This Privacy Policy sets out the rules for processing personal data collected via the online store www.kolory-swiatla.pl (hereinafter referred to as the "Online Store").
The owner of the Online Store and the data controller is Michał Krempa, conducting business under the name Przedsiębiorstwo Usługowo Handlowe "Proelectro" Michał Krempa, with its registered office in Ostrowiec Świętokrzyski (27-400), ul. Ludwika Waryńskiego 53a, entered in the Central Registration and Information on Economic Activity maintained by the Minister of Development and Technology, VAT no: PL6612213776, REGON (registration No): 260347699, hereinafter referred to as Kolory-swiatla.pl.
The personal data collected by Kolory-swiatla.pl via the Online Store are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR.
Kolory-swiatla.pl pays particular attention to the privacy of Customers visiting the Online Store.
§1 Types of Processed Data, Purposes, and Legal Basis
Kolory-swiatla.pl collects information concerning:
natural persons carrying out legal activities not directly related to their business activity,
natural persons running business or professional activity in their own name,
natural persons representing legal entities and organizational units without legal personality to whom the law grants legal capacity, collectively referred to as Customers.
Customers’ personal data are collected in the following cases:
registering an account in the Online Store in order to create and manage an individual account. Legal basis: necessity for the performance of a service account agreement (Art. 6(1)(b) GDPR);
placing an order in the Online Store to perform a sales agreement. Legal basis: necessity for the performance of a sales agreement (Art. 6(1)(b) GDPR);
subscribing to the newsletter to perform a contract whose object is a Newsletter service provided electronically. Legal basis - consent of the data subject (Art. 6(1)(a) GDPR);
using the contact form service in the Online Store to perform electronically supplied services. Legal basis: necessity for the performance of the contact form service agreement (Art. 6(1)(b) GDPR);
using the "post a review" service to perform a contract for this service provided electronically. Legal basis: necessity for the performance of the review service agreement (Art. 6(1)(b) GDPR);
using the "ask about product" service to perform a contract for this service provided electronically. Legal basis: necessity for the performance of the "ask about product" service agreement (Art. 6(1)(b) GDPR);
customer satisfaction surveys. Legal basis: necessity of processing to pursue the legitimate interest of Kolory-swiatla.pl, i.e., to ensure and maintain high quality of service and customer satisfaction with products and services (Art. 6(1)(f) GDPR).
In the case of account registration in the Online Store, the Customer provides:
email address;
address data;
During account registration in the Online Store, the Customer sets an individual password. The Customer may change the password later as described in §5.
In case of placing an order in the Online Store, the Customer provides the following data:
email address;
address data:
postal code and city;
country;
street and house/flat number.
name and surname;
phone number;
In the case of business customers, the above data are additionally extended by:
company name;
tax identification number (NIP);
When subscribing to the Newsletter service, the Customer only provides their email address.
When using the contact form service, the Customer provides:
email address;
first name;
When using the "ask about product" service, the Customer provides:
email address;
first name;
In the case of customer satisfaction surveys, Kolory-swiatla.pl processes the following data:
email address;
IP address;
order number;
When using the Online Store website, additional information may be collected, in particular: IP address assigned to the Customer's computer or external IP of the Internet provider, domain name, browser type, access time, operating system type.
Navigation data may also be collected from Customers, including information about links and references selected, as well as other actions taken in the Online Store. Legal basis - legitimate interest (Art. 6(1)(f) GDPR) related to facilitation of electronically supplied services and improvement of their functionality.
For the purpose of establishing, pursuing, and enforcing claims, some personal data provided by the Customer while using the Online Store functionalities may be processed, such as: name, surname, data regarding use of services (when the claims result from the way the Client uses the services), and other data necessary to prove the existence of a claim, including the extent of the incurred loss. Legal basis - legitimate interest (Art. 6(1)(f) GDPR) related to establishing, pursuing, and enforcing claims and defending against claims before courts and other state authorities.
Providing personal data to Kolory-swiatla.pl is voluntary, with respect to concluded sales agreements or provided services via the Store’s website, but failure to provide certain data during the Registration process will prevent Registration and account creation, and in the case of placing an order without account registration, it will prevent the order and its completion.
§2 To whom are the data disclosed or entrusted and how long are they stored?
Customer personal data are provided to service providers used by Kolory-swiatla.pl when operating the Online Store. Depending on contractual arrangements and circumstances, service providers either act on the instructions of Kolory-swiatla.pl regarding the purposes and methods of processing (processors) or determine the purposes and methods themselves (data controllers).
Processors: Kolory-swiatla.pl uses providers who process personal data only on the instruction of Kolory-swiatla.pl. These include, among others: hosting providers, accounting services, marketing systems providers, customer satisfaction survey providers, analytical tools providers for the Online Store, marketing campaign analytics.
Controllers: Kolory-swiatla.pl uses providers who do not act exclusively on instruction and independently determine how Customer personal data are used. They provide electronic payment and banking services.
Location: Service providers have their headquarters mainly in Poland and other countries of the European Economic Area (EEA). Some providers are located outside the EEA. When data is transferred outside the EEA, the Administrator ensures that the providers offer a high level of personal data protection. This is primarily ensured by the obligation to apply standard contractual clauses adopted by the Commission (EU) or participation in the "Privacy Shield" program established by Commission Implementing Decision (EU) 2016/1250 of 12 July 2016.
Customer personal data are stored:
If the processing is based on consent, then the data are processed by Kolory-swiatla.pl until the consent is withdrawn, and after withdrawal, for the period corresponding to the limitation period for claims either by or against Kolory-swiatla.pl (six years, or three years for periodic claims or those connected to
