Chapter I.

General provisions

  1. This Privacy Policy sets out the rules for the processing of personal data of current and potential customers of the Store, people visiting the purequeen.pl website («Users») and the rights of Users related to it, it contains information about the Personal Data Administrator, as well as the use of cookies.
  2. Users’ personal data are protected by PQ Group Sp. z o.o. in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU.L.2016 .119.1), Corrigendum to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Dz.Urz.UE.L.119 of 4.5.2016) and the Act of 10 May 2018 on the protection of personal data (Dz. U. of 2018, item 1000 as amended).
  3. This Privacy Policy is supplemented by the rules and regulations of the websites managed on behalf of PQ Group Sp. z o.o. and the information received by the User during deliveries and services, subscriptions (newsletter), competitions, promotional actions, attached to contact forms, etc. The legal basis for the processing of the Users’ personal data, all rights of the persons to whom the personal data refer, as well as the principles of processing such data, remains the Regulation, the Corrigendum to the Regulation and the Act, indicated in paragraph 2.

Chapter II

Basic concepts

  1. Personal data administrator – PQ Group Sp. z o.o. with its registered office in Żukówka, at Łąki 135, 05-870 Żukówka, entered in the register of entrepreneurs of the National Court Register, kept by the District Court in Warsaw, 14th Commercial Division of the National Court Register, under KRS number: 0000891225, NIP: 1182221953, REGON: 388549998, with a share capital of PLN 5,000
  2. RODO – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (OJ.Urz.EU.L.2016 .119.1) and Corrigendum to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ.Urz.EU.L.119 of 4.5.2016).
  3. Newsletter – an electronic form of a bulletin (magazine) sent by e-mail to subscribers, which contains, among other things, information on the Store’s offer, promotions and competitions organised by the Administrator.
  4. Act – Act of 10 May 2018 on the protection of personal data (Journal of Laws 2018, item 1000 as amended).

Chapter III

Purpose of personal data processing

  1. Performing a contract to which the User is a party or taking action at the User’s request prior to the conclusion of the contract, including:
  1. registration and the creation and management of an individual account,
  2. conclusion of the contract, performance of the contract, making the necessary settlements, exercising the right of withdrawal,

– which fulfils the condition of lawfulness of the processing as set out in Article 6(1)(b) of the RODO, as being necessary for the performance of the contract.

  1. Fulfilment of legal obligations in connection with the performance of a contract with the User, which fulfils the condition of lawfulness of data processing set out in Article 6(1)(c) of the RODO.
  2. Establishing, asserting and enforcing claims arising from a contract to which the User is a party, which fulfils the condition of lawfulness of data processing set out in Article 6(1)(f) of the RODO, as being necessary for purposes arising from the legitimate interests pursued by the Controller.
  3. User satisfaction surveys and marketing to promote the Administrator and its products and services, including the sending of newsletters, which fulfils the condition of lawfulness of data processing set out in Article 6(1)(f) of the RODO, as necessary for the purposes of the legitimate interests pursued by the Administrator.

Chapter IV

Consent to processing of personal data

  1. The provision of personal data by the User implies a voluntary, specific, conscious and unequivocal demonstration of his/her will, consenting to the processing of personal data concerning him/her, to the extent necessary for the performance of the contract or service by the Administrator.
  2. Failure to consent to the processing of personal data for marketing or satisfaction surveys does not affect the Administrator’s performance of the contract or service.
  3. The Administrator processes the following personal data of the User: name and surname, contact telephone number, address for correspondence and delivery of the product or service, e-mail address, as well as other personal data insofar as necessary and legally justified.
  4. Providing in the order form personal data of a natural person other than the User as a recipient of products or services ordered by the User constitutes the User’s declaration that he/she gives his/her consent to the processing of his/her personal data by the Administrator for the purpose of delivering products or services to the User.

