Choose your languageand country
German
Romanian
English
OK
Language and currency:
en | £
Country of collecting the order:
United Kingdom

Privacy Policy

Data protection and cookie policy FOR THE ONLINE SHOP

I.** Controller and definitions**

  1. the person responsible for the personal data** of the customers/users of the online shop, also referred to as the seller:

[Enter the data of the company that the seller operates: Name, telephone number, tax number / VAT ID, company number - downloaded from the customer data from IAI-System.com]

2 The controller can be contacted:

1)at the correspondence address: [insert business address - from the customer data from IAI-System.com].

2)at the electronic mail address: [shop contact e-mail - taken from ADMINISTRATION / company data].

3) User - a natural person who visits the website/pages of the online shop or uses the services or functions described in this Privacy and Cookie Policy;

  1. Customer - a natural person with full legal capacity, a legal entity or a partnership with legal capacity who concludes a distance contract with the Seller;

  2. Online Shop - internet service of the Seller available at electronic addresses (pages): [shop website address - taken from the main domain], through which the Customer/User can obtain information about the Goods and their availability and purchase the Goods or order services.

  3. Newsletter - information, including commercial information of the Seller, sent to the Customer/User by electronic means; its receipt is voluntary and requires the consent of the Customer/User.

7) Account - a set of data stored in the Online Shop and in the Seller's IT system relating to a specific Customer/User and the orders placed and contracts concluded by him/her, with the help of which the Customer/User can place orders and conclude contracts.

  1. DSGVO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

II.** Purposes, legal basis and duration of data processing**

  1. in order to fulfil the distance contract, the seller processes:

1)Information related to the Customer/User's device to ensure the proper functioning of the Services: IP address of the computer, information contained in cookies or other similar technologies, session data, browser data, device data, data on activity on the website, including on individual pages;

2)Geolocation data if the customer/user has consented to the service provider's access to the geolocation. The geolocalisation data is used to provide more personalised offers of products and services;

3) data concerning the User's activity in the Online Store: user ID, product views, adding products to the basket, product ratings, added product reviews, product purchases (orders placed), search actions;

4)personal data of the customer/user: first name, surname, address of the registered office, correspondence address, e-mail address, telephone number, tax identification number, bank account number or other personal data required by the data controller to complete the purchase.

  1. The information in sections 1-3 above does not contain any data concerning the identity of Users, but in combination with other information it may constitute personal data and, therefore, the Administrator provides it with full protection under the GDPR.
  2. This data is processed in accordance with:
    1) Article 6(1)(b) of the GDPR, for the purpose of performing the service, i.e. the contract for the provision of electronic services in accordance with the Terms and Conditions;
    2) Article 6(1)(a) of the GDPR, in connection with the consent to the use of specific cookies or other similar technologies, expressed through the appropriate settings of the web browser in accordance with the Telecommunications Law or in connection with the consent to geolocation. The data is processed until the Customer/User ceases to use the Online Store;
    3) Article 6(1)(f) of the GDPR for the purpose of:
    a) displaying product recommendations and tailored offers to the User within the Online Store (profiling), which constitutes a legitimate interest of the data controller, i.e. the Online Store, in the form of marketing its own products or services, in particular in order to better tailor the offers displayed to the User's preferences. The Online Store does not make automated decisions that produce legal effects concerning the User based on profiling,
    b) publishing opinions added by Users on the Online Store's website, which constitutes a legitimate interest of the data controller, i.e. the Online Store, in the form of building the credibility of the Online Store through Authenticode customer opinions, ensuring transparency and information for future customers, after-sales service and maintaining customer relations (the User provides their name and email address in the opinion form, the location is added automatically from the data provided during the purchase process)
  3. Provision of personal data by the user:
    1) referred to in section 1 above is voluntary, but necessary for the proper use of the Online Store website; failure to provide this data will result in the inability to use the Online Store website or its individual functionalities;
    2) referred to in section 1 above is voluntary; failure to provide this data will result in the inability to receive product and service offers tailored to the location criteria;
    3) referred to in paragraph 3 above is a contractual requirement and is voluntary, but necessary for the conclusion and performance of the contract; failure to provide this data will result in the inability to conclude and perform the contract, i.e. to make a purchase in the Online Store.
  4. The data is processed until the Customer/User ceases to use the shop.
  5. the controller undertakes to take all measures necessary in accordance with Article 32 GDPR, i.e. taking into account the state of the art, the costs of implementation and the nature, scope and purposes of processing as well as the risk of harm to the rights or freedoms of natural persons of varying likelihood and severity, the controller shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk in particular, it shall apply the following technical measures:
    1) control of the premises where data are processed and fire and burglary protection measures in those premises;
    2) a procedure for securing computer systems by means of an authentication process using an ID and password or a processor card and a PIN code or token;
    3) measures to protect against malicious software;
    4) measures enabling the recording of changes made to individual elements of the personal data set in the IT system;
    5) a procedure for creating, testing and recovering backup copies;
    and the following organisational measures:
    1) a procedure for granting and withdrawing authorisations to process personal data;
    2) development and implementation of IT system management instructions;
    3) regular training of persons involved in the processing of personal data in the field of IT system security.

