The document in question (hereinafter referred to as: “Policy”) contains information regarding the processing by Ennovation Technology Limited liability company with its registered office in Warsaw, St. Omulewska 27, 04-128 Warsaw, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register under KRS number: 0000760282, NIP: 1132989675, REGON: 381976059, with a share capital of PLN 1,850,000.00 (hereinafter referred to as the “Administrator”) of personal data of people who are clients of Ennovation technology on the website. at www.ennovationtech.eu. The Policy is made available in order to provide people whose data is processed by the Administrator with the widest possible information on the range of data processing, methods and range of data processing and the rights of these people. The basic legal regulation regarding the protection of personal data is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/ EC (hereinafter referred to as “GDPR”).
Each of the Customers accepts the provisions of the Policy and agrees to the manner in which the Administrator collects, stores, uses and protects personal data. If the Customer refuses to provide the Administrator with personal data, then it will not be possible to conclude a contract with the Administrator and the Administrator will not be able to provide the Customer with the use of the Online Store.
- GLOSSARY OF TERMS
Browser: an IT program used to display websites (e.g. Chrome, Firefox, Safari).
Cookies: text files placed by the server on the device on which the browser is running. Cookies are IT data, in particular text files, which are stored in the User’s end device (e.g. in computer memory) and are intended for using the Website.
Third country: a country outside the European Economic Area.
Personal data: any information about an identified or identifiable person, in particular on the basis of an identifier such as name and surname, identification number, location data, online identifier or one or more specific factors determining the physical, physiological, genetic, mental, economic , cultural or social identity of the person.
Profiling: any form of automated processing of personal data, which consists in the use of personal data to evaluate certain personal factors of a person, in particular to analyse or predict aspects regarding the effects of this person’s work, economic situation, health, personal preferences, interests, credibility, behaviour, location or movement,
Store – a store called Ennovation Technology operating at the Internet address: www.ennovationtech.eu
Goods – products available in the Store that are or may be the subject of the Agreement.
Agreement: a sales agreement concluded between the Administrator and the User.
Processing: any operation or set of operations performed on personal data
or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Users: people registered and using the Website available on the website www.ennovationtech.eu
Account: an individual User profile created by him on the Website as a result of the registration process.
Website – website available on the website www.ennovationtech.eu
- RANGE OF APPLICATION
This Policy applies to the processing of Personal Data in connection with the sale of Goods by the Administrator, available to Users via the Website, to the extent described in detail below.
- LEGAL BASIS, GOALS, PRINCIPLES AND DATA PROCESSING TIME ON THE WEBSITE
Users may send Personal Data to the Administrator when using the Website, filling in the forms available on the Website (enabling, among others, registration, ordering Goods, complaints), as well as through any exchange of information with the Administrator by phone, e-mail or in any other way, as well as when reporting problems with the Website.
Personal data is processed by the Administrator in order to:
exercise of the rights and obligations arising from the Agreement concluded between the User and the Administrator, its handling and delivery of the order with the help of entities providing delivery services (Article 6(1)(b) of the GDPR), as well as providing the User with information about the Goods ordered by him, which is necessary to perform mutual contractual obligations and to consider complaints related to concluded Agreements (processing is necessary to fulfil the legal obligation incumbent on the Administrator – Article 6(1)(c) of the GDPR) – for the time necessary to perform the Agreement, and after its completion, the data will be stored for the period necessary to demonstrate the correct performance of obligations under the Agreement until the expiry of the deadlines indicated in the provisions on archiving and the expiry of the deadlines for pursuing claims under the Agreement;
for analytical and statistical purposes (processing is necessary due to the legitimate interest of the Administrator – Article 6(1)(f) of the GDPR), Personal data will be processed until there is an additional legal basis (allowing for their processing in order to perform the Agreement) – when the Administrator loses this basis, Personal Data will be anonymized or deleted;
enabling the User to provide and exchange information as part of the purchase of Goods, which is related to the performance of mutual rights and obligations arising from the Agreement concluded between the User and the Administrator (Article 6(1)(b) of the GDPR) – for the time necessary to perform the Agreement, and after its completion, the data will be stored for the period necessary to demonstrate the correct performance of obligations under the Agreement until the expiry of the deadlines indicated in the provisions on archiving;
