INTERNET STORE PRIVACY POLICY
hgmhome.com
§ 1
GENERAL PROVISIONS
-
For the processing of personal data provided by the store hgmhome.com get saved HGM Home – who carries out business activities under the name HGM Home. The company was registered in the central register for commercial activity, which is maintained by the responsible minister for the economy, the registered office and delivery address: E-mail address: info@hgmhome.com It is hereinafter referred to as “Administrator” and is also “Service Provider”.
-
The processing of personal data collected by the Administrator through the Website is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data, on the free movement of such data and repealing the Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “RODO”.
-
All words and expressions identified by quotation marks in this “Privacy Policy” are as defined in the “Regulations of the Store” hgmhome.com to understand.
§ 2
TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION
-
PURPOSE OF PROCESSING AND LEGAL BASIS. The administrator processes personal data of the shop's customers hgmhome.com in case of:
-
-
the registration of an account in the Shop in order to create an individual account and manage this account, in accordance with Article 6(1)(b) of the RODO (performance of a contract for the electronic provision of services in accordance with the Rules of the Shop).
-
an order in the Shop in order to fulfill the purchase contract on the basis of Article 6(1)(b) RODO (performance of the purchase contract).
-
Subscribe to the newsletter to receive trading information electronically. The processing of personal data takes place after separate consent in accordance with Article 6.1.a) RODO.
-
Use of the contact form to send a message to the administrator in accordance with Article 6 paragraph 1 letter f) of the RODO (legitimate interest of the entrepreneur).
-
-
THE TYPE OF PERSONAL DATA PROCESSED. The customer provides, in the case of:
2.1 Account: First and last name, login, address, email address.
2.2 Order: First and last name, address, tax identification number, email address, telephone number.
2.3. Newsletter: First and last name, email address.
2.4 Contact Form: Name, E-mail address
-
PERIOD OF ARCHIVING PERSONAL DATA. The customer's personal data is stored by the administrator:
-
-
if the basis of data processing is the performance of a contract, for as long as necessary for the performance of the contract and thereafter for a period corresponding to the limitation period for claims. Unless there is a special provision, the limitation period is six years; for claims for continuous service and for claims from commercial operations – three years.
-
if the basis for the data processing is consent, as long as the consent is not revoked, and after the revocation of the consent, for a period corresponding to the limitation period of the claims that the Administrator can assert and that can be asserted against him. Unless a special legal provision stipulates otherwise, the limitation period is six years; for claims for continuous performance and claims arising from commercial operations, it is three years.
-
-
When using the shop, additional information may be collected, in particular: the IP address assigned to the customer's computer or an external IP address of the Internet provider, domain name, browser type, access time, operating system type.
-
After separate consent, RODO data can also be processed in accordance with Article 6 Paragraph 1 Letter a) to provide commercial information via email or telephone calls for the purpose of direct marketing - in each case in conjunction with Article 10 Paragraph 2 of the Law of July 18th 2002 on electronic services or Article 172 paragraph 1 of the Law of July 16, 2004 - Telecommunications Act - including those aimed at profiling, if the customer has given the relevant consent.
-
Customer navigation data may also be collected, including information about links and referrals they click or other actions they take in the store. The legal basis for these activities is the legitimate interest of the Administrator (Article 6(1)(f) RODO), which consists in facilitating the use of the services provided electronically and improving the functionality of these services.
-
Providing personal data by the customer is voluntary.
-
The administrator must protect the interests of the data subjects with due care and in particular ensure that the data he collects:
8.1. processed lawfully,
8.2. collected for specified, legitimate purposes and not subjected to further processing incompatible with those purposes,
8.3. are substantially accurate and proportionate to the purposes for which they are processed and stored in a form allowing identification of the data subjects for no longer than is necessary to achieve the purpose of the processing.
§ 3
TRANSFER OF PERSONAL DATA
1. Customers' personal data will be passed on to service providers that the administrator uses to run the shop, in particular to:
1.1. Companies that carry out the delivery of products,
1.2. Payment system service provider
1.3. Accounting Office,
1.4. Hosting Provider,
1.5. Providers of software to enable the operation of the company,
1.6. Bodies that provide a mailing system
1.7. Provider of software required to operate the online shop.
2. The service providers within the meaning of point 1 of this paragraph to which personal data are transmitted are, depending on the contractual agreements and circumstances, either subject to the instructions of the administrator regarding the purposes and means of data processing (processors) or determine the purposes and means of the data processing themselves Processing (administrators).
3. Customers' personal data will only be stored in the European Economic Area (EEA), subject to §5 point 5 and §6 of the Data Protection Directive.
§ 4
RIGHT TO CONTROL, ACCESS AND CORRECT YOUR OWN DATA
-
Der Betroffene hat das Recht auf Zugang zu seinen persönlichen Daten und das Recht auf Berichtigung, Löschung, Einschränkung der Verarbeitung, das Recht auf Datenübermittlung, das Widerspruchsrecht sowie das Recht, die Einwilligung jederzeit zu widerrufen, ohne die Rechtmäßigkeit der Verarbeitung zu beeinträchtigen auf der Grundlage der Zustimmung vor seinem Rückzug.
-
The legal basis for the customer's request:
-
-
Access to data – Article 15 of the RODO.
