aldrux24.pl Privacy Policy
Definitions
Administrator – Aldrux24 Ewa Tatarczuk based in Oświęcim-Zabór.
Mobile application - any software owned by Aldrux24, intended for installation on mobile devices, which enables the use of services
Aldrux24 or the Website.
Personal data - all information about a natural person identified or identifiable by one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity,
including device IP, location data, online identifier and information collected through cookies and other similar technology.
Policy – this Privacy Policy.
GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data
and on the free movement of such data and repealing Directive 95/46/EC.
Website – website run by the Administrator at aldrux24.pl
User – any natural person visiting the Website or using one or more services or functionalities described in the Policy, including via Mobile Applications.
Data processing in connection with the use of the website
In connection with the User's use of the Website, the Administrator collects data to the extent necessary to provide the individual services offered, as well as information about the User's activity on the Website. Detailed principles and purposes of processing personal data collected while using the Website by the User are described below.
Purposes and legal basis for data processing on the website
Using the aldrux24.pl website
Personal data of all persons using the Website (including the IP address or other identifiers and information collected via cookies or other similar technologies) who are not registered Users (i.e. persons who do not have a profile on the Website) are processed by the Administrator:
in order to handle purchases made without registration on the Website - then the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) of the GDPR);
in order to handle complaints - then the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) of the GDPR);
for analytical and statistical purposes - then the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) consisting in conducting analyzes of Users' activity as well as their preferences in order to improve the functionalities used and the services provided;
in order to possibly determine and pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) consisting in the protection of his rights;
for the marketing purposes of the Administrator and other entities, in particular related to the presentation of behavioral advertising - the principles of processing personal data for marketing purposes are described in the "MARKETING" section.
The User's activity on the Website, including his or her personal data, is recorded in system logs (a special computer program used to store a chronological record containing information on events and activities related to the IT system used to provide services by the Administrator). The information collected in logs is processed in connection with the provision of services. The administrator also processes them for technical purposes, in particular, the data may be temporarily stored and processed to ensure the security and proper functioning of IT systems, e.g. in connection with making backup copies, testing changes in IT systems, detecting irregularities or protecting against abuses and attacks. .
Registration on aldrux24.pl
People who register on the Website are asked to provide the data necessary to create and operate an account. In order to facilitate service, the User may provide additional data, thereby consenting to their processing. Such data can be deleted at any time. Providing data marked as mandatory is required to create and operate an account, and failure to provide it results in the inability to create an account. Providing other data is voluntary.
Personal data is processed:
in order to provide services related to maintaining and servicing an account on the Website - the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) of the GDPR), and in the scope of optional data - the legal basis for processing is consent (Article 6 section 1(a) of the GDPR);
for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), consisting in conducting analyzes of Users' activity on the Website and the method of using the account, as well as their preferences in order to improve the functionalities used;
in order to possibly determine and pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Administrator (Article 6(f) of the GDPR) consisting in the protection of his rights;
for marketing purposes of the Administrator and other entities, in particular sellers, using the Marketplace service - the principles of processing personal data for marketing purposes are described in the "MARKETING" section.
If the User places any personal data of other persons on the Website (including their name and surname, address, telephone number or e-mail address), he or she may do so only provided that the provisions of applicable law and the personal rights of these persons are not violated.
Personal data is processed:
in order to provide services related to maintaining and servicing an account on the Website - the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) of the GDPR), and in the scope of optional data - the legal basis for processing is consent (Article 6 section 1(a) of the GDPR);
for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), consisting in conducting analyzes of Users' activity on the Website and the method of using the account, as well as their preferences in order to improve the functionalities used;
in order to possibly determine and pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Administrator (Article 6(f) of the GDPR) consisting in the protection of his rights;
for marketing purposes of the Administrator and other entities, in particular sellers, using the Marketplace service - the principles of processing personal data for marketing purposes are described in the "MARKETING" section.
If the User places any personal data of other persons on the Website (including their name and surname, address, telephone number or e-mail address), he or she may do so only provided that the provisions of applicable law and the personal rights of these persons are not violated.
Contact forms
The administrator provides the opportunity to contact him using electronic contact forms. Using the form requires providing personal data necessary to contact the User and answer the inquiry. The user may also provide other data to facilitate contact or handling of the inquiry. Providing data marked as mandatory is required to accept and handle the inquiry, and failure to provide it results in the inability to process it. Providing other data is voluntary.
