Zastrzeżenie Dotyczące Prywatności I Witryny Internetowej

Privacy Policy

We are pleased that you have shown interest in our company. Personal data protection is of the utmost importance to the VitalAbc management. You can use VitalAbc websites without providing personal data. However, if you wish to use certain services available on our website, processing your personal data may be necessary. Where there is no statutory basis for processing, we obtain consent from the data subject.

The processing of personal data, such as name, address, email address, and telephone number, is carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with the national data protection laws applicable to VitalAbc. This privacy policy aims to inform the general public about the nature, scope, and purpose of the personal data we collect, use, and process. We also inform data subjects of their rights.

As the data controller, VitalAbc has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed on this website. However, data transmission via the internet may involve risks, so we cannot guarantee absolute security. However, anyone can submit personal data to us via alternative methods, such as by telephone.

1. Definitions

VitalAbc's data protection policy is based on the terms used by the European legislator in the General Data Protection Regulation (GDPR). It should be understandable to the general public, our customers, and our business partners. Therefore, we first explain the terms used.

a) Personal data
Personal data is any information relating to an identified or identifiable natural person ("data subject"). An individual may be identified by an identifier such as a name, identification number, location data, online identifier, or other factors.

b) Data subject The
natural person whose personal data are processed by the data controller.

c) Processing
Any operation performed on personal data, e.g. collecting, storing, modifying, viewing, disclosing, deleting.

d) Restriction of processing
Marking of stored personal data in order to limit their future processing.

e) Profiling
Automatic processing of personal data to assess specific aspects of a natural person, e.g. their economic situation, health, interests, location.

f) Pseudonymisation
Processing personal data in a way that prevents them from being assigned to a specific person without additional information.

g) Data controller
A natural or legal person, public authority, agency or other entity that decides on the purposes and means of processing personal data.

h) Processor
A natural or legal person, public authority or other entity that processes personal data on behalf of the controller.

i) Recipient
A natural or legal person, public authority or other entity to which personal data are disclosed.

j) Third party
A natural or legal person, public authority or other entity that is not the data subject, controller or processor.

k) Consent
Voluntary, specific, informed and unambiguous consent given by the data subject to the processing of his or her personal data.

2. Name and address of the data controller

The controller of personal data within the meaning of the General Data Protection Regulation (GDPR), other applicable provisions on personal data protection and national regulations is:

Vital Abc
Veg Nutraceuticals sp. z o. o.
ul. Krakowska 19, 42-600 Tarnowskie Góry, Poland
NIP: PL6452565287
E-mail: info@vitalabc.com
Website: www.vitalabc.com

3. Cookies

Our website uses cookies. Cookies are small text files stored on your computer system via your web browser.

Most websites and servers use cookies. Many of them contain a unique identifier, a cookie ID. This identifier allows a user's browser to be uniquely assigned to a specific system, allowing for the differentiation of individual users visiting the website.

Cookies allow us to provide our users with a more user-friendly experience when using our website. Cookies allow us to optimize the content and offers on the website and facilitate navigation. For example, users do not have to enter their login details each time, as they are stored in cookies. Another example are cookies in online stores that remember products added to the shopping cart.

Any user can block cookies at any time by using the appropriate browser settings. It is also possible to manually delete previously saved cookies. However, please note that disabling cookies may affect the functionality of the website, and not all of its elements may function properly.

4. Collection of general data and information

During each visit to our website, general data and information are automatically collected and stored in server log files. This may include:

1. Type and version of web browser,
2. Operating system used,
3. The website from which the user reached our website (referrer),
4. Subpages visited on our website,
5. Date and time of access,
6. User's IP address,
7. Internet service provider,
8. Other similar data used to protect against cyberattacks.

This data is not used to identify the user. It is used to correctly display content, optimize the site, ensure the security of IT systems, and potentially provide law enforcement agencies with information necessary to investigate cybercrime cases.

5. Registration on the website

Users can register on our website by providing their personal data. This data is stored and used solely for internal purposes and to provide services. We may share it with collaborators (e.g., courier companies) only to the extent necessary to fulfill orders.

During registration, the user's IP address, date, and time of registration are also stored. This is to prevent misuse and protect against possible legal violations. This data is not shared with third parties unless there is a legal obligation to share it.

Users may change their data or request its deletion at any time. The data controller can provide information about the stored data upon request.

6. Newsletter subscription

Users can subscribe to our newsletter. The registration form requires providing an email address and any other required information.

To protect against abuse, we use a double opt-in procedure. This means that after signing up for the newsletter, you will receive an email with a link confirming your subscription. Only after clicking this link will your email address be added to the newsletter database.

During registration, your IP address and the date and time of your registration are also stored. This is to prevent the unauthorized use of email addresses and to protect against misuse.

You may unsubscribe at any time by clicking the unsubscribe link in the newsletter you receive or by contacting us.

7. Newsletter

Personal data collected as part of newsletter registration is used solely for the purpose of sending the newsletter. Furthermore, newsletter subscribers may be notified via email about changes to the newsletter offering or technical modifications, if necessary for its operation.

Personal data collected as part of the newsletter service will not be shared with third parties. You can unsubscribe from the newsletter at any time. Consent to the storage of personal data provided for the purpose of sending the newsletter can be withdrawn at any time. A link is included in each newsletter for this purpose. You can also unsubscribe directly on the website or by contacting the administrator.

8. Newsletter tracking

The VitalAbc newsletter contains so-called tracking pixels. These are miniature graphics embedded in emails sent in HTML format, allowing us to analyze the effectiveness of marketing campaigns. They allow us to see if and when an email was opened and which links were clicked.

Personal data collected using tracking pixels is stored and analyzed by the controller to optimize future newsletters and tailor their content to the user's interests. This data will not be transferred to third parties. Anyone can withdraw their consent to this processing at any time. If they unsubscribe from the newsletter, this data will be deleted.

9. Contact via the website

The VitalAbc website allows for quick electronic contact and direct communication with us, including via email. If a user contacts the administrator via email or a contact form, the personal data provided will be automatically stored and used solely for the purpose of processing the inquiry. This data will not be shared with third parties.

10. Routine deletion and blocking of personal data

The Administrator processes and stores users' personal data only for the period necessary to achieve the purpose of their storage, in accordance with applicable law.

If the purpose for which the data is stored no longer applies or if the statutory retention period expires, the personal data is routinely deleted or blocked in accordance with the applicable legal regulations.

11. Rights of the data subject

a) Right to confirmation

Every person has the right to obtain confirmation from the controller as to whether their personal data is being processed. To exercise this right, you may contact the controller at any time.

b) Right of access to data

Every person has the right to obtain from the controller free information about the personal data being processed and access to the following information:

• processing purposes;
• categories of personal data processed;
• recipients or categories of recipients to whom the data have been or will be disclosed, including recipients in third countries;
• the planned data storage period or, if this is not possible, the criteria for determining this period;
• the right to request rectification, deletion or restriction of the processing of personal data;
• the right to lodge a complaint with the supervisory authority;
• information about the source of the data, if it was not collected directly from the data subject;
• information on automated decision-making, including profiling.

If personal data are transferred to a third country or an international organisation, the data subject has the right to obtain information on the safeguards applied during such transfer.

c) Right to rectification

Every person has the right to request the rectification of incorrect personal data and the completion of incomplete data.

d) The right to delete data ("right to be forgotten")

Every person has the right to request the deletion of their personal data if one of the following circumstances applies:

• the data is no longer necessary for the purposes for which it was collected;
• consent to data processing has been withdrawn and there is no other legal basis for their processing;
• the data subject objects to the processing of the data and there are no overriding legitimate grounds for processing;
• the data was processed unlawfully;
• data must be deleted in order to comply with a legal obligation under EU or national law;
• the data were collected in connection with the offer of information society services to a minor.

Any requests concerning the rights of the data subject may be addressed to the data controller.

a) The right to delete data

If one of the aforementioned reasons applies and a data subject wishes to request the erasure of personal data stored by Vital Abc, they may contact any employee of the data controller at any time. A Vital Abc employee will immediately take steps to ensure that the erasure request is complied with.

Where the controller has made personal data public and is obliged under Article 17(1) to erase them, the controller, taking into account available technology and the costs of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to those personal data or copies or replications of the personal data, to the extent that processing is not required. PMC Labs BV employees shall take appropriate measures in each individual case.

b) The right to restrict processing

All data subjects have the right granted by the European Union legislator to obtain from the controller the restriction of processing where one of the following applies:

• The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
• The processing is unlawful and the data subject opposes the erasure of the personal data and requests their restriction instead.
• The data controller no longer needs the personal data for the purposes of processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
• The data subject has objected to processing pursuant to Article 21(1) of the GDPR, pending the verification whether the controller's legitimate grounds outweigh the interests, rights and freedoms of the data subject.

