Cookie and Privacy Policy

Cookie and Privacy Policy on the www.crystalpalaceproductions.com Online Store

General information

This document sets out the Privacy Policy on the online store (hereinafter referred to as the “Online Store”). The Administrator/Controller of the Online Store is Olga Żmijewska, carrying out economic activity under the name of “Language and Company Olga Żmijewska”, entered into the Register of Entrepreneurs at the Central Electronic Register and Information on Economic Activity maintained by the Minister of Entrepreneurship and Technology, at the following address: CPP Olga Żmijewska, ul. Kwitnącej Wiśni 24, 14-100 Idzbark, Poland, and holder of the NIP Tax Identification No.:7411905060, and REGON Register of Business Entities No.:141933596.

All capitalised terms used herein shall have the meaning given to them in the Rules and Regulations of this Online Store.

The personal data collected by the Administrator/Controller of the Online Store is processed pursuant to the provisions of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ EU L 119, p.1), hereinafter referred to as the GDPR.

The Online Store Administrator/Controller shall make particular efforts to protect the privacy and information provided thereto and relating to the Customers of the Online Store. The Administrator/Controller exercises due care in taking the appropriate technical measures, including measures of a software programming and organisational nature, to ensure that the processed data is protected, and shall particularly protect the data from being made available or disclosed to unauthorised persons, against loss or destruction, unauthorised modification, as well as against them being processed in violation of the binding and applicable provisions of law.

The Goods and Services available on this website are not intended for or addressed to children under the age of 16 years. The Administrator/Controller of personal data does not provide for the intentional collection of data concerning children under the age of 16 years.

Personal Data

Personal Data Controller

The Controller of your personal data is:

CPP Olga Żmijewska, ul. Kwitnącej Wiśni 24, 14-100 Idzbark, Poland,

You can contact the Personal Data Controller in matters relating to your personal data by:

  • Email: shop@crystalpalaceproductions.com

  • Regular postal mail: CPP Olga Żmijewska, ul. Kwitnącej Wiśni 24, 14-100 Idzbark, Poland,

  • Telephone: +48 510 562 376

The Purpose and Legal Grounds for the Processing of Personal Data

The personal data Controller processes your personal data for the following purposes and in the following scope:

  • Taking steps, at your request, prior to entering into a contract (e.g., opening an account), i.e., the data provided in the registration form on the Online Store, i.e., your email and created password, sex; if the registration of your Account takes place through an external authentication provider (e.g., Google+ or Facebook), we collect your name and surname, whereas if you register when purchasing Goods, we collect your name and surname and your provided data such as the delivery address, in order to fulfil the order; in order to enable the performance of Services requiring the creation of an Account, such as: keeping your order history and providing information on the status of your order, we process the data provided by you on your Account and when purchasing Goods;

  • In order to enable the performance of Services not requiring the creation of an Account and purchase of Goods, i.e., browsing the Online Store website, using the Product Search, we process your personal data relating to your activity on our Online Store, i.e., the data concerning the Goods viewed by you, the browsing session of your device, your operating system, browser, location, unique ID, and IP address;

  • In order to enable the performance of the agreement for the sale of Goods (e.g., delivery of the ordered Goods), we process the personal data provided by you when purchasing the Goods, such as your name and surname, email address, postal address details, the details of your payment, and if making purchases when signed in to your Account, also the password that you set;

  • In order to collect statistical information on how various features available on the Online Store are used so as to enhance the user experience and ensure the security of the information systems used on the Online Store, we process the personal data concerning your activity on our Online Store website and the amount of time spent on each of our Online Store subpages, your browsing history, location, IP address, device ID, and information on your browser and operating system;

  • In order to determine, seek redress, enforce claims and defence against claims in legal proceedings and those of other enforcement authorities, we can process your data provided at the time of the purchase of Goods or creation of an Account, and other data necessary to prove the existence of a claim or that arise from a legal requirement, injunction or other legal procedure;

  • In order to handle claims, complaints, and requests and deal with Customer queries, we process your data provided in the contact form, claims, complaints, and requests, or in order to deal with Customer queries submitted in any other form, and certain personal data provided by you on your Account, as well as data concerning orders of Goods and other Services rendered by us that contributed or caused the claim, complaint or request, and the data included in the documents attached to claims, complaints and requests;

