terms & conditions polkasoap.com shop (called ‘shop’)

This Privacy Policy contains information on the processing of your personal data in connection with the use of the website www.polkasoap.com.

administrator

The administrator of your personal data is polkasoap (hereinafter the “Administrator”), Ewelina Grocka conducting business under the name “polkasoap” with its registered office at 10 Staney Way, NN110SE Daventry, UK.

contact the administrator

In all matters related to the processing of personal data, you can contact the Administrator electronically by sending an e-mail to hello@polkasoap.com.

personal data protection

The administrator applies modern organizational and technical security measures to ensure the best protection of your personal data and guarantees that it processes them in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with with the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) (hereinafter: “GDPR”), the Act of May 10, 2018 on the protection of personal data and other provisions on the protection personal data.

Information about processed personal data

processing your data (name and surname / company name, address of residence / registered office, e-mail address) depending on the actions you take:

1.placing an order in the online store, hereinafter referred to as polkasoap.com. Application of the above personal data is a condition for the conclusion and performance of a sales contract or a contract for the supply of digital content (Article 6(1)(b) of the GDPR) for the duration of the above-mentioned contract until the expiry of the legal obligation related to accounting, hereinafter referred to as the administrator, incumbent on me. Providing them is voluntary, but the consequence of not providing them will be the inability to conclude and perform the above-mentioned contracts. contract. The administrator will process the above. personal data until the claims under the contract for the provision of services expire.

2. setting up an account in the polkasoap.com online store in order to perform the contract for the provision of account maintenance services in the polkasoap.com store on the basis of a service contract (Article 6(1)(b) of the GDPR) until the account is deleted by you or by the administrator at your request. In addition, your data will be processed until the expiry of the period in which it is possible to pursue claims – by you or by the administrator.

3. Application of the above personal data necessary for the performance of the contract for the provision of the service until the account is deleted by you or by me, hereinafter referred to as the ‘administrator’ at your request. In addition, your data will be processed until the expiry of the period in which it is possible to pursue claims – by you or by us.

4. processing is necessary to perform the contract concluded with the data subject or to take action to conclude it. Application of the above providing personal data is voluntary, but necessary in order to receive a response to the sent e-mail (the consequence of not providing it will be the inability to receive a response). The administrator will process the above. personal data until the objection is successfully raised or the purpose of processing is achieved.

5. establishing e-mail contact at hello@polkasoap.com in order to handle your questions or notifications on the basis of a contract or action taken and your request aimed at its conclusion (Article 6(1)(b) of the GDPR) – if your the inquiry or notification concerns a contract to which I am or may be a party you have a legitimate interest in processing your data in order to communicate with you (Article 6(1)(f) of the GDPR) – if your inquiry or notification is not related to contract for the duration of the contract binding you and the administrator, or – if the contract is not concluded – until the end of the period for pursuing claims or until I take into account your objection to the processing of personal data.* In addition, your data will be processed until the end of the period in which it is possible to pursue claims – by you or by me.

*whichever is applicable in a given case and which occurs first.

6. conclusion and performance of the Agreement for the provision of the Newsletter for the purpose of sending it pursuant to art. 6 sec. 1 letter b of the GDPR (processing is necessary to perform the Agreement for the provision of the Newsletter concluded with the data subject, or to take action to conclude it) and art. 6 sec. 1 letter f GDPR (processing is necessary to implement the Administrator’s legitimate interest, in this case, informing about news and promotions). Application of the above providing personal data is voluntary, but necessary in order to receive the Newsletter (the consequence of not providing them will be the inability to receive the Newsletter). The administrator will process the above. personal data from the time of effective objection or achievement of the purpose of processing, or until the statute of limitations for claims under the Newsletter Agreement (depending on which of these events occurs first).

7. taking action / omission that may result in claims related to the polkasoap.com store. Carrying out the complaint procedure pursuant to art. 6 sec. 1 letter c GDPR (processing is necessary to fulfill the legal obligation of the Administrator, in this case the obligations:

  • responding to a complaint – art. 7a of the Consumer Rights Act;
  • implementation of the Customer’s rights under the provisions on the Administrator’s liability in the event of non-compliance of the Subject of the digital service with the Agreement related to it).