If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by Vital Abc, they may contact any employee of the controller at any time. A Vital Abc employee will take appropriate measures to restrict the processing.

c) The right to data portability

Each data subject shall have the right granted by the European legislator to receive the personal data concerning him or her, which was provided to a controller, in a structured, commonly used and machine-readable format. He or she shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, as long as the processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR, or on a contract pursuant to point (b) of Article 6(1) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, in exercising his or her right to data portability under Article 20(1) of the GDPR, the data subject shall have the right to have personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.

In order to exercise the right to data portability, the data subject may at any time contact any employee of Vital Abc.

d) Right to object

All data subjects shall have the right granted by the European legislator to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them, which is based on points (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these provisions.

Vital Abc will no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

If VitalAbc processes personal data for marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing purposes. This also applies to profiling to the extent it is related to such marketing. If the data subject objects to processing for marketing purposes, Vital Abc will no longer process the personal data for these purposes.

In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to the processing of personal data by Vital Abc for scientific or historical research purposes or for statistical purposes under Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.

In order to exercise the right to object, the data subject may contact any employee of VitalAbc. Furthermore, the data subject has the right in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to exercise his or her right to object by automated means using appropriate technical specifications.

e) Automated decision-making, including profiling

All data subjects shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, provided that the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) is not permitted by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is not based on the data subject's explicit consent.

If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) is based on the data subject's explicit consent, Vital Abc shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.

Of course! Here's a translation of the text into Polish, preserving context and appropriate local style:

i) The right to withdraw consent to the processing of personal data

All data subjects shall have the right granted by the European legislator to withdraw their consent to processing of their personal data at any time.

If the data subject wishes to exercise the right to withdraw consent, he or she may, at any time, contact any employee of Vital Abc.

11. Protection of personal data in the application process

The data controller collects and processes candidates' personal data for the purpose of conducting the recruitment process. Processing may also be carried out electronically, particularly when candidates submit their application documents via email or via a web form on the controller's website.

If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in accordance with legal requirements. If the data controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests of the data controller prevent their deletion. Other legitimate interests may include, for example, a duty of proof in proceedings under the Equal Treatment Act (AGG).

12. Protection of personal data regarding the application and use of Facebook

On this website, the controller has integrated components of Facebook. Facebook is a social network.

A social network is a social meeting place on the Internet, an online community that typically allows users to communicate with each other and interact in a virtual space. Social networks can serve as a platform for exchanging opinions and experiences, or enable the online community to provide personal or business information. Facebook allows users to create private profiles, upload photos, and connect through friend requests.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If you live outside the United States or Canada, the controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

With each call-up to one of the individual pages of this website on which a Facebook component (Facebook plug-ins) has been integrated, the web browser on the information technology system of the data subject automatically prompts the data subject to display a display of the corresponding Facebook component through the Facebook component. During the course of this technical procedure, Facebook gains knowledge of which specific sub-page of our website was visited by the data subject.

If the data subject is logged in to Facebook at the same time, Facebook recognizes with every call-up to our website by the data subject—and for the entire duration of their stay on our website—which specific sub-page of our website was visited. This information is collected by the Facebook component and assigned to the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated into our website, e.g., the "Like" button, or if the data subject submits a comment, then Facebook matches this information with the personal Facebook user account of the data subject and stores the personal data.

Facebook always receives, through the Facebook component, information about a visit to our website by the data subject whenever the data subject is logged in to Facebook at the same time as visiting our website. This happens regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not wish to transmit this information to Facebook, they can prevent this by logging out of their Facebook account before visiting our website.

The privacy policy published by Facebook, available at https://facebook.com/about/privacy/ , provides information about the collection, processing, and use of personal data by Facebook. It also explains what setting options Facebook offers to protect the privacy of the data subject. Furthermore, various setting options are provided to allow the elimination of data transmission to Facebook. These applications can be used by the data subject to prevent data transmission to Facebook.

13. Protection of personal data regarding the application and the use of Google Analytics (with anonymization function)

On this website, the controller has integrated the Google Analytics component (with anonymization function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of website visitors. A web analytics service collects, among other things, data about the website from which a person came (referrer), which subpages were visited, how often, and for how long individual subpages were visited. Web analytics are primarily used for website optimization and to conduct a cost-benefit analysis of online advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

For the purpose of web analytics through Google Analytics, the controller uses the application "_gat._anonymizeIp". Through this application, the IP address of the internet connection of the data subject is abridged by Google and anonymized when accessing our website from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

The purpose of Google Analytics is to analyze traffic on our website. Google uses the collected data and information, among other things, to evaluate the use of our website, to create online reports showing website activity, and to provide other services related to the use of our website.

Google Analytics places a cookie on the data subject's information system. The definition of cookies is explained above. By setting the cookie, Google is able to analyze the use of our website. Each time a user accesses a website that incorporates a Google Analytics component, the web browser on the data subject's information system automatically submits data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During this technical procedure, Google receives personal information, such as the IP address of the data subject, which allows Google, among other things, to understand the origin of visitors and clicks and subsequently create commission settlements.

The cookie is used to store personal information, such as access time, the location from which access was made, and the frequency of visits to our website. With each visit to our website, such personal data, including the IP address of the internet access used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may transfer this personal data collected during the technical procedure to third parties.

The data subject may, as previously stated, prevent the setting of cookies at any time by means of a corresponding setting of the web browser used and thus permanently deny the setting of cookies. Such a setting of the web browser used will also prevent the setting of Google Analytics cookies on the data subject's information system. Furthermore, cookies already in use by Google Analytics may be deleted at any time via the web browser or other software programs.

Furthermore, the data subject has the possibility of objecting to the collection of data by Google Analytics that is generated by the use of this website, as well as the processing of this data by Google, and of preventing such processing. For this purpose, the data subject must download a browser add-on under the following link: https://tools.google.com/dlpage/gaoptout and install it. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If the information system of the data subject is later deleted, formatted, or newly installed, the data subject must reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is deleted by the data subject or any other person who is attributable to their sphere of competence, or is disabled, the browser add-on can be reinstalled or reactivated.

Further information and the applicable data protection provisions of Google can be found at https://www.google.com/intl/pl/policies/privacy/ and http://www.google.com/analytics/terms/pl.html . Google Analytics is also explained under this link https://www.google.com/analytics/ .

14. Data protection provisions for the application and use of Google+

On this website, the controller has integrated the Google+ button as a component. Google+ is a so-called social network. A social network is a virtual meeting place on the Internet, which typically allows users to communicate with each other and interact in a virtual space. A social network can serve as a platform for the exchange of opinions and experiences, or enable Internet users to share personal or professional information. Google+ allows users of this network to create private profiles, upload photos, and connect via friend requests.

The company responsible for Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.

Each time a user visits one of the individual pages of this website on which a Google+ button has been integrated, the Internet browser on the user's computer system automatically downloads a display of the corresponding Google+ button from Google. During this technical process, Google receives information about which specific subpage of our website the user has visited. More detailed information about Google+ can be found at: https://developers.google.com/+/ .

If you are logged in to Google+ at the same time, Google recognizes which specific subpages you have visited each time you visit our website and throughout your entire stay on the website. This information is collected through the Google+ button, and Google associates it with your Google+ account.

If you click on the Google+ button integrated on our website to provide a Google+ 1 recommendation, Google assigns this information to your personal Google+ account and stores the personal data. Google stores your Google+ 1 recommendation and makes it publicly available in accordance with the terms you have accepted. The Google+ 1 recommendation you provide on this website, along with other personal data such as your Google+ account name and saved photo, is then stored and processed by other Google services, such as Google search results, your Google account, or elsewhere, such as on websites or in connection with advertisements. Google may also associate your visit to this website with other personal data stored on Google. Google collects this personal data to improve and optimize various Google services.

Through the Google+ button, Google receives information that you have visited our website if you are logged in to Google+ when you access our website. This occurs regardless of whether you click the Google+ button or not.

If you do not wish to transmit personal data to Google, you can prevent this by logging out of your Google+ account before visiting our website.

Further information and Google's data protection provisions can be found at https://www.google.com/intl/en/policies/privacy/ . Further information about the Google+ 1 button can be found at https://developers.google.com/+/web/buttons-policy .

15. Data protection provisions for the application and use of Instagram

On this website, the controller has integrated components of the service Instagram. Instagram is a service that can be classified as an audiovisual platform, which allows users to share photos and videos, as well as disseminate such data in other social networks.

The company responsible for the services offered by Instagram is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, UNITED STATES.

Each time a user visits one of the individual pages of this website on which an Instagram component (Insta button) has been integrated, the Internet browser on the user's information technology system automatically triggers the download of a display of the corresponding Instagram component. During this technical process, Instagram learns which specific subpage of our website the user visited.

