Formal information at the beginning - the store administrator and We Create Limited Liability Company, ul. Zygmunta Modzelewskiego 72/8, 02-679 Warsaw, NIP: 5213862567, REGON: 383028467, KRS: 0000780378, registry court: District Court for the Capital City of Warszawy w Warszawie, XIII Commercial Division of the National Court Register, share capital: PLN 5,000.00.
Short version - the most important information
We care about your privacy, but also about your time. That is why we have prepared for you a shortened version of the most important rules related to privacy protection.
We process your personal data that you provide to us by creating a user account, making purchases in our online store, submitting a complaint, issuing an opinion about the product or simply contacting us.
The information we may have about you includes: name and surname, address, e-mail address, telephone number.
We make every effort to ensure that your personal data remains safe and does not fall into the wrong hands.
We entrust the processing of your personal data only to verified and trusted entities providing services related to the processing of personal data.
We do not transfer your data to third countries or international organizations.
We do not make decisions for you based solely on the automated processing of your personal data, which would have legal effects on you or similarly significantly affect you.
We provide you with the opportunity to exercise your rights under the GDPR related to the processing of your personal data.
We track and analyze your behavior within our store for statistical and optimization purposes. In this regard, we use the Google Analytics tool with IP anonymization enabled, which means that the information collected by Google Analytics does not include any information that would allow your identification. The Google Analytics
tool or it may collect information about you, such as the approximate location, device, operating system and web browser you use, gender, age range, interests, time spent in the store, transitions between individual subpages, clicks on individual links, etc. activities undertaken within the store. This information is not matched by us with your personal data and does not allow your identification.
We use the Google AdWords tool to conduct remarketing campaigns. For this purpose, Google LLC cookies are used for the Google AdWords service. As part of the cookie settings, you can decide whether you consent to the use of such cookies in your case or not.
We use marketing tools such as Facebook Pixel to target you personalized Facebook ads. This is related to the use of Facebook cookies. As part of the cookie settings, you can decide whether you consent to our use of Pixel Facebook in your case or not.
We enable the use of social functions on the store's website, such as liking a social profile or sharing content on a given social network. The tools used for this purpose save and read information from cookies.
By using the website of the store with cookies enabled in your browser, you consent to the saving and storage of information in cookies and to access this information.
You can manage cookie settings from your web browser or by installing special add-ons that allow you to control cookies, such as Ghostery (https://www.ghostery.com).
The store is stored on an external server which, like all servers, generates logs. The logs store information such as the IP address, server date and time, information about the web browser and the operating system. The logs are for operational and tec purposes only hnicznym.
The above information is preliminary. We encourage you to read the further details below.
The administrator of your personal data is We Create Spółka z ograniczoną odpowiedzialnością, ul. Zygmunta Modzelewskiego 72/8, 02-679 Warsaw, NIP: 5213862567, REGON: 383028467, KRS: 0000780378, registry court: District Court for the Capital City of Warszawy w Warszawie, XIII Commercial Division of the National Court Register, share capital: PLN 5,000.00.
The purposes, legal grounds and period of personal data processing are indicated separately for each purpose of data processing (see the description of individual purposes of personal data processing below).
Permissions. The GDPR grants you the following potential rights related to the processing of your personal data:
the right to access your data and receive a copy of it,
the right to rectify (correct) your data,
the right to delete data (if in your opinion there are no grounds for us to process your data, you can request that we delete it),
the right to limit data processing (you can request that we limit the processing of data only to their storage or performance of activities agreed with you, if, in your opinion, we have incorrect data or we process it unjustifiably),
the right to object to the processing of data (you have the right to object to the processing of data on the basis of a legitimate interest; you should indicate a special situation that, in your opinion, justifies the termination of the processing covered by the objection by us. We will stop processing your data for these purposes, unless we prove that the grounds for data processing by us override your rights or that your data is necessary for us to establish, assert or defend claims),
the right to transfer data (you have the right to receive from us, in a structured, commonly used, machine-readable format, personal data that you provided to us on the basis of a contract or your consent; you can commission us to send this data directly to another entity),
the right to lodge a complaint with the supervisory body (if you find that we are processing data unlawfully, you can file a complaint with the President of the Personal Data Protection Office or another competent supervisory authority).
