Privacy Policy - archived version

Archived version - in force from 2024-07-08 to 2026-10-20. Current version: Privacy Policy.

Hi there, hello!

If you have found your way here, it is a sure sign that you value your privacy. We understand that completely, which is why we are handing you a document that brings together, in one place, the rules for processing personal data and for using cookies and other tracking technologies in connection with the operation of the website https://strefa-kostek.pl/

First, the formal information – the website is administered by STREFA KOSTEK SPÓŁKA CYWILNA, ul. Zemborzycka 59F, 20-445 Lublin, NIP: 9462666962, REGON: 366472356.

This privacy policy is written in a question-and-answer format. We chose this format to keep the information we present to you clear and easy to read.

If you have any questions about this privacy policy, you can contact us at any time by sending a message to sklep@strefa-kostek.pl.

# 1: Who is the controller of your personal data?

The controller of your personal data is STREFA KOSTEK SPÓŁKA CYWILNA, ul. Zemborzycka 59F, 20-445 Lublin, NIP: 9462666962, REGON: 366472356.

# 2: Who can you contact about the processing of your personal data?

As part of implementing personal data protection in our organisation, we decided not to appoint a data protection officer, as this is not mandatory in our situation. For all matters related to personal data protection and privacy in general, you can contact us at sklep@strefa-kostek.pl.

# 3: What information do we hold about you?

The scope of the personal data we process is specified separately for each processing purpose in Appendix 1 to this privacy policy.

In addition, we use tools that collect a range of information about you related to your use of our website. In particular, this includes the following information:

• information about your device, operating system and web browser
• user identifier (user-ID)
• IP address, shortened and anonymised
• date of your visit to the website
• subpages viewed
• time spent on the website
• navigation between individual subpages
• mouse clicks or screen taps
• clicks on individual links
• the source from which you came to the website
• your age range
• your gender
• your approximate location, limited to the town or city
• your interests, determined on the basis of your online activity
• This information is referred to in the rest of this privacy policy as "Anonymous Information"

In our view, Anonymous Information on its own is not personal data, because it does not allow us to identify you and we do not combine it with the typical personal data we collect about you. Nevertheless, given the strict case law of the Court of Justice of the European Union and the differing opinions among lawyers, as a precaution, in case Anonymous Information were to be regarded as personal data, we have also included detailed explanations of how this information is processed in this privacy policy.

We are unable to give you access to Anonymous Information about you, because we cannot attribute any Anonymous Information to any specific user. Within the tools that collect Anonymous Information, we can only see a set of statistics and information that is not assigned to specific individuals. Moreover, we have no access at all to the information collected by some of the tools, as we are only interested in the correct operation of the function provided by a given tool, not in the information it collects. For example, a particular plugin may collect some information, but this information is not shared with us in any way, and we are not interested in it at all, because all we care about is that the plugin's function (e.g. submitting the newsletter form) simply works.
Processing Anonymous Information allows us to provide you with the features available on the website. Anonymous Information is also used for analytical, statistical and marketing purposes, such as setting up and targeting ads.

Since Anonymous Information is collected by the external tools we use, it is also processed by the tool providers in accordance with their terms of service and privacy policies.
Anonymous Information is also used by the providers of individual tools to provide, improve and manage their services, develop new services, measure ad effectiveness, protect against fraud and abuse, and personalise content and ads displayed on various services, websites and apps.

The tools we use that involve the collection of Anonymous Information are listed in Appendix 2 to this privacy policy.

# 4: Where do we get your personal data from?

In most cases, you provide it to us yourself. This happens when you:

• register a user account

• place an order

• submit a complaint or withdraw from a contract

• sign up for the newsletter

• add a comment

• add a review

• contact us by email

• submit a notice or appeal regarding content we store

• submit a request related to the processing of personal data

In Appendix 1 to this privacy policy, we have assigned the source of the data to each processing purpose.

In addition, some information about you may be collected automatically by the tools we use:

• the website mechanism collects your IP address

• the newsletter system mechanism collects your IP address and information about your activity in relation to the content sent to you in the newsletter, such as message opens, link clicks, etc.

• the external tools listed in Appendix 2 to this privacy policy collect Anonymous Information related to your actions on the website

# 5: Is your data safe?

We take care of the security of your personal data. We have analysed the risks associated with the individual processes in which your data is processed and then implemented appropriate security and personal data protection measures. We continuously monitor the state of our technical infrastructure, train our staff, review the procedures we use and introduce the necessary improvements. If you have any questions about your personal data, we are at your disposal at sklep@strefa-kostek.pl

# 6: For what purposes do we process your personal data?

The purposes of processing your personal data are listed in Appendix 1 to this privacy policy.

# 7: How long will we store your personal data?

We store your personal data for as long as is justified for a given processing purpose, so the processing periods vary depending on the purpose - you will find them in the table attached to this privacy policy.