If you are logged in to Instagram at the same time, Instagram detects which specific subpages of our website you have visited each time you visit our website and for the entire duration of your stay on our website. This information is collected by the Instagram component and assigned to your Instagram account. If you click on one of the Instagram buttons integrated on our website, Instagram assigns this information to your personal Instagram account and stores the personal data.

Instagram receives information via the Instagram component that you have visited our site, provided you are logged in to Instagram at the time of accessing our site. This occurs regardless of whether you click the Instagram button or not. If you do not want this information to be transmitted to Instagram, you can prevent this by logging out of your Instagram account before visiting our site.

Further information and the applicable data protection provisions of Instagram may be retrieved under https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/ .

16. Data protection provisions for the application and use of LinkedIn

The controller has integrated components of LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that allows users to network professionally and meet new business contacts. More than 400 million registered users in over 200 countries use LinkedIn, making it the largest platform for business networking and one of the most visited websites in the world.

The company responsible for LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, UNITED STATES. For privacy matters outside the United States, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

Each time a user accesses one of the individual pages of this website on which a LinkedIn component (LinkedIn plug-in) has been integrated, the Internet browser on the user's information technology system automatically triggers the download of a display of the corresponding LinkedIn component. Further information about the LinkedIn plug-in can be found at https://developer.linkedin.com/plugins . During this technical process, LinkedIn learns which specific subpage of our website the user visited.

If you are logged in to LinkedIn at the same time, LinkedIn detects each time you access our website and throughout your entire stay on our website which specific subpages of our website you have visited. This information is collected by the LinkedIn component and assigned to your LinkedIn user account. If you click on one of the LinkedIn buttons integrated on our website, LinkedIn assigns this information to your personal LinkedIn user account and stores the personal data.

LinkedIn receives information via the LinkedIn component that you have visited our website, provided you are logged in to LinkedIn at the time of accessing our website. This occurs regardless of whether you click the LinkedIn button or not. If you do not wish to transmit information to LinkedIn, you can prevent this by logging out of your LinkedIn account before visiting our website.

LinkedIn offers the ability to opt out of receiving emails, SMS messages, and targeted ads, and to manage ad settings, at https://www.linkedin.com/psettings/guest-controls . LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. You can opt out of the setting of these cookies at https://www.linkedin.com/legal/cookie-policy . LinkedIn's applicable privacy policy can be found at https://www.linkedin.com/legal/privacy-policy . LinkedIn's cookie policy is available at https://www.linkedin.com/legal/cookie-policy .

17. Data protection provisions for the application and use of MySpace

On this website, the controller has integrated components of MySpace LLC. MySpace is a so-called social network. A social network is an online meeting place, a virtual community that allows users to communicate and interact with each other. A social network can serve as a platform for the exchange of opinions and experiences, or enable the Internet community to provide personal or company-related information. MySpace allows social network users to create free blogs or user groups, including photos and videos.

MySpace is operated by MySpace LLC, 8391 Beverly Blvd., #349, Los Angeles, California 90048, UNITED STATES.

With each call-up to one of the individual pages of this website on which a MySpace component (MySpace plug-in) has been integrated, the Internet browser on the information technology system of the data subject automatically displays the MySpace component by loading the corresponding MySpace component. Further information about MySpace can be found at https://myspace.com . During this technical process, MySpace gains knowledge of the specific sub-page of our website visited by the data subject.

If the data subject is logged in to MySpace at the same time, MySpace detects which specific subpage of our website the data subject is visiting for the entire duration of their stay on our website. This information is collected by the MySpace component and associated with the data subject's respective MySpace account. If the user clicks on one of the MySpace buttons integrated on our website, MySpace assigns this information to their personal user account and stores the personal data.

MySpace receives information via the MySpace component that the data subject has visited our website, provided that the data subject is logged in to MySpace at the time of accessing our website. This occurs regardless of whether the data subject clicks on the MySpace component or not. If the data subject does not wish this information to be transmitted to MySpace, he or she can prevent this by logging out of their MySpace account before visiting our website.

The privacy policy published by MySpace, available at https://myspace.com/pages/privacy , provides information about the collection, processing and use of personal data by MySpace.

18. Data protection provisions for the application and use of Pinterest

On this website, the controller has integrated components of Pinterest Inc. Pinterest is a so-called social network. A social network is an online meeting place, a virtual community that enables users to communicate and interact with each other. A social network can serve as a platform for the exchange of opinions and experiences, or enable the Internet community to provide personal or company-related information. Pinterest allows users of the social network to publish, among other things, picture collections and individual pictures and descriptions on virtual pinboards (so-called pins), which can then be shared by other users (so-called re-pins) or commented on.

The operator of Pinterest is Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, UNITED STATES.

With each call-up to one of the individual pages of this website on which a Pinterest component (Pinterest plug-in) has been integrated, the Internet browser on the information technology system of the data subject automatically displays the Pinterest component by loading the corresponding Pinterest component. Further information about Pinterest can be found at https://pinterest.com . During this technical process, Pinterest gains knowledge of the specific sub-page of our website visited by the data subject.

If the data subject is logged in to Pinterest at the same time, Pinterest detects which specific subpage of our website the data subject is visiting for the entire duration of their stay on our website. This information is collected by the Pinterest component and associated with the data subject's respective Pinterest account. If the user clicks on one of the Pinterest buttons integrated on our website, Pinterest assigns this information to their personal user account and stores the personal data.

Pinterest receives information via the Pinterest component that the data subject has visited our website provided that the data subject is logged in to Pinterest at the time of accessing our website. This occurs regardless of whether the data subject clicks on the Pinterest component or not. If the data subject does not wish this information to be transmitted to Pinterest, he or she may prevent this by logging out of their Pinterest account before visiting our website.

The privacy policy published by Pinterest, available at https://about.pinterest.com/privacy-policy , provides information on the collection, processing and use of personal data by Pinterest.

19. Data protection provisions for the application and use of SlideShare

On this website, the controller has integrated SlideShare components. LinkedIn SlideShare is a file hosting service that allows the exchange and archiving of presentations and other documents, such as PDF files, videos, and webinars. The hosting service allows users to upload multimedia content in common formats that can be shared publicly or privately.

SlideShare is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, United States. For privacy matters outside the United States, LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

LinkedIn SlideShare provides so-called embedding codes for stored multimedia content (e.g., presentations, PDF files, videos, photos, etc.). Embed codes are programmatic codes inserted into websites to display external content on your own website. Embed codes allow you to reproduce content on your own website without having to host it on your own server, which could infringe on the content creator's copyright. An additional advantage of using an embedding code is that the website operator does not need to use its own storage space, which reduces the load on their server. Embed codes can be inserted anywhere on a website, allowing external content to be displayed within your own text. The purpose of using LinkedIn SlideShare is to reduce the load on our server and avoid copyright infringement while using third-party content.

Each time we visit our website on which a SlideShare component (embed code) has been integrated, the browser you are using downloads corresponding data from SlideShare. During this technical process, LinkedIn learns which specific subpage of our website was visited by the data subject.

If the data subject is logged in to SlideShare at the same time, SlideShare recognizes which specific subpage was visited each time the data subject accesses our website and for the entire duration of their stay. This information is collected by SlideShare and assigned to the data subject's respective SlideShare account.

LinkedIn receives information via the SlideShare component that the data subject has visited our website, provided that the data subject is logged in to SlideShare at the time of accessing our website. This occurs regardless of whether the data subject clicks on the embedded media data or not. If the data subject does not wish this information to be transmitted to SlideShare, he or she can prevent this by logging out of their SlideShare account before visiting our website.

LinkedIn also uses partners such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. You can refuse the setting of these cookies at https://www.linkedin.com/legal/cookie-policy . The applicable data protection provisions for LinkedIn are available at https://www.linkedin.com/legal/privacy-policy

20. Data protection provisions about the application and use of Tumblr
On this website, the controller has integrated components of Tumblr. Tumblr is a platform that allows users to create and maintain a blog. A blog is a web portal, usually publicly accessible, on which one or more people called bloggers or web bloggers may publish articles or record thoughts in the form of posts. For example, on a Tumblr blog, users can publish texts, images, links, and videos and distribute them in the digital world. In addition, Tumblr users can import content from other websites into their own blog.
The operating company of Tumblr is Tumblr, Inc., 35 East 21st St, Ground Floor, New York, NY 10010, UNITED STATES.