  • For marketing purposes of our Goods and Services and those of our Clients and Partners, including remarketing, we process your personal data provided at the time of creating your Account and any updates thereto, the data concerning your activity on the Online Store, including any orders placed that are recorded and stored in the form of cookies, particularly the order history, search history, clicking on buttons in our Online Store, the logging in and registration date, and the history and your activity related to our communication with you. In the case of remarketing, we use data about your activities in order to reach out to you with our marketing messages outside of our Online Store and we use external service providers for this purpose. These services consist of displaying our messages on websites other than the Online Store. See our Cookies Policy for further details;

  • In order to organise competitions and loyalty programmes, i.e., notifying of the points acquired, notifying competition winners, and advertising our offers, we use your personal data provided on your Account and at the time of registering for the competition or loyalty programme. Further details are provided each time in the terms and conditions for participation in a given competition or loyalty programme;

  • In order to conduct market research and opinion surveys by us or our partners, i.e., information concerning your order, the data you provided on your Account or at the time of purchase of given Goods, and your email address. We do not use the data collected within the market research and opinion surveys for marketing purposes. Specific guidance is provided each time with a given survey or wherever you provide your personal data for such purposes.

Categories of Relevant Personal Data

The Controller of personal data processes the following categories of the personal data concerned:

  • Contact details;

  • Data concerning your activity on our Online Store;

  • Data concerning your order on our Online Store;

  • Data concerning any claims, complaints and requests;

  • Data concerning marketing services.

Voluntary Nature of Providing Personal Data

The required personal data provided by your is voluntary and a prerequisite for the performance of services by the Personal Data Controller via the Online Store.

Data Processing Duration

The personal data will be processed for the period of time necessary for the performance of the orders, services, marketing actions, and other services for the Customer. Personal data will be deleted in the following cases:

  • If the data subject requests their deletion or withdraws the granted consent;

  • If the data subject takes no action for a period of over 10 years (inactive contact);

  • After receiving notice that the data stored is outdated or inaccurate.

Certain data in the following scope: email address, and name and surname, may be held for a period of 3 consecutive years for purposes of proof, and handling of claims, complaints, and requests related to the services rendered through the Online Store – such data will not be used for marketing purposes.

The data concerning orders of paid Goods and services, and competitions and loyalty programmes will be stored for a period of 5 years from the date of delivery of the order.

Data concerning Customers who did not log in are stored by us for the duration corresponding to the life cycle of the cookies saved on devices or until they are removed from the Customer’s device by the Customer.

Your personal data concerning your preferences, behaviours, and selection of marketing content may be used as the basis for automated decisions in order to determine sales opportunities for the Online Store.

Recipients of Personal Data

At this point, I would like to kindly ask you to read the attachment with the list of external suppliers that we sent you. Please note that this is only an illustrative list. Do not include the whole list if you do not use all the suppliers listed and, should a supplier be missing from the list, please add them in the format provided.

We will pass on your personal data to the following categories of recipients:

  • State bodies, e.g., public prosecutor, Police, the Polish data protection authority, and the President of the Office for Competition and Consumer Protection, should we be requested to do so by the authorities;

  • Service providers whose services we use in running our Online Store, e.g., to complete an order. Depending on the contractual arrangements and circumstances, these entities act at our direction or independently determine the purposes and means of their processing. The list of suppliers is available on our Online Store under the following link: ………….

Rights of the Data Subject

You have the following rights under the GDPR:

  • Right to request access to your personal data;

  • Right to request the rectification of your personal data;

  • Right to request the removal of your personal data;

  • Right to request the restriction of the processing of your personal data;

  • Right to object to the processing of your personal data;

  • Right to request that your personal data be transferred.

The Controller of personal data will, without undue delay – and in any case within one month after receiving your request – provide you with information on the actions taken in connection with your request. If necessary, the time limit of one month may be extended by a further two months due to the complexity of the request or the number of requests received.

In each case, the Controller of personal data will notify you of such an extension within one month of the receipt of your request, stating the reasons for the delay.

