Privacy Policy

PRIVACY AND COOKIES POLICY

  • General provisions
  1. This privacy policy defines the detailed rules and purposes of processing personal data obtained through the online store at: https://ecosavers.club (hereinafter: " Online Store ").
  2. The data administrator is S&G Creative Sp. z o. o. with its seat in Warsaw. at ul. Chmielna 2/31, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register under KRS number 0000724047, NIP number PL5252744286 and REGON number: 369747954, share capital of PLN 5,000. Any definitions in this privacy policy beginning with a capital letter have the same meaning as the definitions contained in the Regulations of the Online Store available on the Online Store website.
  • Definitions

Administrator - S&G Creative Sp. z o. o

Personal data - all information about a natural person who can be directly or indirectly identified, in particular on the basis of an identifier such as name and surname, identification number, location data, Internet identifier or one or more specific physical, physiological, genetic, mental factors, the economic, cultural or social identity of a natural person, including device IP, location data, internet identifier and information collected through cookies and other similar technology.

Privacy Policy - this privacy and cookie policy of the Online Store.

GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on the protection of data) (Journal of Laws UE.L No. 119, p. 1).

Device - an electronic device through which the User gains access to the Online Store.

Act - the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2019, item 1781, consolidated text as amended).

User - any natural person browsing the website of the Online Store or using one or more services or functionalities described in the Privacy Policy.

  • Purposes, grounds for processing personal data

Users' personal data are collected in the case of:

1) browsing the website of the Online Store;

2) Registration in the Online Store (creating an Account in the Online Store);

3) completing the questionnaire to determine the User's need for Products;

4) placing an Order (including handling complaints and returns).

  • Browsing the website of the Online Store

Data of persons using the Online Store, who do not have an Account in the Online Store (who are not registered Users) (including the IP address or other identifiers and information collected via cookies or other similar technologies) are processed by the Administrator for one or more of the following purposes:

1) providing services by electronic means in the scope of providing Users with content posted in the Online Store (legal basis for processing - processing is necessary to perform the contract - Article 6 (1) (b) of the GDPR);

2) handling complaints (legal basis for processing - processing is necessary to perform the contract - Article 6 (1) (b) of the GDPR);

3) possible determination and pursuit of claims or defense against claims (legal basis for processing - legitimate interest of the Administrator - Article 6 (1) (f) of the GDPR);

4) possible response to inquiries addressed to the Administrator (legal basis for processing - consent resulting from initiating contact - Article 6 (1) (a) of the GDPR. demonstrating its course in the future - Article 6 (1) (f) of the GDPR);

5) analytical and statistical (legal basis for processing - legitimate interest of the Administrator - Article 6 (1) of the GDPR - conducting analyzes of Users' behavior and activity as well as their preferences aimed at improving the quality and adequacy of the functionalities and services provided).

  • Registration in the Online Store (setting up an Account in the Online Store)

Users who register are asked to provide the data necessary to create and operate the Account (name, surname, contact details, e-mail address). Providing data is voluntary, but required in order to set up and operate an Account (failure to provide data results in the inability to create an Account). Personal data is processed by the Administrator for one or more of the following purposes:

1) providing services related to the operation and maintenance of the Account in the Online Store (legal basis for processing - processing is necessary for the performance of the contract - Article 6 (1) (b) of the GDPR);

2) handling complaints (legal basis for processing - processing is necessary to perform the contract - Article 6 (1) (b) of the GDPR);

3) possible determination and pursuit of claims or defense against claims (legal basis for processing - processing is necessary for the purposes of the legitimate interests pursued by the Administrator - Article 6 (1) (f) of the GDPR);

4) analytical and statistical (legal basis for processing - processing is necessary for the purposes of the legitimate interests pursued by the Administrator - Article 6 (1) (f) of the GDPR - conducting analyzes of Users' behavior and activity as well as their preferences aimed at improving quality and the adequacy of the functionalities used and the services provided).

  • Completing the survey aimed at analyzing and determining the demand for Products and placing an Order (including handling complaints and returns)

In the case of completing the questionnaire aimed at analyzing and determining the demand for Products, the User provides personal data necessary to perform the service consisting in the analysis of the demand for Products and preparation of the Product package proposal (e-mail address). When placing an Order, the User provides personal data necessary for the execution of the Order (name, surname, e-mail address, telephone number and delivery address). In the case of entrepreneurs placing the Order, the above scope of data is additionally extended to include the entrepreneur's company, address and tax identification number. Providing data is voluntary, but required for the purpose of analyzing and determining the demand for Products as well as submitting and handling the Order (failure to provide data results in the inability to place an Order). Personal data is processed by the Administrator for one or more of the following purposes:

1) Provision of services related to the analysis of the demand for Products and the development of a package proposal of the proposed Products (legal basis for processing - processing is necessary for the performance of the contract - Article 6 (1) (b) of the GDPR)

2) execution of the placed Order (legal basis for processing - processing is necessary for the performance of the contract - Article 6 (1) (b) of the GDPR);

3) handling complaints and returns (legal basis for processing - processing is necessary to perform the contract - Article 6 (1) (b) of the GDPR);

4) fulfillment of the statutory obligations incumbent on the Administrator, resulting in particular from tax and accounting regulations (legal basis for processing - processing is necessary to fulfill the legal obligation incumbent on the Administrator - Article 6 (1) (c) of the GDPR);

5) possible determination and pursuit of claims or defense against claims (legal basis for processing - processing is necessary for the purposes of the legitimate interests pursued by the Administrator - Article 6 (1) (f) of the GDPR);

6) analytical and statistical (legal basis for processing - processing is necessary for the purposes of the legitimate interests pursued by the Administrator - Article 6 (1) ( f ) of the GDPR - conducting analyzes of Users' behavior and activity as well as their preferences aimed at improving quality and the adequacy of the functionalities used and the services provided);

7) for purposes related to the satisfaction survey, in particular by sending to the e-mail address communication with a request for an opinion (review) or completion of a satisfaction survey (legal basis for processing - processing is necessary for purposes arising from legitimate interests pursued by the Administrator - Article 6 (1) (f) of the GDPR - satisfaction survey is aimed at maintaining high quality of service and the level of Users' satisfaction with the products and services offered).

  • Data storage periods

Personal data will be processed by the Administrator for the period necessary to achieve the purposes referred to in Part III - Purposes and grounds for personal data processing. This purpose results from legal provisions (which require the storage of data for a specific period of time) or is necessary for the performance of the contract or the legitimate interests pursued by the Administrator. After this period, personal data will be irretrievably deleted or destroyed.

  • Rights of data subjects

The user has the following rights:

1) the right to information about the processing of personal data - to the person submitting such a request, the Administrator provides information about the processing of personal data, including in particular about the purposes and legal grounds for processing, the scope of the data held, entities to whom personal data is disclosed and the planned date of their removal;

2) the right to obtain a copy of the data - to the person making such a request, the Administrator provides a copy of the processed data concerning the person making the request;

3) the right to rectify - at the request of the User, the Administrator removes any inconsistencies or errors regarding the personal data being processed, and supplements or updates them if they are incomplete or have changed;

4) the right to delete data - on this basis, the User may request the deletion of data, the processing of which is no longer necessary to achieve any of the purposes for which they were collected;

5) the right to limit processing - on this basis, the Administrator ceases to perform operations on personal data, with the exception of operations for which the data subject has consented and their storage, in accordance with the adopted retention rules, or until the reasons for limiting data processing cease to exist ( e.g. a decision of the supervisory authority will be issued, allowing for further data processing);

6) the right to transfer data - on this basis, to the extent that the data is processed in connection with the concluded contract or consent, the Administrator issues data provided by the data subject in a format that allows them to be read by a computer. It is also possible to request that this data be sent to another entity - provided, however, that there are technical possibilities in this regard, both on the part of the Administrator and that other entity;

7) the right to object to data processing - the data subject may at any time object to the processing of personal data on the basis of the Controller's legitimate interest (e.g. for analytical or statistical purposes). The objection in this respect should contain a justification and is subject to the Administrator's assessment;

8) the right to object to the processing of data for direct marketing purposes - the data subject may at any time object to the processing of personal data for direct marketing purposes, without the need to justify such objection;

9) the right to withdraw consent - if the data is processed on the basis of consent, the data subject has the right to withdraw consent at any time, which, however, does not affect the lawfulness of the processing carried out before the consent was withdrawn;

10) the right to lodge a complaint - if it is found that the processing of personal data violates the provisions of the GDPR or other provisions on the protection of personal data, the data subject may submit a complaint to the President of the Personal Data Protection Office.

The user may exercise his rights by contacting the Administrator at S&G Creative Sp z oo, ul. Chmielna 2/31, 00-020 Warsaw, or by e-mail: help@ecosavers.club. Providing the reason for exercising the rights is not required.

The application should, if possible, precisely indicate the subject of the request, in particular:

1) the type of permission that the person submitting the application wants to use;

2) the type of processing to which the request relates;

3) the purposes of the processing to which the request relates (e.g. marketing purposes, analytical purposes, etc.).

The administrator may ask the person submitting the application for additional information if he is unable to determine the content of the request or identify the person submitting the application based on the submitted application.

The application will be answered within one month of its receipt. If it is necessary to extend this period, the Administrator will inform the applicant about the reasons for such extension.

