PRIVACY POLICY
Dear User!
We care about your privacy and want you to feel comfortable when using our services. Therefore, below we present the most important information about how we process your personal data and the cookies used by our Store. This information has been prepared in accordance with the GDPR, or General Data Protection Regulation.
PERSONAL DATA CONTROLLER
ADRIANNA MALEC, an entrepreneur running a business under the name GuilteeShop Adrianna Malec, entered into the Central Registration and Information on Business, maintained by the minister responsible for the economy and maintaining the Central Registration and Information on Business, NIP 7732446822, REGON no. 389380018, ul. Posag 7 Panien 18/116, 02-495 Warsaw; BDO registration no. 000586963.
If you wish to contact us regarding our processing of your personal data, please contact us at the following email address: mail@guiltee.shop.
YOUR PERMISSIONS
You have the right to request:
- access to your personal data, including obtaining a copy of your data (Article 15 GDPR or - if applicable - Article 13 paragraph 1 letter f GDPR),
- their rectification (Article 16 of the GDPR),
- deletion (Article 17 of the GDPR),
- restrictions on processing (Article 18 of the GDPR),
- transfer of data to another controller (Article 20 of the GDPR).
And also the law:
- to object to the processing of your data at any time:
- for reasons related to your particular situation – in relation to the processing of your personal data, based on Article 6(1)(f) of the GDPR (i.e. on our legitimate interests) (Article 21(1) of the GDPR);
- if personal data are processed for direct marketing purposes, to the extent that the processing is related to such direct marketing (Article 21(2) of the GDPR).
Contact us if you wish to exercise your rights. You can object to our use of cookies (which you can read about below) in particular by using the appropriate browser settings.
If you believe that your data is being processed unlawfully, you can file a complaint with the President of the Personal Data Protection Office.
PERSONAL DATA AND PRIVACY
Below you will find detailed information on the processing of your data depending on the actions you take.
1. Placing an order in the Store
| For what purpose? | |
|---|---|
| your order is completed | |
| On what basis? | |
| sales contract (Article 6(1)(b) of the GDPR) | legal obligation, in particular related to accounting and product safety, obliging us to process your personal data (Article 6 (1) (c) GDPR) |
| How long? | |
| for the duration of the above-mentioned agreement | until our legal obligations expire |
| Furthermore, your data will be processed until the expiry of the period in which claims can be pursued – by you or by us (more information on this can be found in the last table of this section) |
|
| What happens if you don't provide data? | |
| you will not be able to place an order | |
2. Creating an account in the Store
| For what purpose? |
|---|
| performance of the contract for the provision of the account management service in the Store |
| On what basis? |
| service contract (Article 6 (1) (b) GDPR) |
| How long? |
| for the duration of the above-mentioned agreement |
| Furthermore, your data will be processed until the expiry of the period in which claims can be pursued – by you or by us (more information on this can be found in the last table of this section) |
| What happens if you don't provide data? |
| you will not be able to create an account or use its features, such as viewing order history or checking order status |
3. Contacting us (e.g., to ask a question)
| For what purpose? | |
|---|---|
| handling your inquiries or reports | |
| On what basis? | |
| a contract or steps taken at your request to conclude it (Article 6(1)(b) of the GDPR) – if your inquiry or notification concerns a contract to which we are or may be a party | our legitimate interest in processing your data for the purpose of communicating with you (Article 6, paragraph 1, letter f of the GDPR) – if your inquiry or notification is not related to the contract |
| How long? | |
| for the duration of the contract binding us or – if the contract is not concluded – until the expiry of the claims period – see the last table in this section* | until the expiry of the claims period – see the last table in this section – or until we take into account your objection to processing* |
| Furthermore, your data will be processed until the expiry of the period in which claims can be pursued – by you or by us (more information on this can be found in the last table of this section) |
|
| What happens if you don't provide data? | |
| we will not be able to respond to your inquiry or report | |
4. Browser settings or other similar action that allows for analytical activities
| For what purpose? |
|---|
| analyzing how you use and navigate the Store's website in order to improve its functionality (read more about this in the "Analytical Activities" and "Cookies" sections of the Privacy Policy) |
| On what basis? |
| our legitimate interest in processing data for the above-mentioned purpose (Article 6 (1) (f) of the GDPR) |
| How long? |
| until cookies used for analytical purposes expire or are deleted by you* |
| What happens if you don't provide data? |
| we will not take into account the way you use and navigate the Store's website when working on its development |
5. Your consent to receive marketing content from us (e.g., information about special offers)
| For what purpose? | |
|---|---|
| sending marketing information, especially special offers | analyzing the effectiveness of the messages we send in order to establish general rules for the effective sending of messages in our business (read more about this in the "Analytical Activities" section of the Privacy Policy) |
| On what basis? | |
| Your consent to our marketing activities (Article 6 (1) (a) GDPR) | our legitimate interest in processing data for the above-mentioned purpose (Article 6 (1) (f) of the GDPR) |
| How long? | |