The rules related to the implementation of the above-mentioned rights are described in detail in Art. 16 - 21 GDPR. We encourage you to familiarize yourself with these regulations. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and you will not be entitled to all activities related to the processing of your personal data.
We emphasize that you always have one of the rights indicated above - if you believe that we have violated the provisions on the protection of personal data while processing your personal data, you have the option to lodge a complaint with the supervisory body (the President of the Office for Personal Data Protection).
We ensure the confidentiality of all personal data provided to us. We ensure that appropriate security and personal data protection measures are taken, as required by the provisions on the protection of personal data. Personal data is collected with due diligence and properly protected against access by unauthorized persons.
Your personal data may be processed by entities whose services we use and whose services involve or may involve the processing of personal data. It concerns, in particular, the following entities:
hosting provider - your personal data is stored on the server,
supplier of the invoicing system - as part of this system, your personal data is processed for the purpose of issuing an invoice,
accounting office - the office processes your personal data contained in invoices and other accounting documents,
law firm - the law firm may access your personal data if it is necessary to provide us with legal services,
an entity providing services in the field of website maintenance - this entity may access your data in connection with technical works related to those areas in which data is processed,
other subcontractors - we work with various subcontractors who may have access to your personal data if they provide services related to such access.
Your personal data may also be transferred to tax offices to the extent necessary to fulfill tax, accounting and accounting obligations. It concerns in particular all declarations, reports, statements and other accounting documents in which your personal data is located.
In addition, if necessary, your personal data may be made available to entities, bodies or institutions authorized to obtain access to data on the basis of legal provisions, such as the police, security services, courts, prosecutor's offices.
Transferring personal data to third countries. We do not transfer your data to third countries or international organizations.
Profiling and behavioral advertising
We do not make decisions for you based solely on automated processing, including profiling, which would have legal effects on you or similarly significantly affect you. We emphasize that as part of the tools we use, we do not have access to information that would allow your identification. The information we are talking about here is, in particular:
information about the operating system and web browser you use,
time spent on the site,
transitions between individual subpages,
the source from which you go to our site,
the age range you are in,
Your approximate location limited to the city,
Your interests based on your online activity.
We do not combine the information indicated above with your personal data, which is in our databases. This information is anonymous and does not allow us to identify you. This information is stored on the servers of the suppliers of individual tools, and these servers can most often be located all over the world.
Purposes and activities of personal data processing
When agreeing to send the newsletter, you must provide the data necessary to send e-mails, such as e-mail address and name. Providing data is voluntary, but necessary to send the newsletter. As part of editing your account details, you can provide your further details.
The data provided to us in connection with the newsletter is processed in order to send a newsletter with information about our offer, new blog notes, etc. (Article 6 (1) (a) of the GDPR).
The data contained in the newsletter database will be processed for the duration of the account operation. When you decide to delete your account, we will also delete the data contained therein.
You can correct the data contained in your account at any time. You can also decide to delete your account at any time. You also have the right to transfer the data referred to in art. 20 GDPR.
When creating a user account, you must provide the data necessary to set up an account, such as an e-mail address and password. Providing data is voluntary, but necessary to create an account. As part of editing your account details, you can provide your further details.
The data provided in connection with the creation of an account is processed in order to provide you with an electronic service consisting in providing you with the possibility of using the user account. This service is provided on the basis of an agreement concluded on the terms described in the regulations, which means that in this respect the legal basis for the processing of your personal data is art. 6 sec. 1 lit. b GDPR.
You can decide to delete your account at any time, but it will not delete your data from our database, because this data is necessary for us to determine, defend or pursue claims related to the contract for the provision of electronic services.
In addition, your data is stored in the database after deleting your account so that we can identify you as a returning user in the future if you decide to use the store again as a registered user. In this regard, the legal basis for the processing of your personal data is our legitimate interest - art. 6 sec. 1 lit. f GDPR.
As part of the user account, the history of your orders placed using the account is stored. In this regard, the processing of personal data is described in the point below - shopping in the store. The deletion of the user account will not be tantamount to the deletion of information about orders placed using the account, if we still have a legal basis for the processing of this information.
You can modify the data contained in your account at any time.
Shopping in the store
When placing an order in the store, you must provide the data necessary to complete the order, such as name and surname, billing address, e-mail address, telephone number, tax identification number. Providing data is voluntary, but necessary to place an order.
