Privacy Policy - Idea For Design

1. General Provisions

Using the ideafordesign.pl website implies acceptance of the rules of the Privacy Policy and Cookies Policy described below.

This document specifies the rules for processing and protecting personal data provided by Users, as well as cookies and other technologies used on the ideafordesign.pl website.

In case of any doubts regarding the following provisions, please contact the Administrator of this website via email at kontakt@ideafordesign.pl.

Any personal data provided on the ideafordesign.pl website will not be shared with third parties in any way.

The Administrator reserves the right to make changes to the privacy policy, and every Website User is obliged to know the current privacy policy. Changes may be caused by the development of internet technology, changes in generally applicable law, or the development of the Website.

The website uses the Google Analytics traffic analysis tool.

2. Definitions

"Administrator" - The Administrator of the www.ideafordesign.pl website, as well as all data on the website, is Kamil Kuchnio, running a business activity.

Company name: Studio Grafiki Kamil Kuchnio
Address: ul. Konopnickiej 2A/4, 44-193 Knurów
NIP (Tax ID): 9691500051
REGON: 388768223

"User" - any entity visiting and using the website.

"Website" - the ideafordesign.pl website.

3. Personal Data

In accordance with Art. 13 sec. 1 and sec. 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), I inform that:

1. The Administrator of the User's personal data is the Administrator.
2. The User voluntarily provides their personal data via form, email or phone to establish and conduct cooperation.
3. By providing their data to the Administrator, the User agrees to its processing and to receiving marketing information from the Administrator via phone or email.
4. The User has the right to access the content of their data and the ability to correct it or request its removal from the Administrator's database at any time.
5. The User's data may be transferred to another entity to process an order.
6. The Administrator may store the User's data for an indefinite period.
7. If the User does not provide their personal data, they will not be able to use the products and services offered by the Administrator.
8. By providing their personal data, the User agrees to its processing for marketing purposes related to the Administrator's products and services.
9. The Website may contain links to other websites. They will open in a new browser window or the same window. The Administrator is not responsible for the content provided by these websites. The User is obliged to read the privacy policy or terms of these websites.
10. The User provides their data voluntarily, however, it is necessary to establish cooperation.
11. The Personal Data Administrator hereby informs that they have not appointed a Data Protection Officer (DPO) and independently performs obligations arising from the Act of 29 August 1997 on personal data protection (Journal of Laws of 2016, item 922, hereinafter referred to as "UODO").
12. The personal data provided by the User will be used for the purpose and to the extent resulting from the granted consents.
13. In case of finding unlawful processing of personal data, the User has the right to file a notification to the Personal Data Protection Office or to a court.

4. Disclaimer

The Administrator is not responsible for the use of the content included on the Website.

All content posted on the Website is subject to copyright.

5. Use of Cookies - General Information

1. The Website may collect information automatically.
2. Cookies (so-called "biscuits") are IT data, in particular text files, which are stored in the Website User's end device and are intended for using the Website. Cookies usually contain the name of the website they come from, the time they are stored on the end device, and a unique number.

3. Cookies are used to:
a) adapt the content of the Website's pages to the User's preferences and optimise the use of websites; in particular, these files allow for recognising the Website User's device and appropriately displaying the website, tailored to their individual needs;
b) create statistics that help understand how Users use the Website, which allows for improving its structure and content.

4. Two basic types of cookies are used on the Website: "session" cookies and "persistent" cookies. "Session" cookies are temporary files that are stored in the User's end device until logging out, leaving the website, or turning off the software (web browser). "Persistent" cookies are stored in the User's end device for the time specified in the cookie parameters or until they are deleted by the User.

5. The following types of cookies are used on the Website:
a) "necessary" cookies, enabling the use of services available within the Website, e.g. authentication cookies used for services requiring authentication within the Website;
b) cookies used to ensure security, e.g. used to detect authentication fraud within the Website;
c) "performance" cookies, enabling the collection of information on how the Website is used;
d) "functional" cookies, enabling "remembering" the settings chosen by the User and personalising the User interface, e.g. in terms of the selected language or region the User comes from, font size, website appearance, etc.;
e) "advertising" cookies, enabling the delivery of advertising content more tailored to Users' interests.

