OWBET PRIVACY POLICY
Protecting the privacy of Users is particularly important to us. Therefore, Users of the owbet.eu website (hereinafter the Website) are guaranteed the highest standards of privacy protection. OWBET as a personal data administrator of owbet.eu cares about the security of personal data provided by Users.
In view of the above and in view of the requirements introduced by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ.EU.L.2016.119.1 of 2016.05.04) (hereinafter referred to as RODO), in order for OWBET to ensure the security of personal data, this Privacy Policy has been adopted.
This Privacy Policy sets out the principles for the processing and protection of personal data provided by Users in connection with their use of the Website and other related sites, communications and services.
A User is any data subject who uses the Website and other related websites, communications and services. (hereinafter referred to as User).
The Administrator of the personal data collected on the Website is OWBET, Szeroka 7, 39-340 Padew Narodowa , NIP: 8172140062, REGON: 180757060 (hereinafter referred to as the Administrator).
To the extent necessary for the performance of the agreement concluded by the User with the Administrator, as well as to the extent necessary for the Administrator to take action at the request of the User and to the extent necessary for the fulfilment of the Administrator's legal obligation - the processing of the User's personal data takes place on the basis of a legal provision, i.e. Article 6(1)(b) and (c) RODO, without the User having to give his/her consent to the processing of his/her personal data. For the rest, the provision of personal data by the User is voluntary. However, to the extent that the User has consented to the processing of his/her personal data solely for marketing purposes, the provision of his/her personal data by the User is voluntary, but the refusal to give consent or the withdrawal of consent will prevent the Administrator from informing the User about new offers and discounts.
§1 USER CONSENT
Use of the Website by the User implies the User's acceptance that the Administrator collects, uses and shares non-personal and personal data in accordance with this Privacy Policy. However, the User has control over the way his/her data is used and shared, as detailed in Section V of this Privacy Policy "User Rights".
Where personal data is processed on the basis of the User's consent, the User has the right to withdraw the consent previously given at any time. The withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. The Administrator shall inform the User of the possibility of withdrawing consent before the User gives his/her consent.
In the event that there is a change to this Privacy Policy and the User continues to use the Website, this action shall be deemed to be an acceptance of the current terms of the Privacy Policy.
§2 PERSONAL DATA PROCESSED BY THE CONTROLLER
- Method of collecting personal data
- Personal data collected directly from the User
The Administrator obtains personal data in two ways. The first way is to obtain personal data directly from the User, through:
- the sending of a message by the User via the contact form provided on the Website,
- creation of a customer account by the User on the Website,
- placing an order for goods or services on the Website,
- for the User to contact the Administrator in order to obtain technical assistance, make a complaint or for any other purpose.
- Personal data obtained from other sources
The Administrator also obtains personal data from sources other than directly from the User, i.e.:
by recording your use of the Website via cookies and other technologies and receiving error reports or usage data from software running on your device,
- from partners with whom the Administrator offers goods and services or conducts joint marketing activities.
- Personal data processed by the Administrator
The scope of personal data collected by the Administrator regarding Users may vary depending on the purpose of the personal data processing.
The controller collects, inter alia, the following personal and non-personal data:
- Login name,
- Name and surname /name of company/name of entrepreneur or names of entrepreneurs acting in the form of a civil partnership,
- Postal address,
- Phone number,
- E-mail address,
- NIP,
- REGON,
- IP computer,
- Payment details if the User makes a purchase on the Website.
- Information contained in cookies and similar technologies concerning the User's interaction with the Administrator's website.
In addition, the Administrator collects data on the content of the User's files and messages when this is required for the fulfilment of an order placed, the provision of a customer account service to the User, including: the subject and content of an e-mail message, the text or other content of an instant message, the audio and video recording of a video message, the audio recording and transcription of a voice message received by the User or a text message dictated by the User.
The Administrator also collects information provided by the User, including opinions and evaluations of goods and services and information provided for technical support. In addition, when contact is made, Administrator collects the content of the messages.
§3 THE WAY THE DATA ARE PROCESSED - THE PURPOSES FOR WHICH THE CONTROLLER PROCESSES PERSONAL DATA
The way in which the Administrator processes personal data concerning the User depends on the extent of the User's use of the Website.
- Orders, customer account (contract performance)
If the User decides to place an order for goods or services presented on the Website, the Administrator shall process the User's personal data to the extent necessary to conclude a sales or service contract and to ensure due performance of the contract concluded with the User.
If the User creates a customer account on the Website, the Administrator shall use the User's personal data in order to duly perform the contract for the provision of electronic services, including authentication and authorization of the User's access to the customer account.
- Communication (performance of the contract, legitimate purpose pursued by the Administrator)
The Administrator uses the User's personal data to communicate with the User in a personalised manner. This communication consists of sending emails, posting notifications on websites and other means within the framework of the Website and the customer account service provided, including text messages and push notifications. The content communicated to the User concerns the goods and services offered, i.e. the availability of services and how to use them, the security of personal data, web updates, reminders, but also suggested offers by the Administrator.
