Using the online store under the name BellaCasa.co located at www.shop.bellacasa.co means accepting the following terms of the Privacy Policy and Cookies Policy.
As a User, read its provisions. The following table of contents will help you with this. In it, we inform you how we care for Users' data, how we process it, to whom we entrust it and many other important issues related to personal data.
CONTENTS
§1 GENERAL PROVISIONS
§2 DEFINITIONS
§3 PERSONAL DATA AND PRINCIPLES OF THEIR PROCESSING
WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA?
IS THE PROVISION OF DATA VOLUNTARY? WHAT IS THE CONSEQUENCE OF FAILURE TO PROVIDE THEM?
FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA PROVIDED AS PART OF THE USE OF THE WEBSITE?
HOW IS THE DATA COLLECTED?
WHAT ARE THE USER'S RIGHTS?
CAN THE USER WITHDRAW THE EXPRESSED CONSENT?
DO WE TRANSFER YOUR DATA TO THIRD COUNTRIES?
HOW LONG DO WE KEEP YOUR DATA?
LINKS TO OTHER SITES
ACTIVITIES IN SOCIAL MEDIA - FACEBOOK/ INSTAGRAM
DATA SAFETY
WHO MAY BE THE RECIPIENTS OF PERSONAL DATA?
HAVE WE APPOINTED A DATA PROTECTION INSPECTOR?
DO WE PROFILE USER DATA?
§4 FORMS
§5 DISCLAIMER AND COPYRIGHT
§6 TECHNOLOGIES
§7 COOKIES POLICY
§8 CONSENT TO COOKIES
§9 SERVER LOGS
§1 GENERAL PROVISIONS
This Privacy Policy and Cookies Policy define the rules for the processing and protection of personal data provided by Users and Cookies, as well as other technologies appearing in the online store under the name BellaCasa.co located at www.shop.bellacasa.co.
The administrator of the website and personal data provided as part of it is BellaCasa.co sp. z o.o. with its registered office in Żary 68-200, ul. Żagańska 100G, entered into the Register of Entrepreneurs of the National Court Register under the number KRS: 0000342009, NIP: 9282047499, REGON: 080384998, share capital in the amount of PLN 5,000, according to the information corresponding to the current excerpt from the Register of Entrepreneurs contained in the Central Information of the National Court Register, represented by Iwona Ozimek – President of the Management Board.
We care about the security of personal data and the privacy of the website User. In case of any doubts regarding the provisions of this Privacy Policy and Cookies Policy, please contact the Administrator via the e-mail address: info@bellacasa.co.
The Administrator reserves the right to make changes to the privacy policy, and each User of the website is obliged to know the current privacy policy. The reason for the changes may be the development of Internet technology, changes in generally applicable law or the development of the Website through, for example, the use of new tools by the Administrator. At the bottom of the page is the date of publication of the current Privacy Policy.
§2 DEFINITIONS
Administrator - BellaCasa.co sp. z o.o. with its registered office in Żary 68-200, ul. Zaganska 100G
User - any entity staying on the website and using it.
Website and/or Online Store - an online store located on the website at www.shop.bellacasa.co.
Newsletter - means a free service provided electronically by the Administrator to the User by sending e-mails through which the Administrator informs about events, services, products and other elements significant from the Administrator's point of view and / or in order to achieve the Administrator's legitimate goal, which is direct marketing. Detailed information on sending the Newsletter can be found in the further part of this privacy policy.
User Account or Account - a User account set up on the Internet platform of the Online Store, enabling access to purchased products in accordance with the Regulations of the Store, which the User is obliged to accept when registering the Account.
Form or Forms - places on the Website that allow the User to enter personal data for the purposes indicated therein, e.g. to send a newsletter, to place an order, to contact the User.
GDPR - means Regulation of the European Parliament and of the Council EU 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation ).
Act on the protection of personal data - the Act of May 10, 2018 on the protection of personal data (Journal of Laws 2018, item 1000, as amended).
Act on the provision of electronic services - the Act of 18 July 2002 on the provision of electronic services (Journal of Laws No. 144, item 1204, as amended).
§3 PERSONAL DATA AND PRINCIPLES OF THEIR PROCESSING
WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA?
The administrator of the User's personal data is BellaCasa.co sp. z o.o. With
headquartered in Żary 68-200, ul. Zaganska 100G.
IS THE PROVISION OF DATA VOLUNTARY? WHAT IS THE CONSEQUENCE OF FAILURE TO PROVIDE THEM?
Providing data is voluntary, however, failure to provide certain information, as a rule marked on the Administrator's websites as mandatory, will result in the inability to perform a given service and achieve a specific goal or take certain actions.
