Entered in the register of entrepreneurs kept by the District Court for M. ST. WARSAW IN WARSAW, XII ECONOMIC DEPARTMENT OF THE NATIONAL COURT REGISTER entered under the number KRS 0000654355
37 Domaniewska Str.,
02-672 Warsaw, Poland
All rights reserved Manuscriptum Sp. z o.o.
Data Protection Inspector: Jakub Szajdziński, e-mail: email@example.com
The Administrator of Personal Data on the website available at: www.emir2020.com, hereinafter referred to as the Online Store, is MANUSCRIPTUM limited liability company with its registered office in Warsaw, ul. Domaniewska 37, 02-672 Warszawa, registered in the Register of Entrepreneurs of the National Court Register by the District Court for the capital city of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under the KRS number: 0000654355, NIP: 5252687051, REGON: 36600139000000, share capital: PLN 100,000 - fully paid, e-mail address: firstname.lastname@example.org, tel: +22 299 50 09
Respecting your rights as subjects of personal data (data subjects) and respecting applicable law, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in in connection with the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (general regulation on data protection), hereinafter referred to as the GDPR, the Act of 10 May 2018 on the protection of personal data (hereinafter the Act) and other relevant provisions on the protection of personal data, we undertake to maintain the security and confidentiality of personal data obtained from you. All employees have been properly trained in the processing of personal data, and as the Personal Data Administrator, we have implemented appropriate safeguards as well as technical and organizational measures to ensure the highest level of personal data protection. We have implemented procedures and policies for the protection of personal data in accordance with the GDPR, thanks to which we ensure compliance with the law and reliability of data processing processes, as well as the enforcement of all your rights as data subjects. Additionally, if necessary, we cooperate with the supervisory authority in the territory of the Republic of Poland, i.e. with the President of the Personal Data Protection Office (hereinafter referred to as PUODO).
In our Online Store, we collect the following personal data:
name and surname - may be processed when, as users of our Online Store (including customers or potential customers), you provide them to us via e-mail, order form, contact form available in our Online Store, traditional mail or by phone in order to use the offer of our Online Store, as well as to properly address the shipment containing the Product ordered by you and to provide other services to you,
address of residence or correspondence - it is necessary for the correct shipment of the ordered Products; its indication is necessary when making purchases in our Store,
telephone number - may be processed in the event of telephone contact on your part (including as customers or potential customers), and also when you provide it to us via e-mail, order form, contact form available in our Online Store or traditional mail, in order to enable us to contact you if there is such a need in connection with the shipment of the Product ordered by you, as well as to answer questions related to our offer,
e-mail address - may be processed when, as users of our Online Store (including customers or potential customers), provide it to us in the event of contact via e-mail, the order form or the contact form available in our Online Store, as well as by traditional mail or by telephone; via e-mail address, we send you an order confirmation, we contact you if there is such a need related to the execution of the order, and we answer questions related to our offer; if you have consented to the transmission of marketing content and you have become a subscriber to our newsletter, we will also send you commercial information several times a month,
NIP - We collect the Tax Identification Number from entrepreneurs and persons who request an invoice and have a NIP number,
device IP address or browser ID - information resulting from the general principles of Internet connections, such as IP address (and other information contained in logs) system), are used for technical and statistical purposes, in particular to collect general demographic information (e.g. about the region from which the connection is made),
possibly other data may be collected as part of carrying out specific cases or may be provided by you as users of our Online Store (including customers or potential customers) via e-mail, order form, contact form available in the Online Store, traditional mail or by telephone contact.
Providing the data indicated in the preceding point is necessary in the cases specified therein, including in particular:
in order to use the offer of our Online Store by placing an order via the order form in the Online Store,
in order to ship Products ordered by you in our Online Store,
in order to answer your questions and enable contact via e-mail, the contact form available in the Online Store, traditional mail or telephone contact,
in order to provide the newsletter subscription service - if you want to be informed about interesting events and commercial offers, you can subscribe to our newsletter; subscribing is voluntary and you can unsubscribe at any time.
In accordance with the principle of minimization, we process only the categories of personal data that are necessary to achieve the purposes listed in point. 3 and 4 above.
We process personal data for the period necessary to achieve the goals listed in point. 3 and 4 above. Personal data may be processed for a longer period, if such a right or obligation imposed on us as the Administrator results from specific legal provisions, from the legitimate interest of the Administrator referred to in point. 10 lit. c below (i.e. for the period of limitation of claims or completion of relevant proceedings, if they were initiated during the limitation period) or when the service we provide is continuous (e.g. subscription to a newsletter).
