Privacy Policy

version applicable from 01/01/2024

WHAT IS THE PRIVACY POLICY?

We would like to present the details of how we process your personal data to give you full transparency and peace of mind when using our website.

As we operate in the online industry ourselves, we know how important the protection of your personal data is. That is why we make every effort to protect your privacy and the information you share with us.

We carefully select and use appropriate technical measures, in particular software and organisational measures, to ensure the protection of processed personal data. Our website uses encrypted data transmission (SSL), which protects your identifying data.

In our Privacy Policy you will find all key information regarding how we process your personal data. Please read it — we promise it will take only a few minutes.

Who is the administrator of the website www.vieridivani.pl?

The website administrator is Mirosław Zawilski, conducting business under the name Zawilski Mirosław - STOLARSTWO TAPICERSTWO, entered in the Register of Entrepreneurs of the Central Registration and Information on Business, maintained by the minister competent for the economy, at ul. Adama Mickiewicza 32, 34-130 Kalwaria Zebrzydowska, NIP 5511277231, REGON 070638509, BDO 000024329 (that is: we/us).

PERSONAL DATA

Which legal act governs the processing of your personal data?

Your personal data are collected and processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), commonly known as the GDPR. In matters not regulated by the GDPR, the processing of personal data is governed by the Polish Personal Data Protection Act of 10 May 2018.

Who is the controller of your personal data?

The controller of your personal data is Mirosław Zawilski, conducting business under the name Zawilski Mirosław - STOLARSTWO TAPICERSTWO, entered in the Register of Entrepreneurs of the Central Registration and Information on Business, maintained by the minister competent for the economy, at ul. Adama Mickiewicza 32, 34-130 Kalwaria Zebrzydowska, NIP 5511277231, REGON 070638509, BDO 000024329, phone: +48 791100854, e-mail: sklep@vieridivani.pl.

You can contact us about your personal data via:

e-mail: sklep@vieridivani.pl,
post: ul. Adama Mickiewicza 32, 34-130 Kalwaria Zebrzydowska,
phone: +48 791100854.

HOW DO WE PROCESS THE PERSONAL DATA YOU PROVIDE?

What personal data do we process and for what purposes?

On our website we offer various services for which we process different personal data on different legal bases.

Purpose	Personal data	Legal basis for processing	Data retention period
concluding and performing a contract	first name, surname, correspondence address, VAT No. (NIP), e-mail address, phone number	Art. 6(1)(b) GDPR, i.e. processing to take steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are a party	until the limitation period for claims related to the performance of the contract expires
creating and maintaining an account	first name, surname, e-mail address, phone number, correspondence address	Art. 6(1)(b) GDPR, i.e. processing to take steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are a party	until the limitation period for claims related to the performance of the contract expires
adding reviews	first name, e-mail address	Art. 6(1)(f) GDPR, i.e. processing for our legitimate interest in displaying product and transaction reviews on the online shop	until an objection to the processing of personal data is lodged
newsletter	e-mail address, first name, surname	Art. 6(1)(a) GDPR, i.e. processing based on your consent to the processing of your personal data	until consent to the processing of personal data is withdrawn
contact form	e-mail address	Art. 6(1)(f) GDPR, i.e. processing for our legitimate interest in maintaining continuity of communication and enabling contact with us regarding our business activity	until an objection to the processing of personal data is lodged
interactive chat	data provided during the conversation, e-mail address, IP address	Art. 6(1)(f) GDPR, i.e. processing for our legitimate interest in maintaining continuity of communication and enabling contact with us regarding our business activity	until an objection to the processing of personal data is lodged
adding products to the favourites list	e-mail address, IP address	Art. 6(1)(b) GDPR, i.e. processing to take steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are a party	until you remove products from the favourites list
analysis of traffic on the online shop	IP address, browser data	Art. 6(1)(f) GDPR, i.e. processing for our legitimate interest consisting in analysing customer traffic on the shop	until an objection to the processing of personal data is lodged
direct marketing of our own goods and services, including remarketing	IP address, browser data	Art. 6(1)(f) GDPR, i.e. processing for our legitimate interest consisting in direct marketing of our services, including remarketing	until an objection to the processing of personal data is lodged
establishing, pursuing and enforcing claims and defence against claims in proceedings before courts and other public authorities	first name, surname, residential address, PESEL number, NIP, REGON, e-mail address, phone number, IP number, bank account number, payment card number	Art. 6(1)(f) GDPR, i.e. processing for our legitimate interest consisting in establishing, pursuing and enforcing claims and defending against claims before courts and other public authorities	until the limitation period for claims related to the performance of the contract expires
fulfilling legal obligations arising from legal provisions, in particular tax and accounting regulations	first name, surname, company name, PESEL number, NIP or REGON, e-mail address, phone number, correspondence address, payment card number	Art. 6(1)(c) GDPR, i.e. processing is necessary for compliance with legal obligations to which we are subject, in particular tax and accounting regulations	until the expiry of the legal obligations of the Controller which justified the processing of personal data

Voluntary provision of personal data

Providing the required personal data is voluntary but constitutes a condition for us to provide services to you (e.g. sending the newsletter or creating an account).

