Privacy Policy
Website Administrator
The administrator of the website www.japodologia.pl is Viktoryia Yakubchyk, Aleje Jerozolimskie 101/1, Warsaw 02-011. You can contact us by email at kartpedicurepolska@gmail.com or by phone at +48 538 368 994.
The purposes for which we collect your data and how we process it.
1. Contact Form
You can contact us by submitting a query through the contact form on our website. In this case, you provide us with your name, email address, and other information in the message body, which may contain personal data. Providing this data is voluntary but necessary to contact us via the form. We process the data you provide for the purposes of:
- responding to your question, i.e., taking action at the request of the data subject (Art. 6(1)(b) GDPR).
- archiving, which is our legitimate interest as the Controller (Art. 6(1)(f) GDPR).
- potential pursuit or defense of claims, which is our legitimate interest as the Controller (Art. 6(1)(f) GDPR), consisting in the protection of our rights.
You have the right to access the correspondence history (if it was archived) and the right to request deletion of the correspondence, unless its archiving is justified due to the overriding interests of the Controller, e.g., defense against potential claims from your side.
2. Account Registration
If you decide to register in our service by creating a user account, you will be asked to provide the data necessary for its creation and management. Providing mandatory data such as name and surname, address, email, and phone number is required to create and manage the account. If you do not provide them, we will not be able to create a user account for you. We process the data you provide for the purposes of:
- managing and operating the user account in the service, which is necessary for the performance of the contract (Art. 6(1)(b) GDPR);
- statistical and analytical purposes, which is our legitimate interest as the Controller (Art. 6(1)(f) GDPR), consisting in analyzing the behavior and activity of Users as well as their preferences in order to improve the quality and adequacy of the functionalities used and services provided;
- potential pursuit or defense of claims, which is our legitimate interest as the Controller (Art. 6(1)(f) GDPR), consisting in the protection of our rights;
- marketing of products and services, which is our legitimate interest (Art. 6(1)(f) GDPR), consisting in presenting our offer to customers.
Personal data will be processed until the purpose for which they were collected ceases to exist, or in the case of data whose processing requires your consent, until such consent is withdrawn.
3. Order Form
When purchasing a product or service in our service, you are required to fill in the order form and provide the data necessary to complete the sales process. You will be asked to provide: name and surname, delivery address, email address, and phone number. If you additionally request an invoice, you will be required to provide data enabling its issuance. Data that are mandatory to place an order in our service are marked with an asterisk. Providing this data is voluntary but necessary to place an order. We process the data you provide for the purposes of:
- fulfilling the order, which is necessary for the performance of the contract (Art. 6(1)(b) GDPR);
- statistical and analytical purposes, which is our legitimate interest as the Controller (Art. 6(1)(f) GDPR), consisting in analyzing the behavior and activity of Users as well as their preferences in order to improve the quality and adequacy of the functionalities used and services provided;
- potential pursuit or defense of claims, which is our legitimate interest as the Controller (Art. 6(1)(f) GDPR), consisting in the protection of our rights;
- the Controller's marketing purposes, which is our legitimate interest (Art. 6(1)(f) GDPR), consisting in presenting our offer to customers.
Personal data will be processed until the purpose for which they were collected ceases to exist, or in the case of data whose processing requires your consent, until such consent is withdrawn.
4. Withdrawal Form
We have made a withdrawal form available on our website to facilitate the process of returning a product or service purchased in our service in connection with withdrawal from the sales contract. When withdrawing from the contract, you are required to fill in the form and provide the data necessary to process the return and finalize it. You will be asked to provide: name and surname, company details (if applicable), residential address, email address and phone number, account number. Providing the data is voluntary but necessary to withdraw from the sales contract and make a return. We process the data you provide for the purposes of:
- exercising the right of withdrawal, which is necessary for the performance of the contract (Art. 6(1)(b) GDPR);
- statistical and analytical purposes, which is our legitimate interest as the Controller (Art. 6(1)(f) GDPR), consisting in analyzing the behavior and activity of Users as well as their preferences in order to improve the quality and adequacy of the functionalities used and services provided;
- potential pursuit or defense of claims, which is our legitimate interest as the Controller (Art. 6(1)(f) GDPR), consisting in the protection of our rights.
Personal data will be processed until the purpose for which they were collected ceases to exist, or in the case of data whose processing requires your consent, until such consent is withdrawn.