The answer will be given to the e-mail address from which the application was sent, and in the case of applications sent by letter, by regular mail to the address indicated by the applicant, unless the content of the letter indicates a desire to receive feedback to the e-mail address (in this case, provide e-mail address).

  • Data recipients

The User's personal data is provided to service providers used by the Administrator when running the Online Store. Service providers to whom personal data is transferred act for the Administrator in terms of the purposes and methods of processing this data.

The administrator uses the following service providers:

1) technological and IT services (including Typeform, Shopify, Google, Facebook, inPost, Zendesk );

2) logistics, transport and delivery services;

3) customer service related services;

4) accounting services;

5) services related to marketing and advertising.

Service providers are based mainly in Poland and other countries of the European Economic Area.

The Administrator has the right and the statutory obligation to provide selected or all information regarding Users to public authorities or third parties that submit such a request for information on the basis of applicable provisions of Polish law.

  • Transferring data outside the EEA

The Administrator, in justified and necessary due to the circumstances, may disclose Users' personal data to entities based outside the EEA, e.g. the USA, Singapore, India, China, Hong Kong and Canada, for which the transfer is necessary for the purposes indicated in part III - Purposes and grounds for processing personal data. The transfer of personal data outside the EEA takes place with an adequate level of protection, primarily through:

1) cooperation with entities processing personal data in countries for which a relevant decision of the European Commission has been issued;

2) the use of standard contractual clauses issued by the European Commission;

3) application of binding corporate rules approved by the competent supervisory authority;

4) taking into account guidelines issued by the competent supervisory authority;

The user has the right to obtain a copy of the above-mentioned standard contractual clauses (or other appropriate security for data transfer outside the EEA) via the Administrator.

The administrator always informs about the intention to transfer personal data outside the EEA at the stage of their collection.

  • cookies policy

The administrator uses cookie files (so-called "cookies") constituting IT data, in particular text files, which are stored in the User's End Device. The cookies used by the Administrator are safe for the User's Device. In particular, it is not possible for viruses or other undesirable software or malware to enter Users' Devices this way.

Cookies allow the Administrator, in particular, to better adapt the website of the Online Store to the individual interests and preferences of the User.

The website of the Online Store uses its own cookies. Own cookies are used to ensure the proper operation of the website, in particular the ordering process.

The website of the Online Store uses functions provided by third parties, which also involves the use of cookies from third parties.

The Online Store website also uses plugins and other social tools provided by social networking sites such as Facebook, Twitter, Instagram, LinkedIn, and Google.

In order to avoid assigning the visit to the Online Store website to the User's profile on a given social network / website, it is necessary to log out of this website / website before visiting the Online Store website.

The purpose and scope of data collection and their further processing and use by service providers / third parties, the possibility of contact, the User's rights in this regard and the possibility of making settings ensuring the protection of privacy are described in the privacy policy of individual service providers.

Cookies usually contain the name of the website domain they come from, the storage time on the end device and a unique number to remember information about the Users.

The administrator uses cookies for the following purposes:

1) configuration of the Online Store - adapting the content of the website https://ecosavers.club to the User's preferences and optimizing the use of the Online Store;

2) enabling logging in to the Account in the Online Store, monitoring the traffic of Users of the Online Store, compiling statistics on the use of the Online Store;

3) analysis and research as well as audience audit - collecting general and anonymous statistical data, creating anonymous statistics via analytical tools that help to understand how the Online Store Users use the website https://ecosavers.club , which allows improving it structure and content;

4) for marketing purposes - in order to adjust the content and forms of advertisements displayed on the website of the Online Store;

5) to use social plugins (Facebook, LinkedIn, Twitter, Instagram, Google)

The User may independently and at any time change the settings for cookies, specifying the conditions for their storage and access to the User's Device via cookies. Changes to the settings indicated in the previous sentence can be made by the User using the web browser settings or by using the service configuration. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the web browser settings or to inform about each placement of cookies on the User's Device. Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings.

Limiting the use of cookies may affect some of the functionalities available on the website https://ecosavers.club .

  • Profiling

Personal data such as: name, surname, contact details, e-mail address and telephone number, after voluntary consent by the User, are collected and processed also for statistical and marketing purposes (" Profiling ").

By using tools for profiling personal data, the Administrator is able to assess personal factors relating to a specific User, in particular to analyze or forecast aspects regarding personal preferences, interests or behaviors.

Profiling is performed in order to provide individual Users with personalized and tailored offers and content, including through dynamic content on the website or through e-mail marketing. 

Profiling of the User's personal data is based on the User's voluntary consent previously expressed.

The User has the right to withdraw consent to the processing of his personal data consisting in Profiling, as well as the right to object to Profiling by contacting the Administrator.

  • Final Provisions

In matters not covered by this Privacy Policy, the provisions of the Act and the GDPR shall apply.