Personal data is processed:
in order to identify the sender and handle his inquiry sent via the form provided - the legal basis for processing is the necessity of processing to perform the service provision contract (Article 6(1)(b) of the GDPR);
for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) consisting in maintaining statistics of inquiries submitted by Users via the Website in order to improve its functionality;
for purposes related to satisfaction surveys, in particular by sending communication to e-mail addresses with a request to complete a satisfaction survey - the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) consisting in maintaining high quality of service and level of customer satisfaction with the products and services offered.
Marketing
The Administrator processes Users' personal data in order to carry out marketing activities, which may consist in:
displaying marketing content to the User that is not tailored to his preferences (contextual advertising);
displaying marketing content to the User corresponding to his interests (behavioral advertising);
sending e-mail notifications about interesting offers or content, which in some cases contain commercial information;
conducting other types of activities related to direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities).
In order to carry out marketing activities, the Administrator uses profiling in some cases. This means that thanks to automatic data processing, the Administrator assesses selected factors regarding natural persons in order to analyze their behavior or create a forecast for the future.
In some cases, the Administrator conducts advertising campaigns using the services of external suppliers, which may consist in displaying advertisements to non-standard groups of recipients on other websites or applications, including social networking sites.
Contextual advertising
The Administrator processes Users' personal data for marketing purposes in connection with directing contextual advertising to Users (i.e. advertising that is not tailored to the User's preferences). The processing of personal data then takes place in connection with the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR).
Behavioral advertising
The Administrator processes Users' personal data, including personal data collected via cookies and other similar technologies, for marketing purposes in connection with directing behavioral advertising to Users (i.e. advertising that is tailored to the User's preferences). The processing of personal data also includes profiling of Users. The use of personal data collected via this technology for marketing purposes, in particular in the promotion of third-party services and goods, is based on the legitimate interest of the administrator and only provided that the User has consented to the use of cookies or similar technologies. Consent to the use of these files may be expressed by setting your preferences in the "Customize consents" tab on the Website or in the Mobile Application settings. This consent may be withdrawn at any time.
Newsletter
The administrator provides the newsletter service to persons who have provided their e-mail address for this purpose. Providing data is required to provide the newsletter service, and failure to provide it results in the inability to send it. This form of communication with the User may include profiling.
Personal data is processed:
in order to provide the newsletter sending service - the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) of the GDPR);
in the case of sending marketing content to the User as part of the newsletter - the legal basis for processing, including the use of profiling, is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) in connection with the consent given to receive the newsletter;
for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), consisting in conducting analyzes of Users' activity on the Website in order to improve the functionalities used;
in order to possibly determine and pursue claims or defend against claims - the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), consisting in the protection of his rights.
Direct marketing
If the User has agreed to receive marketing information via e-mail, SMS and other means of electronic communication, the User's personal data will be processed for the purpose of sending such information. The basis for data processing is the legitimate interest of Aldrux24 consisting in sending marketing information within the limits of the consent granted by the User (direct marketing). The user has the right to object to the processing of data for direct marketing purposes, including profiling. The data will be stored for this purpose for the duration of Aldrux24's legitimate interest, unless the User objects to receiving marketing information.
Social media
The Administrator processes personal data of Users visiting the Administrator's profiles on social media (Facebook, YouTube, Instagram, Twitter, Google +, Pinterest). This data is processed only in connection with maintaining the profile, including to inform Users about the Administrator's activity and promoting various types of events, services and products, as well as to communicate with users via functionalities available on social media. The legal basis for the processing of personal data by the Administrator for this purpose is its legitimate interest (Article 6(1)(f) of the GDPR), consisting in promoting its own brand and building and maintaining a community related to the brand.
Data processing in connection with the use of Mobile Applications
The Administrator processes Users' personal data also to enable the use of services offered on the Website, as well as additional services via Mobile Applications. In connection with the User's downloading and use of Mobile Applications, the Administrator may process technical data regarding the device on which a given application is installed, User's identification and contact data, data regarding activity in the application, including data regarding the scope and method of using its functionalities, data location and payment details.
Users' data in connection with the use of Mobile Applications are processed:
for registration and use of mobile applications. The legal basis for data processing in this respect is the necessity to perform the contract (Article 6(1)(b) of the GDPR);
in order to provide services available via mobile applications - the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) of the GDPR);
in order to possibly determine and pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) consisting in the protection of his rights;
for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), consisting in conducting analyzes of Users' activities as well as their preferences in order to improve the functionalities used and the services provided;
for marketing purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) consisting in the promotion of its products and services.
