Privacy Policy of Karabela Publishing House
https://sklep-karabela.waw.pl
("Store")

Dear User!
We care about your privacy and want you to feel comfortable while using our services. Therefore, below we present you with the most important information on the principles of processing your personal data and cookies used by our Store. This information has been prepared taking into account RODO, the General Data Protection Regulation.

PERSONAL DATA CONTROLLER
Danuta Chojnacka, entrepreneur conducting business activity under the name Karabela Danuta Chojnacka, registered in the Central Register of Business Activity and Information, maintained by the minister responsible for economy, NIP 5271717474, REGON no. 140626604, Ogrodowa Street 8 lok 87, 00-896 Warsaw.

If you wish to contact us in relation to our processing of your personal data, please write to us at the following e-mail address: album@karabela.waw.pl.

YOUR RIGHTS
You have the right to request

access to your personal data, including obtaining a copy of your data (Article 15 RODO or, if applicable, Article 13(1)(f) RODO),
rectification (Article 16 RODO),
erasure (Article 17 RODO),
restrict processing (Article 18 RODO),
to transfer the data to another controller (Article 20 RODO).
And also the right:

object at any time to the processing of your data:
on grounds relating to your particular situation, to the processing of personal data concerning you based on Article 6(1)(f) of the RODO (i.e. the legitimate interests pursued by us) (Article 21(1) of the RODO);
where personal data is processed for the purposes of direct marketing, to the extent that the processing is related to such direct marketing (Article 21(2) RODO).
Contact us if you wish to exercise your rights. You can object to our use of cookies (which you will read about below) in particular by using the relevant browser settings.

If you consider that your data is being processed unlawfully, you can lodge a complaint with the President of the Office for Personal Data Protection.

PERSONAL DATA AND PRIVACY
Below you will find detailed information on the processing of your data depending on the actions you take.

1. placing an order in the Shop
For what purpose?
Processing your order
On what basis?
Sales contract (Article 6(1)(b) RODO) Legal obligation, related to accounting, obliging us to process your personal data (Article 6(1)(c) RODO)
For how long?
for the duration of the aforementioned contract until the expiry of our legal obligation relating to accounting
in addition, your data will be processed until the expiry of the period during which it is possible to assert claims - either by you or by us
(see last table of this section for more information)
What happens if you do not provide your data?
you will not be able to place an order

2. creating a shop account
For what purpose?
performance of the contract for the provision of a shop account
On what basis?
contract for the provision of services (Article 6(1)(b) of the RODO)
For how long?
until the account is deleted by you or by us at your request
in addition, your data will be processed until the expiry of the period during which it is possible to assert claims - by you or by us
(see the last table in this section for more information)
What happens if you do not provide the data?
you will not be able to create an account and use its features such as viewing your order history or checking your order status

3. to contact us (e.g. to ask a question)
For what purpose?
To deal with your enquiries or requests
On what basis?
A contract or action taken at your request with a view to concluding a contract (Article 6(1)(b) of the RODO) - where your enquiry or report relates to a contract to which we are or may be party our legitimate interest in processing your data in order to communicate with you (Article 6(1)(f) of the RODO) - where your enquiry or report is not related to a contract
For how long?
for the duration of the contract binding us or, if no contract has been concluded, until the expiry of the redress period - see last table of this section* until the expiry of the redress period - see last table of this section - or until we consider your objection to the processing*
in addition, your data will be processed until the expiry of the period during which redress is possible - by you or by us
(see the last table in this section for more information)
What happens if you do not provide the data?
we will not be able to respond to your enquiry or request
* whichever is applicable in the case and which is the earliest

4. you agree to receive marketing content from us (e.g. information about special offers)
For what purpose.
To send you marketing information, especially special offers
On what basis?
Your consent to our marketing activities (Article 6(1)(a) of the RODO)
For how long?
Until you withdraw your consent - remember, you can withdraw your consent at any time. The processing of your data until you withdraw your consent remains lawful.
in addition, your data will be processed until the expiry of the period during which it is possible to assert claims - either by you or by us
(see the last table in this section for more information)
What happens if you don't provide the data?
you will not receive our marketing materials, including information about our special offers

5. take any action or omission which may give rise to a claim relating to the Shop or our services
For what purpose?
to establish, assert or defend potential claims related to the concluded agreement or provided services
On what grounds?
our legitimate interest, consisting in the processing of personal data for the aforementioned purpose (Article 6(1)(f) RODO)
For how long?
until the expiry of the limitation period for claims or until we have taken account of your objection to the processing*
What happens if you do not provide the data?
Inability to establish, assert or defend claims
* whichever is applicable in the case and which occurs earliest

DATA SECURITY
When processing your personal data, we apply organisational and technical measures in accordance with the relevant legislation, including the use of encryption of the connection using an SSL certificate.

COOKIES
Our Shop, like most websites, uses so-called cookies (cookie files). These files:

are stored in the memory of your device (computer, phone, etc.);
do not change the settings of your device.
In this Shop cookies are used for the following purposes:

remembering your session
marketing
Providing access to the features of the Shop.
To learn how to manage cookies, including how to disable their use in your browser, you can refer to the help file of your browser. You can find this information by pressing F1 in your browser. You will also find relevant instructions on the following pages, depending on which browser you are using:

Firefox
Chrome
Safari
Internet Explorer / Microsoft Edge
Cookies will not be processed by us for more than 15 minutes after your last visit to the Store.

Using the appropriate options of your browser, you can at any time:

delete cookies,
block the use of cookies in the future.
In such cases, we will no longer process them.

More information about cookies can be found on Wikipedia.

EXTERNAL SERVICES / DATA RECIPIENTS
We use external entities to support us in the running of our business. We entrust them with your data for processing - these entities only process data on our documented instructions.

Below you will find a list of the recipients of your data:

DATA RECIPIENT ACTIVITY TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION
any action in connection with the Shop the operator of the internet trading platform does not take place
placing an order in the Shop payment provider is not involved
delivery service provider - unless you have chosen personal collection no place
accounting office has no place

And furthermore:

the relevant public authorities insofar as we are obliged to make data available to them.