protecting personal data

 

Personal Data Protection

YAVORSKA Limited Liability Company, ul. Władysława Syrokomli 3, 80-267 Gdańsk, entered into the National Court Register by

The District Court Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register under number KRS 0000421633 (“Controller”), in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”), hereby informs that it may process your personal data as a data controller, provided that a valid legal basis exists.

Accordingly, the Controller informs that:

  1. Your personal data may be processed for purposes necessary to: (i) perform a contract to which you are a party; (ii) take steps at your request prior to entering into a contract; (iii) comply with a legal obligation incumbent upon the Controller; (iv) pursue the legitimate interests of the Controller; and (v) based on your consent – for purposes consistent with the content of that consent.

In particular, if you are:

1.1. a customer of the online store https://yavorska.co (hereinafter the “E-Store”), we process your data for purposes related to transactions made through the E-Store and for purposes arising from the legitimate interests pursued by the Controller;

1.2. a subscriber to the newsletter organized by the Controller (hereinafter the “Newsletter”), we process your data for purposes related to the subscription and distribution of the Newsletter;

1.3. a customer service inquirer (hereinafter “Customer Service” or “BOK”), we process your data for purposes of contacting you regarding matters you have raised with Customer Service, in particular those related to transactions within the E-Store or participation in the Loyalty Program, or to take actions at your request prior to entering into a contract, or for purposes arising from the legitimate interests pursued by the Controller.

  1. The provided data may be processed on the basis of Article 6(1)(a), (b), (c), and (f) of the GDPR;
  1. Personal data may be stored for the period necessary to achieve the purposes indicated above. In the case of processing based on your consent – personal data will be stored until the consent is withdrawn.

In particular, if you are:

3.1. a customer of the E-Store – personal data will be stored for the period necessary to carry out E-Store transactions and handle complaints, as well as for the duration of your E-Store account, but no longer than 3 years from the deletion of the account. If you make a transaction without creating an account, your data will be stored for 3 years from the date of the transaction;

3.2. a Newsletter subscriber – personal data will be stored for the duration of the Newsletter subscription until you withdraw your consent to the subscription;

3.3. a Customer Service inquirer – personal data will be stored for the period necessary to conduct correspondence with you through Customer Service.

If legal regulations require earlier deletion or longer retention of your personal data, the Controller will comply with that legal obligation.

  1. You have the right to request from the Controller access to your personal data, as well as their rectification, erasure, or restriction of processing;
  1. You have the right to withdraw your consent to the processing of personal data at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal;
  1. You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the law;
  1. Personal data have been obtained directly from you (the data subject);
  1. Providing your data is voluntary; however, for certain specific purposes defined in the Controller’s applicable regulations, providing data may be necessary to complete specific transactions or actions;
  1. Your data may be subject to analytical profiling in accordance with the Privacy Policy; however, this will not produce any legal effects concerning you. Binding decisions will not be made automatically;
  1. The contact details of the Controller’s Data Protection Officer are as follows: YAVORSKA Limited Liability Company, ul. Władysława Syrokomli 3, 80-267 Gdańsk, entered into the National Court Register by the District Court Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register under number KRS 0000421633.