PRIVACY POLICY
- GENERAL PROVISIONS
Niniejsza polityka prywatności reguluje zagadnienia związane z przetwarzaniem danych osobowych osób korzystających stron sklepu www.spasungate.pl i dokonujących zakupów w sklepie www.spasungate.pl
The protection of personal data is carried out in accordance with the requirements of generally applicable legislation and its storage takes place on secured servers. The rules regarding the protection of personal data are in accordance with the Act of 18.07.2002 on the provision of electronic services and the RODO. The term "RODO" means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
The shop pages www.spasungate.pl provide the opportunity to process personal data. Personal data on the pages of the shop www.spasungate.pl
are collected only to the extent necessary for technical reasons.
In addition, the shop pages of www.spasungate.pl offer the possibility to save further non-personal data. The Server Log Files store information that the browser you are using automatically transmits for technical reasons. This includes the following information:
- browser type/version,
- operating system used,
- URL (previously visited site),
- the hostname of the computer (IP address),
- server query time.
After visiting the shop pages of www.spasungate.pl, the IP address is immediately deleted. This does not take place:
- personalised recording of the aforementioned data
- linking this data with other data sources, including your personal data
The data in the mandatory fields is necessary for us to process your request or to fulfil your order. Other data, in particular for the marketing of goods and services and the provision of business information, is provided on a voluntary basis and is used to optimise our offer, including service, and possibly for statistical purposes.
On the pages of the shop www.spasungate.pl you have the possibility to specify yourself the scope of the personal data you provide, so please check which of these you wish to disclose to us. If you do not agree to the processing of your data as indicated below and in the relevant documents on the pages of the shop www.yozen.pl, you are requested to refrain from using the pages of the shop www.spasungate.pl.
- CONTROLLER
The controller of personal data collected through the shop www.spasungate.pl is Sungate Beauty & Spa with its registered office in Warsaw, Plac Powstańców Warszawy 2A, NIP 9591614105, e-mail address: info@spasungate.pl. The person indicated in the preceding sentence is at the same time: Administrator, Service Provider of the shop www.spasungate.pl and party to the sales contract. Contact with the person supervising the processing of personal data in the Service Provider's organisation is possible by e-mail at: info@spasungate.pl..
The controller shall take particular care to protect the interests of data subjects and shall in particular ensure that the data collected by him/her are processed lawfully; are collected for specified, legitimate purposes and not further processed in a way incompatible with those purposes; are substantively correct and adequate in relation to the purposes for which they are processed; and are kept in a form which permits the identification of data subjects for no longer than is necessary to achieve the purpose of the processing.
Every data subject has the right of access, rectification, erasure or restriction of processing, the right to object, the right to lodge a complaint with a supervisory authority.
The controller reserves the right to process the data after the termination of the contract or the withdrawal of the consent only to the extent necessary for the assertion of possible claims in court or if national or EU regulations or international law oblige us to retain the data.
The Administrator has the right to make personal data and other data available to entities authorised under the relevant legislation (e.g. law enforcement agencies).
The deletion of personal data may take place as a result of the withdrawal of consent or the lodging of a legally permissible objection to the processing of personal data.
The Administrator shall not disclose personal data to any other entities than those authorised by the relevant legislation.
The Administrator has implemented pseudonymisation, data encryption and access control so that the Administrator minimises the consequences of any data security breach.
Personal data shall only be processed by persons authorised by the Administrator or by processors with whom the Administrator closely cooperates.
- PURPOSE AND SCOPE OF DATA PROCESSING AND RECIPIENTS OF THE DATA
Personal data is only collected in those places on the www.spasungate.pl shop website where the user has explicitly given his or her consent by filling in the form.
The Administrator retains and uses personal data only for the purposes necessary to perform the respective functionality of the shop www.spasungate.pl . Each time the purpose, scope and recipients of the data processed by the Administrator result from the activities undertaken on the pages of the shop www.spasungate.pl .
Personal data is processed:
- in accordance with data protection legislation,
- in accordance with the implemented Privacy Policy,
- to the extent and for the purpose necessary for the establishment, formation of the content of the Agreement, modification or termination thereof and the proper performance of the Services provided by electronic means,
- to the extent and for the purpose necessary for the fulfilment of legitimate interests (legitimate purposes) and the processing does not prejudice the rights and freedoms of the data subject,
- to the extent and for the purpose in accordance with the consent given when signing up for the newsletter.
Possible purposes for the collection of personal data by the Administrator:
- conclusion and performance of a sales contract or a contract for the provision of services by electronic means or the services of the Administrator at SUNGATE BEAUTY & SPA salon (art.. 6(1)(b) of the DPA is necessary for the performance of a contract to which the data subject is a party),
- Direct marketing of the Administrator's own products or services at SUNGATE BEAUTY & SPA salon (Article 6(1)(f) RODO legitimate interest of the Administrator).
Possible recipients of personal data:
- in the case of delivery by post or courier service, the Administrator shall make the collected personal data available to the selected carrier or intermediary performing the delivery on behalf of the Administrator,
- w przypadku wyboru sposobu płatności elektronicznych lub kartą płatniczą Administrator umożliwia zebranie danych osobowych Klienta wybranemu podmiotowi obsługującemu powyższe płatności w Sklepie Internetowym: Przelewy24 z siedziba ……………. (zaufany partner).
The controller may process the following personal data:
- name,
- e-mail address,
- the hostname of the computer (IP address),
- contact telephone number,
- delivery address (street, house number, apartment number, postal code, town, country), residential/business/residential address (if different from delivery address).
