mdoora5.com » Privacy policy

GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council), which regulates the protection of personal data of natural persons within the European Union. GDPR will replace the EU Directive of 1995 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (95/46/EC). The regulations will apply in all EU Member States from 25.05.2018.

The aim of GDPR is to strengthen and unify the protection of personal data in the European Union. The existing legislation was created before the creation of new ways of processing personal data, including on the Internet, and GDPR aims to legally regulate these issues and set security standards adequate to the challenges of the 21st century.

This Policy aims to provide information on what personal data we collect, for what purposes, how we use it and who we are. It aims to indicate the rights you have in connection with our processing of your personal data.

Unless otherwise indicated below, the provision of your personal data is not required by law, contract or necessary to conclude a contract. You are not obliged to provide your data. Failure to provide it does not entail any consequences. This only applies if no other information is provided during subsequent processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

The operator of the website takes the protection of your data very seriously and treats your personal data confidentially and in accordance with the law. Please note that data transmission over the Internet can usually be associated with security gaps. Complete protection against access by third parties is not possible.

ADMINISTRATOR, DATA AND CONTACT

1. The administrator of your personal data is MDOORA5 with its registered office in Ozorków, address: ul. Sucharskiego 8/53, 95-035 Ozorków, MDOORA5 is not registered in the register of entrepreneurs - CEIDG, tax office and GUS, because it conducts unregistered business activity that does not require registration.

We issue invoices or bills at the request of the buyer without VAT, in accordance with current legal regulations.

You can contact us:

- by letter, to the address: Mdoora5 ul. Sucharskiego 8/53, 95-035 Ozorków;

- by e-mail, to the address: info@mdoora5.info

WHAT PERSONAL DATA DO WE PROCESS AND WHERE DO WE GET IT FROM?

2. We process your personal data that we receive from you in connection with transactions made with us or during contacts with us. This includes in particular the data you provide us with in connection with agreements concluded with us or by requesting us to take certain actions before their conclusion or by joining the MDOORA5 Customer Club or by corresponding or contacting us or by requesting an invoice or by filing a complaint or by withdrawing from the agreement or by setting up an online account.

If you pay us via, for example, a bank or payment institution, we will also come into possession of data on the account number from which the payment was made. We will also process data relating to the bank account to which we will make refunds to you.

In addition, we may collect your behavioral data relating to your behavior. This is data regarding transactions you make, complaints you submit, history of correspondence and contacts with us, your activities on our website and in the online store, our profiles on social media (e.g. Facebook), our accounts on third-party websites (e.g. Allegro), such as: viewed products, IP addresses or device identifiers, cookie data and locations, correspondence, contacts, as well as opinions about us and our products and services. We may combine this data with other data we have about you and process it primarily for the purpose of creating reports, analyses and statistics for internal needs, customer service support and marketing purposes.

In order to pursue claims, we may also collect your PESEL number or residential address from publicly available sources, including CEiDG, KRS, REGON or other registers and records kept by public administration bodies.

DO YOU HAVE TO PROVIDE US WITH YOUR PERSONAL DATA?

3. Remember that providing us with your personal data is completely VOLUNTARY. You can, but you do not have to do so.Providing data is not a statutory obligation and may only be a contractual requirement.

However, you must take into account that providing certain personal data by you may be necessary for:

- concluding or performing a contract with us, e.g. in the case of making a purchase in our online store or setting up an online account;

- issuing an invoice or bill on request and making tax settlements;

- obtaining benefits resulting from your membership in the MDOORA5 Customer Club,

- considering cases directed to the Customer Service Department or the Complaints Department;

- handling your withdrawal from the contract and fulfilling our obligations in this respect.

In the cases indicated above, failure to provide personal data by you may result in:

- you will not be able to make a purchase in our online store or set up an online account;

- we will not be able to issue you an invoice and make tax settlements;

- we will not be able to consider and respond to your complaint or withdrawal from the contract or fulfill our obligations in these respects;

- we will not be able to consider your case;

- you will not be able to become a member of the MDOORA5 Customer Club or take advantage of the benefits resulting from membership in the MDOORA5 Customer Club, e.g. discounts.

Each time, the scope of data required to conclude an agreement or perform other activities with us is included in the forms used on our website, the declaration of accession to the MDOORA5 Customer Club or our other documents or their templates, e.g. complaints, withdrawal from the agreement.

We may also ask you for optional data that is necessary so that we can, for example, call you on the number provided and agree, e.g. a specific day and time of delivery of the ordered goods.

