Privacy policy
Privacy policy and cookies
Online store www.ewamrochen.com
Pursuant to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (general data protection regulation) ("GDPR"), In this document" The Privacy Policy and Online Store Cookies www.ewamrochen.com” („Privacy policy") We would like to determine and show you the rules for collecting, storing and using (i.e. processing) of your personal data obtained by the online store operating at the following address: www.ewamrochen.com („Store”).
The store is run by Ewa Mrochen running a business under the company: "Ewa Mrochen Jewellery" - Ewa Mrochen with its registered office in Warsaw, address: ul. Michał Bałuckiego 10, 02-604 Warsaw, entered in the Central Register and Information on Economic Activity (CEIDG), NIP: 7561040762, REGON: 531353842 ("Shop leader”).
If you are a natural person and:
- You visit or are browsing our store's website made available by the store host at: www.ewamrochen.com („Website") Or in a different way you use the website, or visit or view our official accounts / fanpage conducted on social media (Facebook, Instagram, Pinterest) ("Social media accounts”) („User”);
- You make purchases in the store or activate the customer's account as part of the website ("Client”);
- You represent the client / you work on behalf of the customer / you are a contact person on the client's part ("Contact person”);
- You contact the store host in any case in any way, including electronically through email messages, or the contact form available as part of the website, either by traditional mail or by phone ("Person contacting"); or
- you sign up for a newsletter sent by the store host as part of the website;
It is our privacy protection that concerns your personal data, i.e. all information about you, if they identify you or allow your identification directly or indirectly.
Please read the content of our Privacy Policy and a document entitled: "Online store regulations www.ewamrochen.com", Available at the following address: https://ewamrochen.com/strona/regulamin_sklepu_ewa_mrochen („Store regulations"), Before starting using the Website, as well as before activating the Customer Account as part of the Website and before placing the order and making purchases in the store.
Who is the administrator of your personal data?
The administrator of your personal data is the store host, i.e. Ewa Mrochen running a business under the company: "Ewa Mrochen Jewellery" - Ewa Mrochen with its registered office in Warsaw, address: ul. Michał Bałucki 10, 02-604 Warsaw, entered in the Central Register and Information on Economic Activity (CEIDG), NIP: 7561040762, REGON: 531353842 (also "as"Administrator”).
You can contact us at any time by e -mail to the following address: kontakt@ewamrochen.com, using traditional mail to our following address: Ewa Mrochen, ul. Michał Bałucki 10, 02-604 Warsaw.
What personal data do you collect as part of the website?
In order to enable you to activate your customer account as part of the website in the store, we collect your following personal data: name and surname, e-mail address.
In order to make purchases in the store, we collect your following personal data:
- name and surname;
- Entrepreneur company;
- address (street, house number, premises, postal code, town, voivodship, country);
- delivery address (street, house number, premises, zip code, town, voivodship, country);
- e-mail address;
- phone number;
- NIP (if the invoice is necessary).
In order to enable you to record it to the newsletter, we collect only your e-mail address.
In order to allow you to contact the store host using the electronic form provided in the "Contact" tab on the website, we only collect your name and e-mail address.
In addition, whenever you visit our website, then we automatically collect some of your personal data using "cookie" files - detailed information in this respect is included below.
What your personal data can be collected automatically when visiting and browsing the website? (Cookies)
As part of the website, we do not automatically collect any information or your personal data, except for information contained in cookies (so -called "cookies") ("Cookies”).
The store uses cookies, which are IT data, in particular text files, which are stored in the user's end device and are intended to use the website. Cookies usually contain the name of the website from which they come from, storage time on the user's end device and a unique number.
The entity placing the Cookie user on the end device and accessing them is the store leader.
If, as a user, you do not agree to saving cookies on your device, then you should properly configure the browser settings for this purpose or after using the website delete saved cookies from the browser memory. It should be borne in mind that the restrictions or blocking (disabling) of the use of cookies necessary for authentication processes, security, maintenance of user preferences, may affect (including negatively) on some functionalities available as part of the website, and in extreme cases it may even prevent the use of the website.