With each call-up to one of the individual pages of this website, which is operated by the controller and on which a Tumblr component (Tumblr button) has been integrated, the Internet browser on the information technology system of the data subject automatically downloads a display of the corresponding Tumblr component. Further information about the available Tumblr buttons can be found under the following link: https://www.tumblr.com/buttons . During this technical process, Tumblr learns which specific sub-page of our website was visited by the data subject. The purpose of integrating the Tumblr component is to retransmit the content of this website to allow our users to present this website to the digital world and increase their visitor numbers.
If the data subject is logged in to Tumblr, Tumblr detects which specific sub-page of our website the data subject visits with each call-up to our website by the data subject—and for the entire duration of their stay on our Internet site. This information is collected by the Tumblr component and associated with the respective Tumblr account of the data subject. If the data subject clicks on one of the Tumblr buttons integrated on our website, Tumblr assigns this information to the personal Tumblr user account of the data subject and stores the personal data.
Tumblr receives information via the Tumblr component that the data subject has visited our website, provided that the data subject is logged in to Tumblr at the time of the call-up to our website. This occurs regardless of whether the data subject clicks on the Tumblr component or not. If such a transmission of information to Tumblr is not desirable for the data subject, he or she may prevent this by logging out of their Tumblr account before visiting our website.
The applicable data protection provisions of Tumblr can be found at https://www.tumblr.com/policy/en/privacy .

21. Data protection provisions about the application and use of Twitter
On this website, the controller has integrated components of Twitter. Twitter is a multilingual, publicly accessible microblogging service on which users can publish and spread so-called "tweets," e.g. short messages limited to 280 characters. These short messages are accessible to everyone, including those who are not logged in to Twitter. Tweets are also displayed to so-called "followers" of the respective user. Followers are other Twitter users who follow the tweets of the respective user. Furthermore, Twitter allows you to reach a wider audience using hashtags, links, or retweets.
The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, UNITED STATES.

Each time a page of this website is accessed, which is operated by the controller and on which a Twitter component (Twitter button) has been integrated, the Internet browser on the information technology system of the data subject automatically downloads a display of the corresponding Twitter component. Further information about the Twitter buttons can be found at https://about.twitter.com/de/resources/buttons . During this technical process, Twitter learns which specific sub-page of our website the data subject has visited. The purpose of integrating the Twitter component is to retransmit the content of this website to allow our users to present this website to the digital world and increase their visitor numbers.
If the data subject is logged in to Twitter at the same time, Twitter detects which specific sub-page of our website the data subject has visited with each visit to our website by the data subject—and for the entire duration of their stay on our website. This information is collected by the Twitter component and associated with the respective Twitter account of the data subject. If the data subject clicks on one of the Twitter buttons integrated on our website, Twitter assigns this information to the personal Twitter user account of the data subject and stores the personal data.
Twitter receives information via the Twitter component that the data subject has visited our website provided that the data subject is logged in on Twitter at the time of accessing our website. This occurs regardless of whether the data subject clicks on the Twitter component or not. If such a transmission of information to Twitter is not desirable for the data subject, he or she may prevent this by logging out of their Twitter account before visiting our website.
Twitter's applicable data protection provisions can be found at https://twitter.com/privacy?lang=en .

22. Data protection provisions about the application and use of XING
On this website, the controller has integrated components of XING. XING is an internet-based social network that enables users to connect with existing business contacts and create new ones. Individuals can create a personal profile on XING. Companies can, for example, create company profiles or publish job offers on XING.
The operating company of XING is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

With each call-up to one of the individual pages of this website, which is operated by the controller and on which a XING component (XING plug-in) has been integrated, the Internet browser on the information technology system of the data subject automatically downloads a display of the corresponding XING component. Further information about the XING plug-ins can be found at https://dev.xing.com/plugins . During this technical process, XING learns which specific sub-page of our website the data subject visited.
If the data subject is logged in to XING at the same time, XING detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-page of our Internet page the data subject visits. This information is collected by the XING component and associated with the data subject's respective XING account. If the data subject clicks on one of the XING buttons integrated on our website, e.g. the "Share" button, XING assigns this information to the personal XING user account of the data subject and stores the personal data.
XING receives information via the XING component that the data subject has visited our website, provided that the data subject is logged in at XING at the time of accessing our website. This occurs regardless of whether the data subject clicks on the XING component or not. If such a transmission of information to XING is not desirable for the data subject, he or she can prevent this by logging out of their XING account before visiting our website.
XING's data protection provisions are available at https://www.xing.com/privacy and also include the privacy policy for the XING share button at https://www.xing.com/app/share?op=data_protection .

23. Data protection provisions regarding the use of YouTube

On this website, the controller has integrated components of YouTube. YouTube is an online video portal that allows video creators to share video clips and other users to watch, rate, and comment on them free of charge. YouTube allows you to publish all kinds of videos, providing access to full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the online portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time a website on which a YouTube component (YouTube video) has been integrated is visited, the Internet browser on the visitor's information technology system automatically downloads the corresponding YouTube component. Further information about YouTube can be found at https://www.youtube.com/yt/about/en/ . During this technical process, YouTube and Google learn which subpage of our website the visitor has visited.

If you are logged in to YouTube, YouTube recognizes which specific subpage of our website you have visited each time you visit a page containing a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account.

YouTube and Google will receive information that you have visited our website if you are logged in to YouTube when you visit our website. This happens regardless of whether you click on a YouTube video or not. If you do not want this information to be transferred to YouTube and Google, you can prevent this by logging out of your YouTube account before visiting our website.

YouTube's data protection provisions are available at https://www.google.com/intl/en/policies/privacy/ .

24. Payment Method: Data Protection Provisions in Connection with the Use of PayPal as a Payment Processor

On this website, the controller has integrated components of PayPal. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which are virtual private or business accounts. PayPal also allows virtual payments via credit cards, even if the user does not have a PayPal account. A PayPal account is managed via an email address; therefore, traditional account numbers do not exist. PayPal allows you to make online payments to third parties or receive payments. PayPal also offers trust functions and buyer protection services.

PayPal's European operating company is PayPal (Europe) S.à rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you select "PayPal" as your payment method in the online store when placing an order, your data will automatically be transferred to PayPal. By selecting this payment method, you consent to the transfer of personal data required for payment processing.

Personal data transferred to PayPal typically includes your name, address, email address, IP address, telephone number, mobile phone number, or other data required for payment processing. Processing the purchase contract also requires personal data related to the order in question.

The data is transferred for the purpose of payment processing and fraud prevention. The controller will transfer personal data to PayPal if there is a legitimate interest in transferring this data. The personal data exchanged between PayPal and the controller for data processing purposes may be transferred by PayPal to credit agencies. This transfer is for the purpose of conducting identity and credit checks.

PayPal will, if necessary, transfer personal data to its affiliates and service providers or subcontractors to the extent necessary to fulfill contractual obligations or to process data as part of the order.

You have the option to withdraw your consent to the processing of your personal data by PayPal at any time. Withdrawing consent does not affect the personal data that must be processed, used, or transferred in accordance with (contractual) payment processing.

The applicable data protection provisions of PayPal are available at https://www.paypal.com/us/webapps/mpp/ua/privacy-full .

25. Payment Method: Data Protection Provisions in Connection with the Use of Skrill as a Payment Processor

On this website, the controller has integrated Skrill components. Skrill is an online payment service provider. Payments are processed via the Skrill Wallet, which is a virtual electronic wallet. Skrill also allows you to make virtual payments using credit cards. The Skrill Wallet is managed via an email address. Skrill allows you to make online payments to third parties or receive payments.

The operating company of Skrill is Skrill Limited, Floor 27, 25 Canada Square, London, E14 5LQ, United Kingdom.

If you select "Skrill" as your payment method when placing an order in our online store, your data will automatically be transferred to Skrill. By selecting this payment method, you consent to the transfer of personal data required for payment processing.

The personal data exchanged with Skrill includes the purchase amount and email address, which are required for payment processing. This data transfer is for payment processing and fraud prevention purposes. The Controller will also transfer other personal data to Skrill if there is a legitimate interest in transferring it. The personal data exchanged between Skrill and you will be transferred by Skrill to credit agencies. This transfer is for the purpose of conducting identity and credit checks.

If necessary, Skrill will transfer personal data to its affiliates, service providers or subcontractors to the extent necessary to fulfil contractual obligations or process data as part of the order.

You may withdraw your consent to the processing of your personal data by Skrill at any time. Withdrawing consent does not affect the personal data that must be processed, used, or transferred in accordance with (contractual) payment processing.

Skrill's applicable data protection provisions are available at https://www.skrill.com/en/footer/privacypolicy/ .

26. Payment method: Data protection provisions for the use of Sofortüberweisung as a payment processor

On this website, the controller has integrated components of Sofortüberweisung. Sofortüberweisung is a payment service that enables cashless payment for products and services online. Sofortüberweisung is a technical procedure through which the online seller receives immediate payment confirmation. This allows the seller to immediately ship the goods or services or provide a file for download after the order has been placed.

The operator of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany.