WHY DO WE NEED YOUR DATA AND ON WHAT BASIS DO WE PROCESS IT AND FOR HOW LONG?4. Your personal data is necessary for us and processed by us for the purpose of:

- taking action at your request before concluding a contract (e.g. to price a service or inform you about the availability of a product) - art. 6 sec. 1 b) GDPR - for the time necessary to perform these actions;

- concluding and performing a contract - art. 6 sec. 1 b) GDPR - for the time necessary to perform the contract and make settlements under it;

- fulfilling our legal obligations - legal basis art. 6 sec. 1 c) GDPR, including:

a) obligations arising from liability for non-conformity of goods with the contract or warranty for defects - for the duration of the liability under this title;

b) obligations arising from withdrawal or termination of the contract - for the period until the limitation period for claims under this title;

c) obligations related to issuing and storing invoices and documents required by tax law and accounting regulations - until the invoice or other documents are issued, and then for the period of their storage specified by tax law and accounting regulations;

d) storing data in order to demonstrate compliance with the accountability obligation and other obligations imposed by the provisions on the protection of personal data - for the duration of the liability in this respect;

- realization of our so-called legitimate interests - legal basis art. 6 sec. 1 f) GDPR - occurring in the case of:

e) establishing, defending, pursuing claims - until the limitation period for claims under the contract or our actions related to the contract or requests before the conclusion of the contract;

f) creating reports, analyses and statistics for our internal needs, including in particular reporting, research and planning the development of our products, including services and improving their quality, development work in our IT systems - for the duration of the contract, and in the event of its not being concluded until the completion of actions taken on request, and then for the period until the limitation period for claims under the contract or our actions related to the contract or requests before the conclusion of the contract;

g) ensuring network and information security - for the entire period of data storage, i.e. until the limitation period for claims under the contract or our actions related to the contract or requests before the conclusion of the contract expires and our liability under the accountability obligation and other obligations imposed by the provisions on the protection of personal data ceases;

h) customer service support - for the duration of the contract or until the completion of actions on request in the event of failure to conclude the contract;i) for marketing purposes, including profiling, i.e. in order to provide information about our promotions, products, events, campaigns, including special offers - for the duration of the contract;

i) protection against fraud attempts - for the duration of proceedings in this matter;

j) ensuring the safety of persons (primarily employees and customers) and property - for the duration of proceedings in this matter.

We may also process your data on the basis of:

a) the consent granted to us for the purposes specified therein- until the consent is withdrawn, and after the consent is withdrawn - until the limitation period for claims arising from our actions taken on its basis and our liability under the obligation of accountability and other obligations imposed by the provisions on the protection of personal data ceases in order to establish, defend or pursue these claims, create reports, analyses and statistics for our internal needs, ensure the security of the network and information (i.e. for the implementation of our so-called legitimate interests - art. 6 sec. 1 f) GDPR) and demonstrate compliance with the obligation of accountability and other obligations imposed by the provisions on the protection of personal data (i.e. for the performance of legal obligations - art. 6 sec. 1 c) GDPR).

As part of the processing of your personal data, the following activities may be undertaken in particular: collecting, recording, organizing, arranging, storing, modifying, viewing, using, transmitting, distributing or otherwise making available, matching or combining, limiting, deleting, destroying. These operations can be performed in an automated manner, e.g. in IT systems, or non-automated, e.g. in files or on paper.

TO WHOM WE CAN TRANSFER YOUR DATA

5. We may transfer your data to:

- our employees and associates who must have access to the data in order to perform our obligations or actions on your behalf;

- entities processing your personal data on our behalf and participating in the performance of our activities, i.e.:

a) our subcontractors supporting us in the performance of agreements, orders and customer service, e.g. in handling correspondence or in the customer service process, or running sales stores or other entities intermediating in the sale of our products, including services or experts acting on our behalf;

b) advertising agencies or other entities organizing or conducting or cooperating or intermediating in the organization or conducting of our marketing campaigns;

c) entities operating our IT systems or providing us with IT tools, including IT platforms, or places on servers or websites;

d) entities providing us with advisory, consulting, auditing services or legal, tax, accounting assistance;

e) research agencies acting on our behalf;

f) entities providing us with services concerning the security of persons and property;

- other administrators who are:

a) advertising agencies, or entities conducting or organizing or cooperating or intermediating in conducting or organizing our marketing campaigns or cooperating with us in customer service or running OCHNIK sales stores or other entities intermediating in the sale of our goods, including services - in order to settle the remuneration due to them;

b) entities conducting postal or courier activities - in order to deliver correspondence or parcels;

c) entities conducting the transport of goods or forwarding services - in order to deliver goods;

d) entities conducting payment activities (banks, payment institutions) - in order to make refunds or to ensure the operation of the direct debit service;

e) entities conducting credit activities (banks) - in order to provide credit for the purchase of our products, including services and to make returns;

f) insurance companies - in order to insure freight shipments;

g) entities purchasing receivables - in the event of failure to pay the price for the purchased goods or remuneration for the execution of the order on time or other amounts due to us.