Cookies are used by the store host for the following purposes:
- adapt the content of the website's website to the user's preferences and optimizing the use of these websites; In particular, these files allow you to recognize the user's device and display the website adapted to his individual needs accordingly;
- creating statistics (number of users, visited subpages of the Website, traffic paths between the website's subpages, visit time, etc.) that help us understand how users use the website of the website, which allows you to improve their structure and content, as well as to match the website and their functionality to individual needs of users, offer or share better, more personalized services or products;
- Maintaining the user's session (after logging in), thanks to which the user does not have to re -enter the login and password on each subpage of the website;
- determining the user profile to display adapted advertising materials.
As part of the website, two basic types of cookies are used: "session" (session cookies) and "permanent". "Session" cookies are temporary files that are stored in the user's end device until logging out, leaving the website, or disabling the software (web browser). "Fixed" cookies are stored in the user's end device for time specified in cookies parameters or until the user is deleted.
As part of the website, the following types of cookies are used:
a) "necessary" cookies, enabling the use of services available as part of the Website, e.g. authenticating cookies used for services requiring authentication on the website;
b) cookies used to ensure security, e.g. used to detect abuse in the field of authentication on the website;
c) "performance" cookies, enabling information on how to use the website of the website;
d) "functional" cookies, enabling "remembering" the settings selected by the user and personalizing the user interface, e.g. in the scope of the selected language or region from which the user comes, font size, the appearance of the website, etc.;
e) "advertising" cookies, enabling users to provide users with advertising content more adapted to their interests.
Web browsing software (web browser) usually allows you to store cookies on the user's end device by default. Users can change the settings in this respect. The web browser allows you to remove cookies. It is also possible to automatically block cookies. Detailed information on this subject contains help or documentation of the web browser.
These data will be archived and used for the purposes of statistical analysis and assessment of global user movement as part of the website. However, these data will not be combined with your other personal data that you have given to us.
What other sources do we collect your personal data?
In most cases, we receive your personal data directly from you, i.e. directly from the person to whom personal data relate. This happens, for example, when you provide your personal data during:
- creating your customer account as part of the website, placing an order in the store, concluding a contract for the sale of goods with the store operator;
- Contact with the store leader;
- granting consent to sending commercial information by means of electronic means of communication;
- signing up to the newsletter sent by the store leader;
- using the contact form as part of the website.
However, in relation to customers who are entrepreneurs or contact persons, the store running a store may also obtain your personal data from other sources, e.g. your employers / principal, entities you represented, from publicly available sources, including public websites, public electronic entrepreneurs' databases (e.g. Ceidg, KRS, REGON, etc.) In this case, the store conducting the following categories of personal data: name, name, name, name, name, name official position, official address, headquarters, correspondence address, telephone number, e-mail, company (name) of conducted business activity, company address, NIP, REGON.
Is providing your personal data voluntary? Is providing this personal data a statutory, contractual or condition for the conclusion of the contract?
If you provide your personal data is related to:
- The conclusion of the contract with the store leader - then their administration is voluntary, but is a condition for the conclusion of the contract, and the consequence of their failure to be the inability to conclude such a contract;
- issuing an invoice by the store leader - then their administration is mandatory and is a statutory requirement, and the consequence of their failure to be the inability to conclude a sales contract;
- Contacting the store leader - then their administration is voluntary, and the consequence of their failure will be the inability to make contact with the store leader at your goal, and thus the inability to answer your questions;
- receiving commercial information from the store operator, including offers, electronically (e.g. e-mail)-then their provision is voluntary, and the consequence of their failure to not be obtained by us commercial information from us, including offers, electronically;
- making a record to the newsletter sent by the store leader - then their administration is voluntary, and the consequence of their failure to be the inability to send you the newsletter;
- Visiting the website or accounts on social media - then their provision is voluntary, and the consequence of their failure to be the inability to use the functionality of the website or social media (e.g. the inability to leave a comment, the inability to display posts as part of your account / profile in social media, no possibility of marking "I like it", etc.)