6. In many cases, the software used to browse websites (web browser) allows cookies to be stored on the User's end device by default. Website Users can change their cookie settings at any time. These settings can be changed in particular to block the automatic handling of cookies in the web browser settings or inform about their every placement on the Website User's device. Detailed information about the possibilities and ways of handling cookies is available in the software (web browser) settings.

7. The Administrator informs that restrictions on the use of cookies may affect some functionalities available on the Website's pages.

8. More information about cookies is available at www.wszystkoociasteczkach.pl or in the "Help" section of the web browser's menu.

6. What Data I Collect and Process

Information about you that I collect and process includes:

- name and surname,
- residential address, correspondence address,
- phone number,
- email address,
- business address,
- NIP (Tax ID),
- bank account number,
- image (profile picture),
- products you have viewed,
- details of placed orders,
- details of abandoned carts,
- your interests determined based on your online activity.

The tools I use may collect information about your:

- IP address,
- approximate location,
- device,
- gender,
- age range,
- time spent on the www.ideafordesign.pl website,
- clicks on individual links.

I collect your personal data via the website when you:

- register a user account,
- place an order,
- submit a complaint or withdraw from an agreement,
- subscribe to the list of people interested in a product,
- leave a comment on the website or a product review,
- contact me.

Moreover, I also use tools such as Google Analytics, Facebook, and Instagram, which also collect your data, e.g. during registration and while using the aforementioned platforms.

7. Purposes and Legal Basis for Processing

Services such as Instagram and Facebook are used to direct ads to you. These ads can be personalised in such a way that the Facebook platform algorithm automatically decides who sees a given ad based on the settings made by me. These settings may include:

- interests,
- age,
- location,
- actions previously taken on the www.ideafordesign.pl website.

Below is a list of purposes for processing your personal data. I have also assigned appropriate legal bases for processing to individual purposes:

- user account registration and maintenance - Art. 6 sec. 1 lit. b GDPR,
- order processing - Art. 6 sec. 1 lit. b GDPR,
- handling a complaint or withdrawal from an agreement - Art. 6 sec. 1 lit. f GDPR,
- sending a newsletter - Art. 6 sec. 1 lit. a GDPR,
- handling comments or product reviews - Art. 6 sec. 1 lit. a GDPR,
- handling correspondence - Art. 6 sec. 1 lit. f GDPR,
- fulfilling tax and accounting obligations - Art. 6 sec. 1 lit. c GDPR,
- creating an archive for the possible need to defend, establish, or pursue claims, as well as to identify a returning customer - Art. 6 sec. 1 lit. f GDPR,
- self-marketing - Art. 6 sec. 1 lit. f GDPR,
- analysis, statistics, and optimization - Art. 6 sec. 1 lit. f GDPR.

8. Orders and User Account

When placing an order in the store, you must provide the data necessary to process the order - creating an account. This data will be stored for the duration of the account. You can delete your account at any time, however, this will not result in the removal of information about your orders placed using this account from my database.

Providing data is voluntary but necessary to place an order. Data provided to me during purchases in the store is processed to execute the agreement concluded by placing an order, issuing an invoice, including the invoice in accounting documentation, and for archiving and statistical purposes (identifying a returning customer). Data about orders will be processed for the time necessary to process the order and the expiry of the limitation period for claims under the concluded agreement, as well as for the time necessary for statistical purposes (identifying a returning customer). If you start the ordering process but do not complete it, this fact will also be noted by our system.

You can modify the information about you provided to me in connection with registering a user account at any time. Also, remember that I am obliged to store accounting documentation, which may contain your personal data, for the period required by law.

You cannot object to the processing of personal data and demand their deletion until the expiry of the limitation period for claims under the concluded agreement. You also cannot demand the deletion of your data from an invoice. However, after the expiry of the limitation period for claims under the concluded agreement, you can object to the processing of your data for archival and statistical purposes.

On the other hand, you can decide to delete your user account at any time, but this will not result in the removal of your data from our database, because this data is necessary for the possible establishment, defence, or pursuit of claims related to the service agreement.

