To fulfil the obligations resulting from the Regulation of the European Parliament (EU) Council 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (general regulation about data protection) hereinafter referred to as " GDPR ", below we present a privacy policy regarding the processing of personal data by the B2B ordering platform EgaKids, website address of the platform: www.egakids.pl (hereinafter: "Platform" or "EgaKids"). This document is for information purposes and does not constitute the source of your duties. The privacy policy presents the following issues relevant to you:

1. WHO IS AN ADMINISTRATOR OF PERSONAL DATA?

The administrator or co-administrator of your personal data is F.P.H.U. "EGA" Ewa Pacak, ul. Częstochowska 18, 42-120 Miedźno, NIP: 5741532431, REGON: 151363926 or / and EGA LOGISTIC Kacper Pacak, ul. Częstochowska 18, 42-120 Miedzno, Tax identification number -NIP: 5732854715, REGON: 361572975 (hereinafter referred to as: "Platform" or "EgaKids");

Contact with the Personal Data Administrator is possible:

1) By phone, call +48 504 473 888,

2) Via e-mail contact: biuro@egakids.pl

3) By letter to the following address: Częstochowska 18, 42-120 Miedźno.

 

2. WHOSE DATA PROCESSES EGAKIDS?

This Privacy Policy applies to the processing by EgaKids of personal data of the following persons:

1) Platform Users,

2) Visitors to the Platform,

3) Customers using the Newsletter service - if EgaKids decides to implement it,

4) Clients / Contractors and potential Clients / Contractors of the Platform, people acting on their behalf, employees, co-workers and other contact persons of Clients or Potential Customers;

5) Other people contacting EgaKids via e-mail, contact form, by post or by phone

3. WHICH DATA PROCESSES EGAKIDS? FOR WHAT PURPOSE? HOW LONG DATA ARE STORED?

The following are subject-ordered information about the scope and type of personal data processed for a specific purpose, the basis of processing and the time of data storage.

A. USER ACCOUNT

The purpose of processing

The purpose of data processing is to set up and maintain a user account.

The scope and type of personal data

Personal data processed in connection with the establishment and operation of a Platform user account are:

• first name and last name,

• name of the entity,

• address,

• number NIP,

• e-mail address,

• user password.

The user may at any time modify the data assigned to the account by using the option to change the data available after logging in to the account.

Legal basis

The legal basis for the processing of your personal data collected in connection with the establishment and operation of your account is:

• indispensability for the Platform to perform an account agreement on the Platform, which the User concludes with EgaKids on the basis of the Platform's regulations (Article 6 paragraph 1 letter b) of the GDPR),

Processing time

Personal data obtained in connection with the establishment and operation of the User's account are processed for the duration of the account agreement on the Platform.

The User may terminate the account maintenance agreement at any time by deleting the account, which will result in the removal of personal data from the database. However, deletion of the account does not result in the removal of order data submitted via the Platform.

B. SUBMITTING THE ORDER

The purpose of processing

The purpose of processing personal data is to accept the order and to execute the sales contract.

The scope and type of personal data

Personal data processed in connection with placing an order and concluding a sales contract are:

• first name and last name,

• name of the entity,

• address of the entity,

• delivery address of the subject of the sales contract,

• number NIP,

• e-mail address,

• user password.

If the above mentioned data were provided by the User in his account, the fields of the order form are automatically filled with data assigned to the User's account, whereby the User may enter other data.

In addition to personal data, detailed order data such as date of order, subject and value of the order, chosen method of delivery and payment are also processed.

Legal basis

The legal basis for processing User's personal data collected in connection with placing an order and concluding a sales contract is:

• indispensability for the Platform to perform an account agreement on the Platform, which the User concludes with EgaKids on the basis of the Platform's regulations (Article 6 paragraph 1 letter b) of the GDPR).

Time of data storage

Personal data provided in the order form is stored in the Platform database and stored until the claims regarding the sale agreement concluded via the Platform are time-barred. If the User has several sales contracts, each contract is saved in the database as a separate item.

C. ISSUING OF THE INVOICE

The purpose of processing

The purpose of data processing is issuing and delivering a VAT invoice in relation to the order placed and the sales contract concluded.

The scope and type of personal data

Personal data processed in connection with the invoice issue are:

• first name and last name,

• name of the entity,

• address of the entity,

• number NIP,

• other data necessary to issue an invoice,

Legal basis

The legal basis for the processing of personal data in connection with the invoice issue and delivery is the obligation to issue a VAT invoice, imposed by law (Article 6 paragraph 1 letter c) of the GDPR), in particular the relevant provisions of the Value Added Tax Act.

Time of data storage

Personal data processed in connection with the invoice issue are processed in accounting documents for the time required by the relevant law, in particular the provisions of the Accounting Act.

D. RETURNS AND COMPLAINTS

The purpose of processing

The purpose of the processing is to fulfill the obligations of the Platform as a seller, related to the use by the Buyer of the right to withdraw from the contract or complaint.