Communication with the User also relates to the User's service. Personal data is used to help the User, solve problems and respond to his/her complaints.
The Administrator also uses the User's personal data to enable the User to comment on the Administrator's activities, Website, services and goods.
- Advertising (consent, legitimate purpose pursued by the Administrator)
The Administrator uses the User's personal data in order to offer tailored advertisements to the User, if the User has consented to such actions or if a business relationship develops between the Administrator and the User. These advertisements concern both the Administrator's offers and those of entities cooperating with the Administrator.
The advertisements presented to the User are individually adapted to each User (so-called ‘profiling’) through the use of:
- data provided directly by the user,
- data collected through your use of the Website,
- information provided by third parties,
- data from advertising technologies, such as cookies,
- beacons, pixels, advertising tags and mobile identifiers.
- The Administrator does not share the User's personal data with third-party advertisers or advertising networks without the User's consent. However, in the event that the User clicks on an advertisement displayed to them, the advertiser will be informed.
- Improvement of the Website (legitimate interest of the Administrator)
The Administrator uses the User's personal data for analytical and statistical activities in order to continuously improve the Website, the goods and services offered by the Administrator, to provide better solutions, to add new functions and opportunities.
Personal data concerning Users is also used by the Administrator for market research, opinion polling and economic analysis in order to continuously improve the Website.
- Security (legitimate interest of the Administrator)
The Administrator uses the User's personal data to monitor, prevent, detect and combat fraud and abuse, to protect other Users from such abuse and to ensure network and information security. Where there is a reasonable suspicion that a crime has been committed, the User's personal data will be used to investigate the likely commission of a crime or other breach of this Privacy Policy by undesirable persons.
- Investigation of claims (legitimate interest of the Administrator)
In the event that the User decides to use the Website, in particular by creating a customer account, placing an order for goods or services through it, the Administrator may process the User's personal data to the extent necessary for the investigation of possible business claims, as well as the analysis of potential violations of the rules of use of the Website.
- Tax documentation (implementation of statutory obligation)
Where the User places an order for goods or services via the Website, the Administrator will process the User's personal data to the extent necessary for the maintenance of tax records and billing for orders made.
§4 SHARING OF PERSONAL DATA BY THE ADMINISTRATOR
Your personal data is or may be communicated to the following categories of recipients:
- to entities providing certain services in the sales process, i.e., courier/postal service providers, payment institutions intermediating in the payment by the Users for orders placed for goods or services;
- to advertising or marketing service providers, where the purpose is the direct marketing of the Administrator's own services;
- providers of legal and advisory services and of support to the Administrator in the collection of outstanding claims (in particular, law firms, debt collection agencies);
- entities processing personal data on behalf of the Administrator, e.g. technical service providers operating the technical infrastructure needed to run the Website;
- entities entitled to obtain data on the basis of applicable law, e.g. courts or law enforcement agencies, when they make a request on the basis of the applicable legal basis.
§5 USER RIGHTS
The User has the right to decide about his/her personal data by making choices regarding the disclosure of individual personal data, including the choice of privacy settings. However, if you do so, you must be aware that you will not be able to take full advantage of certain functionalities of the Website or the services offered by the Administrator.
If the User wishes to exercise his/her rights as a personal data subject, he/she may contact the Controller by e-mail sent to the following address sklep@owbet.pl Part of your rights as a data subject may be exercised by you through your customer account on the Website.
- Right of access to data
The User is entitled to obtain confirmation from the Controller as to whether or not his/her personal data are being processed and, if this is the case, he/she is entitled to access information concerning the details of the processing of his/her data, including, in particular, information on the purpose of the processing and the categories of data being processed.
The User is also entitled to request a copy of the personal data being processed.
- Right to rectify data
The user has the right to rectify personal data that is inaccurate. The user has the right to demand the replacement, completion or deletion of errors, faults and misleading information in the entire data filing system concerning him.
The subject of supplementation may not be personal data which are incorrect, i.e. the User may not request the replacement or supplementation of existing data with incorrect data.
If the processed personal data is incomplete, the User may submit an additional statement in order to complete it. It is permissible to submit such a declaration in any form, including electronically.
- Right to erasure (right to be forgotten)
The user has the right to request the deletion of his/her personal data if one of the following circumstances applies:
- your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- the User has withdrawn the consent on which the processing is based and there is no other legal basis for the processing;
- You object to the processing of personal data concerning you;
- personal data have been unlawfully processed;
- the personal data must be erased in order to comply with a legal obligation laid down by Union law or by the law of a Member State to which the controller is subject;
- the personal data was collected in connection with the offering of information society services.
- The User has the right to be forgotten only if he/she has exercised his/her right to erasure and only if the personal data concerning him/her has been made public by the Administrator.
