Polityka prywatności

Privacy policy

This Privacy Policy (hereinafter: "Privacy Policy") contains information regarding the processing of your personal data in connection with the use of the WOKA online store, operating under the website address WOKA-STORE.PL (hereinafter: "Store”).

Any terms written with a capital letter that are not otherwise defined in the Privacy Policy have the meaning assigned to them in the Terms and Conditions, available at: https://woka-store.pl/regulamin/

The personal data administrator

The administrator of your personal data is Sofya Masiukevich, operating under the business name WOKA jewellery, registered in the Central Register and Information on Economic Activity maintained by the minister responsible for economy, with NIP: 1133160111, REGON number: 541009108 (hereinafter: „Administrator”).

Contact with the Administrator

In all matters related to the processing of personal data, you can contact the Administrator using:

email – at: wokajewellery@gmail.com
regular mail – at: Terespolska 4-452, 03-813, Warsaw
phone – at the number: +48 505 545 212

Measures for the protection of personal data

The Administrator applies modern organizational and technical security measures to ensure the best possible protection of your personal data and guarantees that it processes them in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: "GDPR"), the Personal Data Protection Act of May 10, 2018, and other personal data protection regulations.

Information about processed personal data

Using the Store requires the processing of your personal data. Below, you will find detailed information about the purposes and legal bases of processing, as well as the processing period and whether providing the data is mandatory or voluntary.

- Purpose of processing – Conclusion and performance of the Agreement for the provision of the Account Service
  Processed personal data – Name and surname, email address
  Legal basis – art. 6 ust. 1 lit. of the RODO
  (prrocessing is necessary for the performance of a Contract for the provision of an Account Service concluded with the data subject, or to take steps prior to entering into the contract)
  Providing the above-mentioned personal data is a condition for the conclusion and performance of the contract for the provision of the Account Service (providing this data is voluntary, but failure to provide it will result in the inability to conclude and perform the aforementioned contract, including creating the Account).
- Purpose of processing – Conclusion and performance of the Sales Agreement
  Processed personal data – First and last name, email address, phone number, residential address (street, house number, apartment number, city, postal code, country), delivery address (if different from the residential address)
  Legal basis – art. 6 ust. 1 lit. of the RODO
  (the processing is necessary for the performance of the Sales Agreement concluded with the person to whom the data relates, or for taking actions to conclude it)
  Providing the above-mentioned personal data is a condition for the conclusion and execution of the Sales Agreement (their provision is voluntary, but the consequence of not providing them will be the impossibility of concluding and executing the Sales Agreement).
  The Administrator will process the aforementioned personal data until the expiration of claims arising from the Sales Agreement.
- Purpose of processing – Conducting the complaint procedure
  Processed personal data – Name and surname, email address
  Legal basis – art. 6 ust. 1 lit. of the RODO
  (processing is necessary to fulfill the legal obligation incumbent on the Administrator, in this case, the obligations:
  1. to provide a response to the complaint – Article 7a of the Consumer Rights Act;
  2. to exercise the rights of the Customer arising from the provisions on the Administrator's liability in the event of non-compliance of the physical Goods with the Sales Agreement or the Digital Content with the relevant Agreement)
    Providing the above-mentioned personal data is a condition for receiving a response to the complaint or exercising the Customer's rights arising from the provisions on the Administrator's liability in the event of non-compliance of the physical Goods with the Sales Agreement (the provision of this data is voluntary, but the consequence of not providing it will be the inability to receive a response to the complaint and exercise the above-mentioned rights).
    The Administrator will process the above-mentioned personal data for the duration of the complaint procedure, and in the case of exercising the above-mentioned Customer rights – until their limitation period expires

