Privacy policy
PRIVACY AND COOKIES POLICY
Fulfilling the information obligation arising from Article 13 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Personal Data Administrator hereby informs:
This Privacy Policy (hereinafter referred to as "Policy") is addressed to Users and Customers using the website available at the domain https://madewood.pl (hereinafter referred to as the "Online Store") and defines the type, scope, and purposes of data processing. The Policy is informational and constitutes an integral part of the Online Store's Terms and Conditions. All terms used in the Policy written with capital letters have the same meaning as assigned to them in the regulations of the Online Store unless otherwise stated in this Policy.
The administrator of personal data obtained from the Online Store is the Seller, Mr. Piotr Czekaj, conducting a sole proprietorship under the business name PIETRO-NET Piotr Czekaj at the address: Łękawica 358, 33-150 Łękawica, NIP: 9930439456, REGON 122594686, (also referred to as the "Administrator").
When placing an Order in the Online Store without registering an Account, and/or registering an Account, and/or posting a review of a Product, and/or contacting the Administrator (by email, telephone, or via a contact form), and/or subscribing to the newsletter, or using other services provided electronically by the Administrator - the User provides their personal data (first and last name, address, email address, phone number, possibly the company name, business address, NIP, IP address of the computer from which the User uses the Online Store, e.g., when adding a Product to favorites).
Purposes and activities of personal data processing:
4.1. Placing an Order without account registration – providing data is voluntary but necessary to execute the Sales Agreement and fulfill the Order delivery to the address provided by the Customer. Data provided during the Order process is used solely to execute the Sales Agreement with the User, and the legal basis for their processing is Article 6(1)(b) of the General Data Protection Regulation. The data will be processed by the Administrator for the period necessary to execute the Sales Agreement. However, the Administrator will continue to store the User's data to defend against possible claims related to potential withdrawal from the Sales Agreement, complaint resolution, and for tax settlement purposes, which constitutes a legitimate interest of the Administrator as mentioned in Article 6(1)(f) of the GDPR.
4.2. Account registration – the User may register an Account to avoid re-entering personal data for future purchases. Providing data is voluntary but necessary for account registration. Data provided during registration (first and last name, email address) is used for account management and execution of Sales Agreements by the Administrator as the seller. The legal basis for processing this data is the consent given by the User during Account registration (according to Article 6(1)(a) of the GDPR). Data will be processed by the Administrator for as long as the Account is maintained unless the User earlier decides to delete the Account. However, resignation from the Account does not lead to the deletion of data from the database. The Administrator will continue to store the User's data to defend against possible claims related to account management, particularly to demonstrate the User's consent for Account registration, which constitutes a legitimate interest of the Administrator as mentioned in Article 6(1)(f) of the GDPR.
4.3. Contacting the Online Store's User with the Administrator – by contacting via email, telephone, or using a contact form available in the Online Store, the User provides their email address as the sender's address, possibly their first and last name, and contact phone number. Providing data is voluntary but necessary for the Administrator to make contact with the Online Store User. The User's data is processed for contact based on actions requested and initiated by the User, and the legal basis for processing is Article 6(1)(b) of the GDPR. The legal basis for data processing after the end of the contact is a legitimate purpose of archiving correspondence for future proof of its course (Article 6(1)(f) of the GDPR). The content of the correspondence may be archived; the Administrator cannot clearly determine when the correspondence will be deleted. The Online Store User has the right to demand to see the history of correspondence they had with the Administrator (if it was archived) and also to demand its deletion unless archiving is justified by the Administrator's overriding interest, e.g., defense against potential claims from the Online Store User.
4.4. Using the service to remind the Password to the Account - providing data is voluntary but necessary to execute an electronic service agreement by the Administrator. Data provided by the User is used to remind the User of the Password to the Account by email. The legal basis for their processing is the execution of the agreement concluded with the User, according to Article 6(1)(b) of the GDPR. The data will be processed by the Administrator for the period necessary to execute the electronic service agreement. After the execution of the agreement, the Administrator will continue to store the User's data to defend against possible claims related to the services provided electronically by the Administrator, complaint resolution, which constitutes a legitimate interest of the Administrator as mentioned in Article 6(1)(f) of the GDPR.