WHAT IS AND WHAT DOES THE SO-CALLED AUTOMATIC PROCESSING, INCLUDING PROFILING, CONSIST OF?

6. During the term of the contract with you until its execution, and after its execution or before its conclusion - based on your consent, we will be able to automatically process your personal data, including profiling them.Profiling is the automatic processing of personal data, which involves using them to assess your behavior, including the analysis and forecast of your economic situation, preferences, interests, credibility, behavior, purchasing decisions, etc. It includes, for example, determining how you use the Internet or what products you buy.We do it based on data that we collect, among others, on the basis of:

- predictive analysis, i.e. predicting your behavior, such as reactions to marketing campaigns in the media, purchasing decisions, product withdrawals and switching to competitors, and identifying potential threats and opportunities for us;

- online identifiers used by you;

- your behavioral data.

Thanks to this, we can adjust our offer to your needs or interests or provide you with benefits tailored to them. Thanks to it, we can prepare and present you with personalized offers or provide benefits, including discounts tailored to your preferences and needs.

We make decisions in this area automatically based on criteria such as your gender, the number and frequency of purchases made in the online store and the number and type of goods and services purchased.

After determining whether the criteria are met, the IT system will automatically send you information about the special offer or the benefit granted. You can use it or cancel it, as well as appeal against the decision.

WHAT RIGHTS DO YOU HAVE?

7. Remember that you have the following rights related to our processing of your data:

- the right to access your personal data, under which you can request from us:

a) insight into your data, which may concern all of your data or selected data that you indicate to us;

b) information about your personal data, including information: whether we process your personal data, what data of yours we process, for what purpose we process your data, to whom we transfer your personal data (by indicating, for example, the category of entities to which we transfer your data), for what period we will process your data, and if it is impossible to provide this period, you can request that we provide criteria for its determination, what rights you have in connection with our processing of your personal data, what rights you have under the right to: rectification, deletion, restriction of processing of personal data, filing an objection, filing a complaint with the personal data protection authority, from what source we have your data, if you did not provide it yourself, whether we make decisions regarding you in an automated manner, including using the so-called profiling, on what terms, and what significance and consequences this has for you, whether we transfer your data to a third country or international organisation, and if so, what safeguards are applied in connection with this transfer;     

c) transferring a copy of your personal data in the format you choose, and if you ask us for a copy of your data electronically and do not indicate otherwise, we will provide information in a commonly used electronic way; the preparation and delivery of the first copy of data by us is free of charge; for any subsequent copies we may charge a reasonable fee resulting from administrative costs;

- the right to rectify personal data if it is incorrect and the right to supplement incomplete data, within which you may request that we remove errors, faults, misleading information in the scope of your data, e.g. an incorrect name or new address, in the event of its change or a name changed in connection with marriage;

- the right to delete personal data (the right to be forgotten), within which you may request:

a) that we delete your personal data;

b) we inform other administrators to whom we have made your data public, which we are obliged to delete, about the need to delete links to this data, copies or replications thereof;

- if any of the following situations occur:

a) your data is no longer necessary for us for the purposes for which we obtained it from you;

b) you withdraw your consent to the processing of your personal data by us and at the same time we cannot process it on another legal basis;

c) you object for reasons related to your specific situation to the processing of your personal data in the so-called legitimate interests pursued by us and there are no overriding legitimate grounds for processing;

d) you object to the processing of your personal data in advertising campaigns or other marketing activities;

e) it turns out that we are processing your data unlawfully, e.g. without your consent when it is necessary;

f) deletion of the data is necessary to comply with a legal obligation under European Union law or the law of the Republic of Poland;

g) we have collected data from a child in connection with the offering of information society services;

- the right to limit the processing of personal data, which you can apply to us with in one of the following cases:

a) if you question the accuracy of your personal data at our disposal - then you can request the restriction of processing, e.g. by ceasing processing, for a period allowing us to check the accuracy of your data;

b) if the processing of your data is unlawful, e.g. we have not obtained your consent, and you object to our deletion of your data, requesting instead the restriction of their use;

c) if we no longer need your data for the purposes of processing, and you need them to establish, pursue or defend claims;

d) if you have filed an objection for reasons related to your specific situation to the processing of data for purposes resulting from the so-called legitimate interests pursued by us - then you can request that we limit the processing until it is determined whether our legitimate grounds override the grounds for your objection;

- the right to transfer personal data processed by us in an automated manner based on consent or an agreement, within which you can request from us;

HOW YOU CAN EXERCISE YOUR RIGHTS

8. You can exercise your rights at any time by submitting an appropriate request to us by submitting a statement:

- to the administrator of the MDOORA5 online store,

- by e-mail, to the address: info@mdoora5.info

- by correspondence, to the address: MDOORA5, ul. Sucharskiego 8/53, 95-035 Ozorków.

