In connection with the obligation to provide information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), we hereby inform you that:
1. The Controller of personal data processed on the websites available at:
https://www.wiliwili.pl
is:
HZ7 Sp. z o.o.
Al. Wyzwolenia 46/437
71-500 Szczecin
KRS 0001121210, NIP 8513316557, REGON 529365858
2. The Controller may be contacted by sending a letter to the address indicated in point 1 or electronically at: biuro@wiliwili.pl
3. The Controller processes personal data in accordance with Article 6(1)(a), (b), (c) and (f) of the GDPR – depending on the purpose and scope of the processing of personal data.
4. Personal data is processed by the Controller for the following purposes:
- preparing, upon request, as well as concluding and performing a service agreement or Sales Agreement, including fulfilling obligations relating to complaints or similar matters – the legal basis for processing is Article 6(1)(b) of the GDPR; alternatively, in the case of a Customer’s representative, the legal basis for processing their data is the Controller’s legitimate interest in being able to contact the Customer (Article 6(1)(f) of the GDPR);
- handling or retaining (recording, archiving, etc.) communications conducted through forms and contact tools (chat) available in the Online Store or by telephone or email using the numbers or addresses provided in the Online Store – the legal basis for processing is Article 6(1)(f) of the GDPR, where the Controller’s legitimate interest consists in providing an answer to the question asked; alternatively, the legal basis for processing is the necessity to comply with a legal obligation imposed on the Controller by law (e.g. where the contact concerns a request to exercise rights under the GDPR; Article 6(1)(c) of the GDPR);
- establishing, pursuing or defending against claims – the legal basis for processing is the Controller’s legitimate interest in establishing, pursuing or defending against claims (Article 6(1)(f) of the GDPR);
- fulfilling the Controller’s legal obligations arising from tax and accounting regulations, including the archiving of agreements and accounting documents – the legal basis for processing is Article 6(1)(c) of the GDPR;
- carrying out marketing activities, including sending commercial information and marketing content by email or SMS – the legal basis for processing is the consent of the data subject (Article 6(1)(a) of the GDPR);
- carrying out analyses, statistics and activities related to improving services and the operation of the Online Store – the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) of the GDPR).
5. Data processed for the purposes indicated above may be disclosed to other entities, namely:
- entities with which we have concluded personal data processing agreements, i.e. entities providing IT services (e.g. hosting), accounting, banking, legal, administrative, postal and courier services;
- employees or associates who have been trained, authorised and obliged to maintain confidentiality and comply with personal data protection regulations;
- public administration authorities or other entities authorised under applicable law, for the purpose of fulfilling obligations imposed on them or on us.
6. We process the following types of personal data: first and last name; email address; contact telephone number; address (street, house number, apartment number, postal code, city, country) and delivery address. In the case of Customers who are Entrepreneurs, we additionally process the business name/company name and the Entrepreneur’s Tax Identification Number (NIP).
7. Providing the personal data referred to in the preceding point is particularly necessary for us to provide electronic services within the Online Store and to conclude and perform the Sales Agreement. Providing personal data in these cases is voluntary; however, failure to provide such data will make it impossible to conclude the agreement.
8. In addition, we may process the following data relating to the manner in which electronically supplied services within the Online Store are used (usage data):
- identifiers of the device, ICT system or web browser used by the user when using electronically supplied services;
- information about the commencement, completion and scope of each use of such services;
9. The Controller may use profiling for marketing and analytical purposes, in particular to tailor content, offers and communications to users’ preferences. Profiling does not result in decisions being made concerning the user that produce legal effects or similarly significantly affect them.
10. Personal data will be stored for the period necessary to achieve the relevant purposes, namely:
- for purposes related to the conclusion and performance of an agreement – for the duration of the agreement and subsequently for the period required by law or necessary for pursuing claims;
- for the purpose of handling communications, contact forms and enquiries submitted to the Controller – for the period necessary to provide a response and resolve the matter concerned, and subsequently for the limitation period applicable to any potential claims;
- for the purpose of establishing, pursuing or defending against claims – until the expiry of the limitation period for claims arising under applicable law;
- for purposes arising from tax, accounting and other legal obligations imposed on the Controller – for the period required by law;
- for marketing purposes, including sending commercial information and marketing content by email or SMS, as well as in connection with profiling and analytical activities related to marketing – until consent is withdrawn (where consent constitutes the legal basis for processing), an objection to the processing of personal data is raised, or the purpose of the data processing ceases to exist.
11. All natural persons whose data is processed by the Controller have the right to request access to their data, rectification, erasure or restriction of processing, to object to processing, as well as the right to data portability to another controller.
12. To exercise these rights, please contact the Controller in the manner indicated in point 2.
13. In the event of a breach of applicable regulations concerning the processing of personal data, persons whose data is processed by the Controller have the right to lodge a complaint with the competent supervisory authority.
14. The Controller makes every effort to ensure appropriate physical, technical and organisational measures to protect personal data against accidental or intentional destruction, accidental loss, alteration, unauthorised disclosure, use or access, in accordance with all applicable regulations.
Cookies