9. Complaints and Withdrawal from an Agreement

If you submit a complaint or withdraw from an agreement, you provide personal data contained in the content of the complaint or statement of withdrawal from an agreement. Providing data is voluntary but necessary to submit a complaint or withdraw from an agreement. Data will be processed for the time necessary to execute the complaint procedure or the procedure for withdrawal from an agreement. Complaint documents will be stored until the expiry of the warranty rights period. Statements of withdrawal from an agreement will be stored along with accounting documentation for the period required by law. Complaints and statements of withdrawal from an agreement may also be archived to possibly demonstrate the course of the complaint process or withdrawal from an agreement in the future.

In the case of data contained in a complaint and a statement of withdrawal from an agreement, you do not have the ability to rectify this data. You also cannot demand the deletion of this data until the expiry of the limitation period for claims under the concluded agreement.

10. Comments, Opinions, and Correspondence

When adding a comment on the website or a product review, you must provide at least a username that will be assigned to the comment or review, and an email address. Providing this data is voluntary but necessary to add a comment or review. Your comment or review will be publicly available on the website for the time it is available online, unless you previously request the removal of the comment or review.

By contacting me, you provide your personal data contained in the content of the correspondence (name and surname, email address). Providing data is voluntary but necessary to establish contact. The content of correspondence may be archived, and I cannot clearly state when it will be deleted. You have the right to demand the presentation of the history of correspondence you had with me (if it was archived), as well as to demand its deletion, unless its archiving is justified due to overriding interests, e.g. defence against potential claims on your part.

11. Social Profiles, Invoices, and Statistics

By interacting with the ideafordesign.pl social profiles, you cause me to see your personal data collected within your social profile. You decide what is available within your profile. I do not copy data from social profiles to my databases. I process it according to the functions available within these social networking services.

If I issue you an invoice, it becomes part of the accounting documentation, which will be stored for the period required by law.

I collect statistical information about user behaviour while browsing my websites, i.e. clicks on links, transitions between subpages, time spent on individual pages, etc. I analyse this information to optimise my websites for user experience, effectiveness, and conversion.

12. Data Recipients (Third Parties)

Ideafordesign.pl uses services provided by third parties. External entities that participate in processing your data are:

- zenbox sp. z o.o., ul. Dąbrowskiego 7, 42-200 Częstochowa, NIP: PL949-219-10-21, REGON: 242888558, KRS: 0000414281, District Court in Częstochowa, XVII Commercial Division of the National Court Register, share capital: 100,000 PLN fully paid up - a hosting provider that stores data on a server,

- Dropbox, provided by Dropbox International Unlimited Company, One Park Place, Floor 5, Upper Hatch Street, Dublin 2 - a cloud computing service provider where backups that may contain your personal data are stored,

- a law firm that gains access to data if it is necessary to provide legal assistance to me.

Your personal data may also be transferred to tax offices to the extent necessary to fulfil tax, settlement, and accounting obligations. This primarily concerns all declarations, reports, statements, and other accounting documents that contain your personal data. Moreover, if necessary, your personal data may be transferred to entities, bodies, or institutions authorized to gain access to data based on legal provisions, such as police, security services, courts, prosecutor's offices.

13. Data Transfer to Third Countries

I transfer your personal data to third countries in connection with using tools that store personal data on servers located in third countries, in particular in the USA. The providers of these tools guarantee an adequate level of personal data protection through the applied compliance mechanisms provided by the GDPR, in particular by joining the Privacy Shield program or using standard contractual clauses.

Personal data is stored on servers located in third countries as part of the following tools:

- Google services within the G-Suite package, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland - regarding all data processed within Google services, including data contained in files subject to synchronization with Google Drive,

- services of Dropbox, Inc., headquartered in San Francisco, California - a cloud computing service provider where backups that may contain your personal data are stored.

The above companies ensure an adequate level of personal data protection by applying compliance mechanisms provided by the GDPR, some of them by joining the Privacy Shield program. Below are links leading to confirmations of participation in the Privacy Shield program, where you can read information about the processing of personal data by these entities:

- Google: privacyshield.gov/participant?id=a2zt000000001L5AAI,
- Dropbox: privacyshield.gov/participant?id=a2zt0000000GnCLAA0

14. Behavioural Advertising

By using certain tools, I can, for example, direct personalized ads to you based on actions previously taken by you on my website or suggest products that may interest you. This refers to so-called behavioural advertising. Detailed information, along with the ability to manage settings regarding behavioural advertising, can be found at: www.youronlinechoices.com.