If the data subject selects "instant transfer" as the payment option in our online shop when placing an order, the data subject's data will be transferred to Sofortüberweisung. By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing.

When processing a purchase via instant transfer, the buyer submits the PIN and TAN to Sofort GmbH. Sofortüberweisung then processes the transfer to the online merchant after technically verifying the account balance and collecting additional data to verify account assignment. The online merchant is then automatically notified of the completed financial transaction.

The personal data exchanged with Sofortüberweisung includes first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data required for payment processing. The data is transferred for the purposes of payment processing and fraud prevention. The controller will immediately transfer other personal data, even if there is a legitimate interest in transferring it. The personal data exchanged between Sofortüberweisung and the controller will be transferred by Sofortüberweisung to credit agencies. This data is transferred for the purpose of identity and creditworthiness verification.

Sofortüberweisung transfers personal data to subsidiaries and service providers or subcontractors to the extent necessary to fulfil contractual obligations or to process data for the purpose of order fulfilment.

The data subject has the option to withdraw consent to the processing of personal data by Sofortüberweisung at any time. Withdrawal of consent does not affect personal data that must be processed, used, or transferred in connection with (contractual) payment processing.

The applicable data protection provisions of Sofortüberweisung can be found at: https://www.sofort.com/eng-DE/datenschutzerklaerung-sofort-gmbh/ .

27. Trusted Shops Trustbadge integration

The Trusted Shops Trustbadge is integrated on this website, which displays our Trusted Shops logo and collected reviews, and also offers Trusted Shops products after placing an order.

This is necessary to protect our legitimate interests in optimal marketing and to ensure secure purchases in accordance with Article 6 (1) (f) of the GDPR. The Trustbadge and the services advertised on it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. The Trustbadge is provided by the provider CDN (Content Delivery Network) as part of order processing. Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is guaranteed. More information about the data security of Trusted Shops GmbH can be found here: https://www.trustedshops.co.uk/imprint/ .

When the Trustbadge is called up, the web server automatically saves a server log file that contains, for example, the IP address, date and time of the call, the amount of data transferred, and the request provider (access data), and documents the call. The individual access data is stored in a security database for the analysis of security issues. Log files are automatically deleted no later than 90 days after their creation.

Further personal data will be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after placing an order or if you have already registered. The contract concluded between you and Trusted Shops applies. For this purpose, personal data is automatically collected from your order data. A neutral parameter—your email address, encrypted with a one-way function—is used to automatically check whether you are already a registered Trusted Shops user. The email address is converted into a hash value that Trusted Shops cannot decrypt before it is transmitted. After verification, the parameter is automatically deleted.

This is necessary to pursue our and Trusted Shops' legitimate interests in providing order-specific buyer protection and transaction evaluation services in accordance with Article 6(1)(1)(f) of the GDPR. Details, including the right to object, can be found in the Trusted Shops Privacy Policy, which we refer to in the Trustbadge above.

28. Legal basis for processing

Article 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations necessary for the supply of goods or the provision of other services, the processing is based on Article 6(1)(b) GDPR. The same applies to processing operations which are necessary for taking steps prior to entering into a contract, for example in the case of inquiries concerning our products or services. If our company is obliged to process personal data by legal obligation, for example for the fulfillment of tax obligations, the processing is based on Article 6(1)(c) GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. For example, if a visitor to our company suffers an accident and their data, such as their name, age, health insurance data or other vital data, must be transferred to a doctor, hospital or other body. In such a case, the processing would be based on Article 6(1)(f) GDPR. d GDPR. Ultimately, processing operations may be based on point (f) of Article 6(1) GDPR. This legal basis is used for processing operations which are not covered by any of the aforementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, unless such interests override the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been expressly mentioned by the European legislator. A legitimate interest has been considered to exist if the data subject is a client of the controller (Recital 47, Sentence 2 GDPR).

29. Legitimate interests pursued by the controller or a third party

Where the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is to carry out our business activities for the benefit of our employees and shareholders.

30. Period of storage of personal data

The criteria used to determine the retention period for personal data is the appropriate retention period prescribed by law. After this period, the data is routinely deleted, unless it is no longer required for the fulfillment or implementation of a contract.

31. Providing personal data as a statutory or contractual requirement; A requirement necessary to conclude a contract; The data subject's obligation to provide personal data; possible consequences of failure to provide such data. We hereby inform you that the provision of personal data is partly required by law (e.g., tax regulations) or may result from contractual provisions (e.g., information about the contractual partner). Sometimes, it may be necessary for the conclusion of a contract for the data subject to provide us with personal data, which must then be processed by us. Data subjects are obligated to provide personal data, for example, when our company signs a contract with them. Failure to provide personal data would result in the impossibility of concluding the contract with them. Before data subjects provide personal data, they should contact an employee. The employee will clarify whether the provision of personal data is required by law or contract, whether it is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences of not providing the personal data will be.

32. Existence of automatic decision-making
As a responsible company, we do not use automatic decision-making or profiling.

33. Data Protection in Application Processes:
The data controller collects and processes applicants' personal data for the purpose of conducting the application process. Processing may also be carried out electronically, particularly if the applicant submits the relevant application documents via email or via a form on the data controller's website. If the data controller concludes an employment contract with the applicant, the data provided will be stored for the purpose of processing the employment relationship, in accordance with legal requirements. If no employment contract is concluded, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests of the data controller preclude their deletion. Other legitimate interests in this case include, for example, the duty of proof in proceedings under the Equal Opportunities Act.

34. Przepisy ochrony danych dotyczące aplikacji i używania Facebooka
Na tej stronie internetowej administrator zintegrował komponenty przedsiębiorstwa Facebook. Facebook jest siecią społecznościową.
Sieć społecznościowa to miejsce spotkań społecznych w Internecie, wirtualna społeczność, która zazwyczaj umożliwia użytkownikom komunikowanie się ze sobą i interakcję w wirtualnej przestrzeni. Sieć społecznościowa może służyć jako platforma wymiany opinii i doświadczeń lub umożliwiać internetowej społeczności dostarczanie informacji osobistych lub związanych z działalnością gospodarczą. Facebook umożliwia użytkownikom sieci społecznościowej tworzenie prywatnych profili, przesyłanie zdjęć i nawiązywanie kontaktów poprzez zaproszenia do znajomych.
Firma Facebook, Inc. ma swoją siedzibę pod adresem 1 Hacker Way, Menlo Park, CA 94025, USA. Jeżeli osoba nie mieszka w Stanach Zjednoczonych lub Kanadzie, administratorem jest Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irlandia.
Przy każdym wywołaniu jednej z poszczególnych stron tej witryny internetowej, która jest obsługiwana przez administratora i w którą zintegrowany został komponent Facebook (pluginy Facebooka), przeglądarka internetowa systemu technologicznego osoby, której dane dotyczą, jest automatycznie nakłaniana do pobrania odpowiedniego komponentu Facebooka z Facebooka. Przegląd wszystkich pluginów Facebooka można znaleźć pod adresem: https://developers.facebook.com/docs/plugins/. Podczas tego procesu technicznego Facebook zostaje poinformowany o tym, którą konkretną podstronę naszej strony internetowej odwiedziła osoba, której dane dotyczą.
Jeśli osoba, której dane dotyczą, jest jednocześnie zalogowana na Facebooku, Facebook wykrywa przy każdym wywołaniu naszej strony przez tę osobę — oraz przez cały czas trwania jej wizyty na naszej witrynie — którą konkretną podstronę naszej strony internetowej odwiedzała osoba ta. Informacje te są zbierane przez komponent Facebooka i powiązane z odpowiednim kontem Facebooka osoby, której dane dotyczą. Jeśli osoba, której dane dotyczą, kliknie jeden z przycisków Facebooka zintegrowanych z naszą stroną internetową, np. przycisk "Lubię to", lub jeśli osoba, której dane dotyczą, składa komentarz, Facebook powiąże te informacje z osobistym kontem użytkownika Facebooka osoby, której dane dotyczą, i zapisze dane osobowe.
Facebook zawsze otrzymuje informacje o wizycie osoby, której dane dotyczą, na naszej stronie internetowej, gdy osoba ta jest jednocześnie zalogowana na Facebooku w czasie wywołania naszej strony internetowej. Ma to miejsce niezależnie od tego, czy osoba ta kliknie komponent Facebooka, czy nie. Jeśli taka transmisja informacji do Facebooka nie jest pożądana przez osobę, której dane dotyczą, może ona zapobiec temu, wylogowując się ze swojego konta Facebook przed wywołaniem naszej strony internetowej.

