This privacy notice aims to give you information on how MAMOI collects, processes and protects your personal data through your use of this Website, including any data you may provide through this Website when you contact the Administrator, sign up to our newsletter, browse through the MAMOI online shop, create an account to store user data used when placing orders, purchase a product offered in the shop.
The information contained on the Website, including this document, is checked for accuracy. The Administrator reserves the right to introduce changes to them.
All data entered by the User on the Website, as far as they identify or, when combined with other data, may identify the User, are subject to these provisions.
PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF SUPPLYING
Identity of personal data administrator
The administrator of personal data Users’ collected through the Website, including all Users using the contact box (hereinafter collectively referred to as “Users”) is ELJOT spółka z ograniczoną odpowiedzialnością (limited liability company) headquartered in Cracow, Smolki 8/2 (hereinafter: “Administrator”).
Contact details of the personal data Administrator:
ELJOT sp. z o.o.
Personal data collection through the Website
Personal data of Website Users is collected and processed depending on how the User uses the Website. The User’s personal data may be collected and processed for the provision of the services offered by the Website, including answering questions, the Website operation, profile registration (shop accounts), placing and processing an order. In the last two cases, the User must read the document “Terms & Conditions”, available on the Website subpage.
Providing any personal data is voluntary. However, not providing it may obscure or make impossible to continue using this Website.
Purpose of personal data processing
Data of Website Users (who do not have an account), including IP address or other identifiers, as well as information collected through cookies or other similar technologies, are processed for the following purposes: to provide electronic services like presenting the Website content to its Users and to make the contact box available; to handle orders placed without registering an account on the Website; to handle complaints.
Data of Website Users (who have an account) provided to the Administrator in forms available on the Website, including IP address or other identifiers and information collected through cookies or other similar technologies, are processed for the following purposes: to provide electronic services like account maintenance and management (including data storage services necessary for order processing), to handle orders placed by a registered User; to show order history; to handle complaints.
The data collected within the contact box is processed for the purpose of responding to the request made.
Data collected as part of the newsletter is processed for the purpose of sending marketing information to the User who has given his consent.
Legal basis for the processing of personal data
The legal basis for the processing of the Website Users’ data (with and without an account) is the Act on the provision of digital services (Ustawa o świadczeniu usług drogą elektroniczną), which provides for the conclusion of provisioning digital services (basis: art. 6.1.b of the General Data Protection Regulation) with regard to for data collected on a mandatory basis, and the User’s consent with regard to data that the User may provide voluntarily (art. 6.1.a of the General Data Protection Regulation).
The legal basis for data processing of Users using the contact box is the Administrator’s legitimate interest in not leaving an enquiry submitted on the User’s own initiative unanswered (art. 6.1.f of the General Data Protection Regulation).
The legal basis for data processing for analytical and statistical purposes, collected by Google Analytics tools is the explicit consent of the user, expressed upon entering the Website (based on art. 6.1.a of the General Data Protection Regulation).
The legal basis for the processing of data in the execution of an order placed by the User and the subsequent customer service, in particular the complaint handling, is fulfilling of the sales agreement between the User and the Administrator (art. 6.1.b of the General Personal Data Protection Regulation), concerning the data required by the Administrator and the User’s voluntary consent on all optional data not required by the Administrator (art. 6.1.a of the General Personal Data Protection Regulation).
Information on recipients of personal data and transmission of data to third parties
Users’ personal data may be disclosed to other entities solely for purposes related to the provision of the Website and fulfilling of the sales agreement concluded using the Website, as well as to authorities authorised by law.
The Administrator entrusts data processing to an entity providing server-based Website maintenance services and to programming services supplier in order to maintain the Website and its modifications; to entities providing components (services) for the Website for their proper functioning (e.g. features enabling contact with the shop, issuing invoices/order confirmations), to courier companies in order to fulfil a sales agreement. The entities providing online payment services for ordered items are not provided with Users’ personal data in order to process payments, they do only have an access to a unique identifier linked directly to the specific order.
Data of Users who have agreed to the processing of data for statistical and analytical purposes collected using Google Analytics tools when entering the Website will be entrusted to companies of the Google group for the use of Google Analytics tools on the Website. Where data is transferred to the United States, the arrangements of the EU-US Privacy Shield shall apply. Data transfers to other countries outside the European Economic Area are based on model contractual clauses. The transfer of data outside the European Economic Area does not affect the data subject’s rights, including the right to access and obtain a copy of the data (for such matters, please contact the Administrator directly).
Subject to the above, User data is not transferred outside the European Economic Area.
Rights of the data subject
Please be informed that each data subject has the right to access their personal data and may require their rectification, erasure, restriction of their processing and has the right to object to their processing, as well as the right to transfer their data, and to withdraw their consent to their processing at any time, which will not affect the legality of their processing, which was carried out on the basis of consent before its withdrawal.