The source of the Personal Data processed by the Administrator are you, ie the data subjects.
The legal basis for the processing of your personal data is:
Art. 6 sec. 1 lit. b GDPR, i.e. the necessity to process data for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract, or
art. 6 sec. 1 lit. c GDPR, i.e. necessity to fulfill the legal obligations incumbent on the Administrator, or
Art. 6 sec. 1 lit. f RODO, i.e. the legitimate interest of the Administrator, which is the determination, investigation or defense of claims until their expiry or until the completion of the relevant proceedings, if they were initiated within this period, or
Art. 6 sec. 1 lit. a GDPR, i.e. your consent to the processing of personal data for specific purposes, when other legal grounds for the processing of personal data do not apply - e.g. in the case of the newsletter service.
Your personal data is not transferred to a third country or an international organization within the meaning of the provisions of the GDPR. In the event that personal data are transferred to a third country or an international organization, you will stay informed about it in advance, and the Administrator will apply the necessary security referred to in Chapter V of the GDPR.
We do not disclose any personal data to third parties without the express consent of the data subject. Personal data without the consent of the data subject may be made available only to public law entities, i.e. authorities and administration (e.g. tax authorities, law enforcement authorities and other entities authorized by generally applicable law).
If there is a button "Like!" or other links within the Application to the Administrator's accounts in social media, in the scope of data regarding, in particular, IP or internet browser ID, if the Administrator uses the following products:
Facebook (e.g. Facebook, Messenger, Instagram) - the above data is processed on the basis of co-administration with Facebook Ireland Ltd. with its registered office at: 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland,
Google (e.g. YouTube, Maps) - the above data is processed on the basis of co-administration with Google Ireland Ltd. with its registered office at: 4 Barrow St, D04 E5W5, Dublin, Ireland (Google Building Gordon House).
LinkedIn - the above data is processed on the basis of co-administration with LinkedIn Ireland Unlimited Company with its registered office at: Gardner House, 2 Wilton Place, Dublin 2 Ireland.
If, in the cases referred to in this point, the transfer of personal data to third countries would take place, it takes place on the terms set out in point. 11.
Personal data may be entrusted for processing to entities processing such data on our behalf as the Personal Data Administrator. In such a situation, as the Personal Data Administrator, we conclude a contract for entrusting the processing of personal data with the processor. The processing entity processes the entrusted personal data only for the purposes, to the extent and for the purposes indicated in the entrustment agreement referred to in the preceding sentence. Without entrusting your personal data for processing, we would not be able to run our business as part of the Online Store or deliver shipments with the ordered Products. As the Personal Data Administrator, we entrust personal data for processing in particular to the following entities:
providing hosting services to the website on which our Online Store operates,
providing postal, courier and transport services - in order to deliver parcels with ordered Products,
providing us with other services that are necessary for the current functioning of the Online Store.
Personal data is not subject to profiling by us as the Administrator within the meaning of the provisions of the GDPR.
In accordance with the provisions of the GDPR, each person whose personal data we process as the Personal Data Administrator has the right to:
to be informed about the processing of personal data referred to in art. 12 GDPR,
access to their personal data, as referred to in art. 15 GDPR,
correcting, supplementing, updating, rectifying personal data referred to in art. 16 GDPR,
deletion of data (the right to be forgotten), referred to in art. 17 GDPR,
restriction of processing referred to in art. 18 GDPR,
transfer the data referred to in art. 20 GDPR,
object to the processing of personal data, as referred to in art. 21 GDPR,
in the case of the legal basis referred to in point 10 lit. d above - the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal,
not being subject to profiling referred to in Art. 22 in connection with joke. 4 point 4 of the GDPR, lodging a complaint to the supervisory body (i.e. to the President of the Personal Data Protection Office) referred to in art. 77 GDPR, taking into account the rules of using and exercising these rights resulting from the provisions of the GDPR.
1If you want to exercise your rights referred to in the preceding point, please send a message by e-mail to the e-mail address or in writing to the correspondence address referred to in point 18 below.
All inquiries, applications and complaints regarding the processing of personal data by the Administrator, hereinafter referred to as Notifications, should be sent to the following e-mail address: email@example.com or in writing to the following address: ul. Domaniewska 37, 02-672 Warsaw.
The content of the Application should clearly indicate:
data of the person or persons to whom the Application relates,
the event that is the reason for the Report,
present your requests and the legal basis for these requests,
indicate the expected way of settling the matter.
Each identified breach of security is documented, and in the event of one of the situations specified in the provisions of the GDPR or the Act, the data subjects are informed about such breach of the provisions on the protection of personal data, and - if applicable - PUODO.