15. Your Rights Arising from the GDPR

The GDPR grants you potential rights related to the processing of your personal data. These are:

- the right to access your data and receive a copy of it,
- the right to rectify your data,
- the right to delete data (if there are no grounds for processing your data),
- the right to restrict data processing (if you believe I have incorrect data or process it unjustifiably),
- the right to object to data processing (unless I show that my grounds for processing your data override your rights, or your data is necessary for me to establish, pursue, or defend claims),
- the right to data portability,
- the right to withdraw consent to the processing of personal data, if you previously gave such consent,
- the right to lodge a complaint with a supervisory authority.

16. Cookies on My Website

My website, like almost all websites, uses cookies. Cookies (so-called "biscuits") are IT data, in particular text files, which are stored on the end device and are intended for using my website. Cookies usually contain the name of the website they come from, the time they are stored on the end device, and a unique number.

Cookies are used to:

- adapt the content of my website to your preferences and optimise the use of this website; in particular, these files allow for recognising your device and appropriately displaying the website, tailored to its individual needs,
- create statistics that help me understand how users use my website, which allows me to improve its structure and content.

Some cookies I use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are saved on your end device and allow me to recognise your browser upon the next visit to the website (persistent cookies).

The following types of cookies are used on my website:

- "necessary" cookies, enabling the use of services available within my store, e.g. authentication cookies used for services requiring authentication within the store,
- cookies used to ensure security, e.g. used to detect authentication fraud within the store,
- "performance" cookies, enabling the collection of information on how my website is used,
- "functional" cookies, enabling remembering the settings chosen by you and personalising your interface, e.g. in terms of the selected language or region you come from, font size, website appearance,
- "advertising" cookies, enabling the delivery of advertising content more tailored to your interests.

In many cases, the software used to browse websites allows cookies to be stored on your end device by default. You can change your cookie settings at any time. These settings can be changed in particular to block the automatic handling of cookies in the web browser settings or inform about their every placement on your device. Detailed information about the possibilities and ways of handling cookies is available in the software settings.

I use cookies based on your consent, except when cookies are necessary for the proper provision of electronic services to you. Regarding your consent for cookies, I assume the variant that you give such consent through the settings of your web browser or additional software supporting cookie management. I assume that you agree to all cookies used by me that are not blocked by your browser or additional software you use.

You can manage cookie settings within your web browser. You can block all or selected cookies. You can also block cookies from specific sites. You can also delete previously saved cookies and other site and plugin data at any time.

I inform you that restrictions on the use of cookies may affect some functionalities available on my website.

More information about cookies is available at wszystkoociasteczkach.pl or in the "Help" section of the web browser's menu.

The following third-party cookies operate on my website: Google Analytics, Facebook, Instagram.

17. Google Analytics, Social Plugins, and Server Logs

I use the Google Analytics tool, and I carry out activities in this area based on my legitimate interest, consisting of creating statistics and their analysis to optimise my website. Google Analytics automatically collects information about your use of my website. The information collected in this way is usually transferred to Google servers, which may be located all over the world, and stored there. I do not collect data within Google Analytics that would allow for your identification. The data collected by this tool is not personal data to me.

My website uses plugins, buttons, and other social tools, hereinafter referred to as plugins, provided by social networking services such as Facebook or Instagram. Administrators of social networking services use information about you to personalise the conditions of viewing my website. For example, when you visit a page with a "Like" button, the social networking service administrator needs information on who you are to show you which of your friends like my page. Information collected by plugins may also be used by administrators of social networking services for their own purposes, e.g. improving their own products, targeting ads. I have no real impact on how information collected by plugins is then used by administrators of social networking services.

If you do not want social networking services to assign data collected during a visit to my website directly to your profile on it, you must log out of this service before visiting my website.

Using the website involves sending queries to the server where the website is stored. Each query directed to the server is saved in the server logs. The logs include, among others, your IP address, server date and time, information about the web browser and operating system you use. The data saved in the server logs is not associated with specific people using the website and is not used by me to identify you.

18. Contact and Policy Changes

As you can see, the topic of personal data processing is quite complicated. If anything is unclear to you, write to me at kontakt@ideafordesign.pl.

In matters related to personal data protection and privacy policy on my website, you can contact me at the email address: kontakt@ideafordesign.pl.

If necessary, the provisions of this Privacy Policy may change.