4.5. Using the service to add a review about a Product – the User sending a review of a Product for approval by the Administrator provides their first name. Providing data is voluntary but necessary to execute an electronic service agreement by the Administrator. Data provided by the User is used to post a subjective opinion expressed by the User about the Product along with a rating on a five-star scale on the Product Page. The legal basis for their processing is the execution of the agreement concluded with the User, according to Article 6(1)(b) of the GDPR. The User's first name is disclosed next to the review on the Product Page. The data will be processed by the Personal Data Administrator for the period necessary to execute the electronic service agreement, i.e., for the period of posting the review on the Product Page. After the execution of the agreement, the Personal Data Administrator will continue to store the User's data to defend against possible claims related to the services provided electronically by the Personal Data Administrator, complaint resolution, which constitutes a legitimate interest of the Personal Data Administrator as mentioned in Article 6(1)(f) of the GDPR.
4.6. Inquiry for an individual Order estimate – the User filling out a form with an inquiry provides their first and last name, email address which may contain personal data, and a contact phone number. Providing data is voluntary but necessary to prepare and then send an individual offer by the Seller to execute the Order. The User's data is processed for contact based on actions requested and initiated by the User, and the legal basis for processing is Article 6(1)(b) of the GDPR. The legal basis for data processing after the end of the contact is a legitimate purpose of archiving correspondence for future proof of its course (Article 6(1)(f) of the GDPR). The content of the correspondence may be archived; the Administrator cannot clearly determine when the correspondence will be deleted. The Online Store User has the right to demand to see the history of correspondence they had with the Administrator (if it was archived) and also to demand its deletion unless archiving is justified by the Administrator's overriding interest, e.g., defense against potential claims from the Online Store User.
4.7. Newsletter subscription - the User who wants to receive email advertising information about Products offered in the Online Store must provide their email address during placing an Order, or directly after completing the Order in the Online Store, or enter it in a designated place in the Online Store. Providing data is voluntary but necessary to receive email information. Data provided during signing up to receive information is used solely for sending such information to the User, and the legal basis for their processing is the consent given by the User - according to Article 6(1)(a) of the GDPR. Data will be processed by the Administrator for as long as the email newsletter shipment is functioning unless the Online Store User earlier decides to stop receiving it. Resignation is possible either by clicking on a link located in the sent email advertising information or by contacting the Administrator by sending an email withdrawing consent to the address: trade@madewood.pl However, resigning from receiving the newsletter does not lead to the complete deletion of data from the database. The Administrator will continue to store the User's data to defend against possible claims related to sending the newsletter, particularly to demonstrate the User's consent to receive email advertising information, which constitutes a legitimate interest of the Administrator as mentioned in Article 6(1)(f) of the GDPR. The User may at any time correct their data stored in the Administrator's database.
4.8. Analysis and statistics of the Online Store's data – the personal data of the User collected in the system logs of the Online Store, e.g., during adding Products to favorites, or comparing Products are used by the Administrator to conduct analyses of the Online Store Users' activity to improve the functionality of the Online Store and technical-administrative support of the Online Store, which constitutes a legitimate interest of the Administrator, and the legal basis for their processing is Article 6(1)(f) of the GDPR.
The Administrator informs that the Online Store User has, at any time, the right to data portability, as mentioned in Article 20 of the GDPR, the right to access the content of their personal data and the possibility of correcting them, making rectifications, objecting to data processing, and any consent given for data processing may be withdrawn by the User at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The Administrator may refuse to delete the User's personal data if there are grounds arising from legal provisions. The User also has the right to file a complaint regarding the processing of personal data to the President of the Office for Personal Data Protection. The User's data will not be subject to automated decision-making, including profiling. Personal data is not transferred outside the European Economic Area.
The principles related to the realization of the User's rights have been described in detail in Articles 15 – 21 of the GDPR.
The Administrator hereby also informs that it never transfers, sells, or lends the collected personal data of Users to third parties other than those indicated in this Policy and the Online Store's regulations (e.g., the company handling electronic payments, Order suppliers, accounting firm, the company providing technical server support, on which the Online Store is located), unless with the express consent or at the User's request, or at the request of authorities authorized under the law in connection with ongoing proceedings (e.g., courts, law enforcement agencies, Trade Inspection).