Chapter V

Recipients of personal data

  1. The Administrator may provide the User’s personal data, to other entities, if this is necessary for the purposes indicated in Chapter III of this Privacy Policy, including:
  1. in the case of payments made by bank transfer, electronic transfer or other non-cash payments, to entities carrying out such financial operations,
  2. to the extent necessary for the supply of the product or service, to the providers of such services,
  3. entities assisting the Administrator in IT, accounting, legal and other similar processes necessary for the correct delivery of the product or service to the User, as well as for complying with the Administrator’s legal obligations.
  1. The controller shall provide the personal data indicated in point 16 to entities entitled to receive personal data on the basis of legal provisions, a decision of a public administration body or a court ruling.

Chapter VI

Period of retention of personal data

  1. The Administrator may store the User’s personal data until the expiry of the limitation period for possible civil law claims, but no longer than 6 years.
  2. The Administrator shall keep the User’s personal data for the period resulting from the provisions of tax law or other normative acts, specifying the limitation periods for public law liabilities or required by law.
  3. Where the basis for the processing of personal data is the User’s consent, the Administrator shall process the User’s personal data until the consent is withdrawn. However, the Administrator may process the User’s personal data also after the withdrawal of the consent, until the expiry of the limitation periods for claims that may be raised against him/her, as defined by law.

Chapter VII

Cookie files

  1. A cookie is a short text sent to a web browser, by a website that the User is currently visiting. It allows this website to remember information about the User’s browser settings, making the User’s next visit to this website more efficient, making it easier to log in to the Administrator’s services.
  2. The controller may process the data contained in the cookies in order to:
  1. to adapt the functionalities provided by the Administrator to the User’s expectations, including advertising content,
  2. to keep statistics without identifying the person (anonymous),
  3. filling in order forms,
  4. identification of the logged-in user,
  5. to include, in the so-called shopping basket, information on the products, services, payment or delivery ordered.
  1. At any time, the User may change the settings of his or her Internet browser regarding cookies in such a way as to block the automatic handling of these files or to inform about their placement on the terminal equipment each time.
  2. The Administrator may use cookies to present the User with so-called banner advertising, i.e. advertising in the form of graphics, after clicking on which the User will be transferred to the Administrator’s website or a landing page.
  3. Restricting the use of cookies may affect certain functionalities and make it more difficult for the User to access the products and services offered by the Administrator.

Chapter VIII

Profiling

  1. In the processing of the User’s personal data, the Administrator may carry out profiling:
  1. on the basis of the User’s consent, to tailor offers of products or services or advertisements offered by the Administrator to the needs of the User and the profile assigned on this basis,
  2. without the User’s consent – on the basis of the Administrator’s legally justified interest in processing cookies, in order to adapt the content of marketing messages placed on the Administrator’s websites and on other websites visited by the User to the User’s preferences and interests, on the basis of data such as: visits to websites and clicks within particular website functionalities, login and registration dates, data on the use of particular Administrator services.

Chapter IX

User rights

  1. The right to withdraw consent to the processing of personal data (Article 7 RODO).
  2. The right to access and obtain a copy of your personal data (Article 15 RODO).
  3. The right to rectify (amend) your personal data (Article 16 RODO).
  4. The right to erasure of personal data where the processing does not take place in order to comply with a legal obligation (Article 17 RODO).
  5. The right to restrict the processing of personal data (Article 18 RODO).
  6. The right to portability of personal data (Article 20 RODO).
  7. The right to object to the processing of personal data (Article 21 RODO).
  8. The right to lodge a complaint with the President of the Office for the Protection of Personal Data, to the address: Office for the Protection of Personal Data, ul. Stawki 2, 00-193 Warsaw.

Final provisions

  1. In matters not covered by the Terms and Conditions and the Privacy Policy, the provisions of Polish law shall apply.
  2. The Administrator shall, upon request, provide the User with one copy of his/her personal data being processed. For any subsequent copies, the Administrator may charge a fee appropriate to the administrative costs incurred. If the User requests a copy electronically and unless he/she indicates otherwise, a copy will also be provided to him/her in a commonly used electronic form.
  3. The Administrator may amend the Privacy Policy at any time. A user with a registered account will be asked to confirm that they have read the Privacy Policy in its amended form before placing their first order made after the Administrator has changed the content of the Privacy Policy.
  4. For matters of protection of individuals, in relation to the processing of personal data by the Controller, the Data Protection Officer can be contacted at info@dermonatura.pl or at the Controller’s premises.