PERSONAL DATA CONTROLLER
Entrepreneur conducting business under the name
MOON AND BACK MARIUSZ ZIELONKA,
registered in the Central Register and Information on Economic Activity
maintained by the minister responsible for economic affairs and
Central Register and Information on Economic Activity, Tax Identification Number
ul. Melomanów 4/29, 00-712 Warsaw, Poland
If you wish to contact us regarding the processing of your personal data, please write to us at the email address: firstname.lastname@example.org.
You have the right to request: access to your personal data, including obtaining a copy of your data (Art. 15 GDPR or, if applicable, Art. 13(1)(f) GDPR), rectification of your data (Art. 16 GDPR), erasure of your data (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability to another controller (Art. 20 GDPR).
You also have the right to:
- object at any time to the processing of your data:
- for reasons related to your particular situation – concerning your personal data, based on Art. 6(1)(f) GDPR (i.e., our legitimate interests), including profiling (Art. 21(1) GDPR);
- if personal data are processed for direct marketing purposes, including profiling, to the extent that it is related to such direct marketing (Art. 21(2) GDPR).
If you believe that your data is being processed unlawfully, you can file a complaint with the President of the Office for Personal Data Protection.
PERSONAL DATA AND PRIVACY
Our BLOG and STORE, like most websites, use so-called cookies. These files are stored in the memory of your device (computer, phone, etc.) and do not change your device’s settings.
In the BLOG and STORE, cookies are used for statistical and marketing purposes. We process two types of cookies:
Own cookies. We use our own cookies to ensure the proper functioning of the BLOG and STORE, especially for handling the login, ordering, and user account processes.
2. Commenting on the BLOG or leaving reviews on the STORE
By adding a comment on the BLOG or a review on the STORE, you provide us with your data, including your name, email address, website address, and the content of the comment. The IP address used to add the comment is also recorded in the system. The data is stored in the WordPress database. The data will be deleted from the database when we decide to close both.
In this case, your data is processed based on your consent resulting from adding a comment. The data is processed solely for the purpose of publishing a comment on the BLOG or a review in the STORE. Some of the data (name and profile picture) will be publicly available on the BLOG next to your comment or in the STORE with your review.
3. Orders in the STORE
When placing an order in the STORE, you must provide the necessary data for order fulfillment, such as name, billing address, email address, phone number, and VAT number for companies. Providing data is voluntary but necessary to place an order.
The data provided to us in connection with an order is processed for the purpose of executing the contract concluded by placing an order (Art. 6(1)(b) GDPR), issuing an invoice (Art. 6(1)(c) GDPR), including the invoice in the accounting documentation (Art. 6(1)(c) GDPR), and for archival and statistical purposes, including the identification of a returning customer (Art. 6(1)(f) GDPR).
Order data will be processed for the time necessary to fulfill the order and then until the expiration of the limitation period for claims arising from the concluded contract. Furthermore, after this period, the data may still be processed by us for archival and statistical purposes, especially for identifying a returning customer. Also, please note that I am obliged to keep invoices with your personal data for 5 years from the end of the tax year in which the tax obligation arose.
You cannot object to the processing of data and request the deletion of data until the limitation period for claims arising from the concluded contract expires. Similarly, you cannot object to the processing of data and request the deletion of data contained in invoices. After the limitation period for claims arising from the concluded contract expires, you may object to the processing of your data for statistical and archival purposes, as well as request the deletion of your data from the database.
4. User Account in the STORE
By creating a user account in the STORE, you must provide the necessary data to create this account, such as an email address and password. Providing data is voluntary but necessary to create an account. As part of editing your account data, you can provide further details. The data provided in connection with creating an account is processed to provide you with the electronic service of enabling you to use the user account. This service is provided based on the terms described in the regulations, which means that the legal basis for processing your personal data in this respect is Art. 6(1)(b) GDPR.
You can decide to delete your account at any time. However, this will not lead to the deletion of your data from the customer database in the STORE, as this data is necessary for the potential establishment, defense, or pursuit of claims related to the contract for the provision of electronic services.