III.** Marketing activities of the controller**

On the website of the online shop, the controller may publish marketing information about its products or services. The display of such content is carried out by the controller in accordance with Article 6(1)(f) of the GDPR, i.e. in accordance with the legitimate interest of the controller, which consists in the publication of content related to the services offered and advertising content of campaigns in which the controller is involved. At the same time, this measure does not violate the rights and freedoms of customers/users because customers/users expect to receive content of similar content or their direct purpose is to visit the website/pages of the online shop.

IV.** Recipients of the users' data**

The Controller shall only disclose the personal data of customers/users to the processors responsible for the provision of services to the Controller under the concluded personal data processing assignment contracts, e.g. hosting and maintenance of the website, IT services, marketing and PR services, in particular IAI S.A.

V.** Transfer of personal data to third countries**

Personal data is not processed in third countries.

VI.** Rights of the data subjects**

1.every data subject has the right to

1)to information (Article 15 GDPR) - to obtain confirmation from the controller as to whether their personal data are being processed. Where personal data are processed, the data subject shall have the right to be informed of the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the data have been or will be disclosed, the period for which the data will be stored or the criteria used to determine that period, the data subject's right to request the rectification, erasure or restriction of processing of personal data and to object to such processing;

2)to obtain a copy of the data (Article 15(3) GDPR) - to obtain a copy of the data undergoing processing, whereby the first copy is free of charge and the controller may charge a reasonable fee for further copies, based on administrative costs;

3)to request the rectification of data (Article 16 GDPR) - to request the rectification of inaccurate personal data or the completion of incomplete data;

4)to erasure of the data (Article 17 GDPR) - the right to request the erasure of his/her personal data if the controller no longer has a legal basis for the processing or the data are no longer necessary for the purposes of the processing;

5)to obtain restriction of processing (Article 18 GDPR) - to obtain restriction of processing of personal data where:

a)the data subject contests the accuracy of the personal data - for a period enabling the controller to verify the accuracy of the data,

b)the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use,

c)the controller no longer needs the data, but they are required by the data subject for the establishment, exercise or defence of a claim;

d) the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject;

6)to data portability (Article 20 GDPR) - to receive the personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format and to request the transmission of those data to another controller, where the data are processed on the basis of the data subject's consent or a contract concluded with him or her and where the data are processed by automated means;

7)to object (Article 21 GDPR) - to object to the processing of their personal data for the lawful purposes of the controller on grounds relating to their particular situation, including profiling. In this case, the controller shall verify whether there are important legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or grounds for the establishment, exercise or defence of claims. If, following this assessment, the interests of the data subject outweigh the interests of the controller, the controller is obliged to cease processing for these purposes;

8) to withdraw consent at any time and without giving reasons, whereby the processing of personal data that took place before consent was withdrawn remains lawful. Withdrawal of consent will result in the controller ceasing to process the personal data for the purpose for which consent was given.

