Privacy policy

§ 1 Definitions

Definitions

Administrator – TURDUS STORE EWA SCHWARTZ UL KOŚCIELNA 14, 63-210 ŻERKÓW e-mail: contact@turdus.pl tel. no: +48 508981114, NIP: 7772757267
RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
Service - the online shop run by the Administrator at the address: www.turdus.pl
User - any natural person visiting the Website or using one or more of the services or functionalities described in the Policy.

§ 2 Data processing

In connection with the User's use of the Website, the Administrator collects data to the extent necessary to provide individual services. The detailed principles and purposes of the processing of personal data collected during the User's use of the Website are described below.

§ 3 Aims and legal bases of data processing

Personal data of all Users using the Website (including IP address or other identifiers and information collected through cookies), are processed by the Administrator:
1. in order to provide services electronically in terms of providing Users with access to content collected on the Website - in which case the legal basis for the processing is the necessity of the processing for the performance of the contract (Article 6(1)(b) RODO);
2. for the purpose of possibly establishing, pursuing or defending against claims - the legal basis for the processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO) to protect your rights;
3. for the purpose of sending commercial information by means of a newsletter, the legal basis for processing is the User's consent (Art. 6(1)(a) RODO)
The User's activity on the Website, including his/her personal data, are recorded in system logs (a special computer programme used to store a chronological record containing information on events and activities concerning the IT system used to provide services by the Administrator). The information collected in the logs is processed primarily for purposes related to the provision of services. The Administrator also processes them for technical, administrative purposes, for the purposes of ensuring the security of the IT system and the management of this system, as well as for analytical and statistical purposes - in this regard, the legal basis for processing is the Administrator's legitimate interest (Article 6(1)(f) RODO).

§ 4 Cookies

The Administrator's website uses "cookies". These are short text information stored on the user's computer, phone, tablet or other device. They can be read by the Administrator, as well as by systems belonging to other entities whose services it uses (such as Google). Cookies usually contain the name of the website from which they originate, the length of time they are stored on the end device and a unique number. For more information on cookies, please visit www.allaboutcookies.org.
In detail, the Administrator uses the following types of Cookies within the Website:
1. "necessary" to enable the use of the services available on the Website
2. to ensure safety,
3. advertising" which allows the delivery of advertising content tailored to your interests
4. "performance", which are used to obtain information about how Users use the Website,
5. "functional", which enable the Website to remember the User's preferred functionalities.
(3) The cookies used on the site do not store personal data or other information collected from the Reader. The website uses a cookie to identify the browser session, which enables the use of the website's features. The use of cookies does not allow the collection of any personal or address data of the Reader or any confidential information from the Reader's computer.
(4) Cookies are used for the following purposes: maintaining the security of the service and preventing fraud, facilitating website performance, recording visits for marketing and statistical purposes, using social features, supporting website personalisation (e.g. storing language settings). Cookies may also be used and placed by partners cooperating with the Administrator - they are then subject to the cookie policies or privacy policies of the entities placing them.
5. the scope and purpose of data collection and how you can contact us and exercise your rights or make settings to ensure your privacy are described in the privacy policies of the respective service providers.
(6) The User consents to the processing of the information contained in cookies by giving his/her consent when he/she first accesses the Website within the window displayed. The User may consent to the processing of all data or only those data necessary for the correct display of the Service page.
The user who does not wish to use cookies for the above-described purpose can delete them manually at any time. For detailed instructions on how to proceed, please visit the website of the manufacturer of the Internet browser you are using.
1. If using Google Chrome, instructions can be found here - https://support.google.com/chrome/answer/95647?hl=en
2. If using Mozilla Firefox, instructions can be found here - https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
3. If using Safari, instructions can be found here - https://support.apple.com/kb/ph21411?locale=pl_PL
4. If using Microsoft Edge, instructions can be found here -. https://docs.microsoft.com/en-us/microsoft-edge/devtools-guide/debugger/cookies
5. If Internet Explorer is used, the Administrator suggests changing the tool to one of the above, and furthermore instructions can be found here -. https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
(7) The administrator feels obliged to warn that disabling or restricting the use of cookies may cause difficulties in using the website and limit its functionality.

§ 5 Processing of User Data

The Administrator informs Users that he entrusts the processing of personal data to the following entities:
1. Within the EEA: Within the Service, User data is processed by entities cooperating with the Administrator which, pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, are obliged to comply with high privacy standards analogous to those contained in the Policy;
2. Outside the EEA: As some of the entities working with the Controller are based outside the European Union and are therefore considered so-called third countries under the provisions of the RODO. The Controller ensures that data is transferred to entities in the United States that apply standard contractual clauses
Thus, it guarantees compliance with data protection standards analogous to the Regulation, and the Administrator's use of their technology in processing personal data is lawful.

§ 6 Processing period for personal data

The period of data processing by the Administrator depends on the type of service provided and the purpose of the processing. As a general rule, the data are processed for the duration of the service provided or the execution of the order, until the withdrawal of the consent given or until an effective objection to the data processing is made in cases where the legal basis of the data processing is the legitimate interest of the Administrator.
The processing period may be extended if the processing is necessary for the establishment, assertion or defence of possible claims, and thereafter only if and to the extent required by law. After the expiry of the processing period, the data shall be irreversibly deleted or anonymised.

§ 7 User rights

The user is entitled to:
- access to the content of the data and request their rectification,
- deletion of data,
- limitation of processing,
- the right to data portability,
- The right to object to the processing,
- the right to lodge a complaint to the supervisory authority - the President of the Office for Personal Data Protection ul. Stawki 2, 00-193 Warsaw
To the extent that your data is processed on the basis of your consent, you may withdraw it at any time by contacting the Administrator.

The User has the right to object to the processing of data for marketing purposes if the processing is carried out in connection with the legitimate interest of the Administrator, and - for reasons related to the User's particular situation in other cases where the legal basis of the processing is the Administrator's legitimate interest (e.g. in connection with the performance of analytical and statistical purposes).

§ 8 Recipients of data

In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of IT systems and entities related to the Administrator.
The Administrator reserves the right to disclose selected information concerning the User to the competent authorities or to third parties who make a request for such information on the basis of an appropriate legal basis and in accordance with the provisions of the applicable law.

§ 9 Contact

Kontakt z Administratorem jest możliwy pod adresem e-mail: contact@turdus.pl lub pisemnie na adres siedziby Administratora ul. Kościelna 14, 63-210 Żerków

§ 10 Changes to the Privacy Policy

The Policy is kept under review and updated as necessary. The current version of the Policy has been adopted and is effective from March 2025.