Out of concern for your privacy, we want you to be able to use our services safely. In accordance with personal data protection law, below we present the most important information about how we process your personal data and about cookies used by our website (the “Store”). This information has been prepared with regard to the GDPR, the General Data Protection Regulation.

I. Personal data controller

The controller of your personal data is Agnieszka Daniel with its registered address at ul. Mogilska 42/92, 31-546 Krakow, registered under NIP 6751443528 and REGON 385442998 in the Central Register and Information on Business Activity. Contact details: info@onshop.pl

II. Personal data and privacy

We will process the following personal data that you provide when completing a form on our store website, if you consent to the processing of personal data for receiving marketing and commercial information:

• identification data, such as e-mail address,
• contact data, such as first and last name, e-mail address, postal code, company name or tax identification number,
• telephone number,
• address,
• products in the cart that have not yet been purchased,
• user activity.

If you make a purchase, we will process personal data from the following categories:

• identification data, such as e-mail address,
• contact data, such as first and last name, e-mail address, postal code, company name or tax identification number,
• telephone number,
• address,
• purchase history,
• delivery method,
• payment method,
• payment history,
• transaction amounts,
• transaction dates.

We will also process the following personal data obtained through cookies:

• identification data, such as e-mail address and password,
• contact data, such as first and last name, e-mail address, postal code, company name or tax identification number,
• telephone number,
• address,
• purchase history,
• delivery method,
• payment method,
• payment history,
• click history,
• navigation and browsing history,
• IP address.

For what purpose do we store and process your personal data?

Agnieszka Daniel processes users’ data only for the purposes described in this Privacy Policy and for the purposes indicated when the data are submitted. These purposes primarily include completing purchases and providing, personalizing, developing and securing our services. In addition, we use user data under Polish and European data protection law for other purposes, such as product development and market research, optimization of business processes, tailoring our services to needs and personalized advertising.

Where do we store your data?

The personal data collected are stored within the European Economic Area (“EEA”), but they may also be transferred to and processed in a country outside that area. Any transfer of personal data, if it takes place, is carried out in accordance with applicable European Union law.

Who has access to your data?

Your data are stored and processed by Agnieszka Daniel. We never transfer, sell or exchange your data for marketing purposes with external entities. Data provided to external entities are used only to provide our services, sell our products and personalize services and advertisements. Data of users and customers may be used by our business partners with whom we cooperate closely, for example courier companies, Poczta Polska, internet agencies, online payment providers and technology companies that help us operate the online store and optimize our services for users.

What are the legal bases for data processing?

Your personal data are processed on the basis of the Store Terms and Conditions and your consent to receive the Newsletter. Based on the consent you give, we may use your personal data to send you offers, information about new trends, discount benefits, special offers and invitations to sales and events by e-mail. If you do not provide your personal data, we will not be able to provide you with marketing and commercial information.

What rights do you have?

Right of access to data:

You have the right at any time to request information about which of your personal data we store. To do this, contact our Store and you will receive the information by e-mail.

info@onshop.pl

Right to data portability:

When Agnieszka Daniel processes your personal data automatically on the basis of your consent, you have the right to receive a copy of your data in a structured, commonly used and machine-readable format. This copy may be sent to you or to another entity. This applies only to personal data that were provided to us.

Right to rectification:

You have the right to request correction of your personal data if they are incorrect and to request completion of incomplete data.

Right to erasure:

You have the right to request deletion of any data processed by the Onshop Store at any time, except in the following situations:

• you have an open order that has not yet been shipped or has been shipped only partially,
• you have an outstanding debt towards the Store regardless of the payment method,
• if you have made any purchases, we will retain your personal data concerning the transaction for accounting purposes.

Right to object to direct marketing:

You have the right to object to receiving direct marketing materials, including profiling performed to prepare such materials. You may opt out of direct marketing by sending information about your objection to the e-mail address: info@onshop.pl.

Right to restriction of processing:

You have the right to request that Agnieszka Daniel restrict the processing of your personal data under the following conditions:

• if you object to processing based on the legitimate interest of Agnieszka Daniel, Agnieszka Daniel will restrict any processing of such data after verifying whether such legitimate interest exists,
• if you report that your personal data are incorrect, the Onshop Store must restrict any processing of data until their correctness has been verified,
• if the processing of data is unlawful, you may object to the deletion of personal data and instead request restriction of their use,
• if Agnieszka Daniel no longer needs your personal data, but they are required to establish, pursue or defend claims.

How can you exercise your rights?

If you have any questions for us about your personal data, contact us at: info@onshop.pl

Right to lodge a complaint with a supervisory authority:

If you believe that the Onshop Store processes your personal data improperly, you may contact us. You also have the right to lodge a complaint with a supervisory authority.

Updates to our Privacy Policy:

It may be necessary to update this Privacy Policy in the future. The latest version will always be available on our website. We will inform you about any changes to the content of the Privacy Policy, for example changes concerning the purpose for which we use your personal data.

III. Cookies Policy

A cookie is a small text file that is saved on your computer or mobile device and then retrieved during subsequent visits. If you use our website and online store (www.onshop.pl), we assume that you consent to the use of cookies.

Our Store, like most websites, uses cookies. They have the following characteristics:

• they are saved in the memory of your device, such as a computer or telephone,
• they allow you, among other things, to use all functions of the Store,
• they do not change the settings of your device.

Using the appropriate options in your browser, you may at any time:

• delete cookies saved on your device,
• block the use of cookies in the future.

In the Store, we use cookies for the following purposes:

• remembering information about your session,
• statistical purposes,
• marketing purposes,
• providing Store functions.

To learn how to manage cookies, including how to disable them in your browser, you can use your browser’s help file or contact the browser manufacturer.

We use, among others, the following technical measures to prevent unauthorized persons from obtaining and modifying personal data sent electronically:

• we protect data sets against unauthorized access using passwords and other safeguards,
• anti-virus protection is installed on every device storing data and is kept up to date,
• access to the Account is possible only after entering an individual login and password,
• an SSL certificate encrypts data sent between the user and our Store.