The scope and type of personal data

Personal data processed in connection with the withdrawal or complaint are collected by the Platform on the basis of the withdrawal form or complaint form, completed and delivered by the Buyer.

Legal basis

The legal basis for the processing of personal data in connection with the withdrawal by the Buyer or submission of a complaint is the legal obligation incumbent on EgaKids (Article 6 paragraph 1 letter c) of the GDPR), in particular the obligation to return what the buyer has provided in connection with the sales contract or obligation of consideration and implementation of the buyer's rights related to the complaint.

Time of data storage

The data reported on the withdrawal form or complaints form are kept for the time required by the applicable law or until the claims are time-barred, whichever is later. The fact of withdrawal from the contract or lodging a complaint is also stored in the platform system.

E. CONTACT

The purpose of processing

The purpose of data processing is to provide information or other activities requested by a person contacting EgaKids.

The scope and type of personal data

Personal data processed due to contact is:

• first name and last name,

• name of the entity,

• address (mailing address) - in the case of mail contact,

• telephone number - in the case of telephone contact,

• e-mail address - in the case of contact via e-mail,

• other data contained in correspondence,

Legal basis

The legal basis for the processing of personal data in connection with the conduct of correspondence is the consent resulting from initiating contact with EgaKids and providing personal data to the Platform (Article 6 paragraph 1 letter a) of the GDPR).

Time of data storage

Data processed in connection with making contact may be subject - along with the content of correspondence - to archiving. Data may be stored for a period of 6 months from the end of correspondence or until the economic reasons for which the data were processed have ceased to exist.

F. RECOVERY OF ABANDONED BASKETS

The purpose of processing

The purpose of the processing is to implement the recovery mechanism of abandoned baskets, which the Platform is equipped with.

The mechanism is that if the User enters data into the order form but does not complete the transaction, he will receive an e-mail reminder about the possibility of completing the order.

The scope and type of personal data

The data processed in connection with the mechanism of abandoned baskets is the data given in the order form.

Legal basis

The legal basis for the processing of personal data in connection with the mechanism of abandoned baskets is:

• indispensability for the Platform to perform an account agreement on a platform that the User concludes with EgaKids on the basis of the Platform's regulations (Article 6 paragraph 1 letter b) of the GDPR).

Time of data storage

Data processed in connection with the mechanism of abandoned baskets is stored for a period of 30 days.

G. SERVER LOGS

Using the platform involves sending queries to the server on which the Platform is stored. Each query addressed to the server is saved in the server logs.

The logs include data such as:

• IP address of the device used by the User by visiting the Platform,

• date and time of the event,

• information about the internet browser used when using the Platform,

• operating system used while using the Platform.

Logs are saved and stored on the server. Data stored in the server logs are not associated with specific people using the Platform and are not used by EgaKids to identify the person using the Platform.

H. NEWSLETTER

General information

The platform performs the Newsletter service on the following principles:

• Newsletter service consists in sending by EgaKids information about the offer in the range of products and services offered by the Platform, current promotions, contests, events, news and other information about the Platform.

• The service is performed on the basis of an agreement for the provision of the Newsletter service, concluded between EgaKids as a service provider and the Service Recipient. The contract is concluded for an indefinite period and the Customer has the right to terminate the contract for the use of the Newsletter service at any time with immediate effect.

• Conclusion of a contract for the provision of the Newsletter service takes place upon acceptance of the Regulations for the provision of the Newsletter service by the Customer and providing data in the subscription form for the Newsletter service. With this moment, EgaKids is obliged to provide the Newsletter service electronically.

• EgaKids has the right to delete an incorrect or non-existent e-mail address provided on the form. In this case, the contract for the use of the Newsletter service is terminated.

The detailed rules for the provision of the Newsletter service are set out in the Regulations for the provision of the Newsletter service.

The purpose of processing

The purpose of data processing is to provide the Newsletter service.

The scope and type of personal data

The Customer's personal data processed in connection with the Newsletter service are:

• First name and last name,

• E-mail address,

Legal basis

The processing of personal data takes place based on the consent of the Service Recipient, i.e. art. 6 par. 1 point a) GDPR. Consent may be withdrawn at any time by cancelling the subscription in the manner indicated in the Regulations of the Newsletter service.

Time of data storage

Personal data is stored until the subscriber cancels the subscription. After the subscription has been cancelled, personal data is stored for the time necessary to protect the legitimate interests of EgaKids, in particular for the defence against claims against EgaKids.

I. COOKIES AND OTHER TRACKING TECHNOLOGIES

The EgaKids platform, like almost all other websites, uses cookies to optimize your use of the Platform by providing a convenient and customized use of the Website.

What are Cookies?

Cookies are small text information stored on your terminal equipment (eg computer, tablet, smartphone), which can be read by the telecom system of the EgaKids Platform.