Data provided to us in connection with the order, prare processed in order to perform the contract concluded by placing an order (Article 6 (1) (b) of the GDPR), issuing an invoice (Article 6 (1) (c) of the GDPR), including the invoice in the accounting documentation (Article 6 (1) of the GDPR) point c of the GDPR) and for archival and statistical purposes, including the identification of a returning customer (Article 6 (1) (f) of the GDPR).
Data about orders will be processed for the time necessary to perform the order, and then until the expiry of the limitation period for claims under the contract. In addition, after this deadline, the data may still be processed by us for archival and statistical purposes, in particular to identify the returning customer. Remember also that we are obliged to store invoices with your personal data for a period of 5 years from the end of the tax year in which the tax obligation arose.
You cannot object to the processing of data and demand the deletion of data until the expiry of the limitation period for claims under the contract. Similarly, you cannot object to the processing of data and request the deletion of data contained in invoices. After the expiry of the limitation period for claims under the contract, you can, however, object to our processing of your data for statistical and archival purposes, as well as request the removal of your data from the database.
If you make a complaint, you provide the personal data contained in the complaint.
The data provided in connection with the submission of the complaint is used to implement the complaint procedure (Article 6 (1) (b) of the GDPR), and then for archival purposes, which is our legitimate interest (Article 6 (1) (f) of the GDPR) ).
The data will be processed for the time necessary to implement the complaint procedure. Complaints may also be archived in order to show the course of the complaint process in the future.
In the case of data contained in complaints, you cannot rectify this data. You also cannot object to the processing of data and demand the deletion of data until the expiry of the limitation period for claims under the contract. After the expiry of the limitation period for claims under the contract, you can, however, object to the processing of your data by us, as well as request the removal of your data from the database.
By contacting us, you naturally provide us with your personal data contained in the correspondence, in particular your e-mail address and name. Providing data is voluntary, but necessary to make contact.
In this case, your data is processed in order to contact you, and the basis for processing is art. 6 sec. 1 lit. f GDPR, i.e. our legitimate interest. The legal basis for processing after the end of contact is also our legitimate purpose in the form of archiving correspondence for internal purposes (Article 6 (1) (f) of the GDPR).
The content of the correspondence may be archived and we are not able to clearly determine when it will be deleted. You have the right to request a history of correspondence with us (if it was subject to archiving), as well as request its removal, unless its archiving is justified due to our overriding interests, e.g. defense against potential claims on your part.
By observing our social profiles, interacting, adding comments, etc., you make us see your personal data collected as part of your social profile. You decide what is available as part of your profile, using the privacy settings of a given social network. We do not copy data from social profiles to our databases. We process them on social networks in accordance with the functions that are available on these social networks.
Opinions on products. When you give us your opinion on the product, you provide your name and surname, e-mail address, and possibly attach your photo. We process this information on the basis of your consent (Article 6 (1) (a) of the GDPR) for the purpose of archiving the opinion and, if we decide to do so, disseminating it as part of our online marketing activities. You can withdraw your consent to such activities at any time, which will cause us to remove your opinion from our database.
Cookies and other tracking technologies
Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone) that can be read by our ICT system (own cookies) or the ICT system of third parties (third party cookies).
Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you visit the website (persistent cookies).
If you want to learn more about cookies as such, you can see, for example, this material: https://pl.wikipedia.org/wiki/HTTP_cookie.
However, below you will find detailed information on cookies used on our website.
Consent to cookies
You can also manage cookie settings by installing special add-ons that allow you to control cookies, such as Ghostery (https://www.ghostery.com).
We use our own cookies to ensure the proper functioning of the website, in particular to handle the login process, order and user account.
We use the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We carry out activities in this area based on our legitimate interest, consisting in the creation of statistics and their analysis in order to optimize our websites.
Google Analytics automatically collects information about your use of our website. The information collected in this way is most often transferred to a Google server in the United States and stored there.
Due to the IP anonymization activated by us, your IP address is shortened before forwarding. Only in exceptional cases is the full IP address transferred to a Google server in the United States and truncated there. The anonymized IP address provided by your browser as part of Google Analytics is, as a rule, not combined with other Google data.
We emphasize that as part of Google Analytics we do not collect any data that would allow your identification. Therefore, the data collected as part of Google Analytics is not personal data. The information we have access to as part of Google Analytics is, in particular:
information about the operating system and web browser you use,
subpages that you browse as part of our website,
time spent on our website and on its subpages,
transitions between individual subpages within our website
the source from which you go to our website.