The User's provision of data that is not mandatory or excess data that the Administrator does not need to process is based on the User's own decision and then the processing is carried out on the basis of the premise contained in art. 6 sec. 1 lit. a GDPR (consent). The User consents to the processing of such data and to the anonymization of data that the Administrator does not require and does not want to process, and yet the User has provided them to the Administrator.
FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA PROVIDED AS PART OF THE USE OF THE WEBSITE?
The User's personal data on the Administrator's Website may be processed for the following purposes and on the following legal grounds:
- performance of the service or performance of the concluded contract, sending an offer (e.g. advertising) at the User's request - pursuant to art. 6 sec. 1 lit. b GDPR (necessity to conclude and/or perform a contract or to take action on request);
- issuing an invoice, bill and meeting other obligations under the tax law in the case of placing orders in the Online Store or other products and services - pursuant to art. 6 sec. 1 lit. c GDPR (obligation resulting from legal provisions);
- granting a discount or informing about promotions and interesting offers of the Administrator or entities recommended by him - pursuant to art. 6 sec. 1 lit. a GDPR (consent);
- storage of unpaid orders - pursuant to art. 6 sec. 1 lit. f) GDPR (legitimate interest of the administrator);
- consideration of complaints or claims related to the contract - pursuant to art. 6 sec. 1 lit. b GDPR (necessity to conclude and/or perform the contract) and pursuant to art. 6 sec. 1 lit. c GDPR (obligation resulting from legal provisions);
establishing, investigating or defending against claims - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator);
- telephone contact in matters related to the provision of the service - pursuant to art. 6 sec. 1 lit. b GDPR (necessity to conclude and/or perform the contract);
- telephone contact in order to present the offer and direct marketing - pursuant to art. 6 sec. 1 lit. a GDPR (consent) and pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator), if you are already my client;
- creating registers related to the GDPR and other regulations - pursuant to art. 6 sec. 1 lit. c GDPR (obligation resulting from legal provisions) and art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator);
- archival and evidentiary, for the purpose of securing information that can be used to prove facts - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator);
- analytical, consisting, among others, in the analysis of data collected automatically when using the website, including cookies, e.g. Google Analytics cookies, Facebook Pixel - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator);
- use of cookies on the Website and its subpages - pursuant to art. 6 sec. 1 lit. a GDPR (consent);
- managing the Website and the Administrator's websites on other platforms - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator);
- surveys of satisfaction with the services offered - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator),
- posting opinions by the User about the services provided by the Administrator - pursuant to art. 6 sec. 1 lit. a GDPR (consent),
for the Administrator's internal administrative purposes related to managing contact with the User, which is the legitimate interest of the Data Administrator pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator),
- in order to send a newsletter - pursuant to art. 6 sec. 1 lit. f of the GDPR (legitimate interest of the administrator consisting in the processing of data for direct marketing purposes) and on the basis of the Act on the provision of electronic services (consent),
- in order to adjust the content displayed on the Administrator's websites to individual needs and to continuously improve the quality of the services offered - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator),
- for the purpose of direct marketing directed to the User's own products or services or recommended products of third parties - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator),
- in order to create your own databases of Users - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator),
- in order to operate the fanpage under the name BellaCasa.co on Facebook and interact with users - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator).
- in order to operate a company account under the name bellacasa.co on Instagram and interact with users - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator).
- in order to operate the You Tube channel under the name BellaCasaCo at the URL https://www.youtube.com/channel/UC9cAJ2yCEVBRu6z7w22ZkWQ
and interacting with users - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator).
- in order to direct advertising in social media and on websites, such as Facebook Leads Ads or Facebook Custom Audience, YouTube and direct remarketing - pursuant to art. 6 sec. 1 lit. a GDPR (consent) and pursuant to Art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator) consisting in the promotion and advertising of the Administrator's services through remarketing directed to people subscribed to the mailing or visiting a given website),
- in order to store comments on the Website - pursuant to art. 6 sec. 1 lit. a GDPR (consent).
HOW IS THE DATA COLLECTED?
Only the data that the user provides is collected and processed (except - in certain situations - data collected automatically using cookies and login data, as mentioned below).
During a visit to the website, data regarding the visit itself is automatically collected, e.g. the user's IP address, domain name, browser type, operating system type, etc. (login data). The data collected automatically can be used to analyze user behavior on the website, collect demographic data about users or to personalize the content of the website in order to improve it. However, these data are processed only for the purpose of administering the website, ensuring efficient hosting service or directing marketing content and are not associated with the data of individual users. You can read more about cookies later in this policy.
Data may also be collected for the purpose of filling in the forms on the Website, as described in the further part of the privacy policy.