Cookies allow the EgaKids Platform:

• ensure proper functioning of the Platform, in accordance with the expectations of the Users,

• remember to log in to the User's account each time they visit the Platform,

• remember the User's settings during and between visits to the Platform,

• improve the speed and security of using the Platform,

• enable the User to share content on social networking sites,

• enable the User to play content from external websites,

• improve the functions available to the User in the Platform,

• use marketing tools,

• send personalized advertising to the User.

Consent to Cookies

During your first visit to the site, information about the use of cookies is displayed. Accepting and closing this information means that you agree to the use of cookies in accordance with the provisions of this Privacy Policy. You have the right to withdraw your consent at any time by deleting cookies and changing cookie settings in your browser. Disabling cookies may, however, cause difficulties in using the Platform, as well as many other websites that use cookies.

Own cookies

Cookies can be divided into your own and from third parties. As for own Cookies, EgaKids uses them for the proper operation of the Platform, in particular for the following purposes:

• proper operation of the basket and the order process,

• determine if the User is logged in,

• remembering the User's login,

• noting the acceptance of the regulations and giving marketing consent.

Third party cookies

EgaKids, like most websites, uses functions provided by external websites, such as Facebook or YouTube.

Using a widget that allows you to share content on social networks connects to the acceptance of Facebook cookies and other social networking sites.

Third party cookies are also used as part of remarketing and as part of the statistical activities mentioned below.

Cookies used for statistical purposes

We use cookies to track Platform statistics, such as the number of visitors, the type of operating system and web browser used to browse the Platform, time spent on the Platform, visited Platform subpages, etc. We use Google Analytics in this area. The information collected in this area is completely anonymous and does not allow you to be identified.

Marketing

We use cookies to conduct remarketing activities involving the presentation of your advertising encouraging you to return to the website or take advantage of promotions, discounts and the like. We also use Pixel Facebook to be able to target your ads on Facebook. Additional tracking tools

The platform's engine is equipped with a plug that allows you to be seen as a visitor to the Platform and to save the history of recently visited items.

4. HOW EGAKIDS PROTECTS YOUR PERSONAL DATA?

1. The EgaKids platform has implemented appropriate technical and organizational measures tailored to the business, to ensure the security of personal data processing, in particular to ensure the confidentiality, integrity and availability of personal data.

2. EgaKids systematically carries out a risk analysis in order to verify the adequacy and effectiveness of the implemented measures and implements appropriate measures in case of detection of potential threats.

3. EgaKids exercises control over access to personal data, in particular by limiting and controlling persons authorized to access personal data, used authentication systems, firewalls and other adequate means.

4. EgaKids shall process personal data to the extent and for the period necessary to fulfill the purposes of processing.

5. EgaKids obliges persons who are authorized the processing of personal data and persons entrusted with the processing of personal data to maintain confidentiality of personal data and methods of their processing and to process personal data in a manner and while maintaining measures to ensure protection and lawfulness of processing.

6. EgaKids processes personal data in accordance with the applicable provisions of law, in particular the provisions of the GDPR and the Act of August 29, 1997 on the protection of personal data.

5. WHAT ARE THE RIGHTS OF THE PEOPLE WHOSE DATA PROCESSES B2B EGAKIDS?

1. You have the right to:

1. access to the content of your data,

2. the right to rectify data,

3. the right to delete data (to the extent it is possible under the applicable provisions),

4. the right to limit processing,

5. the right to transfer data.

6. the right to withdraw consent to the processing of personal data, if the processing takes place on the basis of the consent of the data subject. The consent may be revoked at any time without affecting the lawfulness of the processing which was carried out on the basis of the consent prior to its withdrawal.

Requests regarding the implementation of the above rights should be reported to the EgaKids Platform via the provided contact details.

2. You also have the right to lodge a complaint with the supervisory body for the processing of your personal data. The supervisory body is the President of the Office for Personal Data Protection.

3. Providing your personal data by yourself is voluntary, but necessary to meet the purposes of processing and, depending on the circumstances, failure to provide personal data may result in the inability to achieve these goals, including inability to establish contact, conclusion or performance of a sales contract for products offered by the Platform.

4. If the law imposes the obligation to provide personal data, their submission is obligatory.

6. WHO ARE YOUR PERSONAL DATA TRANSFERED TO?

1. Your personal data may be transferred to the following categories of recipients:

1. entities providing courier services, in particular a courier company GEIS (Geis PL sp. z o.o. with a registered office in Sosnowiec),

2. suppliers of services supplying the Platform with technical and organizational solutions and management of its organization, in particular:

• ICT service providers, in particular Webh (ultimahost.pl Szeliga sp. j. With headquarters in Łódź)

• mailing service providers - in particular, MailerLite,

3. providers of accountancy, legal, control and advisory services, in particular accounting, financial institutions, law offices;

4. courts, other public bodies, institutions or entities authorized by law.

2. EgaKids does not intend to transfer your personal data to third countries or international organizations.

7. PROFILING

Based on the personal data provided by you, the EgaKids Platform will not make automated decisions to you, including decisions that result from profiling.