I. ADMINISTRATOR
Administrator of your personal data is KONKRET STORE Sp. z o.o. with its registered office in Świętno at ul. Dworcowa 4,
REGON: 524681773, NIP: 9231742025
email address: hello@konkret.store
II. DEFINITIONS
Personal data – all information about an identified or identifiable natural person through one or more specific factors determining physical, physiological, genetic, mental, economic, cultural, or social identity, including device IP, location data, internet identifier, and information collected through cookies and similar technologies.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
Privacy and Cookies Policy – this document hereafter referred to as the “Policy”;
Website – the website operated by the Administrator at www.konkret.store
User – any natural person visiting the Website or using at least one service provided by the Administrator or Website function.
III. COLLECTION OF PERSONAL DATA
The Administrator collects data from Users using the website located at www.konkret.store in accordance with the principles set out in the GDPR, solely to the extent necessary to provide services related to the use of the Website.
IV. TYPES OF PERSONAL DATA COLLECTED
The scope of personal data collected by the Administrator through the Website depends on the function used by the User, e.g., newsletter, contact form.
The Administrator also collects information about Users in an automated manner through cookies.
V. PURPOSE, LEGAL BASIS, AND DURATION OF PERSONAL DATA PROCESSING
User personal data is processed by the Administrator in accordance with the GDPR and Polish national legislation.
The types of User Personal Data collected via the Website, as well as the purpose and legal bases for their processing, depend on how the User uses the Website.
Personal data is used solely in connection with the User’s use of electronic services provided by the Administrator, particularly handling inquiries or requests and contacting the User.
USE OF THE WEBSITE
During the use of the Website, information about the User is collected in an automated manner through cookies. More information on how cookies operate, their purposes, and how to disable them can be found in Chapter XI of this Policy.
CONTACT FORMS
Users wishing to submit inquiries or requests are asked to provide the necessary data in the respective form for contacting the User and responding to the inquiry within the scope of the form fields (e.g., phone number or email address depending on the preferred contact method).
Users may also – to facilitate handling the inquiry – provide additional data, thereby consenting to their processing. Such data can be deleted at any time. Providing data marked as mandatory is voluntary but necessary to handle the submitted inquiry. Providing other data is voluntary.
Personal data provided in the Contact Form is processed for contact purposes and to respond to the question based on the consent given (Art. 6 (1) (a) GDPR), as well as to establish, assert, or defend against claims based on the legitimate interest of the Administrator in establishing, asserting, or defending against claims (Art. 6 (1) (f) GDPR).
Your data provided to the Administrator in connection with a request for a response to a question or handling a request will be processed until you withdraw your consent or the question is answered or the request is handled, whichever occurs first. After this period, the processing period may be extended for the time necessary to establish, assert, or handle claims.
NEWSLETTER / MARKETING INFORMATION
A User who is 16 years of age or older and provides their email address to receive a Newsletter containing commercial information about products and services, promotions, and offers may use this functionality provided by the Administrator. Providing data indicated when signing up for the newsletter is voluntary but necessary to send a newsletter containing commercial information about products and services, promotions, and offers.
A User who is 16 years of age or older and provides their phone number for direct marketing purposes, conducted using telecommunications end devices and automatic calling systems, may use this functionality provided by the Administrator. Providing the indicated data is voluntary but necessary to send marketing information.
Personal data is processed:
to receive electronic information on commercial information about products and services, promotions, and offers to the email address provided by the User of the Service, or for direct marketing purposes, conducted using telecommunications end devices and automatic calling systems – based on voluntary consent (Art. 6 (1) (a) GDPR)
to potentially establish, assert, or defend against claims – the legal basis for processing is the legitimate interest of the Administrator (Art. 6 (1) (f) GDPR) consisting of establishing, asserting, or defending against claims.
Personal data will be processed until you withdraw your consent to processing, and then for the time necessary to establish, assert, or defend against claims. After this period, personal data will be anonymized or deleted.
VI. USER RIGHTS
We inform you that you have:
the right to access your data and receive a copy of it
the right to rectify (correct) your data
the right to delete data
data processing restrictions You may request that we limit the processing of your personal data only to storage or actions agreed with you if you believe we have incorrect data about you or are processing it unlawfully; or you do not want us to delete it because you need it to establish, assert, or defend claims; or for the duration of your objection to data processing.
the right to object to data processing: Marketing objection. You have the right to object to the processing of your data for direct marketing purposes. If you exercise this right, we will stop processing data for this purpose. Objection due to a particular situation. You have the right to object to the processing of your data based on the legitimate interest for purposes other than direct marketing. You should then indicate to us your specific situation, which you believe justifies us stopping the processing covered by the objection. We will stop processing your data for these purposes, unless we demonstrate that the grounds for processing your data are superior to your rights or that your data is necessary for establishing, asserting, or defending claims.
the right to data portability. You have the right to receive from us in a structured, commonly used, machine-readable format (e.g., .csv format) personal data concerning you that you provided to us based on a contract or your consent. You can also instruct us to send this data directly to another entity.
the right to lodge a complaint with the supervisory authority. If you believe that we are processing your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office.
the right to withdraw consent to the processing of personal data
At any time, you have the right to withdraw consent for the processing of data that we process based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.
If you wish to exercise the above rights, please contact us in person, by traditional mail, or by email using the following contact information:
KONKRET STORE Sp. z o.o. with its registered office in Świętno at ul. Dworcowa 4,
REGON: 524681773, NIP: 9231742025
email address: hello@konkret.store
In the application regarding the desire to exercise rights by the User, as far as possible, there should be elements such as:
specifying which right the person whose data it concerns wants to exercise
the purpose of the processing for which the request applies
expected method of handling the application.
VII. RECIPIENTS OF DATA
The Administrator will transfer personal data to entities with whom it cooperates in their processing to the extent necessary to perform a specific service or provide functionality, including IT system service providers, IT companies, hosting companies, Google LLC.
Data may also be transferred to other entities when we have a legal obligation to do so.
VIII. PROCESSING OF CHILDREN’S DATA
Services offered by the Administrator through the Service are intended for individuals who are 16 years of age or older. Therefore, the Administrator does not knowingly process children’s personal data.
If the Website collects content unsuitable for minors, their legal representative may contact the Administrator to correct, modify, or delete this information.
IX. TRANSFER OF DATA OUTSIDE THE EEA
Our partners are mainly located in countries within the European Economic Area (EEA) or in Switzerland, recognized as countries providing an adequate level of personal data protection.
Some partners, such as Google LLC, Instagram, have their headquarters in various countries outside the EEA. Therefore, when your data is transferred outside the EEA, your data will be transferred to these entities based on appropriate legal safeguards, such as standard contractual clauses on the protection of personal data approved by the European Commission.
Such transfer will take place provided that an adequate level of protection for your data is ensured, which will be determined, in particular, through:
cooperation with entities processing personal data in countries for which an appropriate decision of the European Commission has been issued;
application of standard contractual clauses issued by the European Commission;
application of binding corporate rules approved by the competent supervisory authority;
in the case of transferring data to the USA – cooperation with entities participating in the Privacy Shield program approved by the European Commission.
Upon your request, we will provide you with a copy of your data transferred outside the EEA.
X. AUTOMATED DECISION MAKING
In connection with the Administrator’s use of cookies, the Administrator collects information about how the User of the System uses websites.
However, the Administrator does not make automated decisions regarding the User.