Information society services
The administrator does not collect children's data. The user should be at least 16 years old to independently consent to the processing of personal data for the purpose of providing information society services, e.g. for marketing purposes, or obtain the consent of a legal guardian (e.g. a parent) for this purpose.
If the User is under 16 years of age, he should not use the BellaCasa.co website and service.
The Administrator is entitled to make reasonable efforts to verify whether the user meets the age requirement referred to above, or whether the person exercising parental authority or custody of the User under the age of 16 has given or approved it.
WHAT ARE THE USER'S RIGHTS?
The user is entitled at any time to the rights contained in art. 15-21 GDPR, i.e.:
- the right to access the content of his data,
- the right to transfer data,
- the right to correct data,
- the right to rectify data,
- the right to delete data if there are no grounds for their processing,
- the right to limit processing, if it was carried out incorrectly or without legal basis,
- the right to object to data processing based on the legitimate interest of the administrator,
- the right to lodge a complaint with the supervisory body - the President of the Office for Personal Data Protection (on the terms set out in the Personal Data Protection Act), if he considers that the processing of his data is inconsistent with the currently applicable data protection law.
- the right to be forgotten, if further processing is not provided for by the currently applicable law.
The Administrator points out that these rights are not absolute and do not apply to all activities of processing the User's personal data. This applies, for example, to the right to obtain a copy of the data. This right may not adversely affect the rights and freedoms of other persons, such as copyrights, professional secrecy. In order to learn about the restrictions on the User's rights, we refer to the content of the GDPR.
However, the user always has the right to lodge a complaint with the supervisory authority.
In order to exercise their rights, the User may contact the Administrator via the e-mail address: info@bellacasa.co or by post to the address of the Administrator's place of business, if it has been provided in this privacy policy, indicating the scope of his requests. The response will be provided no later than 30 days from the date of receipt of the request and its justification, unless it is justified to extend this period in accordance with the GDPR.
CAN THE USER WITHDRAW THE EXPRESSED CONSENT?
If the User has consented to a specific action, such consent may be withdrawn at any time, which will result in the removal of the e-mail address from the Administrator's mailing list and the cessation of the indicated actions (in the case of recording based on consent). Withdrawal of consent does not affect the processing of data which was made on the basis of consent before its withdrawal.
In some cases, the data may not be completely deleted and will be retained in order to defend against any claims for a period in accordance with the provisions of the Civil Code or, for example, in order to fulfill legal obligations imposed on the Administrator.
Each time, the Administrator will refer to the User's request, duly justifying further actions resulting from legal obligations.
DO WE TRANSFER YOUR DATA TO THIRD COUNTRIES?
User data may be transferred outside the European Union - to third countries.
Due to the fact that the Administrator uses external providers of various services, e.g. Facebook and its subsidiaries, Google, Microsoft, etc., the User's data may be transferred to the United States of America (USA) in connection with their storage on American servers (in whole or in part ). Google and Facebook use GDPR compliance mechanisms (e.g. certificates) or standard contractual clauses for their services. They will be transferred only to recipients who guarantee the highest data protection and security, e.g. by:
- cooperation with entities processing personal data in countries for which a relevant decision of the European Commission has been issued,
- the use of standard contractual clauses issued by the European Commission (as is the case, for example, with Google),
- application of binding corporate rules approved by the competent supervisory authority, or those to which the User has consented to the transfer of personal data.
Detailed information is available in the content of the privacy policy of each of the providers of these services, available on their websites. For example:
Google LLC: https://policies.google.com/privacy?hl=en
Facebook Ireland Ltd.: https://www.facebook.com/privacy/explanation
FreshMail sp. z o.o.: https://freshmail.pl/privacy-policy/
Currently, the services offered by Google and Facebook are provided mainly by entities located in the European Union. However, you should always read the privacy policy of these providers in order to receive up-to-date information on the protection of personal data.
HOW LONG DO WE KEEP YOUR DATA?
The User's data will be stored by the Administrator for the duration of the implementation of individual services / achievement of goals and:
- for the period of service and cooperation, as well as for the period of limitation of claims in accordance with the law - in relation to data - provided by contractors and customers or Users,
- for the period of talks and negotiations preceding the conclusion of the contract or performance of the service - in relation to the data provided in the inquiry,
- for the period required by law, including tax law - in relation to personal data related to the fulfillment of obligations arising from applicable regulations,
- until an effective objection is filed pursuant to Art. 21 of the GDPR - in relation to personal data processed on the basis of the legitimate interest of the administrator, including for direct marketing purposes,
- until the consent is withdrawn or the purpose of processing, business purpose is achieved - in relation to personal data processed on the basis of consent. After withdrawing the consent, the data may still be processed in order to defend against any claims in accordance with the limitation period for these claims or the period (shorter) indicated to the User,
- until it becomes outdated or loses its usefulness - in relation to personal data processed mainly for analytical and statistical purposes, the use of cookies and the administration of the Administrator's Websites,
- for a period of up to 2 years in the case of persons who have unsubscribed from the newsletter in order to defend against possible claims (e.g. information about the date of subscription and the date of unsubscribing from the newsletter, the number of newsletters received, actions taken and activity related to the messages received).