For what purpose, on what legal basis and how long do we process your personal data?
Your personal data will be processed by the store host for the following purposes, on the following legal grounds and in the following periods:
- in order and to the extent necessary for the proper implementation of the goods sales contract you concluded with the store, including taking action before the conclusion of such a contract or acceptance of the order at your request, namely to handle the order placed, preparing the goods, shipment, settlement, as well as examining the complaint you submit
- Then the legal basis for the processing of your personal data is the necessity of their processing to perform by the stored store of the goods sales contract concluded with you (art. 6 para. 1 lit. b) GDPR);
- in this case your personal data is processed for the period necessary to perform all activities related to the correct implementation of such a contract;
- in order and to the extent necessary to create and maintain your customer account on the website on the terms specified in the Store Regulations -
- Then the legal basis for the processing of your personal data is the necessity of their processing to perform by the STORE STORE concluded with you agreement for the creation and maintenance of your customer account as part of the website (art. 6 para. 1 lit. b) GDPR);
- in this case, your personal data is processed for the period of the Store's performance of the duties arising from such a contract (i.e. the time of maintaining your customer account on your website);
- In order to perform statutory obligations on the administrator, resulting in particular from tax regulations and accounting regulations, including obligations related to documenting economic events (issuing invoices) and archiving obligations -
- Then the legal basis for the processing of your personal data is a legal obligation incumbent on the stored store (art. 6 para. 1 lit. c rodo);
- In this case, your personal data is processed for the period in which the applicable legal provisions order the stored store to store your personal data for accounting or tax purposes, i.e. not longer than the period of 5 (five) years from the end of the calendar year in which the tax liability was created;
- In order to make claims or defend against claims by the Administrator –
- Then the legal basis for the processing of your personal data is the legitimate interest pursued by the Administrator (art. 6 para. 1 lit. f GDPR) consisting in protecting his rights;
- in this case, your personal data is processed for time until the expiry of the limitation period for claims arising from the contract for the sale of goods in the Store, or contracts for the creation and conduct of a customer's account as part of the website, in accordance with applicable law in the scope of limitation periods, as well as an additional period 6 (six) months after the expiry of the limitation period; *
- In order to contact the current matters by the lecturer with the contact store in connection with the conclusion or performance of the contract by the client's store (arrangements regarding the conducted cooperation, answering questions, etc.) -
- Then the legal basis for the processing of your personal data is the legitimate interest pursued by the Administrator (art. 6 para. 1 lit. f) GDPR) consisting in contacting contact persons and the client in connection with the conclusion or the need to implement the contract concluded by the customer store;
- in this case, your personal data is processed for the period of performance by the store leader of the duties arising from such a contract concluded by the customer store; *
- In order to contact the leading store with people contacting people (including via the contact form provided as part of the website), answering the questions asked to the stored store -
- Then the legal basis for the processing of your personal data is the legitimate interest pursued by the Administrator (art. 6 para. 1 lit. f) GDPR) consisting in contacting people who contact in any case, including the possibility of transferring the answer to the question about business activities and to establish and maintain relationships as part of economic activities;
- in this case, your personal data is processed for the period necessary for the stored store to contact you, answer your question or effectively fulfill your other purpose of contact; *
- In order to send newsletter by the store leader to the user who has saved the newsletter as part of the Website –
- Then the legal basis for the processing of your personal data is its necessity to perform the contract concluded as a result of your acceptance of the principles of providing the Service of the Newsletter Services contained in the Store Regulations (art. 6 para. 1 lit. b) GDPR) –
- in this case, your personal data is processed for the period of the Store's performance of the duties arising from such a contract for the provision of the newsletter concluded with you;
- In order to leave an opinion about the goods you purchased in the store, which is posted by the store operator as part of the website -
- then the legal basis for the processing of your personal data is its necessity to perform the contract concluded as a result of your acceptance of the principles of providing the Service Services by the Store of Placing the Opinions of the Goods contained in the Store Regulations (Article 6 (1) (b) GDPR);
- in this case, your personal data is processed for the period of the Store's performance of the duties arising from such a contract for the provision of the service of placing an opinion about the goods concluded with you;
