Privacy policy
Online store privacy policy
Www.panna-studio.com
And general provisions
1. This privacy policy defines the method of collecting, processing and storing personal data necessary to provide electronic services via the website www.panna-studio.com (hereinafter: website).
2. The administrator of users' personal data is Miss Studio sp.z o.o. (hereinafter: Administrator).
3. Personal data is processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (general data protection regulation) (hereinafter: the GDP).
4. The data collected by the Administrator will be:
a. processed in accordance with the law,
b. processed in clearly defined goals and not subject to further processing inconsistent with these goals,
c. substantively correct and adequate in relation to the goals for which they are processed
d. stored no longer than it is necessary to achieve the purpose of processing.
II. Purpose and legal grounds for data processing
1. The Administrator processes personal data necessary for the provision and development of the services available through the Website and its individual functionalities.
2. Personal data will be processed for the following purposes:
a. account registration, verification of the User's identity and the implementation of the contract on the provision of electronic services in accordance with the Act of 18 July 2002 on the provision of electronic services, including in particular by ensuring the possibility of using the User Account - based on the acceptance of the terms of the Regulations (Article 6 (1) (b) of the GDPR);
b. communication with the User in order to provide him with necessary information and build positive and reliable relations with him, which is a legitimate interest of the administrator (Article 6 (1) lit. f GDPR);
c. Promoting by the Administrator of products and/or own services and your partners by directing electronic marketing information (Newsletter) as long as the User agreed to receive such notifications via e-mail (Article 6 (1) lit. and GDPR);
d. providing access to information about new products from the industry directly related to the administrator's activities, provided that the User has agreed to receive such notifications via e-mail (Article 6 (1) lit.
e. for analytical and statistical purposes on the basis of the legitimate interest of the administrator consisting in conducting verification of users' activity and their preferences to optimize services and products as well as the functionality of the Website (Article 6 (1) lit. f GDPR);
f. a possible determination, claiming claims or defense against them on the basis of the legitimate interest of the administrator consisting in the protection of its rights (Article 6 (1) lit. f GDPR).
3. In each of the above -mentioned cases (paragraph 2), the provision of data is voluntary, but necessary to conclude a contract or use other functionalities of the Website.
III. Personal data processing period
1. Personal data will be processed for the period in which a person remains an active user of the Website (has a user account), and after that time for the period necessary to maintain compliance with the law, investigation or defense against any claims, but not longer than 3 years calculated from the date of termination of the contract on the provision of electronic services.
2. Data processed on the basis of consent will be processed until the consent is withdrawn with the proviso that the withdrawal of this consent does not affect the compliance of the data processing that was made before this withdrawal.
IV. Information about processing
1. Personal data depending on the purpose of processing may be disclosed:
a. to entities related to the Administrator
b. entities cooperating with the administrator,
c. subcontractors, in particular to entities providing and servicing selected systems and IT solutions,
d. entities servicing online payments,
e. entities providing courier and social services,
f. Legal office.
2. Personal data processed by the Administrator will not/will be transferred outside the European Economic Area or to International Organizations.
V. The rights of data subjects relate
1. The website user has the right:
- access to the content of your personal data
- data rectification
- data deletion
- Data processing restrictions
- data transfer
- objected to the processing of the administrator's justified interest on the basis of the law
- withdrawing consent at any time without affecting the lawfulness of the processing, which was carried out on the basis of this consent before its withdrawal
2. The User has the right to lodge a complaint to the President of the Office for Personal Data Protection in a situation where he considers that the processing violates his rights and freedom.
3. In the data processing process, there is no automated decision making, including profiling.
VI. Final provisions
1. The Administrator reserves the right to introduce changes to this Privacy Policy at the same time ensures that the rights of Users resulting from these documents will not be limited.
2. The User will be informed about any change in the Privacy Policy through a message available on the Website.