| until you withdraw your consent – remember, you can withdraw your consent at any time. Data processing remains lawful until you withdraw your consent. | until we take into account your objection to processing |
| Furthermore, your data will be processed until the expiry of the period in which claims can be pursued – by you or by us (more information on this can be found in the last table of this section) |
|
| What happens if you don't provide data? | |
| you will not receive our marketing materials, including information about our special offers | |
6. Subscribing to the newsletter
| For what purpose? | |
|---|---|
| sending newsletter | analyzing the effectiveness of the content we send in order to establish general rules for the effective sending of messages in our business (read more about this in the "Analytical Activities" section of the Privacy Policy) |
| On what basis? | |
| contract for the provision of newsletter sending services (Article 6, paragraph 1, letter b of the GDPR) | our legitimate interest in processing data for the above-mentioned purpose (Article 6 (1) (f) of the GDPR) |
| How long? | |
| until you unsubscribe from our newsletter | until we take into account your objection to processing |
| Furthermore, your data will be processed until the expiry of the period in which claims can be pursued – by you or by us (more information on this can be found in the last table of this section) |
|
| What happens if you don't provide data? | |
| you will not be able to receive information about the Store and our services | |
7. Taking action or omitting action that may give rise to claims related to the Store or our services
| For what purpose? |
|---|
| establishing, pursuing or defending possible claims related to the concluded contract or the services provided |
| On what basis? |
| our legitimate interest in processing personal data for the purpose indicated above (Article 6 (1) (f) of the GDPR) |
| How long? |
| until the expiry of the limitation period for claims or until we take into account your objection to processing* |
| What happens if you don't provide data? |
| no possibility of establishing, pursuing or defending claims |
ANALYTICAL ACTIVITIES
We conduct analytical activities on the Store's website to improve its intuitiveness and accessibility – this will only happen if you allow such activities. As part of the analysis, we will consider how you navigate the Store – for example, how much time you spend on a given subpage or where you click within the Store. This will allow us to optimize its layout, appearance, and content as we work on developing the Store to improve its functionality.
Furthermore, if you expressly wish to receive marketing messages or a newsletter from us, we may analyze the effectiveness of our mailings. For example, we may check whether and how they affected activity in our Store. Such activities will help us establish general principles for sending such messages in our business – for example, regarding optimal mailing times or how to formulate effective content.
DATA SECURITY
When processing your personal data, we use organizational and technical measures in accordance with applicable law, including connection encryption using an SSL/TLS certificate.
COOKIES
Our Store, like most websites, uses cookies. These files:
- are saved in the memory of your device (computer, telephone, etc.);
- do not change your device settings.
In this Store, cookies are used for the following purposes:
- remembering your session
- statistical
- marketing
- providing Store features
To learn how to manage cookies, including how to disable them in your browser, you can consult your browser's help file. You can find information on this topic by pressing the F1 key in your browser. You can also find relevant instructions on the following subpages, depending on the browser you are using:
Below you will find information about the functions of the cookies we process and their validity period.
| cookie name | cookie validity period | cookie function |
|---|---|---|
| _fbp | 3 months | Marketing |
| _ga | 3 months | Statistics |
| _gcl_au | 3 months | Marketing |
| fbe_conversion_allow | 1 year | Marketing |
By using the appropriate options in your browser, you can at any time:
- delete cookies,
- block the use of cookies in the future.
In such cases, we will no longer process them.
EXTERNAL SERVICES / DATA RECIPIENTS
We use the services of external entities to support us in running our business. We entrust them with processing your data – these entities process data only upon our documented instructions.
Below you will find a list of recipients of your data:
| OPERATION | DATA RECIPIENTS | DATA TRANSFER OUTSIDE THE EUROPEAN UNION |
|---|---|---|
| any activity in connection with the Store | sales software provider | no space |
| staying on the Store website with settings allowing marketing activities | marketing services provider | yes – United States of America ** |
| staying on the Store website with settings allowing analytical activities | entity enabling analytical activities on the website | yes – United States of America ** |
| placing an order in the Store | Payment Provider | no space |
| the entity delivering the product to you – unless you have chosen the personal collection option | no space | |
| a provider of software that facilitates business operations (e.g., accounting software) | no space | |
| your use of services provided to us in connection with the Store by social networking sites | social networks | yes – United States of America ** |
And also:
relevant public authorities to the extent that we are obliged to provide them with data.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
** Therefore, your personal data may also be processed by entities outside the European Union. An adequate level of protection for your data, including through the use of appropriate safeguards, is ensured by:
- participation of these entities in the so-called Data Privacy Framework, a program established by the European Commission's implementing decision as a set of rules guaranteeing adequate protection of your privacy - in the case of entities from the United States of America