Using mobile applications, the User can, in particular: browse the Website's assortment, gain access to his/her account on the Website, place orders and make payments for them, read the information provided in the mobile application and use other functionalities and content available in the mobile application. The Administrator informs that due to technical limitations, the mobile application does not provide the possibility of using all functionalities of the Website that are available through the Website.
Cookies and similar technology
Detailed information about cookies used on the Website is available at: https://www.aldrux24/pliki-cookies.
Analytical and marketing tools used by the administrator's partners
The Administrator and its Partners use various solutions and tools for analytical and marketing purposes. Below is basic information about these tools. Detailed information in this regard can be found in the privacy policy of the given partner.
Google Analytics
Google Analytics cookies are files used by Google to analyze how the User uses the Website, to create statistics and reports on the functioning of the Website. Google does not use the collected data to identify the User or combine this information to enable identification. Detailed information about the scope and principles of data collection in connection with this service can be found at the following link: https://google.com/intl/pl/policies/privacy/partners.
Google AdWords
Google AdWords is a tool that allows you to measure the effectiveness of advertising campaigns implemented by the Administrator, allowing for the analysis of such data as e.g. keywords or the number of unique users. The Google Adwords platform also allows us to display our ads to people who have visited the Website in the past. Information on data processing by Google in the scope of the above service is available at the following link: https://policies.google.com/technologies/ads?hl=pl.
Facebook pixels
Facebook pixels is a tool enabling measuring the effectiveness of advertising campaigns carried out by the Administrator on Facebook. The tool allows for advanced data analysis to optimize the Administrator's activities also using other tools offered by Facebook. Detailed information on data processing by Facebook can be found at this link: https://pl-pl.facebook.com/help/443357099140264?helpref=about_content
Social plugins
The Website uses plug-ins from social networking sites (Facebook, Google+, LinkedIn, Twitter). Plugins allow the User to share content published on the Website on a selected social networking site. The use of plug-ins on the Website causes a given social networking site to receive information about the User's use of the Website and may assign it to the User's profile created in a given social networking site. The administrator has no knowledge of the purpose and scope of data collection by social networking sites. Detailed information on this topic can be found at the following links:
Facebook: https://facebook.com/policy.php
Google: https://privacy.google.com/take-control.html?categories_activeEl=sign-in
LinkedIn: https://linkedin.com/legal/privacy-policy?_l=pl_PL
Twitter: https://twitter.com/en/privacy
Pinterest: https://policy.pinterest.com/pl/privacy-policy
Instagram: https://privacycenter.instagram.com/policy
HotJar
HotJar is a tool that allows the Administrator to analyze Users' activity on the Website, e.g. through surveys or satisfaction surveys, and by anonymously collecting information about clicks on individual places on the Website. The tool does not allow the identification of the User. Detailed information on data collected via HotJar and how to deactivate User monitoring is available at the following link: https://hotjar.com/privacy.
Personal data processing period
The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the provision of the service or execution of the order, until the consent is withdrawn or an effective objection to data processing is raised in cases where the legal basis for data processing is the legitimate interest of the Administrator. The data processing period may be extended if processing is necessary to establish and pursue possible claims or defend against them, and after that time only if and to the extent required by law. After the processing period, the data is irreversibly deleted or anonymized.