2.to exercise the above rights, the data subject should contact the controller using the contact details provided and inform the controller of which right and to what extent they wish to exercise it.

VII.** Supervisory authority**

The data subject has the right to lodge a complaint with the supervisory authority.

VIII.** Contact person for data protection**

If you have any questions about the processing of personal data, you can contact us directly by e-mail or in writing at the address of the data controller indicated in Section I, point 2 of this Privacy and Cookie Policy.

IX.** Profiling
Your personal data may be profiled (Article 4(4) of the GDPR) for the purpose of personalising content and advertisements, as well as product recommendations and audience measurement. This profiling is based on your consent to the use of cookies (Article 6(1)(a) of the GDPR) – which you can withdraw at any time using the cookie manager – and, where applicable, on our legitimate interest in internal segmentation (Article 6(1)(f) of the GDPR), with the right to object at any time to marketing activities, including profiling (Article 21 of the GDPR). Profiling does not result in an automated decision that has legal effects or significantly affects you within the meaning of Article 22 of the GDPR.

X.** Changes to the privacy and cookie policy**

  1. The privacy and cookie policy may be supplemented or updated according to the current needs of the data controller in order to provide customers/users with up-to-date and reliable information.
  2. Any changes to the Privacy Policy and cookies will be published on this page. We recommend that you check this page regularly for updates to this Privacy Policy and cookies. If you do not accept this Privacy Policy and cookies or any changes to it, you should stop using the shop.

XI.** Cookies**

  1. the online shop performs the functions for obtaining information about customers, users and their behaviour in the following way:

1) using information voluntarily entered into forms for purposes arising from the function of a particular form;

2) by storing cookie files (so-called "cookies") in end devices;

3) through the collection of web server logs by the operator of the online shop (necessary for the proper functioning of the service).

  1. cookies are computer data, in particular text files, which are stored on the customer's/user's end device and are used to utilise the online shop's website. Cookies usually contain the name of the website from which they originate, the time of storage on the end device and a unique number.

  2. the online shop uses cookies only with the prior consent of the customer/user of the online shop. Consent to the use of all cookie files by the online shop is given by clicking on the button: "I agree, I want to go to the website" during the display of the message about the use of cookies by the online shop or by closing this message.

  3. if the customer/user of the Online Shop does not agree with the use of cookies by the Online Shop, he/she can use the option: "I do not agree", which is also available in the message about the use of cookies by the Online Shop, or make changes in the settings of the currently used Internet browser (which, however, may result in incorrect operation of the Online Shop website).

5 To manage the cookie settings, select the web browser / system from the following list and follow the instructions:

1) Internet Explorer;

2) Chrome;

3) Safari;

4) Firefox;

5) Opera;

6) Android;

7) Safari (iOS);

8) Windows Phone.

6 The legal basis for the processing of personal data originating from cookies is the legitimate interests of the controller, which consist of providing high quality services and ensuring the security of the services.

7.there are two main types of cookies used in the online shop: "session" (session cookies) and "permanent" (permanent cookies). Session cookies are temporary files that are stored on the user's end device until the user logs out, leaves the online shop or switches off the software (web browser). Persistent cookies are stored on the customer's/user's end device for the time specified in the cookie parameters or until they are deleted by the customer/user.

COOKIES
FILE TYPE** (duration/session/ performance/analytical/ advertising cookies) ** FILE NAME PURPOSE OF USE FILE LOCATION

8 Cookies are used for the following purposes:

1)Creation of statistics that help to understand how the customers/users of the online shop use the websites, which enables the improvement of their structure and content;

2)Maintaining the customer/user's session (after logging in) so that the customer/user does not have to re-enter their login and password on every subpage of the online shop;

3) to identify the profile of the customer/user in order to display product recommendations and customised materials in advertising networks, in particular the Google network.

