I. GENERAL INFORMATION
This document contains the information that we are required to provide to you when we obtain your personal data through the website https://zibru.com/ or otherwise when you make a purchase from Us.
We make every effort to ensure that your personal data:
1) processed in accordance with the law (in particular the RODO), fairly, in a manner that is transparent to you ("lawfulness, fairness and transparency");
2) collected for specific, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes ("purpose limitation");
3) adequate, relevant and limited to what is necessary for the purposes for which they are processed ("data minimisation");
4) correct and updated as necessary ("correctness");
5) kept in a form that identifies you, for no longer than is necessary for the purposes for which the data are processed ("retention restriction");
6) correct and updated as necessary ("correctness"); Processed in a manner that ensures adequate security of personal data, including protection against unauthoristed or unlawful processing and against accidental loss, destruction or damage, by means of appropriate technical or organisational measures ("integrity and confidentiality").
II. DEFINITIONS
AZC, We – AZC SP. Z O O with it's registered office in Gdańsk, 70 Nowiec Street, entered in the register of entrepreneurs kept by the District Court Gdańsk - North in Gdańsk, VII Economic Department of the National Court Register under KRS No. 0000510656, NIP: 9571073793, holding share capital of PLN 5,000.
Account – a user account established in accordance with the terms and Conditions.
Terms and Conditions - the terms and conditions of the Zibru.com online shop available at https://zibru.com/pl/content/Regulamin-3.
RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
You – a person using the services provided by Zibru.com, purchasing goods through Zibru.com or receiving requested commercial information from us, including newsletters.
III. WHO IS THE CONTROLLER OF YOUR DATA COLLECTED BY ZIBRU.COM AND HOW CAN YOU CONTACT THEM?
The administrator of your personal data is AZC.
If you need to contact us on matters related to the protection of your personal data, please use the following forms:
(a) by e-mail to: daneosobowe@zibru.com;
(b) by telephone at tel.
+48 885 292 999
(c) in writing to the address:
ZIBRU.COM
ul. Kościuszki 7/9
IV. WHAT HAPPENS TO YOUR PERSONAL DATA FROM COLLECTION TO DELETION?
A. WHEN YOU SEND US AN ENQUIRY
What data do we collect about you? The email address you provide is sufficient for us to respond to your enquiry. If you provide other data that proves to be necessary or useful for the processing of your enquiry, e.g. your identification data (first and last name), contact data (postal address, telephone number) we will also process these.
Why do we process them? So that you receive the commercial information you request from us.
On what legal basis do we process your data? We process your data for the purpose of taking action at your request before entering into a contract to purchase goods from us.
How long will we process your data? Your data will be processed until you cancel your interest in our offer, after we have answered your questions.
Who do we share your data with? Apart from our employees, we do not share your data with anyone. Only the entity providing email services to us has access, but this access is limited to the storage of data on the email server.
B. WHEN YOU SIGN UP FOR THE NEWSLETTER
What data do we collect about you? For the dispatch of the newsletter, we only need the email address you provide. You can enter it:
(a) in the pop-up box that appears when you enter Zibru.com,
(b) when creating an Account and
(c) when placing an order (either as a guest or using an Account).
Why do we process them? So that you receive commercial information from us about Zibru.com's current standard product offerings, any promotional offers and discount codes.
On what legal basis do we process your data? We process your data on the basis of your express consent given by ticking the relevant checkbox before providing us with your data.
How long will we process your data? Your data will be processed until you withdraw the consent you have given. However, this withdrawal does not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal.
With whom do we share your data? We do not share your e-mail addresses collected exclusively for the dispatch of the newsletter with anyone except Fresh Mail Sp.z o.o., through which our newsletters are sent.
C. WHEN YOU SHOP WITH US
What data of yours do we collect? We identify 2 categories of data that we process when you shop on Zibru.com:
1) Essential data: first name, last name, email address, telephone number, shipping address,
2) Additional data: VAT ID, billing address - if different from your shipping address (if you request an invoice).