In relation to the processing of personal data, data subjects are entitled to lodge a complaint with the supervisory authority (until 24 May 2018 this is Inspector General for Personal Data Protection (GIODO), from 25 May 2018 this is President of the Personal Data Protection Office (PUODO)).
Information on whether the disclosure of data is a statutory/contractual requirement and the consequences of non-disclosure
Providing personal data is voluntary. However, it is necessary in order to use the Website or to answer a submitted query or to subscribe to a newsletter. Wherever the Administrator asks for consent to process personal data, failure to provide such consent shall result in the Administrator’s refraining from collecting such data.
The period for which the personal data will be stored
User data collected while creating a profile (account) in the shop is processed for the duration of the contract for the provision of electronic services, i.e. until the User resigns from the account or the Administrator terminates the agreement.
User data collected in order to fulfil the sales agreement concluded with the Administrator
User data collected in order to subscribe to the newsletter or to make an enquiry via the contact box is processed until the User withdraws his consent or the enquiry is answered.
Browsing the Website and its subpages
When the User browses the Website, he provides the Administrator with his IP address and the personal data collected through cookies and other technologies placed by the Website on the device used by the User. This is caused by the fact that each device connected to the Internet is assigned to a unique number, the IP address, which can be used, for example, to identify the country which you are accessing the network from.
In addition, but only if the User has given his consent when he visited the Website, the Website collects additional data about the pages the User visits, such as the number of visits, country, browser, the time spent on browsing, etc. We analyse the data collected using a third party solution. We currently use Google Analytics tools to help us understand how Users use the Website. This information will be used solely for anonymous collective statistical studies to help us improve the products and customer service of this Website.
Security of acquired data
Personal data and other data of a non-personal nature collected through the Website are stored on a secure server located in the European Economic Area and may be accessed only by authorised personnel who are trained in the protection of personal data and the security of the IT system, as well as is obliged to maintain strict confidentiality, and by subcontractors with whom contracts ensuring their proper use have been concluded. The Website encrypts the User input and data using SSL. Personal data stored on the server is also encrypted.
Personal data shall be processed with the observance of technical and organisational measures which ensure the protection of processed data in accordance with the requirements specified in the agreements on the protection of personal data, including the Regulation of the Minister of Interior and Administration of 29 April 2004 on the documentation of personal data processing and technical and organisational conditions which should be met by devices and IT systems used for the processing of personal data (Journal of Laws – Dz. U. No. 100, item 1024). The data security measures will be adapted to the requirements of Regulation 2016/679 of the European Parliament and of the Council (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: “General Data Protection Regulation”), which applies from 25 May 2018.
This Website uses following cookies:
Session cookies are stored on your device and remain there until you end your browser session. The stored information is then permanently deleted from the memory of the device. The mechanism of session cookies does not allow collecting any personal data or any confidential information from the User’s device.
Persistent cookies are stored on your device and remain there until you delete them. Ending the browser session or switching off the device does delete them from the User’s device. The mechanism of persistent cookies does not allow collecting any personal data or any confidential information from the User’s device.
The Administrator uses its own cookies in order to:
set up the Website: to adapt the content to User preferences and to optimise the use of Website; to recognise User’s device and its location and properly display the Website tailored to his individual needs; to save the settings selected by the User and to personalise User interface, e.g. selected language version or the region where the Used comes from; to save the history of websites visited in the service in order to recommend content, font size, website layout, etc.;
implement the processes necessary for full functionality of the Website: to customise the content of the Website to User preferences and to optimise the Website for better user experience. In particular, these files allow us to understand the basic parameters of the User’s device and properly display the Website tailored to their individual needs;
to authenticate the User at the Website
to maintain User sessions at the Website (after logging in), so that the User does not have to enter a login and a password on each page of the Website; to set up properly selected functions of the Website, to make it possible in particular to verify whether the browser session is authentic; to optimise and improve the performance of services provided by the Administrator;
to record the User’s access location, correct configuration of chosen Website features, to enable the matching of information delivered to User with regard to location;
to ensure safety and reliability of the Website;
to analyse, research and cookie audit and in particular in order to create anonymous statistics, which help to understand the way the Website User’s use the Website, which allows to improve their structure and content
The Service Administrator uses external cookies for the following purposes:
to collect general and anonymous statistical data with the use of the analytical tools, e.g. Google Analytics.
The User may withdraw the permission he granted the Administrator to access cookie files at any time. To this end, the User should modify the settings of the Internet browser. The Administrator warns that changing the settings may lead to Website malfunctions on the device the User is using at the moment, and in extreme cases even to complete inability to use the Website. Changing the settings regarding data collection using Google Analytics tools or regarding the social cookies should not limit the functionality of the Website in any way.