- Right to restrict processing
You have the right to restrict the processing of your personal data in the following cases:
- the User questions the correctness of the personal data - for a period allowing the Administrator to check the correctness of the data;
- the processing is unlawful and the User objects to the erasure of personal data, requesting instead that its use be restricted;
- The Administrator no longer needs the User's personal data for the purposes of processing, but they are needed by the User to establish, assert or defend claims;
- the User has objected to the processing - until such time as it is ascertained whether the legitimate grounds on the part of the Administrator override the grounds for the User's objection.
- In the case of restriction of processing, the Controller may process personal data, with the exception of storage, only:
- with the consent of the User o
- for the establishment, investigation or defence of claims, or
- in order to protect the rights of another natural or legal person, or
- for overriding reasons of public interest of the Union or of a Member State.
- Right to data portability
The User has the right to receive in a structured, commonly used format the personal data concerning him/her that he/she has provided to the Administrator and has the right to send this data to another administrator.
The User also has the right to request that his/her personal data be sent by the Administrator directly to another administrator, insofar as this is technically possible.
- Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data:
- in the public interest, in the exercise of official authority vested in the Administrator,
- against processing for direct marketing purposes, including profiling insofar as it is related to such direct marketing,
- for the legitimate purpose of the Controller.
- The objection procedure and all communications are free of charge, and it is also possible to lodge an objection electronically.
- Right of complaint
You have the right to lodge a complaint with the Data Protection Authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged infringement took place.
§6 COOKIES AND OTHER TECHNOLOGIES USED BY THE CONTROLLER
The Administrator uses cookies and other similar technologies in order to provide an optimal service for the User's visit to the Website, to enable faster and easier access to information and to offer the Users increasingly improved functionalities of the Website, as well as for marketing and remarketing purposes (including the necessary analytical activities and compiling into marketing profiles on the basis of the User's activity on individual subpages of the Website). Cookies (‘cookies’) are code fragments that are text files responding to HTTP requests directed to the Administrator's server. The Website also makes use of other available technologies that allow information to be stored in the browser's appropriate data stores (Session Storage, Local Storage), as well as placing in code fragments of analytical tools provided by other providers that allow cookies to be stored in the domains of these services. The information stored or accessed does not cause any configuration changes to the User's device or the software installed on it. The information contained in cookies and similar technologies is considered personal data only in conjunction with other personal data available about the User. If the User does not agree to the saving and receiving of information in cookies or similar technologies, he/she can change the rules regarding cookies through the settings of his/her Internet browser or by using the so-called opt-out option on the website of the provider of the given technological solution. Detailed information on the technologies used by the Administrator is available in the Cookie Policy.
§7 OTHER RELEVANT INFORMATION
- Protection of personal data security
The Administrator implements various measures to ensure the security of the User's personal data. The safe use of the services offered is ensured by the systems and procedures in place to protect against access and disclosure of data to unauthorised persons. Moreover, the systems and procedures used by the Administrator are regularly monitored in order to detect possible threats. The personal data obtained by the Administrator are stored in computer systems to which access is strictly limited.
- Storage of personal data
The retention period for Users' personal data may vary, as different purposes may be specified for the processing of the personal data of different Users.
The controller shall retain personal data for such period as is necessary to fulfil the specified purposes, i.e.:
- for analytical and statistical purposes, for the period of time necessary for the effective operation and development of the Website;
- in the case of the processing of orders, the provision of services to you, for the duration of the contract and the limitation period for claims;
- for the period required by law for the purpose of keeping tax records and settling accounts for contracts performed;
- in the case of processing of personal data for marketing purposes, for the duration of the business relationship with the User, unless the User objects to the processing for such purposes beforehand;
- In each of the above cases, after the expiry of the necessary processing period, the data may only be processed to secure the assertion or defence of claims, and thereafter only in the case and to the extent required by law.
Users' personal data are stored in the Administrator's database, where technical and organisational measures have been applied to ensure the protection of the processed data in accordance with the requirements set out in the applicable legislation. Only the Administrator has access to the database.
- Changes to the privacy policy
In order to update the information contained in this Privacy Policy and to make it compliant with applicable law, this Privacy Policy may change. As the content of the document changes, the update date, which is placed at the beginning of this Privacy Policy, will be changed. On the other hand, the User will be notified of any material change through a notice posted on the Website's website or directly. In order to be informed about the protection of personal data, the Administrator recommends that Users regularly read this Privacy Policy.
- Contact information
If you have any doubts about data protection issues or for information regarding this Privacy Policy, you may contact the Administrator by e-mail sklep@owbet.pl and by post to the following address: Szeroka 7, 39-340 Padew Narodowa, Poland.
Information on online dispute resolution pursuant to Article 14(1) ODR (Online Dispute Resolution):
The European Commission provides consumers with the possibility to resolve e-commerce disputes in accordance with Article 14(1) ODR (Online Dispute Resolution), on one of the platforms. The platform (http://ec.europa.eu/consumers/odr) serves as a place where consumers can try to reach out-of-court agreements in disputes arising from online purchases and service contracts.