Right to Access Personal Data (GDPR Article 15)

You have the right to obtain from the personal data Controller information relating to whether your personal data is being processed.

If the Controller of personal data is processing your data, you have the right to:

  • Access your personal data;

  • Obtain information in relation to: the purposes of the processing of personal data, the categories of personal data being processed, the recipients or categories of recipients of such data, the planned period of retention of your personal data or the criteria setting out such a period, your rights under the GDPR, the right to lodge a complaint with the supervisory authority, the source of such data, automated decision-making, including profiling, and security measures taken in connection with the transfer of such data outside the European Union;

  • Obtain a copy of your personal data.

If you would like to access your personal data, contact us at: shop@crystalpalaceproductions.com.

Right to Rectify Personal Data (GDPR Article 16)

If your personal data is incorrect or inaccurate, you have the right to request the Controller to rectify your personal data without delay.

You also have the right to request the Controller to complete or supplement your personal data.

If you would like to request the rectification or completion of your personal data, contact us at: shop@crystalpalaceproductions.com.

If you have registered with our Online Store, you can rectify and complete or supplement your personal data on your own, once you have logged in to our Online Store.

Right to Erase Personal Data, i.e., “right to be forgotten” (GDPR Article 17)

You have the right to request the Controller to erase your personal data if:

  • Your personal data is no longer needed for the purposes for which they were collected or otherwise processed;

  • You have withdrawn the relevant consent in the scope in which the personal data was processed based on your consent;

  • Your personal data was unlawfully processed;

  • You have objected to the processing of your personal data for direct marketing purposes, including profiling, in the scope in which the processing of personal data is associated with direct marketing;

  • You have objected to the processing of your personal data in connection with processing necessary for the fulfilment of the task carried out in public interest or processing necessary for the purposes resulting from the legitimate interests pursued by the Controller of personal data or a third party.

Despite requesting your personal data to be erased, the Controller of personal data may continue to process them in order to determine, seek redress or defence against claims, about which you will be notified.

If you would like to request the removal of your personal data, contact us at: shop@crystalpalaceproductions.com.

Right to Restrict the Processing of Personal Data (GDPR Article 18)

You have the right to restrict the processing of your personal data when:

  • You question the accuracy of your personal data – the Controller of personal data will limit the processing of your personal data for the period of time adequate to check the accuracy of the contested data;

  • The processing of your personal data is unlawful and, instead of requesting that your personal data be erased, you are requesting that the processing of your personal data be restricted;

  • Your personal data is no longer needed for the purposes of processing but is still needed in order to determine, seek redress or defend your claims;

  • You object to the processing of your personal data – for the time period necessary to determine whether the legitimate interests pursued by the Controller of personal data take precedence over the grounds set out in your objection.

If you would like to restrict the processing of your personal data, contact us at: shop@crystalpalaceproductions.com.

Right to Object to the Processing of Personal Data (GDPR Article 21)

You have the right to raise an objection to the processing of your personal data, including profiling, at any time, in connection with the following:

  • The processing necessary for the fulfilment of the task carried out in public interest or processing necessary for the purposes resulting from the legitimate interests pursued by the personal data Controller or a third party;

  • The processing of data for direct marketing purposes.

If you would like to raise an objection to the processing of your personal data, contact us at: shop@crystalpalaceproductions.com.

Right to Personal Data Portability (GDPR Article 20)

You have the right to receive from the personal data Controller your personal data in a structured, commonly used, and machine-readable format and to transmit them to another Controller of personal data.

You can also request the personal data Controller to send your personal data directly to another Controller (as far as is technically possible).

If you would like to request the transfer of your personal data, contact us at: shop@crystalpalaceproductions.com.

Right to Withdraw Consent

You can revoke your consent for the processing of your personal data at any time.

The withdrawal of your consent for the processing of your personal data does not affect the lawfulness of the processing operations performed based on your consent before its withdrawal.

If you want to revoke your consent for the processing of your personal data, contact us at: shop@crystalpalaceproductions.com or under the relevant functions in your Account.

Lodging a Complaint with a Supervisory Authority

If you think that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority, particularly in the Member State in which you are habitually resident, your place of work or place of alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office (PPDPO).

