Privacy Policy

PRIVACY POLICY ONLINE STORE 

www.e-seven.pl 

6.05.2024

• 1. GENERAL PROVISIONS

1. The controller of the personal data collected through the online store www.e-seven.pl is SEVEN INC, a limited liability company with its registered office in Golkowice, address: Golkowice 300, 30-698 Kraków, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for Kraków Śródmieście in Kraków, 12th Commercial Division of the National Court Register, under KRS number 0001095534, with share capital of 5,000 zlotys, Tax Identification Number (NIP) 6832136894, National Business Registry Number (REGON) 528333572, email address: kontakt@e-seven.pl, phone number: +48790395006, hereinafter referred to as the “Controller” and also acting as the “Service Provider.”
2. Personal data collected by the Controller through the website is processed in accordance with Regulation (EU) (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to
   the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR.
3. Any words or phrases capitalized in this Privacy Policy shall be understood in accordance with their definitions in the Terms and Conditions of the online store at www.e-seven.pl.

• 2. TYPE OF PERSONAL DATA PROCESSED, PURPOSE, AND SCOPE OF DATA COLLECTION

1. PURPOSE OF PROCESSING AND LEGAL BASIS. The Data Controller processes the personal data of customers of the www.e-seven.pl online store in the following cases:

1. placing an Order or making a Reservation in the Store for the purpose of performing the Sales Agreement, pursuant to Article 6(1)(b) of the GDPR (performance of a sales agreement),
2. registration of an Account in the Store, for the purpose of creating an individual account and managing that Account, pursuant to Article 6(1)(b) of the GDPR (performance of a contract for the provision of electronic services in accordance with the Store’s Terms and Conditions),
3. the Customer’s conclusion of a contract for the provision of free materials, as referred to in § 5 of the Store’s Terms and Conditions, for the purpose of performing the contract for the provision of Digital Content in the form of free materials pursuant to Article 6(1)(b) of the GDPR (performance of the contract),
4. subscribing to the newsletter to receive commercial information by email. Personal data is processed after separate consent is given, pursuant to Article 6(1)(a) of the GDPR
5. using the Contact Form to send a message to the Administrator pursuant to Article 6(1)(f) of the GDPR (the business’s legitimate interest).
6. TYPE OF PERSONAL DATA PROCESSED. The service recipient provides the following information in the following cases:

1. Orders: first and last name, date of birth, PESEL number, passport series and number, address, NIP, email address, phone number,
2. Accounts: first and last name, username, email address,
3. To subscribe to the newsletter and receive free materials: first name, email address,
4. Contact Form: first and last name, email address.
5. RETENTION PERIOD FOR PERSONAL DATA.
   The Controller retains Service Users’ personal data for:

1. where the basis for data processing is the performance of a contract, for as long as necessary to perform the contract, and thereafter for a period corresponding to the statute of limitations for claims. Unless otherwise provided by a specific provision, the statute of limitations is six years, and for claims
   regarding periodic payments and claims related to the conduct of business activities—three years,
2. If the basis for data processing is consent, for as long as the consent remains in effect; and after the consent is revoked, for a period corresponding to the statute of limitations for claims that the Controller may assert and that may be asserted against it. Unless otherwise provided by a specific provision, the statute of limitations is six years, and for claims for periodic payments and claims related to the conduct of business activities—three years.

1. While using the Store, additional information may be collected,
   specifically: the IP address assigned to the Customer’s computer or the external IP address of the Internet service provider, the domain name, the browser type, the access time, and the operating system type.
2. Upon providing separate consent, pursuant to Article 6(1)(a) of the GDPR, data may also be processed for the purpose of sending commercial information electronically or making telephone calls for direct marketing purposes – in accordance with Article 10(2) of the Act of July 18, 2002, on the Provision of Electronic Services, or Article 172(1) of the Act of July 16, 2004, – the Telecommunications Law, including communications resulting from profiling, provided that the Service Recipient has given the appropriate consent.
3. We may also collect browsing data from Users, including information about the links and references they choose to click on or other actions they take within the Store. The legal basis for such activities is the Controller’s legitimate interest (Article 6(1)(f) of the GDPR), which consists of facilitating the use of electronically provided services and improving the functionality of those services.
4. The provision of personal data by the Service Recipient is voluntary.
5. Personal data will also be processed automatically through profiling, provided that the Service Recipient consents to this pursuant to Article 6(1)(a) of the GDPR. Profiling will result in assigning a profile to a given individual for the purpose of making decisions regarding that individual or analyzing or predicting their preferences, behaviors, and attitudes.
6. The controller exercises due diligence to protect the interests of data subjects and, in particular, ensures that the data it collects is:

1. processed in accordance with the law,
2. collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes,
3. accurate and relevant to the purposes for which they are processed, and stored in a form that allows for the identification of the data subjects for no longer than is necessary to achieve the purpose of the processing.

• 3. SHARING OF PERSONAL DATA

1. The personal data of Service Users is transferred to service providers used by the Administrator in the operation of the Store, specifically to:

1. entities responsible for delivering the Products,
2. payment system providers,
3. providers of customer feedback survey systems,
4. accounting firm,
5. web hosting providers,
6. providers of business management software,
7. entities that provide mailing systems,
8. providers of the software needed to run an online store.