5. Complaint Form
We have made a complaint form available on our website to facilitate the process of reporting defects in products or services purchased in our service. When filing a complaint, you are required to fill in the form and provide the data necessary to process the complaint. You will be asked to provide: name and surname, company details (if applicable), residential address, email address and phone number, account number. Providing the data is voluntary but necessary to file a complaint. We process the data you provide for the purposes of:
- processing the complaint, which is necessary for the performance of the contract (Art. 6(1)(b) GDPR);
- statistical and analytical purposes, which is our legitimate interest as the Controller (Art. 6(1)(f) GDPR), consisting in analyzing the behavior and activity of Users as well as their preferences in order to improve the quality and adequacy of the functionalities used and services provided;
- potential pursuit or defense of claims, which is our legitimate interest as the Controller (Art. 6(1)(f) GDPR), consisting in the protection of our rights.
Personal data will be processed until the purpose for which they were collected ceases to exist, or in the case of data whose processing requires your consent, until such consent is withdrawn.
6. Communication via Chat Functions (Telegram, WhatsApp, Instagram, Facebook)
When you use the chat function to communicate with us, we collect message contents and information you provide through this functionality, as well as your name and surname, email address, and phone number. We process the data you provide for the purposes of:
- responding to your question. The legal basis for processing this data is taking action at the request of the data subject (Art. 6(1)(b) GDPR).
- potential pursuit or defense of claims, which is our legitimate interest as the Controller (Art. 6(1)(f) GDPR), consisting in the protection of our rights;
- archiving correspondence for internal purposes after the end of contact, which is based on the legitimate interest of the controller (Art. 6(1)(f) GDPR).
Personal data is processed for the purpose of contacting you and will be stored for the duration of correspondence archiving. You have the right to access the correspondence history (if it was archived) and the right to request deletion of the correspondence, unless its archiving is justified due to the overriding interests of the Controller, e.g., defense against potential claims from your side.
7. Push Notifications
If you wish to receive short information and notifications from us and want them to be displayed directly on your device, you can select the appropriate settings that will allow us to display them. As a rule, push notifications contain short messages focused on essential information. The legal basis for processing this data is the performance of a contract or taking action at the request of the data subject (Art. 6(1)(a) GDPR).
These messages are not stored.
8. Payment Gateway
When purchasing a product or service, you make payments through an online payment system provider in a payment gateway. This is a functioning application connected to authorization centers, banks, and other financial institutions that allows data to be transmitted to the IT systems of these institutions for the purpose of completing online payment transactions. When making a payment, you will be asked to provide the data necessary to initiate the payment process. Providing this data is voluntary but necessary to make payment for a product or service. The legal basis for processing this data is the performance of a contract or taking action at the request of the data subject (Art. 6(1)(b) GDPR). Your data is stored on the service provider's server until it is no longer needed to achieve the purpose for which it was collected. The Controller has concluded a data processing agreement with the service provider.
9. Cookie Policy
Our website uses cookies to provide you with the best experience when using it. Cookies are small text files stored on your end device (e.g., computer, tablet, smartphone) that can be read by our IT system. Cookies allow us to:
- ensure the proper functioning of the website as you expect,
- improve the speed and security of using the website,
- improve the features available to you on the website,
- use analytical tools,
- use marketing tools,
- provide social media features.
When you first visit our website, you are shown information about the use of cookies. Accepting and closing this information means that you consent to the use of cookies in accordance with the provisions of this privacy policy. You can always withdraw your consent by deleting cookies or changing cookie settings in your browser. However, please note that disabling cookies may cause difficulties in using the website, as well as many other websites that use cookies.
Types of cookies and tracking technologies on our website
Log Files
Every time you visit our website, the system automatically collects information and data from your computer. Your data in log files is stored to ensure the functionality of services, optimize the website, and ensure the security of IT systems. The following data is collected: internet protocol; IP address; URL of the service from which the redirect occurred and from which the file was requested; date and time of access; browser type and operating system; page visited by the user; amount of data transferred; access status (file transmitted, file not found, etc.), duration and frequency of use.
The legal basis for processing this data is the legitimate interest of the controller (Art. 6(1)(f) GDPR). Your data is stored on the server until it is no longer needed to achieve the purpose for which it was collected. Data collected in logs is necessary for the functioning of the service, therefore the user cannot object to their processing.