In addition, your data is stored in the database after the account is deleted so that I can identify you as a returning user if you decide to use the STORE again as a registered user. In this regard, the legal basis for processing your personal data is the legitimate interest – Art. 6(1)(f) GDPR.
Your user account stores the history of your orders placed using the account. In this respect, the processing of personal data is described in the section on orders in the STORE. Deleting a user account will not result in the deletion of information about orders placed using the account unless I still have a legal basis for processing this information.
You can modify the data in your account at any time.
5. Abandoned Cart in the STORE
If a user of the STORE starts the process of placing an order but does not complete it, this fact will be recorded by the STORE, and the user will receive a notification by email to the address provided about the possibility of completing the order. For this purpose, your personal data collected by the STORE in connection with the user starting to place an order are processed. The processing of data is based on a legitimate interest (Art. 6(1)(f) GDPR), and you can object to it at any time.
6. Complaints and Returns
If you submit a complaint or withdraw from a contract, you provide personal data contained in the content of the complaint or the statement of withdrawal from the contract, which includes your name, address, phone number, email address, and bank account number. Providing data is voluntary but necessary to file a complaint or withdraw from a contract.
The data provided in connection with filing a complaint or withdrawing from a contract is used to carry out the complaint procedure or contract withdrawal procedure (Art. 6(1)(b) GDPR), and then for archival purposes, which is a legitimate interest (Art. 6(1)(f) GDPR).
The data will be processed for the time necessary to complete the complaint procedure or contract withdrawal. Complaints and statements of withdrawal from the contract may also be archived to demonstrate the course of the complaint process or contract withdrawal in the future.
In the case of data contained in complaints and statements of withdrawal from the contract, you do not have the possibility to correct this data. You also cannot object to the processing of data and request the deletion of data until the limitation period for claims arising from the concluded contract expires. However, after the limitation period for claims arising from the concluded contract expires, you can object to the processing of your data by us for statistical and archival purposes, as well as request the deletion of your data from the database.
7. BLOG Newsletter Subscription
By taking actions on the BLOG, you can subscribe to the newsletter recipient list. To subscribe to the newsletter, you need to provide your name and email address. The data obtained in this way will be used to send you email messages with updates on the BLOG or promotions in the STORE. The legal basis for processing your data is your consent to subscribe to the mailing list (Art. 6(1)(a) GDPR). The data will be processed for the duration of the newsletter. You can unsubscribe from it and remove yourself from the list of subscribers or change your data at any time.
8. Direct Contact with Us
By contacting us directly, both regarding the BLOG or orders placed in the STORE, you naturally provide your personal data contained in the content of the correspondence, in particular, email address, and name. Providing data is voluntary but necessary to establish contact.
In this case, your data is processed for the purpose of contacting you, and the legal basis for processing is Art. 6(1)(f) GDPR, i.e., a legitimate interest. The legal basis for processing after the contact is also a legitimate purpose in the form of archiving correspondence for internal purposes (Art. 6(1)(f) GDPR).
The content of the correspondence may be subject to archiving, and we cannot determine with certainty when it will be deleted. You have the right to request the presentation of the history of the correspondence you conducted (if it was archived) and request its deletion unless its archiving is justified due to our overriding interests, e.g., defense against potential claims on your part.
We do not transfer your data to third countries.
We use the services of external entities that support us in conducting our business. We entrust them with the processing of your data – these entities process data solely on our documented order. Such entities include, for example, payment service providers and virtual accounting offices.
Within the STORE, we perform profiling – this will occur in your case if you allow such actions. Profiling involves the automatic assessment of which products or services you may be interested in using the information displayed by you. As a result, advertisements for products or services displayed within the internet services you use will be more tailored to you and your needs.
The profiling we perform does not result in decisions that have legal effects on you or significantly affect you in a similar way.
Within the STORE and BLOG, we conduct analytical activities aimed at increasing their intuitiveness and accessibility – this will take place in your case if you allow such activities. As part of the analysis, we will take into account how you navigate through the STORE and BLOG – for example, how much time you spend on a particular subpage, or which areas of the STORE and BLOG you click on. This allows us to adjust the layout and appearance of both services and the content posted on them to the needs of Users.