Application of the above personal data is a condition for receiving a response to the complaint or exercising the Customer’s rights under the provisions on the Administrator’s liability in the event of non-compliance of the Subject of the digital service with the Agreement related to it (providing them is voluntary, but the consequence of not providing them will be the inability to receive a response to the complaint and the implementation of the above-mentioned rights) . The administrator will process the above. personal data for the duration of the complaint procedure, and in the event of the above-mentioned the Customer’s rights – until they expire.

8.analysis of your activity on the polkasoap.com website on the legal basis of Art. 6 sec. 1 letter f GDPR. Processed personal data:

  • date and time of visit;
  • device IP number;
  • type of device operating system;
  • approximate location;
  • type of web browser;
  • time spent on the Website;
  • visited subpages and other activities undertaken within the Website.
  • (processing is necessary to pursue the Administrator’s legitimate interest, in this case obtaining information about your activity on the Website).

Application of the above personal data is voluntary, but necessary in order for the Administrator to obtain information about your activity on the Website (the consequence of not providing them will be the Administrator’s inability to obtain the above-mentioned information). The administrator will process the above. personal data until the objection is successfully raised or the purpose of processing is achieved.

9.Administration of the Website. Personal data processed pursuant to Art. 6 sec. 1 letter f GDPR (processing is necessary to pursue the legitimate interest of the Administrator, in this case ensuring the proper operation of the Website):

  • IP address;
  • server date and time;
  • information about your web browser;
  • operating system information.
  • The above data is saved automatically in the so-called server logs each time you use the Website (administrating them without the use of server logs and automatic recording would not be possible).

Application of the above personal data is voluntary, but necessary to ensure the proper operation of the Website (the consequence of not providing them will be the inability to operate the Website properly). The administrator will process the above. personal data until the objection is successfully raised or the purpose of processing is achieved.

10.Adding comments on the polkasoap.com website pursuant to Art. 6 sec. 1 letter a GDPR (personal data processing is based on consent):

  • name;
  • e-mail adress;
  • IP number.
  • Application of the above personal data is voluntary, but necessary to add a comment (the consequence of not providing them will be the inability to add a comment). The administrator will process the above. personal data until the consent is withdrawn (deleting the comment).

11.Adding opinions about products and services pursuant to Art. 6 sec. 1 letter a GDPR (personal data processing is based on the consent granted):

  • name and (optionally) surname;
  • e-mail adress;
  • IP number.
  • Application of the above personal data is voluntary, but necessary in order to add an opinion (the consequence of not providing them will be the inability to add an opinion). The administrator will process the above. personal data until the consent is withdrawn (deletion of the opinion).

cookies

1.The administrator informs that the website uses “cookies” files installed on your end device. These are small text files that can be read by the Administrator’s system, as well as by systems belonging to other entities whose services are used by the Administrator (e.g. Facebook, Google).

2.The administrator uses cookies for the following purposes:

  • ensuring the proper operation of the Website – thanks to cookies, it is possible to operate the Website efficiently, use the functions available on it and conveniently move between individual subpages;
  • ensuring security – cookies are used to authenticate users and prevent unauthorized use of the customer account. They are therefore used to protect the user’s personal data against access by unauthorized persons;
  • increasing the comfort of browsing the Website – thanks to cookies, it is possible to detect errors on some subpages and constantly improve them;
  • maintaining the session state after logging in to the account – thanks to cookies, it is not required to provide authentication data on each viewed subpage, which facilitates the comfort of using the Website;
  • creating statistics – cookies are used to analyze how users use the Website (e.g. how many users visit it, how long they stay on it, which content arouses the greatest interest). This makes it possible to constantly improve the Website and adapt its operation to user preferences.
  • conducting marketing activities – thanks to cookies, the Administrator can direct advertising to users tailored to their preferences.

3.The administrator can place both permanent and temporary files on your device. Temporary files are usually deleted when you close the browser, but closing the browser does not delete permanent files.


4.Information about cookies used by the Administrator is displayed in the panel at the bottom of the Website. Depending on your decision, you can enable or disable cookies of individual categories (except essential cookies) and change these settings at any time.

