Privacy

(effective May 25, 2018)

GENERAL   

The administrator of personal data collected through the www.https://alioli.pl/en/ Store is ALIOLI Dariusz Chlebek NIP: 6812030508, REGON: 364942243, place of business and address for service: Krzeczów 224, 32-433 Krzeczów, e-mail address): sklep@alioli.pl hereinafter referred to as the "Administrator" and who is also the Service Provider.
Any words or phrases used in this Privacy Policy with a capital letter shall be understood as defined in the Terms and Conditions of the www.https://alioli.pl/en/.

PURPOSE AND SCOPE OF DATA COLLECTION   

Personal data will be processed for the purpose of making purchases in our online store, direct marketing of our own products and services, carried out in traditional form (on paper), constituting the so-called legitimate interest of the company. The data for these purposes will be processed on the basis of Article 6(1)(b), (c) and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
Upon giving a separate consent, pursuant to Article 6(1)(a) of the GDPR, the data may also be processed for the purpose of sending commercial information by electronic means or making telephone calls for the purpose of direct marketing – respectively in connection with Article 10(2) of the Act of 18 July 2002 on the provision of electronic services or Article 172(1) of the Act of 16 July 2004 – Telecommunications Law, including those directed as a result of profiling, provided that the user has given the appropriate consent.
If it is necessary to deliver an order, personal data may be shared with postal operators or carriers for the sole purpose of delivering the order. Personal data processed for the purposes related to the execution of purchases will be processed for the period necessary to complete the purchases and the order, after which the data subject to archiving will be stored for the period appropriate for the limitation period of claims, i.e. 10 years. Personal data processed for marketing purposes covered by the declaration of consent will be processed until the consent is withdrawn.
If it is found that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the Inspector General for Personal Data Protection (since 25 May 2018 – the President of the Office for Personal Data Protection).
Providing personal data is voluntary, however, providing marked personal data is a condition for placing an order, and the consequence of not providing them will be the inability to order products in the store.
Personal data will also be processed in an automated manner in the form of profiling, provided that the user has given his consent to this on the basis of Article 6(1)(a) of the GDPR. The consequence of profiling will be the assignment of a profile to a given person in order to make decisions concerning him/her or to analyse or predict his/her preferences, behaviours and attitudes.
The Controller shall exercise special care in order to protect the interests of data subjects, and in particular shall ensure that the data collected by it are: processed in accordance with the law, collected for specified, lawful purposes and not subjected to further processing incompatible with these purposes, substantively correct and adequate in relation to the purposes for which they are processed and stored in a form that allows identification of persons, no longer than is necessary to achieve the purpose of the processing.

THE RIGHT TO CONTROL ACCESS TO THE CONTENT OF ONE'S OWN DATA AND TO CORRECT THEM   

The data subject has the right to access their personal data and the right to rectify, delete, limit processing, the right to transfer data, the right to object, the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
In order to exercise the rights referred to in point 1, you can send an appropriate e-mail to the following address: sklep@alioli.pl or use the options available in our store in the customer panel.

COOKIES   

The Service Provider's Store uses "cookies". Failure to change the browser settings on the part of the Service Recipient is tantamount to consent to their use.
The installation of "cookies" is necessary for the proper provision of services in the Store. Cookies contain information necessary for the proper functioning of the Store, in particular those requiring authorization.
The Store uses three types of cookies: "session", "persistent" and "analytical".
"Session" cookies are temporary files that are stored on the Service Recipient's end device until logging out (leaving the Store).
"Persistent" cookies are stored on the Service Recipient's end device for the time specified in the parameters of "cookies" or until they are deleted by the Service Recipient.
"Analytical" cookies allow us to better understand the way the Service Recipient interacts with the content of the Store, to better organize its layout. "Analytical" cookies collect information about the manner in which the Service Recipient uses the Store, the type of page from which the Service Recipient was redirected, and the number of visits and the time of the Service Recipient's visit to the Store's website. This information does not record specific personal data of the Service Recipient, but is used to compile statistics on the use of the Store.
The Service Recipient has the right to decide on the access of "cookies" to their computer by selecting them in the browser window.  Detailed information on the possibilities and methods of handling "cookies" is available in the software (web browser) settings.

FINAL PROVISIONS   

The Controller applies technical and organizational measures to ensure the protection of the processed personal data appropriate to the threats and categories of data protected, and in particular protects the data against unauthorized access, taking by an unauthorized person, processing in violation of applicable regulations, and change, loss, damage or destruction.
The Service Provider provides appropriate technical measures to prevent unauthorized persons from obtaining and modifying personal data sent electronically.
In matters not covered by this Privacy Policy, the provisions of the www.https://alioli.pl/en/Store Terms and Conditions, the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) and other relevant provisions of Polish law shall apply.
The provisions of this Privacy Policy are effective as of May 25, 2018.