1. Service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, either follow the Controller’s instructions regarding the purposes
   and methods of processing such data (processors) or independently determine the purposes and methods of processing (controllers).
2. Service Recipients' personal data is stored exclusively within the European Economic Area (EEA).

• 4. RIGHT TO REVIEW, ACCESS, AND CORRECT YOUR OWN DATA

1. The data subject has the right to access their personal data, as well as the right to have it corrected, deleted, or its processing restricted; the right to data portability; the right to object; and the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
2. Legal Basis for the Customer’s Request:

1. Access to data – Article 15 of the GDPR.
2. Rectification of Data – Article 16 of the GDPR.
3. Deletion of data (the so-called “right to be forgotten”) – Article 17 of the GDPR.
4. Restriction of processing – Article 18 of the GDPR.
5. Data Portability – Article 20 of the GDPR.
6. Objection – Article 21 of the GDPR
7. Withdrawal of consent – Article 7(3) of the GDPR.

1. To exercise the rights referred to in point 2, you may send an email to the following address: biuro@e-seven.pl.
2. If the Service Recipient exercises a right arising
   from the above provisions, the Administrator shall comply with the request or refuse to comply with it immediately, but no later than within one month of receiving it. However, if—due to the complexity of the request or the number of requests—the Administrator is unable to comply with the request within one month, the Administrator will comply within the following two months, having first notified the Service Recipient within one month of receiving the request of the intended extension of the deadline and the reasons for it.
3. If it is determined that the processing of personal data violates the provisions of the GDPR, the data subject has the right to file a complaint with the President of the Personal Data Protection Office.

• 5. "COOKIES"

1. The Administrator's website uses "cookies."
2. The use of cookies is necessary for the proper provision of services on the Store’s website. Cookies contain information necessary for the proper functioning of the website, and they also enable us to compile general statistics on website traffic.
3. This website uses two types of cookies: “session” cookies and “persistent” cookies.

1. "Session cookies" are temporary files that are stored
   on the User's device until the User logs out (leaves the website).
2. "Persistent" cookies are stored on the User's device for the period specified in the cookie settings or until the User deletes them.

1. The Administrator uses its own “cookies” to better understand how Users interact with the website’s content. These cookies collect information
   about how the User interacts with the website, the type of website from which the User was redirected, as well as the number of visits and the duration of the User’s visit to the website. This information does not record the User’s specific personal data but is used to compile statistics on website usage.
2. The administrator uses third-party cookies to collect general
   and anonymous statistical data through Google Analytics (third-party cookie administrator: Google Inc., based in the U.S.).
3. The user has the right to control whether “cookies” can access their computer by:

1. selecting the types of cookies you consent to having collected immediately after entering the Store’s website and seeing the cookie notice,
2. change the settings in your browser window. Detailed information
   about the capabilities and methods of managing “cookies” is also available
   in your software (web browser) settings.

• 6. ADDITIONAL SERVICES RELATED TO THE USER’S ACTIVITY IN THE STORE

1. The Store uses so-called social media plugins (“plugins”) from social media platforms. When viewing the website www.e-seven.pl, which contains such a plugin, the User’s browser will establish a direct connection to the servers of Facebook, Instagram, LinkedIn, and YouTube.
2. The plugin’s content is transmitted by the relevant service provider directly to the Service Recipient’s browser and integrated into the webpage. Through this integration, service providers receive information that the User’s browser has displayed the page www.e-seven.pl, even if the User does not have a profile with the service provider in question or is not currently logged in. This information (along with the User’s IP address) is transmitted by the browser directly to the service provider’s server (some servers are located in the U.S.) and stored there.
3. If the User logs in to one of the above social media platforms, that service provider will be able to directly associate the visit to www.e-seven.pl with the User’s profile on that social media platform.
4. If the User interacts with a particular plugin—for example, by clicking the “Like” or “Share” button—the relevant information will also be sent directly to the service provider’s server and stored there.
5. The purpose and scope of data collection, as well as the subsequent processing and use of such data by service providers, along with contact information, the Service User’s rights in this regard, and the ability to configure settings to protect the Service User’s privacy, are described in the service providers’ privacy policies:

• – https://www.facebook.com/policy.php
• – https://help.instagram.com/519522125107875?helpref=page_content
• – https://pl.linkedin.com/legal/privacy-policy
• – https://policies.google.com/privacy?hl=pl&gl=ZZ

1. If the User does not want social media platforms to associate data collected during visits to www.e-seven.pl directly with their profile
   on that platform, they must log out of that platform before visiting www.e-seven.pl. The User can also completely prevent plugins from loading on the website by using appropriate browser extensions, such as blocking scripts with “NoScript.”

• 7. FINAL PROVISIONS

1. The administrator implements technical and organizational measures to ensure that the personal data being processed is protected in a manner appropriate to the risks and the category of data being protected; in particular, the administrator safeguards the data against disclosure to unauthorized persons, removal by an unauthorized person, processing
   in violation of applicable laws, and alteration, loss, damage, or destruction.
2. The administrator provides appropriate technical measures to prevent unauthorized persons from accessing or modifying personal data transmitted electronically.
3. In matters not covered by this Privacy Policy, the provisions of the GDPR and other applicable provisions of Polish law shall apply accordingly.