The Administrator processes personal data provided by the User in a manner consistent with the scope of the User's consent and the requirements of the law, including the provisions of the GDPR, in particular, it secures the personal data of Users against making them available to unauthorized persons, loss, or damage, also ensuring the confidentiality of all personal data provided to it - the Online Store has encryption enabled using an SSL certificate.
The Online Store's website may also contain links to other websites not administered by the Administrator (e.g., Facebook, Instagram, LinkedIn, Pinterest), the User may also be redirected to the Online Store from other websites, e.g., via a tracking pixel from the social network Facebook, therefore the Administrator cannot be responsible for the content of these pages, nor for the level of privacy protection implemented by the administrators of these pages. The Administrator also informs that this Policy applies only to the Online Store and that when going to other pages, it is recommended that the User familiarize themselves with the appropriate privacy policy of that page before providing their personal data there. Deciding to go to such pages and visit them, the User does so at their own risk.
The Online Store uses "cookies" files, which are used to identify the browser while using the Online Store, to know which page to display. Cookies do not contain any personal data. When entering the Online Store, certain information may be placed on the User's computer, which may be in the form of a "cookie" file. Detailed and most current information on this subject is directly available on the manufacturer's page http://www.google.pl/intl/pl/policies/technologies/types/
"Cookies" are small files consisting of a string of letters and characters, saved on the computer by the web server during visiting a certain Product Page presented in the Online Store. "Cookies" files are used in the Online Store solely to better tailor the website to the individual preferences of the User. Moreover, "cookies" files may be used for the following purposes:
a) ensuring the proper functioning and improvement of the functionality of the Online Store - "cookies" files enable the remembering of information that has been provided by the User, e.g., remembering the contents of the cart, remembering the Login;
b) improving the performance and optimization of the operation of the Online Store - "cookies" files enable reading information about how Users move around the Online Store, thereby helping to improve its operation;
c) targeting informational and promotional content - "cookies" files aim to automatically adjust the content of the Online Store to the needs of the User;
d) to prevent the sending of spam.
Information collected and generated by "cookies" files in the Online Store does not allow personalization and identification of the User, and as a result of their use, no personal data of the User is stored.
"Cookies" files used in the Online Store are safe and do not have a harmful impact on the User's computer. The User may at any time change the way "cookies" files are used through the browser, including withdrawing consent for their use, blocking, or deleting those that come from the Online Store. In most web browsers, it is possible to delete, erase "cookies" files from the computer's hard drive, block all sent "cookies" files, or set a warning before saving such files on the disk. For this purpose, it is necessary to familiarize oneself with the user manual or help topics of the used web browser. The process of controlling and deleting "cookies" files may differ depending on the used browser.
The lack of the User's consent to the use of "cookies" files in the minimum version will cause incorrect display of the content of the subpages of the Online Store. The lack of the User's consent to the use of other "cookies" files may limit some functionalities available in the Online Store. The User may allow only the use of selected "cookies" files.
The Administrator uses statistical analysis of traffic on the page through, among others, Google Analytics (Google Inc. based in the USA), including the use of the Google Analytics 4 tool – detailed information about this tool is available at the link: https://support.google.com/analytics/answer/10089681?hl=pl&ref_topic=9143232. No personal data of the User is transferred to the operator of this service, only anonymized information. The service is based on the use of cookies on the User's end device. Information on the User's preferences collected by the Google advertising network can be viewed and edited using the tool: https://www.google.com/ads/preferences/ Information on how data from the Online Store is used by Google is available at the link https://policies.google.com/technologies/partner-sites and at the link https://policies.google.com/technologies/cookies
The Administrator is entitled to make changes to this Policy for important reasons (e.g., changes in the law, changes in the rules of placing Orders in the Online Store). In case of introducing changes, the User will be notified at least 14 days in advance before the day the changes take effect - appropriate information about the changes in the Policy will be placed in the Online Store. In case of non-acceptance of the changed Policy, the User has the right to terminate the Policy, thus refusing to further leave their personal data.
In case of any questions, comments, requests, or suggestions regarding this Policy, the Online Store User is asked to contact the Administrator. The User is also asked to immediately notify the Administrator of any detected security breaches related to using the Online Store by email: trade@madewood.pl or by phone at +48 576233444 from 8:00 AM – 4:00 PM on weekdays.
Łękawica, dated December 19, 2023.