In the case of non-consumers, the Administrator may additionally process company name and tax identification number (NIP). Each time the scope of data required to conclude a contract is indicated on the respective shop page www.spasungate.pl .
The provision of the personal data referred to in the paragraph above may be necessary for the conclusion and performance of the sales contract or the contract for the provision of electronic services.
- COOKIES AND USAGE DATA
Cookies are small pieces of information in the form of text files which are sent by a server and stored on the visitor's side of the www.yozen.pl website (e.g. on the hard drive of a computer, laptop or smartphone memory card). Cookies are used to improve the performance of the website.
According to Article 11 of the RODO, if the purposes for which personal data are processed do not require the processor to identify the data subject, the processor does not need to collect consent for processing in the case of cookies.
Users can permanently accept or reject their chosen cookies in the settings of their browsers. This means that it is possible, for example, to partially restrict (e.g. temporarily) or completely disable the possibility of storing cookies on the computer - in the latter case, however, this may affect some of the functionality of the Internet Shop (for example, it may not be possible to follow the Order path via the Order Form).
The administrator may process the data contained in cookies during the use by users of the www.spasungate.pl shop for the following purposes:
- To identify service users as logged in to the yozen.co.uk shop and to show that they are logged in;
- remembering the products you have added to your shopping basket for the purpose of placing an order;
- storing data from order forms, surveys or login data to the yozen.pl shop;
- to adapt the content of the yozen.pl shop website to the individual preferences of the customer (e.g. with respect to colours, font size, page layout) and to optimise the use of the www.yozen.pl shop website;
- to keep anonymous statistics on the use of the yozen.pl shop website and to research the needs of the Service Recipients, excluding the personal identification of the Service Recipient.
The service provider also collects exploitation data (so-called logi-adrs IP, domain), which are stored for an indefinite period of time and used to generate statistics to assist in the administration of the www.spasungate.pl shop (processing in the legitimate interest of the data controller or a third party, i.e. the processor (Article 6(1)(f) RODO). The data are aggregated and anonymous, i.e. they do not contain identifying characteristics of visitors to the website of the Online Shop. The logs are not disclosed to third parties.
We use the following cookies on our website:
- "necessary" cookies to enable the use of services available on the website, e.g. authentication cookies used for services that require authentication on the website,
- cookies used for security purposes, e.g. used to detect misuse of authentication on the website,
- "performance" cookies, enabling the collection of information about the use of the website's pages,
- "functional" cookies, which allow "remembering" the user's chosen settings and personalising the user interface, e.g. with regard to the user's chosen language or region of origin, font size, website design, etc,
- "advertising" cookies, enabling the delivery to users of advertising content more tailored to their interests.
The person using the pages of the shop www.spasungate.pl has the possibility at any time to disable or restore the option of collecting cookies by changing the settings in their web browser. Instructions on how to manage cookies are available on the website:
Google Chrome
https://policies.google.com/technologies/managing?hl=pL
Mozilla Firefox
Internet Explorer
https://support.microsoft.com/pl-pl/help/278835/how-to-delete-cookie-files-in-internet-explorer
- BASIS OF DATA PROCESSING
Podanie danych osobowych jest dobrowolne, aczkolwiek niepodanie wskazanych na stronie sklepu www.spasungate.pl danych osobowych niezbędnych do zawarcie i realizacji umowy sprzedaży lub umowy o świadczenie usług drogą elektroniczną skutkuje brakiem możliwości zawarcia tejże umowy.
The basis for the processing of personal data is the need to perform a contract to which he is a party or to take steps at his request prior to entering into a contract.
In the case of processing for direct marketing of the Controller's own products or services, the basis for such processing is:
- prior consent, or
- fulfilment of the legitimate aims pursued by the Administrator.
- THE RIGHT TO CONTROL, ACCESS AND RECTIFY THEIR DATA
Every person is entitled to:
- access to and rectification of their personal data,
- to control the processing of his/her personal data contained in the Controller's filing system, and in particular the right to: demand the data to be completed, updated, rectified, temporarily or permanently suspended or erased, if they are incomplete, outdated, untrue, or have been collected in breach of the Act, or are no longer necessary for the purpose for which they have been collected.
If you have given your consent to the processing of personal data for the purpose of direct marketing of the Administrator's own products or services, your consent may be revoked at any time.
Where the Controller processes personal data for the purpose of direct marketing of the Controller's own products or services, the data subject shall also be entitled to:
- to make a written, contractual request to stop the processing of his or her data on grounds relating to his or her particular situation or to
- to object to the processing of its data.
In order to exercise the rights referred to above, you should contact the Administrator by sending a message in writing or by e-mail to the Administrator's address indicated at the beginning of the Privacy Policy.
- FINAL PROVISIONS
Shop pages www.spasungate.pl may contain links to other websites. When you go to other sites, it is imperative that you read the privacy policy established there.
The controller shall apply technical and organisational measures to ensure the protection of the processed personal data appropriate to the risks and categories of data protected, and in particular to protect the data against their access to unauthorised persons, against their being taken by an unauthorised person, against their being processed in violation of the applicable regulations, and against their alteration, loss, damage or destruction.
The Administrator shall adequately provide the following technical measures to prevent the acquisition and modification by unauthorised persons of personal data sent electronically:
- securing the data set against unauthorised access,
- SSL certificate,
- access to the account only after providing an individual login and password.