Recipients of personal data

You can find the current list of entities to whom we disclose your personal data here.

PayPro S.A., Poznań – Processing payments
PayU S.A., Poznań – Processing payments
Santander Consumer Bank S.A. – Processing payments in the e-Instalments Santander Consumer Finance system
Opineo sp. z o.o., Wrocław – Displaying and submitting reviews on an external website
Google Ireland Ltd. (Google Cloud, Google Analytics, Google Analytics 360, Fabric Software), Ireland – Measuring website traffic, error reporting, statistics
Meta Platforms Ireland Limited – Promotion of the Online Shop via Facebook.com, Instagram.com

Automated decision-making (including profiling)

We do not make decisions about you by automated means and we do not use profiling.

Will we transfer your personal data outside the EEA or to an international organisation?

To use Google tools, your personal data may be transferred to the United States, where Google LLC’s servers are located.

Google LLC appears on the list of entities participating in the Data Privacy Framework programme (link: https://www.dataprivacyframework.gov/s/participant-search), therefore personal data protection is adequate in relation to EU regulations, pursuant to the European Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequacy of the protection provided by the EU-US Data Privacy Framework (link: https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework.pdf).

To use Facebook tools, your personal data may be transferred to the United States, where Meta Platforms Inc.’s servers are located.

Meta Platforms Inc. appears on the list of entities participating in the Data Privacy Framework programme (link: https://www.dataprivacyframework.gov/s/participant-search), therefore personal data protection is adequate in relation to EU regulations, pursuant to the European Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequacy of the protection provided by the EU-US Data Privacy Framework (link: https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework.pdf).

To use the Hotjar analytics tool, your personal data may be transferred to the United States. According to Hotjar’s privacy policy, Hotjar has implemented appropriate safeguards to keep your personal data protected and requires external service providers and partners to have appropriate safeguards as well. More information is available in Hotjar’s Privacy Policy: https://www.hotjar.com/legal/policies/privacy/.

WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH OUR PROCESSING OF YOUR PERSONAL DATA?

Under the GDPR you have the right to:

request access to your personal data,
request rectification of your personal data,
request erasure of your personal data,
request restriction of processing,
object to the processing of personal data,
request data portability.

If you submit any of the above requests, without undue delay — and in any event within one month of receiving the request — we will inform you about the actions taken in relation to your request.

If necessary, we may extend the one-month period by a further two months due to the complexity or number of requests.

In any case, within one month of receiving your request we will inform you about the extension and the reasons for the delay.

Right of access (Art. 15 GDPR)

You have the right to obtain information as to whether we process your personal data. If we do, you have the right to:

access your personal data,
obtain information about the purposes of processing, the categories of personal data, the recipients or categories of recipients, the envisaged retention period or the criteria used to determine that period, your GDPR rights and the right to lodge a complaint with the President of the Personal Data Protection Office, the source of the data, automated decision-making including profiling, and the safeguards applied when transferring data outside the European Union;
obtain a copy of your personal data.

If you wish to request access to your personal data, please send your request to: sklep@vieridivani.pl.

Right to rectification (Art. 16 GDPR)

If your personal data are inaccurate, you have the right to obtain without undue delay the rectification of your personal data. You also have the right to have incomplete personal data completed. To request rectification or completion, please send your request to: sklep@vieridivani.pl.

Right to erasure (“right to be forgotten”) (Art. 17 GDPR)

You have the right to request the erasure of your personal data where:

your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
you have withdrawn consent where processing was based on your consent;
your personal data have been processed unlawfully;
you have objected to processing for direct marketing purposes, including profiling, to the extent that the processing is related to such direct marketing;
you have objected to processing necessary for the performance of a task carried out in the public interest or for the purposes of the legitimate interests pursued by us or by a third party.

Despite a request for erasure, we may continue processing your data for the establishment, exercise or defence of legal claims, of which you will be informed.