Please note that ending the processing of your data for one purpose does not necessarily mean that your personal data is completely deleted or destroyed, because the data may still be processed for another purpose, for the period specified for that purpose. For example, when an exchange of correspondence ends, we stop processing personal data for the purpose of handling correspondence, but the data collected in connection with that correspondence continues to be stored for archiving purposes, in order to establish, pursue or defend claims related to the correspondence. Data is completely deleted or destroyed once we have fulfilled all purposes, most often after the limitation period for claims or administrative liability has expired, or after the period for which we are legally required to keep certain data.

# 8: Who are the recipients of your personal data?

We would venture to say that modern business cannot do without services provided by third parties. We use such services too. Some of them involve processing your personal data. The external service providers involved in processing your personal data are:

• the hosting provider, which stores data on its server

• providers of cloud software in which data is processed

• the accounting firm, which processes your data shown on invoices

• the technical support provider, which gains access to data if the technical work concerns areas containing personal data

All of the entities listed above process your data on the basis of data processing agreements concluded with us and guarantee an appropriate level of personal data protection.

If necessary, your data may be disclosed to a legal adviser or attorney bound by professional secrecy. This may be necessary if we need legal assistance that requires access to your personal data.

Your personal data may also be transferred to tax offices to the extent necessary to fulfil tax, settlement and accounting obligations. This includes, in particular, any declarations, reports, statements and other accounting documents that contain your personal data.

Your data is shared with courier companies to the extent necessary to deliver your order. These companies become independent controllers of your personal data.

Furthermore, as regards Anonymous Information, it is accessible to the providers of the tools or plugins that collect it. These providers are independent controllers of the data collected in their tools and may share this data in accordance with the rules set out in their own terms of service and privacy policies, which we have no influence over.

# 9: Do we transfer your data to third countries or international organisations?

No, we do not transfer your data to third countries or international organisations.

# 10: Do we use profiling? Do we make automated decisions based on your personal data?

We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

We do use tools that may take certain actions depending on the information collected through tracking mechanisms, but we believe these actions do not significantly affect you, as they do not differentiate your situation as a customer, do not affect the terms of the contract you may conclude with us, etc.

Using certain tools, we may, for example, show you personalised ads based on your previous actions on the website or suggest products that may interest you. This is known as behavioural advertising. We encourage you to learn more about behavioural advertising, especially regarding privacy issues. You will find detailed information, along with the option to manage your behavioural advertising settings, here.

We would like to stress that within the tools we use, we only have access to Anonymous Information. This information is stored on the servers of the individual tool providers, and these servers may be located anywhere in the world.

# 11: What rights do you have in connection with the processing of your personal data?

The GDPR gives you the following potential rights in connection with the processing of your personal data:

• the right to access your data and receive a copy of it,
• the right to rectify (correct) your data,
• the right to erasure of your data (if you believe there are no grounds for us to process your data, you can request that we delete it),
• the right to restrict processing (you can request that we limit the processing of your data to storage only or to actions agreed with you, if you believe the data we hold is incorrect or that we are processing it without a legal basis),
• the right to object to processing (you have the right to object to processing based on legitimate interest; you should indicate the particular situation which, in your opinion, justifies us ceasing the processing you object to; we will stop processing your data for these purposes unless we demonstrate that our grounds for processing override your rights or that your data is necessary for us to establish, pursue or defend claims),
• the right to data portability (you have the right to receive from us, in a structured, commonly used and machine-readable format, the personal data you provided to us on the basis of a contract or your consent; you can instruct us to send this data directly to another entity),
• the right to withdraw your consent to the processing of personal data, if you have previously given such consent,
• the right to lodge a complaint with a supervisory authority (if you find that we are processing data unlawfully, you can file a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) or another competent supervisory authority).

The rules for exercising the rights listed above are described in detail in Articles 16 – 21 of the GDPR. We encourage you to read these provisions. For our part, we consider it necessary to explain that the rights listed above are not absolute and will not apply to every processing activity involving your personal data.

We would like to stress that one of the rights listed above is always available to you - if you believe that we have infringed data protection regulations when processing your personal data, you can lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office).

You can also always ask us to tell you what data we hold about you and for what purposes we process it. Just send a message to sklep@strefa-kostek.pl. However, we have made every effort to present the information you may be interested in comprehensively in this privacy policy. You can also use the email address above if you have any questions about the processing of your personal data.

# 12: Do we use cookies or other similar technologies, and what exactly are they?

Like almost every other website, our website uses cookies and other similar technologies, such as tracking codes or pixels, the Conversions API, etc.

Cookies and other similar technologies can be used to collect certain information that is then used for various purposes, from ensuring that individual website features work correctly, through analysing user behaviour on the website, to delivering targeted advertising.

If you would like to learn more about cookies and other similar technologies, you can read, for example, the following materials:

• an explanation of cookies,
• an explanation of tracking pixels,
• an explanation of the Conversions API.

# 13: On what basis do we use cookies or other similar technologies?

We use cookies and other similar technologies on the basis of your consent, except where cookies or other similar technologies are necessary to properly provide you with an electronic service.

Cookies or other similar technologies that are not necessary to properly provide an electronic service remain blocked until you consent to the use of cookies or other similar technologies. During your first visit to the website, we display a message asking for your consent.