- Purpose of processing – Sending email notifications
  Processed personal data – email address
  Legal basis – art. 6 ust. 1 lit. f RODO
  (prrocessing is necessary for the purpose of fulfilling the legitimate interest of the Administrator, in this case, informing customers about the actions taken related to the execution of contracts concluded with customers)
  Providing the above-mentioned personal data is voluntary, but necessary to receive information about actions related to the execution of contracts concluded with customers (the consequence of not providing this data will be the inability to receive the aforementioned information).
  The Administrator will process the above-mentioned personal data until an effective objection is raised or the processing purpose is achieved (whichever event occurs first).
- Purpose of processing – Handling inquiries submitted by Customers
  Processed personal data – first and last name, email address
  Legal basis – art. 6 ust. 1 lit. f RODO
  (the processing is necessary for the implementation of the legitimate interest of the Administrator, in this case, to respond to the received inquiry)
  Providing the above-mentioned personal data is voluntary, but necessary to receive a response to the inquiry (the consequence of not providing the data will be the inability to receive a response).
  The Administrator will process the above-mentioned personal data until an effective objection is raised or the processing purpose is achieved (whichever event occurs first).
- Purpose of processing – Informing customers about the availability of previously unavailable goods
  Processed personal data – email address
  Legal basis – art. 6 ust. 1 lit. f RODO
  (processing is necessary for the legitimate interest of the Administrator, in this case, informing customers about the availability of previously unavailable goods)
  Providing the above-mentioned personal data is voluntary, but necessary to receive a notification about the availability of previously unavailable goods (the consequence of not providing this data will be the inability to receive the aforementioned notification).
  The Administrator will process the above-mentioned personal data until an effective objection is raised or the processing purpose is achieved (whichever event occurs first).
- Purpose of processing – Fulfilling obligations related to personal data protection
  Processed personal data – first and last name, contact information provided by you (email address; mailing address; phone number)
  Legal basis – art. 6 ust. 1 lit. f RODO
  (processing is necessary to fulfill the legal obligation incumbent on the Administrator, in this case, obligations arising from data protection regulations)
  The provision of the above personal data is voluntary, but necessary for the Administrator to properly perform obligations arising from data protection regulations, including the exercise of rights granted to you by the RODO (the consequence of not providing the above data will be the inability to properly exercise the aforementioned rights).
  The Administrator will process the above personal data until the expiration of the statute of limitations for claims arising from violations of data protection regulations.
- Purpose of processing – Analysis of your activity in the Store
  Processed personal data – date and time of visit, IP number of the device, type of operating system of the device, approximate location, type of web browser, time spent in the Store, viewed Products, visited subpages, and other actions taken within the Store
  Legal basis – art. 6 ust. 1 lit. f RODO
  (processing is necessary for the realization of the Administrator's legitimate interest, in this case, obtaining information about your activity in the Store)
  Providing the aforementioned personal data is voluntary but necessary for the Administrator to obtain information about your activity in the Store (the consequence of not providing this information will be the Administrator's inability to obtain the aforementioned information).
  The Administrator will process the aforementioned personal data until an effective objection is made or the processing goal is achieved.

Recipients of personal data

The recipients of personal data will be the following external entities cooperating with the Administrator:

hosting company;
logistics operator and courier companies;
online payment system providers;
companies providing tools for analyzing activity in the Store and targeting direct marketing to users (e.g., Google Analytics);

Additionally, personal data may be transferred to public or private entities if such an obligation arises from generally applicable laws, a final court judgment, or a final administrative decision.

Rights

In connection with the processing of personal data, you have the following rights:

the right to information about which personal data concerning you are being processed by the Administrator and to receive a copy of this data (so-called right of access). The first copy of the data is free of charge, and the Administrator may charge a fee for additional copies;
if the processed data becomes outdated or incomplete (or otherwise incorrect), you have the right to request its correction;
In certain situations, you can request the Administrator to delete your personal data, for example, when:
1. the data is no longer necessary for the Administrator to fulfill the purposes for which they were collected;
2. you have effectively withdrawn your consent to the processing of data – unless the Administrator has the right to process the data on another legal basis;
3. the processing is unlawful;
4. the need to erase the data results from a legal obligation imposed on the Administrator;
if your personal data is processed by the Administrator based on your consent to processing or for the purpose of performing an agreement concluded with them, you have the right to transfer your data to another administrator;
if your personal data is processed by the Administrator based on your consent to processing, you have the right to withdraw that consent at any time (withdrawing consent does not affect the lawfulness of processing that was carried out based on consent before its withdrawal);
if you believe that the processed personal data is incorrect, its processing is unlawful, or the Administrator no longer needs certain data, you may request that the Administrator does not perform any operations on the data for a specified period (e.g., to verify the accuracy of the data or pursue claims) and only stores the data.
you have the right to object to the processing of personal data based on the legitimate interest of the Administrator. If the objection is successful, the Administrator will cease processing the personal data for the specified purpose;
you have the right to file a complaint with the President of the Personal Data Protection Office if you believe that the processing of personal data violates the provisions of the RODO.

Cookies files

The Administrator informs that the Store uses "cookies" (small text files) that are installed on your end device. These are small text files that can be read by the Administrator's system as well as by systems belonging to other entities whose services the Administrator uses (e.g. Facebook, Google).
The Administrator uses cookies for the following purposes:
1. ensuring the proper functioning of the Store – thanks to cookies, the proper operation of the Store is ensured, allowing users to use its features and navigate smoothly between the different subpages;
2. improving the browsing experience of the Store – thanks to cookies, it is possible to detect errors on some subpages and continuously improve them;
3. creating statistics– cookies are used to analyze how users interact with the Store. This allows for continuous improvement of the Store and adapting its performance to user preferences;
4. cookies are used to carry out marketing activities – thanks to cookies, the Administrator can target advertisements to users based on their preferences.
The Administrator may place both persistent and temporary (session) cookies on your device. Session cookies are typically deleted when the browser is closed, while persistent cookies are not removed when the browser is closed.
The information about the cookies used by the Administrator is displayed in the panel located at the bottom of the online store's website. Depending on your decision, you can enable or disable cookies for individual categories (except for necessary cookies) and change these settings at any time.
The data collected through cookies does not allow the Administrator to identify you.
Through most commonly used browsers, you can check if cookies have been installed on your device, as well as delete installed cookies and block their installation in the future by the Store. However, disabling or limiting cookie support may cause significant difficulties in using the Store, such as the need to log in on every subpage, longer loading times for the Store's pages, and limitations in using some features.