Cookies

General Information

While browsing the website, the Online Store uses cookies (hereinafter referred to as Cookies), which are small text files that are stored on your computer or device when visiting our Online Store. We use cookies to monitor and improve our website and your experience while actively navigating our Online Store.

These files allow us to identify the software that you are using and to tailor our Online Store specifically to your individual needs.

Cookies usually contain the name of the domain of origin, the duration of cookie storage on the device, and their assigned value.

Security

Our cookies are completely safe and secure for your devices. Importantly, cookies cannot be of danger or pass on viruses or other unwanted software or malware.

Types of cookies

Here are some examples of the cookies used by us. Please add to the list any cookies that you are using but that have not been listed, and cross out the ones that you are not using.

We use two kinds of cookies on our website:

  • Session cookies: they are stored on your device until your web browser session ends. They are only temporary and are permanently deleted from your device’s memory. The session cookie mechanism does not allow any personal data or confidential information to be retrieved from your device, and;

  • Persistent cookies: they are stored on your device until they are deleted. Closing a browser session or turning off a device does not remove them from your device. The persistent cookie mechanism does not allow any personal data or confidential information to be retrieved from your device.

Purposes

We also use cookies of external entities for the following purposes:

  • Configuration of the Online Store;

  • Presentation of Certificates of Conformity via the solidnyregulamin.pl website, the administrator/controller of which is APM Poniatowska-Maj Kancelaria Prawna sp. k., with its registered office in Gdańsk. Their Privacy Policy is available at the following link: – http://solidnyregulamin.pl/polityka-prywatnosci/;

  • Creating statistics that allow us to understand how Online Store Customers use websites, how their structure and content can be improved using the web analytics tools of Google Analytics, the administrator/controller of which is Google Inc., with its registered office in the US. The Privacy Policy of Google is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/;

  • Determining the Customer profile in order to display to the Customer materials tailored in advertising networks using the online advertising tools of Google AdSense, the administrator/controller of which is Google Inc., with its registered office in the US. The Privacy Policy of Google is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/;

  • Determining the Customer profile in order to display to the Customer materials tailored in advertising networks using the online advertising tools of Google AdWords, the administrator/controller of which is Google Inc., with its registered office in the US. The Privacy Policy of Google is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/;

  • Popularising the Online Store using the facebook.com social network, the administrator/controller of which is Facebook Inc., with its registered office in the US or Facebook Ireland, with its registered office in Ireland. The Privacy Policy of facebook.com is available at the following link: https://www.facebook.com/help/cookies/;

  • Popularising the Online Store using the instagram.com social network, the administrator/controller of which is Instagram LLC., with its registered office in the US. The Privacy Policy of instagram.com is available at the following link: https://help.instagram.com/155833707900388;

  • Popularising the Online Store using the linkedIn.com social network, the administrator/controller of which is LinkedIn Ireland Ltd., with its registered office in Ireland. The Privacy Policy of linkedIn.com is available at the following link: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy;

  • Popularising the Online Store using social networks, for this purpose the addthis.com tool, the controller of which is AddThis Inc., with its registered office in the US. The Privacy Policy of addthis.com is available at the following link: http://www.addthis.com/privacy;

  • Popularising the Online Store using the twitter.com social network, the controller of which is Twitter Inc., with its registered office in the US. The Privacy Policy of twitter.com is available at the following link: https://support.twitter.com/articles/20170514.

To learn more about how cookies are used, we recommend reading the Privacy Policies of the companies mentioned above.

Cookies can be used by advertising networks, particularly the Google network, to display ads tailored to your preferences. To this end, information on how you browse the internet or on the time of website use is collected.

In order to review and edit the information about your preferences collected by the Google network, you can use the tool available at the following link: https://www.google.com/ads/preferences/.

You can change and manage your cookie settings at any time on your browser (in the settings) or in the service configuration, specifying the terms and conditions of their storage and how cookies access your device, etc. These settings can be modified in your browser settings to disable the automatic acceptance of cookies or to be notified each time of cookies being placed on your device. For more information about cookies, their potential impact, and how you can control and manage them, please view your browser settings.