Google Analytics
To analyze the use of our website by users, we have installed a tool that allows us to create activity reports on the website, measure the effectiveness of content, and provide other services related to the use of the website and the internet. Our website uses the Google Analytics service provided by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). The service uses cookies: text files stored on the user's device. Information collected by cookies is usually sent to a Google server and stored there. We apply anonymization by shortening IP addresses, which makes it impossible to associate an IP address with a user.
The legal basis for processing this data is the legitimate interest of the controller (Art. 6(1)(f) GDPR).
This data will be retained by Google for a period of 26 months; due to the shortening of the IP address, no personal data will be stored. You can block the storage of cookies on your device by configuring your browser appropriately. You can also use a browser plugin to block the transmission of information to Google.
Facebook Pixel
To analyze, optimize, and improve the performance of our services, we use a tracking option called Facebook Pixel, provided by the social networking site Facebook operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook Pixel is a piece of code placed in our service. This functionality allows us to understand the effectiveness of advertising on Facebook through information about users who were redirected to our services after clicking on an advertisement on the Facebook portal.
The legal basis for processing this data is the legitimate interest of the controller (Art. 6(1)(f) GDPR).
Inspectlet
To analyze, optimize, and improve the performance of our services, we use a tracking option called Inspectlet, provided by a tool operated by www.inspectlet.com. Inspectlet is a piece of code placed in our service. This functionality allows us to understand the effectiveness of our website design through the analysis of user behavior. Inspectlet uses cookies to track session information.
The legal basis for processing this data is the legitimate interest of the controller (Art. 6(1)(f) GDPR).
Google DoubleClick
To display relevant and important advertisements to you, we have installed the DoubleClick service using cookies on our website, provided by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). Data is collected based on an identification number (ID) assigned to your browser, which allows checking which advertisements have been displayed in your browser and which advertisements you have interacted with.
The legal basis for processing this data is the legitimate interest of the controller (Art. 6(1)(f) GDPR).
Google Maps
Our website uses maps provided by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). When you visit our website where a map is located while being logged in to your Google account, Google may associate your browsing behavior on our website with other information.
The legal basis for processing this data is the legitimate interest of the controller (Art. 6(1)(f) GDPR).
Facebook Button
Our website uses a button provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Content from Facebook servers is retrieved when you access our profile using the appropriate button. When you visit our website while being logged in to your Facebook account, Facebook may associate your browsing behavior on our website with other information.
The legal basis for processing this data is the legitimate interest of the controller (Art. 6(1)(f) GDPR).
Instagram Button
Our website uses a button provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Content from Facebook servers is retrieved when you access our Instagram profile using the appropriate button. When you visit our website while being logged in to your Instagram account, Facebook may associate your browsing behavior on our website with other information.
The legal basis for processing this data is the legitimate interest of the controller (Art. 6(1)(f) GDPR).
Your Rights as a Data Subject
In connection with our processing of your personal data, you have the following rights:
- The right to request access to your personal data, rectification, erasure, or restriction of processing,
- The right to object to processing,
- The right to data portability,
- The right to withdraw consent to the processing of personal data for a specific purpose, if you have previously given such consent,
- The right to lodge a complaint with a supervisory authority in connection with our processing of your personal data.
Recipients of Your Personal Data
In special situations where applicable law requires us to share the collected data with state authorities, we will be obliged to provide such data. In addition, the Controller will transfer your personal data to providers of accounting services, postal services, courier services, legal services, IT services and software supporting website management, email and website hosting services, banks and other financial institutions for payment processing, and owners of social networking sites (e.g., Facebook). If you want to know the list of entities to which we disclose or entrust your personal data, please contact us.
Do We Transfer Your Data to Countries Outside the European Economic Area?
Due to the Controller's use of tools such as Google Analytics and Facebook Pixel, your personal data may be transferred to the following third countries: the USA, Chile, Singapore, and Taiwan (Republic of China). The basis for the transfer of data to the aforementioned third countries are contractual clauses ensuring an adequate level of protection, consistent with the standard contractual clauses set out in Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council.
10. Final Provisions
The Controller reserves the right to change the privacy policy if required by applicable law, if the technological conditions of operation of the service change, or if the change introduces a standard higher than the minimum required by law.