Privacy policy of BAGMANIACS Kamila Puzinowska store

We provide customers with full respect for their privacy and protection of their personal information.

• 1 Provisions ogógeneral

1. This document constitutes an information clause in accordance with Article 13 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (hereinafter RODO) for persons (Customers) using the services of the data controller.
2. The administrator of personal data within the meaning of art. 4 pt. 4 RODO is Kamila Puzinowska conducting business activity as BAGMANIACS Kamila Puzinowska , NIP:6722109100, REGON 529369632:  providing services electronically  at ul.Cicha 8, 78-300 Świdwin , electronic address of the store e-mail: bagmaniacs@bagmaniacs.com , phone:  +48 668972456 
3. The Administrator processes the following personal data of the Clients
4. a) First and last name
5. (b) delivery address
6. (c) telephone number
7. (d) electronic mail address (email)

4.  The controller, pursuant to Article 32(1) of the RODO, observes the principle of personal data protection and applies appropriate technical and organizational measures to prevent accidental or unlawful destruction, loss, modification, unauthorized disclosure of or unauthorized access to personal data processed in connection with its operations.
5. Provision of personal data by the customer voluntary. However, it is also a condition for the conclusion of a contract, the subject of which are the services provided by the administrator or the products offered by him. The customer is obliged to provide personal data, and the consequence of failure to do so is the inability to take advantage of the administrator’s offer.
6. We do not process Personal Data of children and we do not collect special categories of data.The Service and the Service are directed to adults, i.e. those who are 18 (eighteen) years of age or older. By starting to use the Service or the Service, you simultaneously declare that you are at least 18 years old.

• 2 Purpose and basis of personal data processing
• We process your Personal Information because it is necessary for you to use the Service or the Service. In other words, in order for you to register as a Customer, or order our materials as a User, we need to process your Personal Data because otherwise we would not be able to provide you with the Service or enable you to use the Service.Personal Data is necessary for the performance of the contract or the provision of the service (Article 6(1)(b) of the RODO). Therefore, the processing of  Personal Data relates to the following purposes:
• concluding and executing sales contracts, the subject of which are products offered by the data controller in its online store;
• provision by electronic means of services available on the controller’s website;
• sending marketing information regarding the controller’s product or service offerings;
• Responding to inquiries addressed to the data controller using the contact form available on its website.
• The basis for processing personal data is:
• 6(1)(b) RODO for the purposes mentioned in paragraph 1(a – b);
• 6(1)(a) and (f) of the RODO for the purposes referred to in paragraph 1(c)-(d).

• 3  Recipients of data. Transfer of data to third countries

1. Recipients of the personal data processed by the controller may be entities that act as intermediaries in supplying or making deliveries to persons purchasing the controller’s products, as well as electronic payment operators and banks
2. The data controller may transfer personal data to entities performing data processing activities for him and on his behalf on the basis of data processing entrustment agreements, among others, accounting offices or law firms.
3. Personal data may be transferred to entities based outside the European Economic Area, i.e. Google LLC, based on appropriate legal safeguards, which are standard contractual clauses for the protection of personal data approved by the European Commission.

• 4 Period of storage of personal data

The data controller shall store personal data for a period of time related to the term of the contract, the performance of which is related to the processing of data, and in the event of termination of the contract no longer than:

• for the period of time during which the data subject may exercise his/her rights under under the controller’s warranty for defects of the item sold or warranty, unless a longer period of storage is required by applicable law;
• for a period of 5 years for personal data contained on billing documents (invoices), bills in accordance with the Accounting Act;
• Until you withdraw your consent to process your personal data.
• We will process the Personal Data of those who subscribe to newsletters or those who have agreed to receive marketing materials from us until they opt out of receiving newsletters or materials.

• 5 Powers of the person whoóof the data subject

1. Each person whose personal data is processed by the controller has the right to access the content of his or her data, the right to rectification, erasure (“right to be forgotten”), restriction of processing, the right to data portability, the right to object, and the right to withdraw consent to data processing at any time.
2. Any person who believes that his or her personal data is being processed by the controller in violation of the provisions of the RODO, has the right to lodge a complaint with the President of the Office for Personal Data Protection.

• 5  Automated processing and profiling

1. Personal data obtained by the controller may be processed by automated means – including profiling. The profiling of personal data carried out by the controller consists of evaluating selected information about the data subject for the purpose of analyzing and forecasting personal preferences and interests, in particular for the possibility of providing the data subject with a personalized offer
2. The automated processing performed by the data controller does not produce any legal consequences for the data subject. The data subject may at any time object to the automated processing of his or her data.

• 7 Policies “Cookies” and Final Provisions

1. The Administrator uses cookies to collect information related to Customer’s use of Online Store. Cookies are small text files sent and stored on the Customer’s device through which it connects to Online Store. The Administrator uses “session” Cookies stored on the Client’s terminal device until the Client logs out, shuts down the website or shuts down the web browser, and “permanent” Cookies stored on the Client’s terminal device for the time specified in the parameters of the Cookies or until they are deleted by the Client.
2. Cookies allow the Administrator to customize and optimize the Online Store for the Customers’ needs, to create statistics on the Online Store’s page views and to ensure the safety of the Online Store. Cookies are also used to maintain the Customer’s session after leaving the website in order to allow the Customer to return to the contents of the shopping cart. Cookies also make it possible to remember the Customer’s selected settings and website parameters.
3. The Customer can delete Cookies from the Online Store at any time using his/her web browser or completely block their collection on the Customer’s device. 
4. Blocking by the Customer the collection of Cookies on his/her device may hinder or prevent the Customer from using some of the functionality of the Online Store.

• 8 Final Provisions

5. This privacy policy is effective as of 15/10/2024.
6. Any deviation from the Policy must be in writing under pain of nullity.
7. The law applicable to the Policy is the law of the Republic of Poland.
8. In matters not regulated by the Policy, the relevant provisions of law shall apply.