9. We are obliged to provide you with information about the actions taken in connection with your requests, without undue delay, and in any case within one month of receiving the request. If necessary, we may extend this period by another two months due to the complex nature of the request or the number of requests.However, within one month of receiving your request, we must inform you of such extension of the period, stating the reasons for it.

10. If we do not take action in connection with your requests, we will immediately - no later than one month from receiving the request - inform you of the reasons for not taking action and the possibility of you filing a complaint with the President of the Personal Data Protection Office and using legal remedies before the Court.

11. If we have reasonable doubts regarding your identity in connection with the submission of the request, we may ask you to provide additional information necessary to confirm it.

12. We will provide you with the information referred to in points 10-12 above in writing, at our discretion

- by registered mail to the address you provided or

- electronically to the e-mail address you provided, except in cases where:

a) you submit your request to us electronically and do not request the information in another form - then we will provide you with the information to the e-mail address you provided;

b) you request the information verbally and your identity is confirmed by us in other ways - then we will provide you with the information verbally.

13. All communications and actions taken by us in connection with your requests are free of charge. However, if your requests are clearly unjustified or excessive, e.g. due to their ongoing nature, we may:

- charge a reasonable fee, taking into account the administrative costs of providing information, communication or taking the requested actions or,

- refuse to take action in connection with the request.

14. We will inform each recipient to whom we have disclosed your personal data about the correction or supplementation or deletion or restriction of the processing of your personal data, which we have made in response to your request. We will not have to provide such information only if it proves impossible (e.g. the business has been liquidated) or it will require a disproportionately large effort (the data was disclosed many years ago and it was not possible to contact the recipient despite the attempts made).

15. At your request, we will inform you about the recipients to whom we have provided information about the rectification or deletion or restriction of the processing of your personal data, as well as about the recipients we were unable to notify.

WHAT ARE COOKIES

16. We may use cookies when you use the services available through our website www.mdoora5.com and our other websites.

Cookies that can be used on these websites are associated only with your computer's browser - you are therefore anonymous (without providing your name or surname).

Cookies are small text information in the form of text files, sent by the server and saved on your side as a person visiting our website (e.g. on the hard drive of your computer, laptop or on the memory card of your phone or other device that you use). This is information that can be read by our system each time your computer or other device that you use connects. They provide statistical data about your movements and your use of individual pages of our website.

Information collected using cookies is used to increase your convenience and improve the overall quality of the services we offer. We may process your data contained in cookies for the following purposes:

- identifying you as a person logged in to our online store and showing that you are logged in,

- remembering products added to the basket in order to place an order by you,

- remembering data from completed order forms, surveys or login data to our online store,

- managing your account in the online store,

- adapting the content of our pages to your individual preferences and optimizing the use of the online store,

- keeping anonymous statistics showing how our online store is used.

By default, most web browsers available on the market accept the storage of cookies by default. Everyone has the possibility to specify the terms of use of these files using their own web browser.

You can choose the method of handling cookies in the Internet zone at any time by replacing automatic cookie handling with individual handling (user settings). In this way, you can, for example, partially limit or completely disable the possibility of saving cookies.

Detailed information in this regard is provided by the providers of programs for handling the Internet zone (browsers), usually in the "Internet options" or similar tab.

If you disable the option to accept cookies in your browser - blocking, prompting - it may cause difficulties or even prevent you from using our online store and some of our services. We are not responsible for the use or handling of "cookies" on other websites, the links to which may be placed on our pages.

OTHER ISSUES

17. We also process anonymized operational data related to the use of our online store (IP address, domain) to generate statistics helpful in administering the store. This data is aggregated and anonymous.

HOW CAN YOU OBTAIN ADDITIONAL INFORMATION?

18. In order to obtain additional information regarding this Privacy Policy and matters concerning the principles of processing and protection of your personal data by us, you can contact us:

- by letter, to the address: MDOORA5, ul. Sucharskiego 8/53, 95-035 Ozorków;

- by e-mail, to the address: info@mdoora5.info;

19. At the same time, detailed issues related to the processing of personal data:

- customers of the online store and services provided electronically;

- members of the MDOORA5 Customer Club;

can be found in the following Data Protection Policies regarding individual groups of entities.

Privacy policy

Folow us

Contact us

INFORMATION

Menu