9.the web browsing software (web browser) generally allows cookies to be stored on the customer's/user's end device by default. Customers/users can change their settings in this regard. The web browser allows cookies to be deleted. It is also possible to block cookies automatically.

10 Restricting the use of cookies may affect some of the functions available on the online shop's websites.

11 Cookies that are placed on the customer's/user's end device may also be used by the online shop's advertising media and partners cooperating with the online shop.

12.we recommend the customer/user to read the privacy policies of these companies to find out the rules for the use of cookies in statistics: Google Analytics Privacy Policy.

13.cookies can be used by the Google network to display adverts tailored to the way in which the customer/user uses the online shop. For this purpose, they can store information about the user's navigation path or the time spent on a particular page: https://policies.google.com/technologies/partner-sites.

14.with regard to the information collected by the Google advertising network about the preferences of the customer/user, the customer/user can view and edit the information resulting from the cookies using the tool https://www.google.com/ads/preferences/.

15.the website of the online shop contains plug-ins that transmit customer/user data to controllers such as:

1)Facebook;

2)Google

3)Instagram;

4)LinkedIn;

5)Youtube;

6)Salesmanago;

7)Gemius;

8)Wirtualna Polska;

9) [Forward list from the setting from MODERATION/Regulations, Consents, Guidelines/Tab "Shop regulations"/Section "Settings for automatic content of shop regulations"].

16.in order to properly fulfil the distance selling contract, the Data Controller may communicate the data of the Customers/Users to courier services. The delivery methods currently available in the online shop are: [link with reference/direction to the CMS page with a list and price list of deliveries].

17.for the proper fulfilment of the distance contract, the controller may make the customer's/user's data available to online payment systems. Currently available payment methods in the form of advance payments in the online shop are: [link with reference/redirection to the CMS page with a list of payment systems].

XII. Newsletter

  1. the Customer/User may agree to receive commercial information electronically by ticking the appropriate option in the registration form or at a later stage in the appropriate tab. In the event of such consent, the customer/user will receive information (newsletter) from the online shop and other commercial information sent by the seller to the e-mail address provided by him.

2.the customer/user can individually unsubscribe from the newsletter at any time by unchecking the relevant box on the account page or by accessing the [link to the newsletter unsubscribe form] form by clicking on the relevant link located in the main body of each newsletter or by contacting customer service.

XIII.** Account**

  1. the customer/user may not post any content, including opinions and other data of an illegal nature, in the online shop or make it available to the seller.

  2. the customer/user receives access to an account after registration.

  3. when registering, the customer/user provides their first and last name, company name, tax identification number, data for issuing a purchase receipt, shipping data, [date of birth - if its collection is activated in the shop - settings in the ZZS/registration form, processing of customer data and registration of wholesalers], e-mail address and chooses a password. The customer/user assures that the data provided in the registration form is truthful. Registration requires a thorough reading of the General Terms and Conditions and an indication on the registration form that the customer/user has read the General Terms and Conditions and fully accepts all their provisions.

  4. at the time the customer/user is granted access to the account, an open-ended contract is concluded between the seller and the customer for the provision of services by electronic means in relation to the account. The consumer may withdraw from this contract in accordance with the General Terms and Conditions.

  5. registration of the account on one of the pages of the online shop is also a registration that enables access to other pages under which the online shop is available.

6.the Customer/User may terminate the contract for the provision of services by electronic means at any time with immediate effect by notifying the Seller by e-mail or in writing to the address of the data controller indicated in Section I, point 2 of this Privacy and Cookie Policy.

7.the Seller has the right to terminate the contract for the provision of services related to the Account if the provision of the service of the Online Shop is discontinued or transferred to a third party, if the Customer/User violates the law or the provisions of the General Terms and Conditions, as well as in the event of inactivity of the Customer/User for a period of 6 months. The contract shall be cancelled with seven days' notice. The seller may stipulate that re-registration of the account requires the seller's consent.

pixel