- In order for the direct marketing of the store leading the store, including by sending commercial information, offers of services or products running the store, their descriptions, discounts and promotional codes, as well as inquiries about opinions on goods purchased in the store
(however, excluding newsletter messages covering commercial information, services or products offers, their descriptions, sent to users that have entered the newsletter - the legal basis and the period of processing personal data for this purpose is indicated above) –
- Then the legal basis for the processing of your personal data is the legitimate interest pursued by the Administrator (art. 6 para. 1 lit. f) GDPR), consisting in the implementation of direct marketing tasks -
- In this case, your personal data is processed for the period of the implementation of the above -mentioned store by the store, i.e. for the period of conducting direct marketing activities, but in no case no longer than:
- Until the date of effective objection to the processing of your personal data for marketing purposes or
(ii) Until your effective withdrawal of prior and clear consent to receive commercial information referred to in art. 10 para. 2 of the Act of 18.07.2002 on the provision of electronic services;
ATTENTION: The store leader processes your personal data for marketing purposes by means of electronic means of communication, including e-mails, only if you grant the above consent, with you can be withdrawn by you at any time, without the need to give a reason, in writing, in a traditional way, to the following address: Ewa Siwek-Morchen, ul. Michał Bałuckiego 10, 02-604 Warsaw, or by e-mail to the following email address: kontakt@ewamrochen.com, with the withdrawal of any consent to the above will not affect the lawfulness of the processing, which was made on the basis of consent before its withdrawal;
- In order to keep his store on social media accounts, including in order to interact with the host shop using social media -
- Then the legal basis for the processing of your personal data is the legitimate interest pursued by the Administrator (art. 6 para. 1 lit. f) GDPR), consisting in promoting its services, products and brands, building and maintaining a community related to its brand and industry -
- In this case, your personal data is processed for the period of conducting the store of your store on social media, however, no longer than until you take the appropriate action resulting in the removal of your personal data from accounts on social media (e.g. you will delete your comment or like); *
- for analytical and statistical purposes –
- then the legal basis for the processing of your personal data is the legitimate interest of the administrator (art. 6 para. 1 lit. f) GDPR) consisting in conducting analyzes of user activity, as well as their preferences to improve the functionality of the online store, as well as the quality analyzes of the sales services provided as part of the Online Store;
- In this case, your personal data is processed for the period of the administrator conducting analyzes and statistics as part of the Online Store, however, not longer than for a period of 12 months from the date of their meeting. *
* Whenever your personal data is processed on a legal basis, which is a legitimate interest realized by the Administrator (art. 6 para. 1 lit. f) GDPR), regardless of the periods of processing your personal data indicated above, they will not be processed longer than until you have an effective objection to the processing of your personal data for a given purpose. We write about the right to object below.
Who do we provide your personal data?
To ensure efficient and highest quality service, we cooperate with trusted third parties, which are the recipients of your personal data. They can be transferred to the following recipients (including other administrators processing this data on their own and their own purpose):
- authorized to receive them on the basis of applicable law (e.g. courts, law enforcement agencies or other state authorities);
- entities providing correspondence and shipping services;
- entities providing IT, hosting and telecommunications services;
- entities providing accounting and financial services;
- entities providing legal and debt collection services;
- entities providing promotional and marketing services, including automatic commercial information services or newsletter, social media services, websites;
- Entities providing payment services (banks, payment institutions).
Do we intend to transfer your personal data to third countries or international organizations?
The administrator does not intend to transfer your personal data to entities based outside the European economic area (in the so -called "third state") or international organizations.
In addition, we would like to inform you that due to the supractional nature of data flow within social media portals (Facebook, Instagram, Pinterest), if you visit our social media accounts, some of your personal data may also be processed by the owners of the abovementioned social networks. Please be advised that as tool suppliers, these owners are co -responsible entities for processing your data if you use our social media accounts. They can process your data for their own purposes based on other legal grounds on the principles set by them (links below), including the transfer of your personal data to third countries (this is not dependent on the store host):
- Facebook (Leading entity: Facebook Ireland Ltd.):
- Instagram (Leading entity: Facebook Ireland Ltd.): https://help.instagram.com/519522125107875;
- Pinterest (Leading entity: Pinterest Ireland Ltd.): https://policy.pinterest.com/pl/privacy-policy.
