Privacy policy

  • Home
  • Privacy policy

I General Provisions

  1. This Privacy Policy specifies the method of collecting, processing, and storing personal data necessary for providing electronic services through the website at www.zubryckidesign.pl (hereinafter: the Service).
  2. The administrator of users’ personal data is 4Home&Kitchen Aneta Zubrycka, with its registered office at 15-324 Białystok, ul. Kawaleryjska 4c, NIP: 5422964705 (hereinafter: the Administrator).
  3. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR).
  4. The data collected by the Administrator will be:
  • processed lawfully,
  • processed for specified, explicit purposes and not further processed in a manner that is incompatible with those purposes,
  • adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed,
  • kept for no longer than is necessary for the purposes for which the personal data is processed.

II. Purpose and legal basis for data processing

  1. The Administrator processes personal data necessary for the provision and development of the services offered through the Service and its individual functionalities.
  2. Personal data will be processed for the following purposes: a. registration of an account, verification of the User’s identity, and the performance of the contract for the provision of electronic services in accordance with the Act of July 18, 2002, on the provision of electronic services, including, in particular, by providing the User with the possibility to use their account – on the basis of acceptance of the Terms and Conditions (Art. 6(1)(b) GDPR); b. communication with the User to provide them with necessary information and to build positive and reliable relationships with them, which constitutes the legitimate interest of the Administrator (Art. 6(1)(f) GDPR); c. promotion of the Administrator’s own products and/or services as well as those of its Partners by sending marketing information (newsletter) electronically, provided that the User has consented to receive such notifications via email (Art. 6(1)(a) GDPR); d. providing access to information about news in the industry directly related to the Administrator’s activities, provided that the User has consented to receive such notifications via email (Art. 6(1)(a) GDPR), e. for analytical and statistical purposes based on the legitimate interest of the Administrator, consisting of verifying the activity of Users and their preferences to optimize the services and products as well as the functionalities of the Service (Art. 6(1)(f) GDPR); f. for the potential establishment, investigation of claims, or defense against them, based on the legitimate interest of the Administrator, consisting of protecting its rights (Art. 6(1)(f) GDPR).
  3. In each of the cases mentioned above (point 2), providing data is voluntary but necessary for the conclusion of a contract or the use of other functionalities of the Service.

III. Data processing period

  1. Personal data will be processed for the period during which the individual remains an active User of the Service (holds a User account), and thereafter for a period necessary to comply with legal regulations, pursue, or defend against any claims, but no longer than 3 years counted from the date of termination of the contract for the provision of electronic services.
  2. Data processed based on consent will be processed until the consent is withdrawn, with the reservation that the withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

IV. Information about processing

  1. Personal data, depending on the purpose of processing, may be disclosed to: a. entities related to the Administrator b. entities cooperating with the Administrator, c. subcontractors, especially entities providing and servicing selected IT systems and solutions, d. entities handling online payments, e. courier and postal service providers, f. law firms.
  2. Personal data processed by the Administrator will not/will be transferred outside the European Economic Area or to international organizations.

V. Rights of data subjects

  1. The User of the Service has the right to:
  • access their personal data
  • correct data
  • delete data
  • limit data processing
  • data portability
  • object to processing based on the legitimate interest of the administrator
  • withdraw consent at any time without affecting the legality of the processing carried out on the basis of that consent before its withdrawal
  1. The User has the right to lodge a complaint with the President of the Office for Personal Data Protection if they believe that the processing infringes on their rights and freedoms.
  2. The processing of data does not involve automated decision-making, including profiling.

VI. Final provisions

  1. The Administrator reserves the right to make changes to this Privacy Policy, while ensuring that the rights of Users arising from this document will not be limited.
  2. The User will be informed about any changes to the Privacy Policy through a notice available on the Service.