Please note that disabling or restricting cookies or other similar technologies may prevent you from using some of the features available on our website and make it difficult to use the website, as well as many other websites that use cookies or other similar technologies. For example, if you block social media plugin cookies, the social buttons, widgets and features implemented on the website may be unavailable to you.

# 14: Can you disable cookies or other similar technologies?

Yes, you can manage your cookie and similar technology settings in your web browser. You can block all or selected cookies. You can also block cookies from specific websites. You can also delete previously saved cookies and other website and plugin data at any time.

Web browsers also offer an incognito mode. You can use it if you do not want information about the pages you visit and the files you download to be saved in your browsing and download history. Cookies created in incognito mode are deleted when you close all incognito windows.

There are also browser plugins that let you control cookies, such as Ghostery (https://www.ghostery.com). Additional software, in particular antivirus suites, may also offer cookie control options.

In addition, there are online tools that let you control certain types of cookies, in particular to manage behavioural advertising settings collectively (e.g. www.youronlinechoices.com/, www.networkadvertising.org/choices).

Please note that disabling or restricting cookies or other similar technologies may prevent you from using some of the features available on our website and make it difficult to use our website, as well as many other websites that use cookies. For example, if you block social media plugin cookies, the social buttons, widgets and features implemented on our website may be unavailable to you.

# 15: For what purposes do we use first-party cookies?

First-party cookies are used to ensure that individual website mechanisms work correctly, such as the proper submission of forms on the website.

First-party cookies also store information about the cookie consent you have given.

# 16: What third-party cookies are used?

Our website uses third-party cookies or other similar technologies related to the tools listed in Appendix 2 to this privacy policy. Individual tools may use more than one cookie, but we have decided not to list them in detail, so as not to overwhelm you with too much information, and on the assumption that a list of tools together with the purposes for which they are used will be clearer to you than a list of all the cookies or other similar technologies technically operating within each tool.

We have also decided not to specify the scope of information collected in cookies for each tool we use, given that every tool collects information related to your characteristics and behaviour on our website. This is the Anonymous Information we mentioned earlier in this privacy policy.

Although we are aware of the requirements set by the Court of Justice of the European Union, we have nevertheless decided not to specify the lifespan of the cookies used by individual tools. To reliably specify the lifespan of every cookie, we would have to overwhelm you with an excess of information that would in no way serve the principle of transparency and clarity of the information addressed to you. Moreover, cookie lifespans may change so frequently on the tool providers' side that we are unable to keep reliable track of them. Since we do not specify cookie lifespans, we would like to remind you that the only way to really control how long information is stored in cookies is to manage cookies yourself. You can delete the cookies stored on your device at any time in your web browser.

At this point, we would like to stress once again that through cookies or other similar technologies we do not have access to information that would allow us to identify you. This is the Anonymous Information we mentioned in this privacy policy.

Moreover, while for statistical and marketing tools we can view various reports generated on the basis of Anonymous Information, for the other tools we do not get any access at all to the information collected in cookies, as we are only interested in whether the features for which a given tool was installed work correctly on our website.

# 17: Do we track your behaviour on our website?

Yes, we use tools that involve collecting information about your activity on our website. These tools are listed in Appendix 2 to this privacy policy.

# 18: Do we show you targeted ads?

Yes, we use advertising tools that allow us to direct ads to specific target groups defined on the basis of various criteria such as age, gender, interests, occupation, job and previous actions on our website. These tools are listed in Appendix 2 to this privacy policy.

§ 19: How can you manage your privacy?

The answer to this question can be found in many places in this privacy policy, in the descriptions of individual tools, behavioural advertising, cookie consent, etc. Nevertheless, for your convenience, we have gathered this information in one place once again. Below you will find a list of ways to manage your privacy.

• cookie settings in your web browser

• browser plugins that help manage cookies, e.g. Ghostery

• additional software for managing cookies,

• incognito mode in your web browser

• behavioural advertising settings, e.g. youronlinechoices.com

• settings provided by external tool providers (links to these settings are collected in Appendix 2 to this privacy policy)

# 20: What are server logs?

Using the website involves sending requests to the server on which the website is hosted. Every request sent to the server is recorded in the server logs.

The logs include, among other things, your IP address, the server date and time, and information about the web browser and operating system you use. The logs are recorded and stored on the server.

The data recorded in server logs is not associated with specific people using the website and is not used by us to identify you.

Server logs are only auxiliary material used to administer the website, and their contents are not disclosed to anyone other than persons authorised to administer the server.

# 21: Is there anything else you should know?

As you can see, the processing of personal data, the use of cookies and privacy management in general are quite complex topics. We have made every effort to make this document give you as much knowledge as possible about the issues that matter to you. If anything is unclear, you would like to learn more or simply want to talk about your privacy, write to us at sklep@strefa-kostek.pl.

# 22: Can this privacy policy change?

Yes, we may modify this privacy policy, in particular due to technological changes on our website and changes in the law. If a change affects how we process your personal data and we have your electronic contact details, you will receive a message about every change to the privacy policy.

This version of the Privacy Policy is in force from 2024-07-08

In addition, all archived versions of the privacy policy are linked below.

Appendix 1 - purposes of personal data processing

Appendix 2 - list of external tools