According to Art. 13 para. 1 and para. 2 of Regulation (Eu) 2016/679 Of The European Parliament And Of The Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”), I hereby inform you that we process your personal data. Details on this can be found below.
The purposes, legal basis and period of personal data processing are indicated separately for each data processing purpose.
The Administrator of personal data
The administrator of your personal data within the meaning of the provisions on the protection of personal data is Paulina Michalska, the entrepreneur operating a sole proprietorship under the name “A&E Baltic” with its registered office at ul. Meness street 22-26, Riga, Latvia, Tax Identification Number LV40203305306, National Business Registry Number Reg. Nr. 40203305306.
If you want to exercise your rights or simply contact us for more information about the processing of your personal data, write to the following e-mail email@example.com or call us at +371 23208890.
In connection with the processing of your personal data, you have the following rights:
- the right to request access to your personal data, rectification, deletion or limitation of processing,
- the right to object to the processing,
- the right to transfer data,
- the right to withdraw consent to the processing of personal data for a specific purpose, if you have previously given such consent,
- the right to lodge a complaint with the supervisory authority in relation to the processing of personal data.
You can exercise the above rights in accordance with the principles described in art. 16 – 21 GDPR by contacting us at firstname.lastname@example.org
Providing your personal data is voluntary, but necessary to place an order, subscribe to the newsletter or simply contact us.
Recipients of personal data
We use services of external entities to which your data may be transferred. Below is a list of these entities:
- an entity that stores data on the server,
- an entity delivering goods,
- payment provider,
- hosting service provider,
- an entity facilitating the optimization of the Shop,
- an entity cooperating as part of marketing campaigns,
- entities providing consulting services,
- entities providing the mailing system
- software provider needed to run the Online Shop,
- social media,
- accounting office,
- an entity offering an invoicing system.
Transferring your data to countries outside the European Economic Area
In the case of transfer of data to a third country in relation to which no decision of the European Commission has been issued stating an adequate level of protection, the Shop applies appropriate protection measures through standard data protection clauses adopted by the European Commission or the supervisory authority (in accordance with Article 46 (2) (c)) d) GDPR).
As the Shop, we can automatically adjust certain content to your needs, i.e. profiling, using the personal data provided by you, however, it will not cause any legal effects to you or similarly significantly affect your situation.
Profiling personal data by the Shop involves the processing of your data (also in an automated manner), by using them to evaluate certain information about you, in particular to analyze or forecast personal preferences and interests.
Newsletter (legal basis: Article 6 para.1 point a of the [Polish] GDPR)
Through the website, you can subscribe to a newsletter containing information about new products, promotions and products related to my activity on the Internet. In order to send the newsletter, your personal data in the field of name and e-mail address are processed.
The legal basis for the processing of your personal data in the case of the newsletter is your consent expressed by selecting the appropriate content of the checkbox when subscribing to the newsletter. You can withdraw your consent at any time by resigning from receiving the newsletter.
The data is processed for the duration of the newsletter operation, unless you unsubscribe from the newsletter, which will delete the data from the database.
Orders (legal basis: Article 6 para. 1 point b of the [Polish] GDPR)
When placing an order, you must provide your personal data necessary to process the order, i.e. name and surname, e-mail address, telephone number and delivery address. You can also provide additional data, such as information about your business. If you have previously provided such data in your user account, this data will be automatically entered into the order form, and you can always modify them.
The legal basis for the processing of your personal data contained in the order is the performance of the contract.
The data provided in the order form will be saved in the database and will be stored there until the claims for the concluded contract are time-barred.
Invoices (legal basis: Article 6 para. 1 point c of the GDPR)
If I issue you an invoice, I process your personal data to the extent necessary to issue an invoice. The legal basis for the processing of your data in this case is the fulfillment of the legal obligation to issue an invoice. In addition, all issued invoices are included in the accounting documentation, therefore your data will be processed as part of this documentation for the period of time required by law.
E-mail contact (legal basis: Article 6 para. 1 point a and f of the GDPR)
Contacting me via e-mail, you provide us with your e-mail address as the sender’s address. In addition, you can also include other personal data in the message.
The legal basis for the processing of personal data in this case is your consent resulting from initiating contact with me.
Your personal data provided to me as part of an e-mail contact is processed solely for the purpose of handling your inquiry. The content of the correspondence may be archived.
The effect of not providing data:
Depending on the purpose for which the data is provided:
- no possibility to register in the Shop,
- no possibility to use the Shop’s services,
- no possibility to make purchases in the Shop,
- no possibility to receive information about promotions or special offers available in the Shop.
Possibility to withdraw consent:
You can withdraw your consent at any time. The processing of data until you withdraw your consent remains lawful.
COOKIES AND OTHER TRACKING TECHNOLOGIES
Cookies are small text information stored on your device (e.g. computer, tablet, smartphone) that can be read by our ICT system.
By using the appropriate options of your browser, you can at any time:
- delete cookies,
Cookies allow us to:
- ensure the proper functioning of the website that you expect,
- improve the speed and security of using the website,
- improve the functions available to you on the website,
- use analytical tools,
- use marketing tools,
- provide social features.
Cookies can be divided into own and third party cookies. As for my own cookies, I use them for the proper functioning of the website.
Third party cookies
Analysis and statistics
The use of Google Analytics and Google Adwords services involves the implementation of the tracking code provided by Google in the code of our website (the so-called tracking code). This code is based on cookies, but may also use other tracking technologies.
We use Facebook marketing tools to target ads on this website. For this purpose, we have implemented Facebook’s Pixel platform code that remembers your visit. For this purpose, Facebook cookies are used.
Using the website involves sending queries to the server on which the website is stored. Each query directed to the server is saved in the server logs.
Logs include Your IP address, server date and time, information about the web browser and operating system you use. Logs are saved and stored on the server.
The data stored in the server logs are not associated with specific people using the website and are not used by me to identify you.
The server logs are only auxiliary material used to administer the website and their content is not disclosed to anyone except those authorized to administer the server.