Data storage periods indicated in years are counted at the end of each year in which the data processing began. This is to improve the data processing and management process. Detailed periods of personal data processing regarding individual processing activities can be found in the register of the Administrator's processing activities.
LINKS TO OTHER SITES
The Website may contain links to other websites. They will open in a new browser window or in the same window.
The administrator is not responsible for the content provided by these websites. The user is obliged to read the privacy policy or regulations of these websites.
ACTIVITIES IN SOCIAL MEDIA
The administrator of the User's personal data on the fanpage under the name BellaCasa.co on Facebook (hereinafter referred to as the Fanpage) is the Administrator.
The User's personal data provided on the Fanpage will be processed in order to administer and manage the Fanpage, communicate with the User, interact, direct marketing content to the User and create the Fanpage community.
The basis for their processing is the User's consent and the legitimate interest of the administrator consisting in interacting with Users and Fanpage Followers. The User voluntarily decides to like/follow the Fanpage.
The rules governing the Fanpage are set by the Administrator, however, the rules of staying on the Facebook social network result from the Facebook regulations.
The user may unfollow the Fanpage at any time. However, the Administrator will then not display to the User any content from the Administrator and related to the Fanpage.
The Administrator sees the User's personal data, such as e.g. name, surname or general information that the User places on their profiles as public. The processing of other personal data is carried out by the Facebook social network and under the conditions contained in its regulations.
The User's personal data will be processed for the period of running/existence of the Fanpage on the basis of consent expressed by liking/clicking "Follow" the Fanpage or interacting, e.g. or defense against claims.
The User's personal data may be made available to other data recipients, such as Facebook, cooperating advertising agencies or other subcontractors servicing the Administrator's Fanpage, IT service, virtual assistant, if there is contact outside Facebook.
Other User rights are described in this privacy policy.
User data may be transferred to third countries in accordance with Facebook's regulations.
These data may also be profiled, which helps in better personalizing the advertising offer addressed to the User. However, they will not be processed in an automated manner within the meaning of the GDPR (having a negative impact on the rights and freedoms of the User).
The above principles related to Facebook data also apply to Instagram.
ONLINE STORE REVIEWS
The User has the option of voluntarily and free of charge to issue an opinion on purchases made in the Online Store. The subject of the opinion may also be an assessment, photo or review of the purchased product in the Online Store.
After making purchases in the Online Store, the Administrator may send an email to the User with a request to issue an opinion and a link to the online form enabling it to be issued - the online form allows you to answer the Administrator's questions regarding purchases, evaluate them, add your own description regarding the opinion and a photo of the purchased product. product. If no opinion is issued after receiving the first invitation to issue an opinion, the Administrator sends the invitation again.
An opinion can only be issued by a User who has made purchases in the Online Store.
The opinions issued by the User may be published by the Administrator in the Online Store, in the business card of the TrustMate.io website and on social media accounts maintained by the Seller.
Issuing an opinion may not be used by the User for unlawful activities, in particular for activities constituting an act of unfair competition against the Administrator or actions infringing personal rights, intellectual property rights or other rights of the Administrator or third parties.
An opinion can only be issued for products actually purchased in the Online Store.
An opinion issued may be removed by its author at any time.
DATA SAFETY
The User's personal data is stored and protected with due diligence, in accordance with the implemented internal procedures of the Administrator. The Administrator processes information about the User using appropriate technical and organizational measures that meet the requirements of generally applicable law, in particular the provisions on the protection of personal data. These measures are primarily intended to protect Users' personal data against access by unauthorized persons.
In particular, only authorized persons who are obliged to keep this data secret or entities entrusted with the processing of personal data on the basis of separate
data entrustment agreements.
At the same time, the User should exercise due diligence in securing their personal data transmitted over the Internet, in particular not to disclose their login details to third parties, use anti-virus protection and update the software.
WHO MAY BE THE RECIPIENTS OF PERSONAL DATA?
The administrator informs that he uses the services of external entities. The entities entrusted with the processing of personal data (such as e.g. courier companies, intermediaries in electronic payments, companies offering accounting services, companies enabling the sending of newsletters) guarantee the use of appropriate measures for the protection and security of personal data required by law, in particular by the GDPR.
