and handling of the order, we process customer data for the following purposes and on the basis of:

• in order to perform a sales contract to which the data subject is a party pursuant to art.
6 sec. 1 lit. b) GDPR; • in order to fulfill the legal obligations incumbent on the Administrator in the field of tax law, financial settlements and consumer rights pursuant to art.
6 sec. 1 lit. c) GDPR in connection with i.a. Act of April 23, 1964. Civil Code, Act of September 29, 1994 on accounting, Act of August 29, 1997 Tax Ordinance, Act of May 30, 2014 on consumer rights ; legitimate interests pursued by the Administrator in the field of communication with the user and possible determination, investigation and defense of claims pursuant to art. 6 sec. 1 lit. f) GDPR.

The customer's personal data will be processed for the period necessary to achieve the above-mentioned purposes, and therefore for the period necessary to perform the order, for the period required by law and until the expiry of the deadlines for pursuing any claims, i.e. for a period of 5 years from the year following the year of expiry of the contract. Providing personal data by the customer is voluntary, but necessary in order to conclude the contract and fulfill the order. Failure to provide personal data by the user makes it impossible to make a purchase.

customer account

For each customer who registers on our website using the "Create an account" function, we create a customer account, i.e. password-protected direct access to the user's master data stored with us. Here, the user can, among other things, see his completed, pending and recently shipped orders or manage his personal data and newsletter. In order to set up, maintain and service a user account, we process the following personal data of the client:

• name
• surname
• e-mail
address • home address
• mobile phone number
• order history

The basis for the processing of personal data placed in the user's account is the performance of the contract to which the data subject is a party pursuant to art. 6 sec. 1 lit. b) GDPR. In the scope of determining, investigating or defending against possible claims, the basis for data processing is the legitimate legal interest of the Administrator in accordance with art. 6 sec. 1 lit. f) GDPR. Personal data will be processed until the end of the purpose for which they were collected, i.e. for the duration of the user's account, and after this period until the expiry of the limitation period for any claims. Providing data by the user is voluntary, but necessary to set up a user account. Failure to provide data results in the inability to use the user account service.  

newsletter

In order to enable customers to stay up to date with our current offers and promotions, we offer users the opportunity to use our newsletter service. We use the e-mail address provided by the user to send the newsletter. It is required to confirm the user's consent to receive the newsletter as the owner of the e-mail address. If the user would like to unsubscribe from the newsletter, he can cancel his consent at any time without incurring costs other than the costs of providing information according to the basic tariff. For this purpose, a notification in text form to the contact details listed in point 1 (e.g. e-mail, letter) is sufficient. Of course, there is a link to unsubscribe from the newsletter in each newsletter. Personal data in the form of an e-mail address (and any information contained in the name e-mail address, e.g. name and surname) are processed in order to provide the service on the basis of the legitimate interest of the Administrator in the form of marketing activities in accordance with art. 6 sec. 1 lit. f) GDPR. Personal data will be processed by us until the user's consent is effectively withdrawn. Use of user data for advertising purposes We also offer the possibility of receiving marketing messages from us via text messages sent to the telephone number provided by the user. In this case, customers' personal data is processed for promotional purposes consisting in sending marketing information. For the above purpose, we process the client's personal data in terms of name, surname and telephone number provided. The basis for data processing is a legitimate legal interest in the form of marketing activities by the Administrator in accordance with art. 6 sec. lit. f) GDPR. We also use your data for the following purposes: to continuously optimize your shopping experience with a customer-friendly and personalized offer, and to recommend products or services to you that may be of interest to you. We use the obtained information for this purpose, for example, confirmation of receipt and reading of e-mails, information about the end device owned by the user, Internet connection, operating system and platform, date and time of visiting the website or viewed products, as well as information that we obtain from you (including information that is automatically provided or generated). In addition, we also use your order history. This means that the data collected by the Administrator may be profiled in certain cases, i.e. used to determine the user's preferences and interests, to be able to personalize and adapt the message addressed to the client. The basis for the processing of the above data is the legitimate legal interest of the Administrator in order to best adapt its offer to customers in accordance with art. 6 sec. 1 lit. f) GDPR. Personal data used for the above purposes will be processed until the purpose for which they were collected ceases to exist or a justified objection to processing is raised.

4. Rights of data subjects

We respect the privacy and rights of users that they are entitled to in connection with the processing of their personal data, and we also value their awareness in this matter. Therefore, below we present the data protection rights of data subjects. The User is entitled to obtain confirmation from the Administrator whether he processes his personal data, and if this is the case, he is entitled to access them and receive information regarding this processing. In the event of the above request, the user will be entitled to receive a copy of the data processed by the Administrator. The user is entitled to request the rectification of his data that are incorrect and to supplement incomplete data. If the above request occurs, we will update your personal data in accordance with your instructions. The user is entitled to request the deletion of personal data in the following cases:

• personal data are no longer necessary for the purposes for which they were processed;
• withdrawal of consent to the processing of personal data, if it was the basis for processing;
• the user has objected to the processing and there are no overriding legitimate grounds for processing;
• personal data has been unlawfully processed;
• there is a legal obligation to delete the data.