In order to use Google Analytics, we have implemented a special Google Analytics tracking code in the code of our website. The tracking code uses Google LLC cookies for the Google Analytics service. You can also block the Google Analytics tracking code at any time by installing the browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout.
Google Analytics and Google Analytics 360 services have been certified by the independent security standard ISO 27001. ISO 27001 is one of the most recognized standards in the world and certifies compliance with the relevant requirements by systems that support Google Analytics and Google Analytics 360.
If you are interested in details related to data processing as part of Google Analytics, we encourage you to read the explanations prepared by Google: https://support.google.com/analytics/answer/6004245.
We use the Google AdWords marketing tools provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. With the help of Google Adwords, we promote our website in search results and on third party websites. We also use remarketing tools. We carry out activities in this area based on our legitimate interest in the form of marketing our own products or services.
When visiting our website, the company's cookie remarketing file is automatically left on your device Google, which allows you to display interest-based advertising with the help of a pseudonymous identifier (ID) and based on the pages you visit.
Further data processing takes place only if you have consented to Google to link your browsing history and use of the application with your account and to use the information from your Google account to personalize the ads displayed on websites. If in this case you will be logged in when visiting our website on Google, Google will use your data together with Google Analytics data to create and define lists of target groups for remarketing purposes on various devices. For this purpose, Google temporarily links your personal data with Google Analytics data to create target groups.
Due to the fact that Google LLC is based in the USA and uses technical infrastructure located in the USA, it joined the EU-US-Privacy Shield program in order to ensure an adequate level of personal data protection required by European regulations. As part of the agreement between the US and the European Commission, the latter has established an adequate level of data protection in the case of companies certified by the Privacy Shield.
We use marketing tools available on Facebook and provided by Facebook Inc., 1601 S. California Ave. Palo Alto, CA 94304, USA. As part of these tools, we direct you to advertisements on Facebook. We carry out activities in this area based on our legitimate interest in the form of marketing our own products or services.
In order to send you personalized ads in terms of your behavior on our website, we have implemented Facebook Pixel as part of our pages, which automatically collects information about your use of our website in terms of pages viewed. The information collected in this way is most often transferred to a Facebook server in the United States and stored there.
Due to the fact that Facebook Inc. is based in the USA and uses the technical infrastructure located in the USA, joined the EU-US-Privacy Shield program in order to ensure an adequate level of personal data protection required by European regulations. As part of the agreement between the US and the European Commission, the latter has established an adequate level of data protection in the case of companies certified by the Privacy Shield.
As part of the cookie settings available on our website, you can decide whether you consent to our use of Pixel Facebook in your case or not.
Our website uses plugins and other social tools provided by social networks such as Facebook and Instagram.
By displaying our website containing such a plugin, your browser will establish a direct connection with the servers of social network administrators (service providers). The content of the plugin is transferred by the given service provider directly to your browser and integrated with the website. Thanks to this integration, service providers receive information that your browser has displayed our website, even if you do not have a profile with a given service provider or are not logged in at the moment. Such information (along with your IP address) is sent by your browser directly to the server of a given service provider (some servers are located in the USA) and stored there.
If you have logged in to one of the social networking sites, this service provider will be able to directly assign a visit to my website to your profile on a given social networking site.
If you use a given plugin, e.g. by clicking on the "Like" button or "Share", the relevant information will also be sent directly to the server of the given service provider and stored there.
Facebook - https://www.facebook.com/legal/FB_Work_Privacy,
Twitter - https://twitter.com/en/privacy,
LinkedIN - https://www.linkedin.com/legal/privacy-policy,
Instagram - https://help.instagram.com/155833707900388.
If you do not want social networking sites to assign the data collected during your visit to our website directly to your profile on a given website, you must log out of this website before visiting our website. You can also completely prevent loading of plugins on the website by using appropriate extensions for your browser, e.g. blocking scripts.
Using the website involves sending queries to the server on which the website is stored. Each query directed to the server is saved in the server logs.
Logs include Your IP address, server date and time, information about the web browser and operating system you use. Logs are saved and stored on the server.
The data stored in the server logs are not associated with specific people using the website and are not used by us to identify you.
The server logs are only auxiliary material used to administer the website, and their content is not disclosed to anyone except those authorized to administer the server.