The Administrator informs the User that he entrusts the processing of personal data to i.a. the following entities:
Dreamcommerce S.A., FreshMail sp. z o.o. – in order to send the newsletter and use the mailing system
FreshMail sp. z o.o. – to create landing pages and collect leads,
Dreamcommerce S.A. – to store personal data on the server,
Google LLC, Blue Media S.A., PayPal Inc., Alior Bank S.A., PayU S.A. – in order to operate the payment system and electronic transactions,
Google LLC - in order to use Google services, including e-mail,
H88 S.A. – the purpose of servicing the domain and mail server,
H88 S.A. – for IT support or website management from the IT side,
Trust Mate S.A. - to collect and verify opinions,
- other contractors or subcontractors involved in technical and administrative support, or to provide legal assistance to the Administrator and its clients, e.g. accounting, IT, graphic, copywriting, marketing assistance, debt collection companies, lawyers, etc.
- offices, e.g. the tax office - in order to fulfill legal and tax obligations related to settlements and accounting.
HAVE WE APPOINTED A DATA PROTECTION INSPECTOR?
The Personal Data Administrator hereby informs that it has not appointed the Personal Data Protection Inspector (IODO) and performs the duties related to the processing of personal data independently.
The User acknowledges that his personal data may be transferred to authorized state authorities in connection with their proceedings, at their request and after meeting the conditions confirming the necessity to obtain such data from the Administrator.
DO WE PROFILE USER DATA?
The User's personal data will not be used for automated decision-making affecting the rights and obligations or freedoms of the User within the meaning of the GDPR.
As part of the website and tracking technologies, the User's data can be profiled, which helps in better personalizing the company's offer, which the Administrator directs to the User (mainly through the so-called behavioral advertising). However, this should not have any effect on the legal situation of the User, in particular on the terms of the contracts concluded by him or the contracts he intends to conclude. It can only help to better match the content and targeted ads to the User's interests. The information used is anonymous and is not associated with personal data provided by the User, e.g. in the purchase process. They result from statistical data, e.g. gender, age, interests, approximate location, behavior on the Website.
Each User has the right to object to profiling if it would have a negative impact on the User's rights and obligations.
§4 FORMS
The Administrator uses the following types of forms within the Website:
Subscription form for the newsletter - requires entering your name and e-mail address in the appropriate place. These fields are mandatory. Then, in order to add his e-mail address to the Administrator's subscriber database, the User must confirm the willingness to subscribe. The data obtained in this way is added to the mailing list in order to send the newsletter.
Subscription/subscription means that the User agrees with this Privacy Policy and agrees to be sent marketing and commercial information via electronic means of communication, e.g. e-mail, within the meaning of the Act of 18 July 2002 on the provision of electronic services (Journal U. No. 144, item 1204 as amended).
By subscribing to the newsletter, the User also consents to the Administrator's use of the User's telecommunications terminal equipment (e.g. telephone, tablet, computer) for the purpose of direct marketing of the Administrator's products and services and to present commercial information to the User in accordance with art. 172 section 1 of the Telecommunications Law (Journal of Laws of 2014, item 243, as amended)
The above consents are voluntary, however, necessary to send the newsletter, including e.g. to inform about services, new blog entries, products, promotions and discounts offered by the Administrator or third party products recommended by him. Consents can stay at any time
withdrawn, which will stop sending the newsletter in accordance with the rules contained in this privacy policy.
The newsletter is sent for an indefinite period, from the moment of activation until the consent is withdrawn. After withdrawing the consent, the User's data may be stored in the newsletter database for up to 2 years, in order to prove the fact that the User has given consent to communicate via the newsletter, the User's actions (emails openness) and the time of its withdrawal, as well as any related to including claims, which is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR).
The sending of the newsletter may be discontinued if the User has not been active for at least 1 year from the start of the newsletter service or reading the last e-mail (sent newsletter). In this case, the Administrator will remove the User's data from the system for sending the newsletter (supplier). The User will not be entitled to receive any message from the Administrator, unless he decides to subscribe again in the Newsletter subscription form or contacts the Administrator in another way selected for this purpose.
The mailing system used to send the newsletter records all activity and actions taken by the User related to the e-mails sent to him (date and time of opening the message, clicking on links, the moment of unsubscribing, etc.).
The administrator may also conduct remarketing pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator, consisting in the promotion and advertising of services addressed to persons subscribed to the newsletter, in such a way that the subscribers' e-mail addresses are uploaded to the marketing tool offered by Facebook Inc. the so-called advertising manager, and then directed there is an advertisement created by the Administrator or authorized persons through the Administrator's advertising account, provided that the newsletter subscribers are also users of the Facebook platform (they have an account there). the updated subscriber base is uploaded to the tool). Detailed information about the so-called non-standard recipient groups, the principles of data hashing and data processing can be found in the privacy policy of Facebook at this link https://www.facebook.com/legal/terms/customaudience # and https://www.facebook.com /legal/terms/dataprocessing, and the Administrator recommends that each User and subscriber read these rules.