User permissions
Data subjects have the following rights:
The right to information about the processing of personal data - on this basis, the Administrator provides the person making such a request with information about the processing of personal data, including, in particular, the purposes and legal basis for processing, the scope of data held, entities to which personal data are disclosed and the planned date of their deletion. ;
The right to obtain a copy of the data - on this basis, the Administrator provides a copy of the processed data regarding the person submitting the request;
The right to rectification - on this basis, the Administrator removes any inconsistencies or errors regarding the personal data being processed and supplements or updates them if they are incomplete or have changed;
The right to delete data - on this basis, you can request the deletion of data whose processing is no longer necessary to achieve any of the purposes for which it was collected;
The right to limit processing - on this basis, the Administrator ceases to perform operations on personal data, except for the operations to which the data subject has consented and their storage, in accordance with the adopted retention principles, or until the reasons for limiting data processing cease (e.g. a decision of the supervisory authority will be issued authorizing further data processing);
The right to transfer data - on this basis, to the extent that data is processed in connection with a concluded contract or consent, the Administrator issues data provided by the person to whom they concern in a format that allows them to be read by a computer. It is also possible to request that this data be sent to another entity - provided, however, that there are technical possibilities in this respect on the part of both the Administrator and the other entity;
The right to object to the processing of data for marketing purposes - the data subject may at any time object to the processing of personal data for marketing purposes, without the need to justify such an objection;
The right to object to the processing of data for purposes related to a satisfaction survey - the data subject may at any time object to the processing of personal data for purposes related to a satisfaction survey, in particular to object to sending communications to e-mail addresses requesting an opinion. (reviews) or completing a satisfaction survey, without having to justify such objection;
The right to object to other purposes of data processing - the data subject may at any time object to the processing of personal data based on the legitimate interest of the Administrator (e.g. for analytical or statistical purposes or for reasons related to the protection of property). Objections in this respect should include justification and are subject to the Administrator's assessment;
The right to withdraw consent - if data are processed on the basis of consent, the data subject has the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before the withdrawal of this consent;
The right to complain - if it is considered that the processing of personal data violates the provisions of the GDPR or other provisions on the protection of personal data, the data subject may submit a complaint to the President of the Office for Personal Data Protection.
An application regarding the exercise of the rights of data subjects may be submitted:
in writing to the following address: Aldrux24 ul. Gościnna 13A, 32-600 Oświęcim-Zaborze;
by e-mail to the following address: sklepi@aldrux24.pl
The application should, if possible, precisely indicate what the request concerns, i.e. in particular:
what rights the person submitting the application wants to exercise (e.g. the right to receive a copy of data, the right to delete data, etc.);
what processing process the request concerns (e.g. use of a specific service, activity on a specific website, receiving a newsletter containing commercial information to a specific email address, etc.);
what processing purposes the request relates to (e.g. marketing purposes, analytical purposes, etc.).
If the Administrator is unable to determine the content of the request or identify the person submitting the application based on the submitted notification, he will ask the applicant for additional information.
Responses to reports will be provided within one month of receipt. If it is necessary to extend this deadline, the Administrator will inform the applicant about the reasons for such extension.
The response will be provided to the e-mail address from which the application was sent, and in the case of applications sent by post, by regular mail to the address indicated by the applicant, unless the content of the letter indicates the desire to receive feedback to the e-mail address (in such a case, please provide e-mail adress).
Data recipients
In connection with the provision of services, personal data will be disclosed to external entities, in particular suppliers responsible for operating IT systems, entities running the Customer Support Center, entities such as banks and payment operators, entities providing accounting, legal, auditing and consulting services, couriers ( in connection with the execution of the order), marketing agencies (within the scope of marketing services) and entities related to the Administrator, including companies from its capital group and commercial partners. In the event of a complaint, the User's data may be transferred to the product distributor, manufacturer or guarantor, depending on a specific product covered by the rights. In the event of a purchase made from an entity other than the Administrator on the Marketplace platform, the User's data will be disclosed to the seller in order to conclude and perform the sales contract.
If the User consents, his or her data may also be made available to other entities for their own purposes, including marketing purposes.
The Administrator reserves the right to disclose selected information about the User to competent authorities or third parties who request such information, based on an appropriate legal basis and in accordance with the provisions of applicable law.
Transfer of data outside the EEA
The level of protection for personal data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator transfers personal data outside the EEA only when necessary and ensuring an adequate level of protection, primarily by:
cooperation with entities processing personal data in countries for which an appropriate decision of the European Commission has been issued;
application of standard contractual clauses issued by the European Commission;
application of binding corporate rules approved by the relevant supervisory authority;
The administrator always informs about the intention to transfer personal data outside the EEA at the stage of collection.
Security of personal data
The administrator conducts risk analysis on an ongoing basis to ensure that personal data is processed in a safe manner - ensuring, above all, that only authorized persons have access to the data and only to the extent necessary for the tasks they perform. . The administrator ensures that all operations on personal data are recorded and performed only by authorized employees and collaborators. The Administrator takes all necessary actions to ensure that its subcontractors and other cooperating entities guarantee the use of appropriate security measures whenever they process personal data on behalf of the Administrator.
Contact details
Contact with the Administrator is possible via the e-mail address: dziennikki@aldrux24.pl or the correspondence address Aldrux24 ul. Gościnna 13A, 32-600 Oświęcim-Zaborze.
Changes to the privacy policy The policy is reviewed on an ongoing basis and updated, if necessary.