35. Przepisy ochrony danych dotyczące aplikacji i używania Google Analytics (z funkcją anonimizacji)
Na tej stronie internetowej administrator zintegrował komponent Google Analytics (z funkcją anonimizacji). Google Analytics to usługa analityki internetowej. Analiza internetowa to zbieranie, gromadzenie i analizowanie danych na temat zachowań odwiedzających strony internetowe. Usługa analityki internetowej zbiera dane m.in. na temat strony internetowej, z której dana osoba przyszła (tzw. referrer), które podstrony były odwiedzane, jak często i przez jaki czas były wyświetlane. Analityka internetowa jest głównie wykorzystywana do optymalizacji strony internetowej oraz w celu przeprowadzania analizy kosztów i korzyści reklamy internetowej.
Operatorem komponentu Google Analytics jest Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, Stany Zjednoczone.
Do analizy ruchu na naszej stronie internetowej administrator korzysta z aplikacji "_gat._anonymizeIp". Dzięki tej aplikacji adres IP połączenia internetowego osoby, której dane dotyczą, jest skracany przez Google i anonimizowany podczas dostępu do naszej strony internetowej z państwa członkowskiego Unii Europejskiej lub innego państwa-strony Porozumienia o Europejskim Obszarze Gospodarczym.
Celem komponentu Google Analytics jest analiza ruchu na naszej stronie internetowej. Google wykorzystuje zebrane dane i informacje m.in. do oceny korzystania z naszej strony internetowej, do tworzenia raportów online, które pokazują aktywność na naszej stronie internetowej oraz do świadczenia innych usług związanych z użytkowaniem naszej strony internetowej.
Google Analytics umieszcza ciasteczko na systemie technologicznym osoby, której dane dotyczą. Ciasteczka to pliki przechowujące dane. Dzięki ustawieniu ciasteczka Google może analizować korzystanie z naszej strony internetowej. Przy każdorazowym wywołaniu jednej z poszczególnych stron tej strony internetowej, na której zintegrowano komponent Google Analytics, przeglądarka internetowa systemu technologicznego osoby, której dane dotyczą, automatycznie przesyła dane za pomocą komponentu Google Analytics w celu reklamy internetowej i rozliczania prowizji do Google. Podczas tego procesu technicznego firma Google uzyskuje informacje osobiste, takie jak adres IP osoby, której dane dotyczą, które służą Google m.in. do ustalenia pochodzenia odwiedzających oraz kliknięć, a następnie tworzenia rozliczeń prowizji.
Ciasteczko jest wykorzystywane do przechowywania informacji osobistych, takich jak czas dostępu, lokalizacja, z której dokonano dostępu, oraz częstotliwość odwiedzin naszej strony internetowej przez osobę, której dane dotyczą. Przy każdej wizycie na naszej stronie internetowej takie dane osobowe, w tym adres IP używanego połączenia internetowego, będą przekazywane do Google w Stanach Zjednoczonych. Dane osobowe są przechowywane przez Google w Stanach Zjednoczonych. Google może przekazać te dane osobowe zebrane w toku procedury technicznej osobom trzecim.
Osoba, której dane dotyczą, może, jak wskazano powyżej, zapobiec ustawianiu ciasteczek przez naszą stronę internetową w dowolnym momencie, dokonując odpowiedniego ustawienia używanej przeglądarki internetowej, a tym samym trwale odmówić ustawienia ciasteczek. Taka zmiana w ustawieniach przeglądarki internetowej zapobiegnie również ustawianiu ciasteczka przez Google Analytics w systemie technologicznym osoby, której dane dotyczą. Ponadto ciasteczka już używane przez Google Analytics mogą zostać usunięte w dowolnym momencie za pomocą przeglądarki internetowej lub innych programów komputerowych.

36. Data protection provisions for the application and use of Google+

On this website, the controller has integrated the Google+ button as a component. Google+ is a so-called social network. A social network is a virtual meeting place on the Internet, i.e., an online community that allows users to communicate with each other and interact in a virtual space. The social network can serve as a platform for the exchange of opinions and experiences or allow users to post personal or professional information. Google+ allows social network users to create private profiles, upload photos, and connect through friend requests.

The operator of Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.

Each time a user visits one of the individual pages of this website on which a Google+ button has been integrated, the Internet browser on the visitor's information technology system automatically downloads a display of the corresponding Google+ button from Google via the Google+ button component. Through this technical process, Google learns which specific subpage of our website the user has visited. Detailed information about Google+ is available at https://developers.google.com/+/ .

If you are logged in to Google+ at the same time, Google recognizes which specific subpage you have visited each time you visit our website, and this information remains available for the duration of your stay on our website. This information is collected through the Google+ button, and Google associates it with your Google+ account.

If a user clicks the Google+ button integrated on our website and thus submits a Google+ 1 recommendation, Google assigns this information to the user's personal Google+ account and stores the personal data. Google stores the user's Google+ 1 recommendation and makes it public in accordance with the terms and conditions accepted by the user. The Google+ 1 recommendation submitted by the user on our website, along with other personal data such as the user's Google+ account name and saved photo, is then stored and processed in other Google services, such as Google search results, the user's Google account, or elsewhere, such as on websites or in connection with advertisements. Google also has the option of linking the visit to this website with other personal data stored by Google. Google further stores this personal data to improve and optimize various Google services.

Through the Google+ button, Google receives information that you have visited our website if you are logged in to Google+ at the time you access our website. This occurs regardless of whether you click the Google+ button or not. If you do not wish to transmit your personal data to Google, you can prevent this by logging out of your Google+ account before visiting our website.

Further information about data protection at Google can be found at https://www.google.com/intl/en/policies/privacy/ . Further information about the Google+ 1 button can be found at https://developers.google.com/+/web/buttons-policy .

37. Data protection provisions for the application and use of Instagram

On this website, the controller has integrated components of the service Instagram. Instagram is a service that can be described as an audiovisual platform that allows users to share photos and videos, as well as disseminate such data in other social networks.

The operator of the services offered by Instagram is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, UNITED STATES.

Each time a user visits one of the individual pages of this website on which an Instagram component (Insta button) has been integrated, the Internet browser on the user's information technology system automatically downloads a display of the corresponding Instagram component. Through this technical process, Instagram learns which specific subpage of our website the user visited.

If you are logged in to Instagram at the same time, Instagram detects which specific subpages you have visited each time you visit our website—and for the entire duration of your stay on our website. This information is collected by the Instagram component and associated with your Instagram account. If you click on one of the Instagram buttons integrated on our website, Instagram assigns this information to your personal Instagram account and stores the personal data.

Instagram receives information via the Instagram component that you have visited our website, provided you are logged in to Instagram at the time of accessing our website. This occurs regardless of whether you click the Instagram button or not. If you do not wish your personal data to be transferred to Instagram, you can prevent this by logging out of your Instagram account before visiting our website.

Further information on data protection at Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/ .

38. Data protection provisions for the application and use of LinkedIn

The controller has integrated components of LinkedIn Corporation on this website. LinkedIn is an online social network that enables users to establish business contacts and create new ones. With over 400 million registered users in over 200 countries, LinkedIn is currently the largest platform for professional networking and one of the most visited websites in the world.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For privacy matters outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

Each time a user visits one of the pages of this website on which a LinkedIn component (LinkedIn plug-in) has been integrated, the Internet browser on the visitor's information technology system automatically downloads a display of the corresponding LinkedIn component. Further information about the LinkedIn plug-in can be found at the following link: https://developer.linkedin.com/plugins . During this technical process, LinkedIn obtains information about which specific subpage of our website was visited by the user.

If you are logged in to LinkedIn at the same time, LinkedIn detects which specific subpage of our website you are visiting each time you visit our website—and for the entire duration of your stay there. This information is collected by the LinkedIn component and associated with your LinkedIn account. If you click on one of the LinkedIn buttons integrated on our website, LinkedIn assigns this information to your personal LinkedIn user account and stores the personal data.

LinkedIn receives information that you have visited our website provided that you are logged in to LinkedIn when you access our website. This occurs regardless of whether you click the LinkedIn button or not. If you do not want this information transferred to LinkedIn, you can prevent this by logging out of your LinkedIn account before visiting our website.

LinkedIn offers the ability to opt out of email, SMS, and targeted advertising, as well as manage advertising settings, at: https://www.linkedin.com/psettings/guest-controls . LinkedIn also uses partner companies such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. You can refuse the setting of these cookies at: https://www.linkedin.com/legal/cookie-policy . LinkedIn's privacy policy can be found at: https://www.linkedin.com/legal/privacy-policy .

39. Data protection provisions for the application and use of Myspace

On this website, the controller has integrated components of MySpace LLC. MySpace is a so-called social network. A social network is an online meeting place, a virtual community that allows users to communicate and interact with others. It can serve as a platform for the exchange of opinions and experiences, or enable the sharing of personal or company-related information. MySpace allows users to create free blogs or user groups, including photos and videos.