Contact form - allows you to send a message to the Administrator and contact him electronically. Personal data in the form of name, surname, e-mail address and data provided in the content of the message are processed by the Administrator in accordance with this Privacy Policy in order to contact the User.
After the end of contact with you, the data may be archived, which is the legitimate interest of the Administrator. The administrator is not able to determine the exact period of archiving and thus deletion of messages. However, the maximum period will not be longer than the limitation periods for claims under the law.
System form for leaving comments/opinions - All data in the comments form are provided by the User voluntarily, if he wants to leave such a comment. By posting a comment, you consent to the processing of this data. These may include: name, surname, e-mail address, website name, IP number. Some data marked as mandatory must be entered.
The administrator is not responsible for the content of comments posted by website users. The administrator reserves the right not to post spam comments, offensive comments, containing vulgar or offensive phrases, illegal content or containing any links to other websites placed without his consent.
Order form in the Store - When placing an order in the Administrator's online store, you must provide specific data in accordance with the rules contained in the sales regulations in order to complete the order, fulfill legal obligations imposed on the Administrator, settlements, consider claims, for statistical and archival purposes, as well as for marketing purposes direct in relation to customers, which is the legitimate interest of the Administrator.
These are mainly: name, surname and/or company name, tax identification number, address of residence or registered office, possibly delivery address, e-mail address, telephone number. If you already have a user account in the store, then it is enough to enter your login and password and log in to your account, and then take further steps related to the order.
The administrator stores data for the duration of the order or service, and after its performance for the period necessary to protect against claims.
For the time indicated by law, e.g. tax law (e.g. invoice storage period).
Complaint and withdrawal form in the BellaCasa.co online store - If you use the Administrator's services or products, you can submit a complaint or withdraw from the concluded contract. For this purpose, the Administrator enables you to fill in the complaint form and the contract withdrawal form attached to the sales regulations. You can also do these activities without filling out the form, however, providing the necessary data.
The data required in this case are: name, surname or possibly username, address of residence or address of the company's registered office (if the order was made on behalf of the company), e-mail address, telephone number (if applicable), bank account number (if a refund is required). ), data of the purchased product, date of purchase and date of receipt of the goods.
Providing data is voluntary, but necessary to consider the complaint in accordance with the law and the sales regulations. The data will be stored for the purpose of the complaint procedure / withdrawal from the contract and for archival purposes and defense against claims.
Registration form for setting up a User account in the online store - the User has the option of setting up an account in the online store and for this purpose he should register and provide the following data: e-mail address and password.
Setting up an account takes place on the terms set out in the sales regulations and is a service provided electronically. In order to properly process orders, after registration, the User should complete the account details with: name, surname, e-mail address, telephone number, address of residence, possibly the address of the company's registered office and tax identification number. Data marked as such is mandatory and it will not be possible to set up a user account without providing it. Providing other data is voluntary. The rules for maintaining an account and its possible deletion are included in the regulations.
The Administrator may entrust the processing of personal data to third parties without the User's separate consent (based on the entrustment agreement). Data obtained from the forms may not be transferred to third parties.
If the User uses the services of external providers such as Google or Disquis, he should read their privacy policy, available from the providers of these services, on their websites.
§5 DISCLAIMER AND COPYRIGHT
The content presented on the Website does not constitute specialist (e.g. educational) advice or guidance and does not refer to a specific factual situation. If the User wants to get help in a specific matter, he should contact the person authorized to provide such advice or the Administrator using the contact details provided. The Administrator is not responsible for the use of the content contained on the Website or actions or omissions taken on their basis.
All content posted on the Website is subject to the copyright of certain persons and/or the Administrator (e.g. photos, texts, other materials, etc.). The Administrator does not agree to copying this content in whole or in part without his express prior consent.
The Administrator hereby informs the User that any dissemination of content made available by the Administrator constitutes a violation of the law and may give rise to civil or criminal liability. The Administrator may also demand appropriate compensation for material or intangible losses in accordance with applicable regulations.
The administrator is not responsible for the use of materials available on the website in a way that is unlawful.
The content posted on the Website is valid as of the date of its posting, unless otherwise indicated.
§6 TECHNOLOGIES
In order to use the Administrator's website, it is necessary to have:
Devices with Internet access
An active e-mail box that receives e-mails
A web browser that allows you to view www pages
Software that allows you to read content in the presented formats, e.g. pdf, video, mp3, mp4.
§7 COOKIES POLICY
Like most websites, the Administrator's website uses the so-called cookies. tracking technologies, i.e. cookies ("cookies"), which allows improving the website in terms of the needs of users visiting it.
The website does not automatically collect any information, except for information contained in cookie files.