ensuring the Administrator’s performance of Agreements in accordance with applicable law, including in particular the Store’s regulations and this Policy, which is necessary for the implementation of mutual contractual obligations (Article 6(1)(b) of the GDPR), the Administrator’s fulfilment of his statutory obligations ( Article 6(1)(c) of the GDPR) and exercise and defence of claims arising from the concluded Agreement (Article 6(1)(f) of the GDPR) – for the time necessary to perform the Agreement, and after its completion the data will be stored for a period necessary to demonstrate the correct performance of obligations under the Agreement until the expiry of the deadlines indicated in the provisions on archiving; if the Administrator fulfils statutory obligations, the processing of Personal Data will be carried out for the time necessary to fulfil the Administrator’s statutory obligations; in the case of defence and performance of claims under the Agreement for the time necessary to implement the Administrator’s legitimate interest or until the User submits a justified objection,
providing the User (in a manner consistent with applicable regulations) with marketing materials and information, instructions and tips necessary to improve the performance of the Agreement – the processing of the User’s Personal Data then takes place with his consent (Article 6(1)(a) of the GDPR) and direct marketing (Article 6(1)(a) of the GDPR) 6(1)(f) of the GDPR) – Data processing is then carried out for the time necessary to implement the Administrator’s legitimate interest or until the User submits a justified objection, and in the case of direct marketing no longer than until the objection is expressed;
managing the Website and in order to solve problems related to the use of the Website, data analysis, testing, as well as conducting research, analytical and supervision works – the basis for the processing of the User’s Personal Data is then the legitimate interest of the Administrator, which is ensuring security within the Website as well as improving available as part of the Functions Service (Article 6(1)(f) of the GDPR); Personal data is then processed for the time necessary to implement the legitimate interest of the Administrator or until the User submits a justified objection;
improving the Website, as well as to ensure that the content available through it will be provided to the User in an appropriate manner, in particular taking into account the devices with which the User uses the Website, which is the Administrator’s legitimate interest (Article 6(1)(f) of the GDPR). f) GDPR); Personal data is then processed for the time necessary to implement the legitimate interest of the Administrator or until the User submits a justified objection;
enabling the User to use the interactive functions available on the Website, which is necessary to perform mutual contractual obligations (Article 6(1)(b) of the GDPR), and in some situations will or may be based on the User’s consent (Article 6(1)(b) of the GDPR) 1 letter a) of the GDPR) – for the time necessary to perform the Agreement, and after its completion, the data will be stored for the period necessary to demonstrate the correct performance of obligations under the Agreement, until the expiry of the deadlines indicated in the provisions on archiving, and in the case of consent, until its withdrawals;
ensuring the security of using the Website, which is necessary to perform mutual contractual obligations, drawing up, exercising or defending claims under the Agreement (Article 6(1)(b) of the GDPR), meeting the statutory obligations incumbent on the Administrator (Article 6(1)(1)(b) of the GDPR), point c) of the GDPR), as well as it is carried out in the legitimate interest of the Administrator (to ensure the security of the services provided) (Article 6(1)(f) of the GDPR) – for the time necessary to perform the Agreement, and after its completion the data will be stored by the period necessary to demonstrate the correct performance of obligations under the Agreement until the expiry of the deadlines indicated in the provisions on archiving; if the Administrator fulfils statutory obligations, the processing of Personal Data will be carried out for the time necessary to fulfil the Administrator’s statutory obligations; in the case of ensuring security for the time necessary to implement the Administrator’s legitimate interest or until the User submits a justified objection;
performance of other statutory obligations of the Administrator, in particular tax and reporting (Article 6(1)(c) of the GDPR) – for the time necessary to perform the statutory obligations of the Administrator, in particular until the expiry of the limitation period for tax liabilities.
After the expiry of the processing period, Personal Data is immediately deleted or anonymized.
The Administrator will process the following Personal Data provided by the User:
in the case of a User who is a Consumer, these will be:
first name and last name,
address,
e-mail address,
contact number,
in the case of a User who is an Entrepreneur, these will be:
company name,
first name and last name,
Headquarters address,
NIP number,
contact number,
The range of the indicated data complies with the principle of adequacy. Failure to indicate the above data makes it impossible to use the Website and/or conclude the Agreement.
In connection with the performance of the Agreements, Personal Data will be disclosed to external recipients, i.e.: the Administrator’s business partners, Administrator’s service providers (in particular in the field of technical issues, payments) to people cooperating with the Administrator within the Website, suppliers (in the case of purchase of goods with the shipping option) and state authorities, prosecutor’s office, police (when required by law).
The Administrator informs that the transfer of Personal Data to external recipients will take place when:
it is necessary to use the services of a third party,
it is necessary for contracts concluded with external entities,
it is necessary for the proper implementation of the Agreements;
it is necessary for analytical purposes, including in order to optimize the Website and the services provided by the Administrator;
it results from the provisions of generally applicable law;
it is necessary to defend the Administrator’s claims or rights, including in connection with the pending lawsuit;
there was a circumstance posing a threat to life, health, property or safety.