The operating company of MySpace is MySpace LLC, 8391 Beverly Blvd., #349, Los Angeles, California 90048, USA.

Each time a user visits one of the pages of this website on which a MySpace component (MySpace plug-in) has been integrated, the Internet browser on the user's computer system automatically downloads a display of the corresponding MySpace component. Further information about MySpace is available at: https://myspace.com . During this technical process, MySpace obtains information about which specific subpage of our website the user has visited.

If you are logged in to MySpace at the same time, MySpace detects which specific subpage of our website you are visiting each time you visit our website—and for the duration of your stay there. This information is collected by the MySpace component and associated with your MySpace account. If you click on one of the MySpace buttons integrated on our website, MySpace assigns this information to your personal MySpace user account and stores the personal data.

MySpace receives information that you have visited our website provided that you are logged in to MySpace when you access our site. This occurs regardless of whether you click on the MySpace component or not. If you do not want this information transferred to MySpace, you can prevent this by logging out of your MySpace account before visiting our site.

MySpace's privacy policy, available at: https://myspace.com/pages/privacy , provides information about the collection, processing and use of personal data by MySpace.

40. Data protection provisions for the application and use of Pinterest

On this website, the controller has integrated components of Pinterest Inc. Pinterest is a so-called social network. The social network is an online meeting place, a virtual community that enables users to communicate and interact with others. Pinterest allows users to publish photo collections and individual photos and descriptions on virtual pinboards (so-called pins), which can then be shared by other users (so-called re-pins) or commented on.

The operating company of Pinterest is Pinterest Inc., 808 Brannan Street, San Francisco, California 94103, USA.

Each time a user visits one of the pages of this website on which a Pinterest component (Pinterest plug-in) has been integrated, the Internet browser on the user's computer system automatically downloads a display of the corresponding Pinterest component. Further information about Pinterest can be found at: https://pinterest.com . During this technical process, Pinterest obtains information about which specific subpage of our website the user has visited.

If you are logged in to Pinterest at the same time, Pinterest detects which specific subpage of our website you are visiting each time you visit our website—and for the entire duration of your stay there. This information is collected by the Pinterest component and associated with your respective Pinterest account. If you click on one of the Pinterest buttons integrated on our website, Pinterest assigns this information to your personal Pinterest user account and stores the personal data.

Pinterest receives information that you have visited our website provided that you are logged in to Pinterest when you access our website. This occurs regardless of whether you click on the Pinterest component or not. If you do not want this information to be transmitted to Pinterest, you can prevent this by logging out of your Pinterest account before visiting our website.

Pinterest's privacy policy, available at: https://about.pinterest.com/privacy-policy , provides information about the collection, processing and use of personal data by Pinterest.

41. Data protection provisions for the application and use of SlideShare

On this website, the controller has integrated SlideShare components. LinkedIn SlideShare is a file hosting service that allows the exchange and archiving of presentations and other documents, such as PDF files, videos, and webinars. The file hosting service allows users to upload multimedia content in common formats, with documents available publicly or privately.

42. Data protection provisions relating to the application and use of Tumblr

On this website, the controller has integrated components of Tumblr. Tumblr is a platform that allows users to create and maintain a blog. A blog is a web-based portal, usually publicly accessible, on which one or more people called bloggers can publish articles or write down thoughts in the form of blog posts. For example, Tumblr users can publish text, images, links, and videos and share them in the digital space. In addition, Tumblr users can import content from other websites into their blog.

The company responsible for Tumblr is Tumblr, Inc., 35 East 21st St, Ground Floor, New York, NY 10010, USA.

Each time you visit a subpage of this website that contains a Tumblr component (Tumblr button), the browser on your device automatically downloads the corresponding Tumblr component. More information about the Tumblr buttons is available at https://www.tumblr.com/buttons . During this technical process, Tumblr learns which specific subpage of our website you have visited. The purpose of integrating the Tumblr component is to enable the retransmission of content from this website in order to promote our website on the Internet and increase our visitor numbers.

If you are logged in to Tumblr, Tumblr detects which specific subpage you are visiting each time you visit our website and for the duration of your stay on our website. This information is collected by the Tumblr component and assigned to your Tumblr user account. If you click one of the Tumblr buttons integrated on our website, Tumblr assigns this information to your user account and stores the personal data.

Tumblr receives information that you have visited our site if you are logged in to Tumblr at the time of your visit. This occurs regardless of whether you click on the Tumblr component or not. If you do not want this information transferred to Tumblr, you can prevent this by logging out of your Tumblr account before visiting our site.

The applicable data protection provisions of Tumblr are available at https://www.tumblr.com/policy/en/privacy .

43. Data protection provisions relating to the application and use of Twitter

On this website, the controller has integrated components of Twitter. Twitter is a multilingual, publicly-accessible microblogging service on which users can publish and spread so-called "tweets," which are short messages limited to 280 characters. These messages are available to everyone, including those who are not logged in to Twitter. Tweets are also displayed to the respective user's so-called followers. Followers are other Twitter users who follow the user's tweets. Twitter also allows you to reach a wider audience using hashtags, links, or retweets.

The company responsible for Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Each time you visit one of the subpages of this website that contains a Twitter component (Twitter button), the browser on your device automatically downloads the corresponding Twitter component. Further information about the Twitter button can be found at https://about.twitter.com/de/resources/buttons . During this technical process, Twitter learns which specific subpage of our website you have visited. The purpose of integrating the Twitter component is to retransmit the content of this website to allow our users to promote this website on the Internet and increase our visitor numbers.

If you are logged in to Twitter at the same time, Twitter detects which specific subpage you are visiting and for the duration of your stay on our website. This information is collected by the Twitter component and assigned to your Twitter account. If you click one of the Twitter buttons integrated on our website, Twitter assigns this information to your account and stores the personal data.

Twitter receives information that you have visited our website provided that you are logged in to Twitter at the time of your visit. This occurs regardless of whether you click on the Twitter component or not. If you do not wish this information to be transmitted to Twitter, you can prevent this by logging out of your Twitter account before visiting our website.

The applicable data protection provisions of Twitter are available at https://twitter.com/privacy?lang=en .

44. Data protection provisions regarding the application and use of XING

On this website, the controller has integrated components of XING. XING is an online social network that allows users to connect with existing professional contacts and create new business contacts. Users can create personal profiles on XING. Companies can, for example, create company profiles or publish job offers on XING.

The company responsible for XING is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Each time a subpage of this website containing a XING component (XING plug-in) is accessed, the browser on your device automatically downloads the corresponding XING component. Further information about XING plug-ins is available at https://dev.xing.com/plugins . During this technical process, XING learns which specific subpage of our website you visited.

45. Data protection provisions for the application and use of YouTube

On this website, the controller has integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other video material for other users free of charge, which also allows them to be viewed, rated, and commented on. YouTube allows the publication of all kinds of videos, such as full movies, television broadcasts, music videos, film trailers, and videos created by users on the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.

Each time a user visits a website that has an integrated YouTube component (video), the Internet browser on the user's computer system automatically triggers the download of a display of the corresponding YouTube component. Further information about YouTube can be found at https://www.youtube.com/yt/about/en/ . During this technical process, YouTube and Google learn which specific subpage of our website the user visited.

If you are logged in to YouTube, YouTube recognizes which specific subpage of our website you have visited each time you access a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube user account.

YouTube and Google receive information that you have visited our website if you are logged in to YouTube when you access our website. This occurs regardless of whether you click on the YouTube component or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent it by logging out of your YouTube account before visiting our website.

YouTube's data protection provisions are available at https://www.google.com/intl/pl/policies/privacy/ and provide information about the collection, processing and use of personal data by YouTube and Google.

46. Payment Method: Data protection provisions for the use of PayPal as a payment processor

On this website, the controller has integrated components of PayPal. PayPal is an online payment service provider. Payments are processed through so-called PayPal accounts, which represent virtual private or business accounts. PayPal can also process virtual payments via credit cards if the user does not have a PayPal account. A PayPal account is managed via an email address and therefore does not have traditional account numbers. PayPal allows you to make or receive online payments to third parties. PayPal also performs trustee functions and offers buyer protection services.

PayPal's European operating company is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you select "PayPal" as your payment method during the online store ordering process, we automatically transfer your data to PayPal. By selecting this payment method, you consent to the transfer of your personal data required for payment processing.

The personal data transferred to PayPal typically includes your name, surname, address, email address, IP address, telephone number, mobile number, or other data required for payment processing. Processing the purchase contract also requires personal data related to the order in question.

The data is transferred for the purpose of payment processing and fraud prevention. The controller will transfer personal data to PayPal if there is a legitimate interest in transferring this data. The personal data exchanged between PayPal and the controller for payment processing may be transferred by PayPal to credit agencies. This transfer is for the purpose of identity and creditworthiness checks.