Cookie files (so-called "cookies") are IT data, small text files that are stored on the end device, e.g. computer, tablet, smartphone, when you use our website.
These may be own cookies (coming directly from our website) and third-party cookies (coming from websites other than our website).
Cookies allow us to adjust the content of our website to the individual needs of the User and the needs of other visitors. They also enable the creation of statistics that show how website users use it and how they navigate around it. This allows us to improve our website, its content, structure and design.
The Administrator uses the following third-party cookies as part of the Website:
Facebook conversion pixel and ads created via Facebook Facebook Ads (Facebook Custom Audiences) - to manage Facebook ads and conduct remarketing activities, which is the legitimate interest of the Administrator. The Administrator may also direct advertising content to the User via Facebook as part of contact advertising.
The Facebook Pixel is provided by Facebook Inc. and its related companies. This is an analytical tool that helps measure the effectiveness of advertisements, shows what actions are taken by Website Users and helps to reach a specific group of people (Facebook Ads, Facebook Insights). The Administrator may also direct advertising content to the User via Facebook as part of contact advertising.
The administrator may also conduct remarketing pursuant to art. 6 sec. 1 lit. f of the GDPR (legitimate interest of the administrator, consisting in the promotion and advertising of services addressed to people who have consented to the sending of offers (or people similar to them or to users who liked the Fanpage) in such a way that the e-mail addresses provided are uploaded to the marketing tool offered by Facebook Inc., the so-called ad manager, and then an advertisement created by the Administrator or authorized persons is directed to them through the Administrator's advertising account, provided that these persons are also users of the Facebook platform (they have an account there). Each time, these data are deleted after the end of the advertising campaign. In the case of the implementation of another advertising campaign, an updated contact database is uploaded to the tool). Accurate information about the groups of non-standard recipients, the principles of data hashing and data processing can be found in the privacy policy of Facebook at this link https://www.facebook.com/legal/terms/customaudience# and https://www.facebook.com/legal/ terms/dataprocessing, and the Administrator recommends that each User read these rules.
The information collected as part of the use of the Facebook Pixel is anonymous and does not allow for identification of the User. They show general data about users: location, age, gender, interests. The Facebook provider may combine this information with the information that the User provides to him as part of his Facebook account, and then use it in accordance with his own assumptions and purposes.
The Administrator recommends that you familiarize yourself with the details related to the use of the Facebook Pixel tool and possibly ask questions to the supplier of this tool, as well as manage your privacy settings on Facebook. More information can be found at the link: https://www.facebook.com/privacy/explanation. You can opt out of cookies responsible for displaying remarketing ads at any time, e.g. at https://www.facebook.com/help/1075880512458213/.
By using the website, the user agrees to the installation of the indicated cookie on his end device.
Built-in Google Analytics code - to analyze Website statistics. Google Analytics uses its own cookies to analyze the actions and behavior of Website Users. These files are used to store information, e.g. from which page the User came to the current website. Help to improve the Website.
This tool is provided by Google LLC. Actions taken as part of the use of the Google Analytics code are based on the Administrator's legitimate interest in creating and using statistics, which then allows improving the Administrator's services and optimizing the Website.
As part of using the Google Analytics tool, the Administrator does not process any User's data enabling his identification.
The administrator recommends that you familiarize yourself with the details related to the use of the Google Analytics tool, the possibility of disabling the tracking code, and possibly asking questions to the provider of this tool at the link: https://support.google.com/analytics#topic=3544906.
Web push notifications from the browser level - in order to better communicate with the User and provide him with valuable content or offers faster, the Administrator allows consent to receive web push notifications from the User's browser level.
In order to agree to receive web push notifications, the User should select the "display notifications" or other equivalent option in the message sent by his web browser (each browser may call this option differently).
Consent to receive above notifications may be withdrawn at any time by changing the settings of the User's web browser. The Administrator does not process any personal data of Users using web push notifications. Users are identified only on the basis of information that is stored by their web browsers, to which the Administrator has no access.
Plugins directing to social media and messengers, e.g. Facebook, Instagram, Messenger, Pinterest, Twitter, YouTube.
After clicking on the icon of a given plugin, the user is sent to the website of an external provider, in this case the owner of a given social networking site, e.g. Facebook. Then he has the option of clicking "Like" or "Share" and liking the Administrator's fanpage on Facebook or directly sharing its content (post, article, video, etc.).
The administrator recommends that you read the Facebook privacy policy before creating an account on this portal. The administrator has no influence on the data processed by Facebook. From the moment the User clicks on the plug-in button referring to social media, personal data is processed by the social network, e.g. Facebook, which becomes their administrator and decides on the purposes and scope of their processing. Cookies left by the Facebook plugin (or other third parties) may also be applied to the User's device after entering the Website and then associated with data collected on the Facebook portal. By using the Website, the User accepts this fact. The administrator has no influence on the processing of data by third parties in this way.