In the event of the above request, we will delete the user's personal data and cease further processing if there are no legal grounds for further processing. The user is entitled to request restriction of processing in the following cases:

• in the event of questioning the correctness of personal data - for a period that allows verification of the compliance of these data;
• the processing is unlawful and the user opposes the erasure of the personal data, requesting the restriction of their use instead;
• personal data are no longer needed for the purposes of processing, but they are needed by the user to establish, pursue or defend claims;
• if the user objects to the processing - until the Administrator verifies the legitimacy of the objection.

In the event of the above request, we will mark the personal data subject to restriction in order to cease their further processing. In order to exercise this right, the user should specify the reason for the request and the scope of data whose processing is to be limited. The user is entitled to request the transfer of data if the processing is based on consent or in order to perform the contract concluded with the user or the processing is carried out in an automated manner. In order to fulfill this request, the user is entitled to receive his personal data in a machine-readable format, i.e. on an IT medium. The User may also request that his personal data be sent by the Administrator directly to another administrator, if it is technically possible. The User has the right to object to the processing at any time for reasons related to his particular situation, if the processing is based on the Administrator's legitimate interest (Article 6(1)(f) of the GDPR) or the performance of a task carried out in the public interest (Article 6(1)(f) of the GDPR) 1 letter e GDPR). If the above request is made, we will stop processing your data, unless we can demonstrate that our legal interest in processing overrides your interests, rights and freedoms. If you object to processing for direct marketing purposes, we will stop processing your personal data. You also have the right not to be subject to a decision based solely on automated processing, including profiling. In order to exercise the above-mentioned rights, it is enough to contact us by traditional mail at MB Marta Banaszek, ul. Bronikowski 53 lok. 3, 02-796 Warsaw, via the e-mail address studio@martabanaszek.pl.

5. Transfer of data to third parties

Users' personal data may be transferred to third parties only when it is permitted by law. Personal data may be transferred to entities cooperating with the Administrator, in particular IT system providers, e-mail providers, companies providing hosting services, providers of tools for marketing activities, courier companies, and a law firm. Personal data may be transferred to service providers used by the Administrator (e.g. IT system providers) on the basis of relevant entrustment agreements. Personal data may also be made available to public authorities or entities authorized to obtain data on the basis of applicable law, e.g. courts, tax offices, law enforcement authorities or state institutions. Users' personal data may be transferred outside the European Economic Area in order to use the services of foreign entities offering tools used by the Administrator if an appropriate level of protection of users' personal data is guaranteed.

6. Cookies (Cookies)

Accepting cookies is a prerequisite for using our online store. However, if you block the use of cookies, our website and service will only function based on limited functions.

What are cookies (cookies)?

Cookies are small files saved on the user's data carrier, used by the user's browser to save certain settings and data for exchange with our system. There are two types of cookies, so-called session cookies, which are deleted when the user closes the browser, and temporary/permanent cookies, which are stored for a longer period of time or permanently on the user's data carrier. By storing these files, we can properly prepare our websites and our offer in terms of user preferences. This makes it easier for the user to use the website, for example by saving certain user data so that he does not have to provide them each time.

What cookies does Marta Banaszek use?

Most of the cookies we use are automatically deleted from your computer's hard drive at the end of your browser session (so-called session cookies). For example, session cookies are used to offer the user a shopping cart function on many pages of the website. In addition, we also use cookies that are stored on your computer's hard drive. During the next visit, the website automatically recognizes the user and the information and settings he prefers. Temporary and permanent cookies (storage period from 1 month to 10 years) are saved on the hard drive of the user's computer, and after a certain period of time they are automatically deleted. These cookies are used to make our offer even more effective, safer and more user-friendly. Thanks to these files, it is possible to present the user with information tailored to his interests. The sole purpose of cookies is to adapt our offer to the customer's expectations as much as possible and thus make it easier for him to navigate on our website.

What data is saved in cookies?

Only pseudonymized data is stored in cookies used by MB Marta Banaszek. When activating a cookie, an identification number is assigned to it without assigning the user's personal data to this identification number. The name, IP address or similar user data that allows the cookie to be assigned directly to the user are not stored in the cookie. Based on cookie technology, we only obtain pseudonymized information, for example about which pages of our store the user has visited, which products he has viewed, etc.

Retargeting

Our websites use so-called retargeting technology. We use this technology to be able to offer users a more attractive online offer. It allows users who have become interested in our store and our products to be presented with appropriate advertising on the websites of our partners. We believe that the display of personalized, interest-related advertising is generally more attractive to the user than advertising that does not have such an individual connection. The display of these advertising materials on our partners' websites is based on cookie technology and analysis of previous user behavior. This form of advertising is carried out completely anonymously. When using our website, cookies are used to collect, save and use data on user behavior. In addition, the user's data contained in cookies are stored after the end of the browser session and, for example, used during the next visit to the website.

How can you block the saving of cookies?

There are settings available in the browser that allow you to accept saving cookies only if the user agrees to it. In this way, you can prevent the saving of cookies in the future. To accept the use of MB Marta Banaszek cookies while blocking the use of third-party cookies, select the "Block third-party website cookies" option in the browser settings. As a rule, in the menu bar of the web browser, through the help function, you can get information on how to reject new and disable saved cookies.