-
Correction of data – Article 16 of the RODO.
-
Deletion of data (the so-called right to be forgotten) – Article 17 RODO.
-
Restriction of processing – Article 18 RODO.
-
Data portability – Article 20 RODO.
-
Objection – Article 21 RODO
-
Withdrawal of consent – Article 7(3) RODO.
-
3. Um die in Punkt 2 genannten Rechte auszuüben, können Sie eine entsprechende E-Mail an die Adresse senden: info@hgmhome.com
4. If the customer asserts rights from the above rights, the administrator will comply with the request immediately, but at the latest within one month of receipt, or refuse to fulfill it. However, if the Administrator is unable to comply with the request within one month due to the complexity of the request or the number of requests, he shall comply with the request within two additional months by contacting the service recipient within one month of receiving the request informed about the intended extension of the deadline and the reasons for it.
5. If it is found that the processing of personal data violates the provisions of the RODO, the data subject has the right to lodge a complaint with the President of the Office for the Protection of Personal Data
§ 5
“COOKIES FILES"
-
Administrator website uses “Cookies”.
-
The installation of “cookies” is necessary for the proper provision of services on the shop website. The cookie files contain information necessary for the proper functioning of the website and they also make it possible to compile general statistics about website visits.
-
The website uses two types of “Cookies”: “Session Sookies” and “Persistent Cookies”.
3.1 “Session” cookies are temporary files that are stored on the customer’s device until they log out (leave the website).
3.2 “Permanent cookies” are stored on the customer’s device for the time specified in the cookies’ parameters or until they are deleted by the customer.
-
Administrator uses its own cookies to better understand how customers interact with the content of the site. The files collect information about the customer's use of the website, the type of page from which the customer was redirected, as well as the number of visits and the time of the customer's visit to the website. This information does not collect specific personal data of the customer, but is used to compile statistics on the use of the website.
-
The administrator uses external cookies to collect general and anonymous statistical data through the analysis tools of Google Analytics (the administrator of external cookies: Google Inc. based in the USA).
-
Cookies can also be used by advertising networks, in particular the Google network, to show advertisements tailored to the way the customer uses the shop. For this purpose, they can store information about the customer's navigation path or the time spent on a particular page.
-
The customer has the right to decide on the access of “cookies” to his computer by selecting them in advance in his browser window. Detailed information about the possibility and methods of using cookies is available in the software settings (web browser).
§ 6
ADDITIONAL SERVICES RELATED TO USER ACTIVITY IN THE SHOP
1. The shop uses so-called social plugins (“plugins”) from social networks. Through the presentation of the website hgmhome.com, which contains such a plugin, the service recipient's browser establishes a direct connection to the servers of Facebook, Instagram, Pinterest, Twitter, Google and YouTube.
2. The content of the plug-in is transmitted directly to the user's browser by the respective service provider and integrated into the website. Thanks to this integration, service providers receive the information that the user's browser hgmhome.com even if the user does not have a profile with the provider or is not currently logged in to them. This information (including the customer's IP address) is sent from the browser directly to the provider's server (some servers are located in the USA) and stored there.
3. If the customer is logged in to one of these social networks, the service provider can block the visit hgmhome.com directly assigned to the customer's profile in this social network.
4. Verwendet der Kunde das Plug-in, z.B. durch Anklicken des „Gefällt mir“- oder „Teilen“-Taste, werden die entsprechenden Informationen ebenfalls direkt an den Server des Anbieters übermittelt und dort gespeichert.
5. The purpose and scope of data collection and its further processing and use by service providers as well as the possibility of contacting and the customer's rights in this regard and the possibility of making settings to protect the customer's privacy are described in the data protection regulations of the service providers:
5.1. https://www.facebook.com/policy.php
5.2. https://help.instagram.com/519522125107875?helpref=page_content
5.3. https://policy.pinterest.com/pl/privacy-policy
5.4. https://help.twitter.com/en/rules-and-policies
5.5. https://policies.google.com/privacy?hl=pl&gl=ZZ.
6. If the user does not want the social networks to appear during his visit hgmhome.com To assign the collected data directly to his profile on a specific service, he must log in before his visit hgmhome.com log out of this service. The recipient can also completely prevent plug-ins from loading on the website by using appropriate browser extensions, e.g. B. blocking scripts using “NoScript”.
7. Administrator uses remarketing tools such as Google AdWords on its website, this includes the use of cookies by Google LLC as part of the Google AdWords service. As part of the mechanism for managing cookie settings, the customer has the opportunity to decide whether the service provider can use Google AdWords (manager of external cookies: Google Inc. based in the USA) in relation to him.
§ 7
FINAL PROVISIONS
-
The Administrator applies technical and organizational measures to ensure the protection of the personal data processed, appropriate to the risks and categories of data to be protected, and in particular protects the data from disclosure to unauthorized persons, from extraction by unauthorized persons, from Processing in violation of applicable regulations and against alteration, loss, damage or destruction.
-
The administrator provides appropriate technical measures to prevent the acquisition and modification of electronically transmitted personal data by unauthorized persons.
-
In matters not covered by this privacy policy, the provisions of the RODO and other relevant provisions of Polish law apply accordingly.