If you wish to request erasure of your personal data, please send your request to: sklep@vieridivani.pl.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request restriction of processing where:

you contest the accuracy of your personal data — we will restrict processing for a period enabling us to verify the accuracy of the data;
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
we no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims;
you have objected to processing — pending verification whether our legitimate grounds override those of your objection.

If you wish to request restriction of processing, please send your request to: sklep@vieridivani.pl.

Right to object (Art. 21 GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the data controller or by a third party;
processing for direct marketing purposes.

If you wish to object to the processing of your personal data, please send your request to: sklep@vieridivani.pl.

Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to transmit those data to another controller.

By default, we will provide your personal data in CSV format. If you prefer another format, please indicate it in your request. Where possible, we will provide the data in your preferred format.

You may also request that we transmit your personal data directly to another controller (where technically feasible).

If you wish to request the portability of your personal data, please send your request to: sklep@vieridivani.pl.

Can you withdraw your consent to processing?

You can withdraw your consent to the processing of your personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to withdraw your consent, please send your request to: sklep@vieridivani.pl.

If you wish to withdraw consent for the “Newsletter” service, you can unsubscribe here.

Complaint to a supervisory authority

If you believe that the processing of your personal data infringes data protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office (PUODO), who replaced the GIODO on 25 May 2018.

More information can be found here https://uodo.gov.pl/pl/492/2464.

Cookies

General information

When browsing the Online Shop’s website, “cookies” are used (hereinafter: Cookies), i.e. small text files that are saved on your end device in connection with the use of the Online Shop. They are used to ensure the correct operation of the Online Shop’s pages.

These files make it possible to identify the software you use and tailor the Online Shop individually to your needs.

Cookies usually contain the domain name from which they originate, the time they are stored on the device and a value.

Security

The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted or malicious software to get onto your devices via Cookies.

Types of Cookies

We use two types of Cookies:

Session Cookies: stored on your device and remain there until the browser session ends. The information saved is then permanently deleted from your device’s memory. The Session Cookies mechanism does not allow any personal data or confidential information to be collected from your device.
Persistent Cookies: stored on your device and remain there until they are deleted. Ending the browser session or switching the device off does not delete them. The Persistent Cookies mechanism does not allow any personal data or confidential information to be collected from your device.

Purposes

We also use third-party Cookies for the following purposes:

configuring the Online Shop;
creating statistics that help understand how users use the Online Shop, enabling improvements to its structure and content via Google Analytics, administered by Google Ireland Ltd., Ireland. Google’s privacy policy is available at: https://policies.google.com/privacy?fg=1;

defining the Customer profile to display tailored materials in advertising networks using Google Ads, administered by Google Ireland Ltd., Ireland. Google’s privacy policy is available at: https://policies.google.com/privacy?fg=1;
collecting information about User behaviour using Facebook Pixel, administered by Meta Platforms Ireland Limited, Ireland. Facebook’s privacy policy is available at: https://www.facebook.com/help/cookies/;
creating content statistics and performance via Hotjar tools, administered by Hotjar Ltd., Malta. Hotjar’s privacy policy is available at: https://www.hotjar.com/legal/policies/privacy/;

using Google Signals, a Google Analytics feature that links visit information collected from this Shop with Google account information of signed-in Google users who consented to such linkage for ad personalisation. Google’s privacy policy is available at: https://policies.google.com/privacy?fg=1;
displaying and submitting reviews on the external website Ceneo.pl, administered by Ceneo.pl sp. z o.o., Poznań. Cookie policy: http://info.ceneo.pl/polityka_plikow_cookies;
displaying reviews on the Online Shop’s website that are fetched from the external service Opineo.pl, administered by Opineo.pl sp. z o.o., Wrocław. Cookie policy: http://www.opineo.pl/i/informacje-o-ciastkach.

To learn the rules governing the use of Cookies, please consult the privacy policies of the companies listed above.

Cookies may be used by advertising networks, in particular Google’s network, to display advertisements tailored to your preferences. To this end, information about your browsing behaviour or time spent on the website may be stored.

To view and edit information about your preferences collected by Google’s advertising network, you can use the tool available at https://www.google.com/ads/preferences/.

Using your browser settings or service configuration, you can independently change Cookie settings at any time, defining the conditions for storing and accessing Cookies on your device. You can change the settings to block automatic handling of Cookies in the browser settings or to notify you each time they are placed on your device. Detailed information on the possibilities and ways of handling Cookies is available in your software (web browser) settings.