In accordance with applicable regulations and if required, after obtaining the User’s consent, the Administrator may develop any combinations of information concerning the User, including his Personal Data and data obtained using cookies, which may also be sent to the Administrator’s business partners or may be obtained from them. The Administrator may use this information and its combinations for the purposes set out in this Policy.
The Administrator does not transfer Personal Data to a third country or an international organization outside the European Economic Area.
In accordance with the applicable regulations and if required, after obtaining the User’s consent, the Administrator may use the information provided by the User for the purposes of direct marketing using electronic means of communication.
- USER PERMISSIONS
1. In accordance with the provisions of the GDPR, the User has the following rights related to the control of the processing of Personal Data:
a) the right to access the content of Personal Data (e.g. obtaining information on what type of Personal Data is processed by the Administrator, receiving a copy of your Personal Data);
b) the right to request correction, updating or rectification of Personal Data;
c) the right to request removal of Personal Data if they are incomplete, outdated, untrue or have been collected in violation of the law or are unnecessary to achieve the purpose for which they were collected; notwithstanding the foregoing, the User has the right to delete the Account on the Website (however, this is not tantamount to deleting Personal Data);
d) the right to lodge a complaint to the supervisory body dealing with the protection of personal data – i.e. the President of the Office for Personal Data Protection (e.g. if it is found that the processing of Personal Data violates the provisions of the GDPR or other provisions regarding the protection of Personal Data);
e) the right to request restriction of the processing of Personal Data;
f) the right to object to the processing of Personal Data, if the processing is based on the Administrator’s legitimate interest or for direct marketing purposes.
If Personal Data is processed on the basis of consent, the User is entitled to:
the right to withdraw consent at any time;
the right to transfer Personal Data.
2. In order to exercise their rights, the User may contact the Administrator via the communication channels indicated in point VIII: “Contact Details”.
- PROCESSING OF PERSONAL DATA IN AN AUTOMATED MANNER
Personal Data will be processed in an automated manner, including in the form of profiling. Automated decision-making will be carried out by verifying the history of the Goods available on the Website viewed by the User. In turn, the consequence of such processing of Personal Data will be providing Users with substantive content related to the use of the Website and adapting this content to the User’s individual preferences. In addition, profiling is carried out to achieve the aforementioned goals described in point III of the Policy.
- COOKIES
The website uses information contained in cookie files.
Cookies are used to:
optimize the Website;
enable Users to navigate the website and use its basic functions;
recognize the User during the next visit to the website;
personalize and improve the features offered to the User;
maintain the User’s session,
determine the number of people using the Website and obtain information on how to use it
conduct marketing activities (sending advertisements);
remember login details on the Website;
keep anonymous statistics allowing the Administrator to improve the functionality of the Website.
4. The following types of cookies are used on the Website: essential cookies, functional cookies, analytical and performance cookies, advertising cookies and targeting cookies.
5. There are cases in which the software used for browsing websites (web browser) allows cookies to be stored on the end device by default. It is possible to change cookie settings at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the web browser settings or to inform about each time they are placed on the device. Restrictions on the use of cookies may affect some of the functionalities available on the Website. Cookie files may also be used by advertisers and partners cooperating with the Administrator.
6. In accordance with applicable regulations and if required, after obtaining the User’s consent, the Administrator may develop any combinations of information about the User, including his Personal Data and data obtained using cookies, which may also be sent to the Administrator’s business partners or obtained from them.
7. Detailed information on cookie settings and their self-removal in the most popular web browsers should be available in the “help” section (or other similar) of the web browser.
- SECURITY OF PERSONAL DATA
The Administrator provides appropriate security measures to ensure that Personal Data is processed by him in a safe manner, ensuring, above all, that only authorized people have access to the data and only to the extent that it is necessary due to the tasks they perform. The Administrator takes all measures to ensure that the entities cooperating with him guarantee the use of appropriate security measures whenever they process personal data at the request of the Administrator.
In particular, these are the following security measures:
SSL certificate.
- CONTACT DETAILS
In case of any questions, applications and requests regarding Personal Data or the desire to exercise a specific right, the User may contact the Administrator in one of the following forms:
e-mail: info@ennovationtech.eu
phone: +48 22 611 67 79
- CHANGES TO THE PRIVACY POLICY
The Administrator strives to ensure that this Policy is up-to-date and updated in the event of changes in the law, judicial decisions, guidelines of the authorities responsible for supervising the processing of personal data, the introduction of Codes of Good Practice (if the Administrator is bound by such codes), changes in technology, methods, purposes or the legal basis for the processing of Personal Data.