Why do we process them? If you make a purchase on Zibru.com we enter into a contract with you for the sale of goods we have on offer. The conclusion of this contract and the performance of our obligations arising therefrom, including the confirmation of your order and the dispatch of the goods ordered by you, would be impossible without your provision of the aforementioned personal data. The consequence of your failure to provide such data is our inability to conclude and perform the contract of sale of the Goods.
On what legal basis do we process your data? We process your data because:
(a) it is necessary for the performance of the contract for the sale of goods that connects us, including the exercise of your rights both during the purchase and during the period of our liability for the goods sold, whether under warranty or guarantee (implementation of any complaints and returns);
(b) it is necessary for us to comply with our legal obligation under accounting legislation.
How long will we process your data? Your data will be processed for as long as it is necessary for the purposes indicated above, i.e.:
(a) during the performance of the concluded contract, as well as for the duration of our liability for the goods sold, whether under guarantee or warranty, and longer only if, after the expiry of the guarantee or warranty period, there is a dispute between us in court to determine the extent of our liability towards you;
(b) until the expiry of our tax obligations related to the sale of the goods to you, i.e. generally for a period of 5 years from the end of the year in which you purchased the goods through Zibru.com.
With whom do we share your data? We only share the personal data we receive from you with entities with whom we cooperate in conducting our business. With such entities, we have agreements in place to entrust the processing of your personal data, which protect the data you provide properly. These entities include:
(a) entities supplying the goods we sell
(b) Entities that carry out our bookkeeping;
(c) Entities hosting the Zibru.com website and providing us with email service.
D. WHEN YOU CREATE AN ACCOUNT ON ZIBRU.COM
What data do we collect about you? We collect the same data as when you make a purchase, but you can add additional data in your Account user panel: gender designation, payment card number, you also have access to your order history.
Why do we process it? We process the data you enter in your Account in order to provide you with electronic services - having an Account makes the ordering process easier and faster for you, as the data you enter when placing an order is automatically downloaded from your Account, and your Account also allows you to store the history of your orders.
On what legal basis do we process your data? We process your data as it is necessary for the performance of the contract for the provision of electronic services between us.
How long will we process your data? Your data will be processed for as long as they are necessary for the purpose indicated above, i.e. during the performance of the concluded contract for the provision of electronic services. You can delete your Account and the personal data contained therein at any time.
With whom do we share your data? We only share the personal data we receive from you with entities with whom we cooperate in conducting our business. With such entities, we have entered into personal data processing outsourcing agreements that duly protect the data provided by you. These entities include those hosting the Zibru.com website and providing us with an email service.
V. WHAT RIGHTS DO YOU HAVE IN RELATION TO OUR PROCESSING OF YOUR PERSONAL DATA?
The RODO gives you a number of rights in relation to the processing of your personal data. These are briefly described below.
The right to request access to personal data relating to you
You have the right to confirm whether we are processing personal data relating to you and, if this is the case, you have the right to access it and the following information:
(a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) information about the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
(d) where possible, the intended period of retention of the personal data and, where this is not possible, the criteria for determining that period;
(e) information about your right to request us to rectify, erase or restrict the processing of personal data concerning you, and to object to such processing;
(f) information about your right to lodge a complaint with a supervisory authority;
(g) if the personal data has not been collected from the data subject, any available information about its source;
(h) information on automated decision-making, including profiling as referred to in Article 22(1) and (4) of the RODO, and, at least in those cases, relevant information on the modalities of such decision-making, as well as on the significance and the envisaged consequences of such processing for the data subject.
If you request access to personal data relating to you we will provide you with one copy of the personal data being processed. For any further copies you request, we may charge a reasonable fee based on administrative costs. If you request a copy electronically and unless you indicate otherwise, we will provide the information by common electronic means.
Right to request the rectification of personal data concerning you
You have the right to request us to immediately rectify personal data concerning you that is inaccurate. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data, including by providing an additional statement.