The basis of such a transfer are used by the abovementioned Owners of social networking sites standard contractual clauses approved by the European Commission.
What are your rights?
In view of the processing of your personal data by the store, you have the following rights:
- right access to data - the possibility of demanding access to your personal data, e.g. by obtaining confirmation whether / which your personal data (what their categories) are processed by the store host, obtaining information, among others on the purpose of processing, recipients or categories of data recipients, planned period of data storage or criteria for determining this period, etc., obtaining copies of these personal data;
If you have an active customer account as part of the website, you can edit and correct, complete, update your personal data stored under this account at any time;
- right to rectify data - the possibility of demanding rectification (correcting, supplementing, updating) of your personal data, which are incorrect, incomplete, including by presenting an additional statement;
If you have an active customer account as part of the website, you can edit and correct, complete, update your personal data stored under this account at any time;
- right to delete data - the possibility of requesting the deletion of your personal data, but only in situations specified in the GDPR; In view of the above, the removal of your personal data will not be possible in particular in the following circumstances:
- Your order in the store has been placed and confirmed, but it is still in the implementation phase, e.g. it has not yet been sent, it has been sent only partially or was sent, but it has not yet been picked up by you;
- You still have an active customer account on a website that allows you to inspect the history of your orders placed in the store;
- you have unfinished complaint procedure regarding the goods bought in the store;
- The limitation period for property claims arising from the contracts concluded by you with the store leader has not yet expired;
- You have an unregulated debt debt to the store leader in the title of contracts concluded by you with the store leader;
- The period of storage of your personal data regarding transactions for accounting or tax purposes has not yet expired;
- right to limit processing - the possibility of demanding limiting the processing of your personal data, but only in situations specified in the GDPR;
- right to transfer data - the possibility of requesting the transfer of your personal data (in the event that the processing of your personal data is necessary to perform the contract by the STORE, which is a party, and if such processing is carried out in an automated manner), including receiving a copy of your personal data in a structured, commonly used and read format; This copy may be sent to you or to another entity (another administrator), if it is technically possible;
- right to opposition - the possibility of an objection to the stored store for the processing of your personal data - in connection with your special situation, in the case of processing your personal data under the legitimate interest pursued by the Administrator (Article 6 (1) lit.
The rights indicated above can be exercised via e-mail contact at: kontakt@ewamrochen.com or written contact via traditional mail to our following address: Ewa Siwek-Morchen, ul. Michał Bałucki 10, 02-604 Warsaw.
How to lodge a complaint to the supervisory authority?
If you think that the processing of your personal data by the host of the store violates the provisions regarding the protection of personal data, then you have the right to lodge a complaint to the supervisory authority, i.e. the President of the Office for Personal Data Protection. The complaint can be lodged in a traditional form, including the protocol at the seat of the President of the Office for Personal Data Protection (address: ul. STAKÓW, 2 00-193 Warsaw) or electronically via the electronic application of the President of the Office for Personal Data Protection (details are available here: https://uodo.gov.pl/pl/83/153).
How will we change the privacy policy?
We reserve that in the future there may be a need to make changes or update our privacy policy. In particular, this may be necessary due to changes in applicable law regarding the protection of personal data, guidelines in the field of personal data protection issued by the supervisory authority (President of the Office for Personal Data Protection / PUDO), but also in connection with possible changes in the scope of conducting store customer service processes.
We guarantee that all changes in the privacy policy that may possibly occur in the future will remain in full compliance with applicable law in the field of personal data protection, and will also take into account the need to ensure the security of your personal data processed by us.
The latest version of our privacy policy is always available on the website. In addition, we will inform you by e-mail about each change of our privacy policy (if you have your e-mail address).
Last update of the privacy policy – 02.04.2021