5.Data collected using cookies does not allow the Administrator to identify you.

6.The administrator uses the following tools that use cookies:

  • necessary Website cookies – these files enable the proper and safe functioning of the Website (they are used, among others, to adapt the website layout to the device screen), therefore turning them off is not possible (the operation of these files is a condition for using the Website website). Necessary cookies remain on your end device for up to 1 year;
  • Google Analytics – this tool (using cookies provided by Google LLC) enables the collection of statistical data on how users use the website, including: about the number of visits, duration of visits, search engine used, location. The collected data helps to improve the Website and make it more user-friendly. Cookies used by Google Analytics remain on your end device for up to 2 years;
  • Google Ads – this tool (using cookies provided by Google LLC) allows you to collect data about your preferences (including the subpages visited, content viewed) and allows you to target ads displayed on other websites you visit. Cookies used by Google Ads remain on your end device for up to 3 months;
  • Facebook Pixel – this tool (using cookies provided by Meta Platforms Ireland Limited) allows you to determine that you have visited the Website, as well as directing ads displayed on Facebook and Instagram to you and measuring their effectiveness. Cookies used by Facebook Pixel remain on your end device for up to 3 months.

7.Through most commonly used browsers, you can check whether cookies have been installed on your device, as well as delete installed cookies and block their installation in the future by the Website or other websites. Disabling or limiting the use of cookies may, however, cause quite serious difficulties in using the Website, e.g. in the form of the need to log in to each subpage, longer page loading time, restrictions in the use of functionalities.

recipients of personal data and external services

The recipients of personal data will be the following external entities cooperating with the Administrator:

  1. internet domain provider;
  2. newsletter service provider;
  3. fast online payment service provider;
  4. data hosting service provider;
  5. companies providing tools for analyzing activity on the Website and directing direct marketing to people using it (including Google Analytics);
  6. companies providing delivery services;

In addition, personal data may also be transferred to public or private entities, if such an obligation results from generally applicable provisions of law or a final decision.

transfer of personal data to a third country

Due to the Administrator’s use of tools such as Google Analytics or Facebook Pixel, your personal data may be transferred to the following third countries: Great Britain, Canada, USA. The basis for transferring data to the above-mentioned third countries are:

  • in the case of Great Britain, Canada – decisions of the European Commission stating the appropriate level of personal data protection in each of the above-mentioned third countries;
  • in the case of the USA – contractual clauses ensuring an adequate level of protection, in line with the standard contractual clauses set out in Commission Implementing Decision (EU) 2021/914 of June 4, 2021 on standard contractual clauses for the transfer of personal data to third countries under the Regulation of the European Parliament European Union and of the Council (EU) 2016/679.

You can obtain from the Administrator a copy of the data transferred to a third country.

eligibility

In connection with the processing of personal data, you have the following rights:

  1. the right to information which personal data concerning you are processed by the Administrator and to receive a copy of this data (the so-called right of access). Issuing the first copy of the data is free of charge, for subsequent copies the Administrator may charge a fee;
  2. if the processed data becomes outdated or incomplete (or otherwise incorrect), you have the right to request its rectification;
  3. in certain situations, you can ask the Administrator to delete your personal data, e.g. when:
    1. the data will no longer be needed by the Administrator for the purposes he informed about;
    2. you have effectively withdrawn your consent to data processing – unless the Administrator has the right to process data on another legal basis;
    3. the processing is unlawful;
    4. the need to delete data results from the legal obligation imposed on the Administrator;
  4. in the event that personal data is processed by the Administrator on the basis of consent to processing or in order to perform the Agreement concluded with him, you have the right to transfer your data to another administrator;
  5. in the event that personal data is processed by the Administrator on the basis of your consent to the processing, you have the right to withdraw this consent at any time (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal);
  6. if you decide that the processed personal data are incorrect, their processing is unlawful, or the Administrator no longer needs specific data, you can request that the Administrator does not make any operations, but only stored them;
  7. you have the right to object to the processing of personal data, the basis for which is the legitimate interest of the Administrator. In the event of an effective objection, the Administrator will stop processing personal data in the above-mentioned. purpose;
  8. you have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of personal data violates the provisions of the GDPR.