The right to request the erasure of personal data concerning you (the so-called "right to be forgotten")
You have the right to request the erasure of personal data concerning you without undue delay and we are obliged to erase personal data without undue delay if one of the following circumstances applies:
(a) Your personal data is no longer necessary for us for the purposes for which it was collected or otherwise processed;
(b) Your consent to the processing of your personal data has been withdrawn and we have no other legal basis for the processing;
(c) Your personal data has been processed unlawfully.
Right to request restriction of processing
You have the right to request us to restrict processing in the following cases:
(a) you dispute the accuracy of your personal data - for a period of time to allow us to check the accuracy of the data;
(b) the processing is unlawful and you object to the erasure of the personal data, requesting instead that we restrict its use;
(c) we no longer need the personal data for the purposes of the processing, but you need it to establish, assert or defend your claims;
(d) we have received an objection from you under Article 21(1) of the RODO to the processing (see below) - until we determine whether the legitimate grounds on Our side override the grounds for your objection.
Right to object to processing
You have the right to object at any time - on grounds relating to your particular situation - to the processing of personal data concerning you based on the necessity of the processing for the purposes of the legitimate interests pursued by Us. If you raise such an objection, We will no longer be able to process your personal data unless We demonstrate the existence of compelling legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for establishing, asserting or defending claims.
Right to data portability
You have the right to receive in a structured, commonly used machine-readable format the personal data concerning you that we have received from you, and you have the right to send this personal data to another controller without hindrance from us if:
(a) the processing is based on your consent or on the basis of a contract we have concluded with you; and
(b) the processing is carried out by automated means.
When exercising the right to data portability, you have the right to request that we send your personal data directly to another controller, insofar as this is technically possible.
The right to data portability must not adversely affect the rights and freedoms of others.
VI. WHERE CAN YOU LODGE A COMPLAINT IF YOU CONSIDER THAT YOUR PERSONAL DATA IS BEING PROCESSED UNLAWFULLY?
If you believe that your data protection rights have been violated you have the right to lodge a complaint with the supervisory authority, which is the President of the Office of Competition and Consumer Protection.
VII. INFORMATION ABOUT COOKIES
Zibru.com uses performance cookies, i.e. cookies that collect information about the way the website is used to make it work better, and functional cookies, i.e. cookies that "remember" the user's settings (e.g. language, products added to the shopping cart)
These include:
- google-analytics.com cookies - statistics for this website more about Google Analytics privacy policy: https://www.google.com/analytics/learn/privacy.html?hl=pl
session cookies (expire at the end of the session)
Facebook.com cookies as described below
Tawk.to cookies as described below
Opineo.pl cookies as described below
Pinterest cookies
The sites from which we present material may also use cookies that enable you to log in and that are used to deliver advertising that matches your tastes and behaviour. In particular, such cookies are:
facebook.com
We place Recommend/Share buttons linked to Facebook on the pages of this website. The user logs into Facebook, which has Facebook's privacy policy. This policy can be viewed at http://pl-pl.facebook.com/help/cookies.
Instagram.com
We post photos downloaded from Instagram on the pages. You log in to Instagram, which has Facebook's privacy policy. You can read this policy at https://www.facebook.com/help/instagram/155833707900388
We include a share button with Pinterest on the pages of this website. You log in to Pinterest where the Pinterest privacy policy applies. You can read this policy: https://policy.pinterest.com/pl/privacy-policy
Opineo.pl
We place an Opineo.pl plug-in on our pages, which allows you to read opinions about our shop on Opineo.pl. The privacy policy of the opineo.pl website is available at: https://www.opineo.pl/i/dla-uzytkownika/polityka-prywatnosci
Tawk.to
We use the Chat solution from Tawk.to. The privacy policy is available at: https://www.tawk.to/privacy-policy/
VIII. WHEN THE PRIVACY POLICY MAY CHANGE
We are entitled to change this Privacy Policy at any time, in particular if there is a change in legislation or guidelines on the protection of personal data. We will inform you of any change by e-mail and through a notice on Zibru.com.