PayPal will, if necessary, transfer personal data to its subsidiaries, service providers or subcontractors, provided that this is necessary to fulfill contractual obligations or to process the data in the order.

You may withdraw your consent to the processing of your personal data by PayPal at any time. Withdrawal of consent does not affect the personal data that must be processed, used, or transferred in accordance with the payment processing agreement.

The applicable data protection provisions of PayPal can be found at https://www.paypal.com/pl/webapps/mpp/ua/privacy-full .

47. Payment Method: Data Protection Provisions for the Use of Skrill as a Payment Processor

On this website, the controller has integrated Skrill components. Skrill is an online payment service provider. Payments are processed via the Skrill Wallet, which is a virtual electronic wallet. Skrill also allows you to make virtual payments using credit cards. The Skrill Wallet is managed via an email address. Skrill allows you to make online payments to third parties or receive them.

The operating company of Skrill is Skrill Limited, Floor 27, 25 Canada Square, London, E14 5LQ, United Kingdom.

If you select "Skrill" as your payment method when placing an order in our online store, your data will automatically be transferred to Skrill. By selecting this payment method, you consent to the transfer of personal data required for payment processing.

The personal data transferred to Skrill includes the purchase amount and email address, which are required for payment processing. This data is transferred for the purposes of payment processing and fraud prevention. The controller will also transfer other personal data to Skrill if there is a legitimate interest in transferring this data. The personal data exchanged between Skrill and the controller for payment processing purposes may be transferred by Skrill to credit agencies. This transfer is for the purposes of identity and creditworthiness checks.

If necessary, Skrill will transfer personal data to its subsidiaries, service providers or subcontractors, insofar as this is necessary to fulfil contractual obligations or to process data in the order.

You may withdraw your consent to the processing of your personal data by Skrill at any time. Withdrawal of consent does not affect the personal data that must be processed, used, or transferred in accordance with the payment processing agreement.

Skrill's applicable data protection provisions can be found at https://www.skrill.com/pl/footer/privacypolicy/ .

48. Payment Method: Data protection provisions about the use of Sofortüberweisung as a payment processor
On this website, the controller has integrated components of Sofortüberweisung. Sofortüberweisung is a payment service that allows cashless payment for products and services online. Sofortüberweisung is a technical procedure through which the online seller receives an immediate payment confirmation. This allows the seller to ship goods, services, or download products immediately after placing the order.
The operator of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany.
If the data subject selects "instant transfer" as the payment option in our online shop during the ordering process, the data of the data subject will be transferred to Sofortüberweisung. By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing.
In the case of a purchase via direct transfer, the buyer transmits a PIN and a TAN to Sofort GmbH. Sofortüberweisung then transfers the payment to the merchant's account after technically verifying the account balance and collecting additional data to verify account assignment. The online merchant is automatically informed of the execution of the financial transaction.
The personal data exchanged with Sofortüberweisung includes first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data required for payment processing. The data is transferred for the purpose of payment processing and fraud prevention. The controller immediately transfers other personal data, even if a legitimate interest in the transfer exists. The personal data exchanged between Sofortüberweisung and the controller is transferred by Sofortüberweisung to credit agencies. This transfer is for the purpose of identity and creditworthiness verification.
Sofortüberweisung shares personal data with affiliates and service providers or subcontractors to the extent necessary for the fulfillment of contractual obligations or data processing.
The data subject has the option to withdraw consent to the processing of personal data by Sofortüberweisung at any time. The revocation does not affect personal data that must be processed, used, or transferred in accordance with (contractual) payment processing.
The applicable data protection provisions of Sofortüberweisung can be found at: https://www.sofort.com/eng-DE/datenschutzerklaerung-sofort-gmbh/ .

49. Integracja Trusted Shops Trustbadge
Na tej stronie internetowej zintegrowano Trustbadge Trusted Shops w celu wyświetlania znaku jakości Trusted Shops oraz zebranych opinii, a także oferowania produktów Trusted Shops klientom po złożeniu zamówienia.
Jest to konieczne, aby zabezpieczyć nasze uzasadnione interesy w zakresie optymalnego marketingu poprzez zapewnienie bezpieczeństwa zakupu zgodnie z artykułem 6 (1) f RODO. Trustbadge i usługi reklamowane przy jego pomocy są ofertą Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Kolonia, Niemcy. Trustbadge jest udostępniany przez dostawcę CDN (Content Delivery Network) w ramach realizacji zamówienia. Firma Trusted Shops GmbH korzysta również z usługodawców z USA. Zapewniony jest odpowiedni poziom ochrony danych. Więcej informacji na temat ochrony danych Trusted Shops GmbH można znaleźć pod tym adresem: https://www.trustedshops.co.uk/imprint/.
Po wywołaniu Trustbadge, serwer internetowy automatycznie zapisuje plik dziennika serwera, który zawiera m.in. adres IP, datę i godzinę wywołania, ilość przesyłanych danych oraz dostawcę żądania (dane dostępu) i dokumentuje to wywołanie. Poszczególne dane dostępu są przechowywane w bazie danych bezpieczeństwa w celu analizy problemów związanych z bezpieczeństwem. Pliki dziennika są automatycznie usuwane po 90 dniach od ich utworzenia.
Dalsze dane osobowe są przekazywane Trusted Shops GmbH, jeśli zdecydujesz się na skorzystanie z produktów Trusted Shops po złożeniu zamówienia lub jeśli już zarejestrowałeś się do korzystania z nich. Obowiązuje umowa zawarta pomiędzy tobą a Trusted Shops. W tym celu dane osobowe są automatycznie pobierane z danych zamówienia. Czy jesteś już zarejestrowany jako klient Trusted Shops, sprawdzane jest automatycznie za pomocą neutralnego parametru, jakim jest e-mail przekonwertowany na wartość hasha za pomocą kryptograficznej funkcji jednokierunkowej. Adres e-mail jest konwertowany na tę wartość hasha, której Trusted Shops nie jest w stanie odszyfrować przed jej przesłaniem. Po sprawdzeniu zgodności, parametr jest automatycznie usuwany.
Jest to konieczne w celu realizacji naszych i Trusted Shops uzasadnionych interesów w zakresie świadczenia ochrony kupującego związanej z konkretnym zamówieniem oraz usługami oceny transakcji zgodnie z art. 6 ust. 1 pkt. 1 lit. f RODO. Szczegóły, w tym prawo do sprzeciwu, można znaleźć w Polityce prywatności Trusted Shops, do której odnośnik znajduje się powyżej oraz w ramach Trustbadge.

50. Legal basis for processing:
Article 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case when processing operations are necessary for the supply of goods or to provide other services, processing is based on Article 6(1)(b) GDPR. The same applies to processing operations which are necessary to carry out pre-contractual measures, for example in the case of inquiries concerning our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, processing is based on Article 6(1)(c) GDPR. In rare cases, processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and personal data, such as name, age, health insurance data, or other vital data, would have to be transferred to a doctor, hospital, or other third party. In such a case, processing would be based on point (d) of Article 6(1) of the GDPR. Finally, processing operations could be based on point (f) of Article 6(1) of the GDPR. This legal basis is used for processing operations that are not covered by any of the aforementioned legal grounds, if processing is necessary for the legitimate interests pursued by our company or by a third party, except where such interests override the interests or fundamental rights and freedoms of the data subject that require protection of personal data. Such processing operations are particularly permissible because they have been expressly mentioned by the European legislator. A legitimate interest may exist if the data subject is a client of the controller (Recital 47, Sentence 2 of the GDPR).

51. Legitimate interests pursued by the controller or a third party
Where the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is to carry out our business for the benefit of all our employees and shareholders.

52. The retention period for personal data.
The criteria used to determine the retention period for personal data is the appropriate retention period prescribed by law. After this period, the data is routinely deleted, provided it is no longer necessary for the fulfillment or initiation of a contract.

53. Providing personal data as a statutory or contractual requirement; A requirement necessary for entering into a contract; Obligation of the data subject to provide personal data; Possible consequences of failure to comply with this obligation.
We clarify that the provision of personal data is partly required by law (e.g., tax regulations) or can result from contractual provisions (e.g., information about the contracting party). Sometimes it may be necessary for the data subject to provide us with personal data, which will subsequently be processed by us. For example, the data subject is required to provide personal data when our company concludes a contract with them. Failure to comply with this obligation will result in the impossibility of concluding the contract with them. Before providing personal data, the data subject should contact an employee. The employee will clarify whether the provision of the personal data is required by law or contract, whether it is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and the consequences of not providing the personal data.

54. Existence of automated decision-making
As a responsible company, we do not use automated decision-making or profiling.

This Privacy Policy was generated by the Privacy Policy Generator of DGD – Your External Data Protection Inspector, developed in cooperation with Polish lawyers.