The above guidelines should also apply to the operation of:
Facebook - fanpage located at the URL: https://www.facebook.com/shop.BellaCasa.co,
Messenger located at: m.me/shop.BellaCasa.co ,
Profile on the Instagram social network, located at the URL: https://www.instagram.com/bellacasa.co,
Profile on the Twitter social network, located at the following URL: https://twitter.com/ShopBellaCasaCo,
You Tube channel located at the URL: https://www.youtube.com/channel/UC9cAJ2yCEVBRu6z7w22ZkWQ ,
Pinterest profile located at the URL: https://pl.pinterest.com/meblebellacasa .
Tools used to assess the effectiveness of Google Ads advertising campaigns - to conduct advertising and remarketing campaigns, which is the legitimate interest of the Administrator.
The Administrator does not collect any data that would allow the identification of the User's personal data. The Administrator recommends that you read Google's privacy policy in order to learn the details of how these functions work and, if necessary, disable them from the level of the User's browser.
Cookies used to recover abandoned baskets and User activity on the online store website,
- in order to direct advertising communication to the User related to the unfinished order, which is the legitimate interest of the Administrator.
Content from portals and websites of external providers,
The Administrator may embed content from portals, websites, blogs and other websites of external entities, e.g. YouTube, on the Website. These third parties may record certain data about content playbacks made by the User.
If you do not want this to happen, log out of a given portal (if you have an account there and are logged in) before visiting our website or do not play the content on the website. You can also change your browser settings and block certain content from certain websites from being displayed to you.
YouTube
YouTube is operated by Google LLC and allows you to play recordings on the Administrator's websites. You Tube may save cookies on the User's device about the playback of recordings and assigns them to the User's YouTube account if he is logged in.
By using recordings posted on YouTube, you use services provided electronically by Google LLC. Details regarding the processing of personal data by SoundCloud are contained in the privacy policy and regulations of this portal: https://policies.google.com/privacy and https://www.youtube.com/t/terms
Affiliate links and affiliate programs including Google AdSense
The Administrator's Website may contain affiliate links to specific products or services of third parties. It is a method of monetizing the content on the Website, which is generally available free of charge. Clicking on the link will not result in charging any fees on the part of the User. If you go to a third-party website by clicking on an affiliate link and purchase a product, I may earn a commission. By using the Website, you agree to the use of cookies in this regard.
The Website may also display advertising windows with
products of third parties, under the so-called Google AdSense. The administrator informs that he has no influence on the content of these advertisements or their appearance, which are determined by the provider's algorithm, in this case Google LLC. You can modify the settings and personalization of ads directly from your browser by going to: https://adssettings.google.com/authenticated.
The Administrator again recommends that you read the privacy policy of each of the providers of the above services in order to learn about the possibilities of making changes and settings that ensure the protection of User's rights.
The website uses two types of cookies: session cookies, which are deleted after closing the browser, logging out or leaving the website, and permanent cookies, which are stored in the user's end device, which allows the browser to be recognized the next time the website is accessed, for the time specified in parameters of cookies or until they are deleted by the User.
In many cases, the software used for browsing websites (web browser) allows cookies to be stored on the User's end device by default. Website users may change their cookie settings at any time. These settings can be changed, in particular, in such a way as to block the automatic handling of cookies in the web browser settings or inform about each time they are placed on the Website User's device. Detailed information on the possibilities and ways of handling cookies are available in the software (web browser) settings.
The administrator informs that restrictions on the use of cookies (disabling them, limiting them) may affect some of the functionalities available on the websites of the Website and hinder its functioning.
More information on cookies is available in the "Help" section in the web browser menu.
§8 CONSENT TO COOKIES
When you first enter the Website, you must agree to cookies or take other possible actions indicated in the message to be able to continue using the content of the Website. By using the Site, you consent. If you do not want to express such consent - leave the Website. You can always change your browser settings, disable or delete cookies. The "help" tab in the User's browser contains the necessary information.
§9 SERVER LOGS
Using the Website involves sending queries to the server where the Website is stored.
Each query addressed to the server is saved in the server logs. Logs include e.g. User's IP address, server date and time, information about the web browser and operating system used by the User.
Logs are saved and stored on the server.
Server logs are used to administer the Website, and their content is not disclosed to anyone except persons and entities authorized to administer the server.
The Administrator does not use server logs to identify the User in any way.
The store regulations can be found at: https://shop.bellacasa.co/en_GB/i/Terms-and-Conditions/97
Date of publication of the Privacy Policy: January 1, 2021
Date of last update: 01/01/2021