We would like to familiarize you with the details of the processing of your personal data by us to give you full knowledge and comfort in using our website.
Due to the fact that we operate in the internet industry ourselves, we know how important it is to protect your personal data. Therefore, we make special efforts to protect your privacy and the information you provide to us.
We carefully select and apply appropriate technical measures, in particular those of a programming and organizational nature, ensuring the protection of personal data processed. Our website uses encrypted data transmission (SSL), which ensures the protection of your identifying data.
In our Privacy Policy you will find all the most important information regarding the processing of your personal data by us. We ask you to read it and we promise it will not take more than a few minutes.
The website administrator is Łukasz Kuczyński, running a business under the name Uptopia Łukasz Kuczyński, entered in the register of entrepreneurs of the Central Register and Information on Economic Activity kept by the minister responsible for. economy at ul. Kwidzyńska 9, 81-306 Gdynia, NIP 9570922675, REGON 369785080 (i.e. we).
Your personal data is collected and processed by us in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016.. on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection) (Official Journal. UE L 119, p. 1), commonly known as: GDPR. To the extent not regulated by the GDPR, the processing of personal data is governed by the Personal Data Protection Act of May 10, 2018.
The administrator of your personal data is Łukasz Kuczyński, running a business under the name Uptopia Łukasz Kuczyński, entered in the register of entrepreneurs of the Central Register and Information on Economic Activity kept by the minister responsible for. economy at ul. Kwidzyńska 9, 81-306 Gdynia, NIP 9570922675, REGON 369785080, phone: 509859826, e-mail: info@plantspirit.eu
In the matter of your personal data, you can contact us via:
e-mail: info@plantspirit.eu,
traditional mail: ul. Kwidzyńska 9, 81-306 Gdynia,
phone: 509 859 826.
We offer you many different services on our website, for the purposes of which we process various personal data on different legal bases.
Objective | Personal data | Legal basis for processing | Data storage time |
conclusion and performance of the contract | name, surname, correspondence address, PESEL, NIP, REGON, e-mail address, telephone number, bank account number, payment card number | art. 6 sec. 1 lit. b) GDPR, i.e.. processing in order to take action at your request, before concluding a contract and processing necessary for the performance of a contract to which you are a party | until the expiry of the limitation period for claims relating to the performance of the contract |
setting up and maintaining an account | name, surname, e-mail address, telephone number, correspondence address, bank account number, payment card number | art. 6 sec. 1 lit. b) GDPR, i.e.. processing in order to take action at your request, before concluding a contract and processing necessary for the performance of a contract to which you are a party | until the expiry of the limitation period for claims relating to the performance of the contract |
contact form | Name, surname, e-mail address, nickname, telephone number | art. 6 sec. 1 lit. f) GDPR, i.e.. processing in order to implement our legitimate interest, consisting in maintaining continuity of communication and enabling contact with us in matters of business activity | until you object to the processing of personal data |
adding opinions | nickname, first name, last name, e-mail address | art. 6 sec. 1 lit. f) GDPR, i.e.. processing in order to implement our legitimate interest, consisting in presenting opinions on goods and the course of transactions on the website of the online store | until you object to the processing of personal data |
newsletter | email address, first name, surname | art. 6 sec. 1 lit. a) GDPR, i.e.. processing based on your consent to the processing of your personal data | until the consent to the processing of personal data is withdrawn |
organization of competitions | name, surname, e-mail address, image, telephone number | art. 6 sec. 1 lit. a) GDPR, i.e.. processing based on your consent to the processing of your personal data | until the consent to the processing of personal data is withdrawn |
Loyalty program | name, surname, e-mail address, image, telephone number | art. 6 sec. 1 lit. a) GDPR, i.e.. processing based on your consent to the processing of your personal data | until the consent to the processing of personal data is withdrawn |
analysis of traffic on the website of the online store | name, address, IP address | Art. 6 sec. 1 lit. f) GDPR, i.e.. processing to implement our legitimate interest in analyzing customer traffic on the store's website | until you object to the processing of personal data |
direct marketing of own goods and services, including remarketing | name, address of residence | Art. 6 sec. 1 lit. f) GDPR, i.e.. processing in order to implement our legitimate interest in direct marketing of our own services, including remarketing | until you object to the processing of personal data |
determination, investigation and enforcement of claims and defense against claims in proceedings before courts and other state authorities | name, surname, address, PESEL number, NIP number, REGON number, e-mail address, telephone number, IP number, bank account number, payment card number | art. 6 sec. 1 lit. f) GDPR, i.e.. processing in order to implement our legitimate interest, consisting in establishing, investigating and enforcing claims and defending against claims in proceedings before courts and other state authorities | until the expiry of the limitation period for claims relating to the performance of the contract |
fulfillment of legal obligations resulting from legal regulations, in particular tax and accounting regulations | name, surname, company, PESEL number, NIP or REGON number, e-mail address, telephone number, correspondence address, payment card number | Art. 6 sec. 1 lit. c) GDPR, i.e.. processing is necessary to fulfill the legal obligations incumbent on us, resulting from legal provisions, in particular tax and accounting regulations | until the expiry of the legal obligations incumbent on the Administrator, which justified the processing of personal data |
Providing the required personal data by you is voluntary, but it is a condition for us to provide services to you (e.g.. sending a newsletter or creating an account).
Aktualną listę podmiotów, którym ujawniamy Twoje dane osobowe możesz znaleźć tutaj.
In order to use Google's measurement and marketing tools, your personal data may be transferred to the United States, where Google LLC servers are located.
Google LLC is on the Privacy Shield List (link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active) and applies the Data Security Model Contractual Clauses approved by the European Commission
In order to use Facebook and Instagram tools, your personal data may be transferred to the United States, where Facebook Inc. servers are located.
Facebook Inc. is included in the list of entities participating in the Privacy Shield program (link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active), therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, pursuant to with Commission Implementing Decision (EU) 2016/1250 of 12 July 2016. on the adequacy of the protection provided by the EU-US Privacy Shield (link: https://eur-lex.europa.eu/legal-content/PL/TXT/HTML/?uri=CELEX:32016D1250&from=EN ).
In order to use Pinterest, your personal data may be transferred to the United States, where Facebook Inc. servers are located.
Pinterest Inc.. is included in the list of entities participating in the Privacy Shield program (link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active), therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, pursuant to with Commission Implementing Decision (EU) 2016/1250 of 12 July 2016. on the adequacy of the protection provided by the EU-US Privacy Shield (link: https://eur-lex.europa.eu/legal-content/PL/TXT/HTML/?uri=CELEX:32016D1250&from=EN).
In order to use Twitter tools, your personal data may be transferred to the United States, where Facebook Inc. servers are located.
Twitter Inc. is included in the list of entities participating in the Privacy Shield program (link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active), therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, pursuant to with Commission Implementing Decision (EU) 2016/1250 of 12 July 2016. on the adequacy of the protection provided by the EU-US Privacy Shield (link: https://eur-lex.europa.eu/legal-content/PL/TXT/HTML/?uri=CELEX:32016D1250&from=EN ).
In order to use the Linkedin tools, your personal data may be transferred to the United States, where Facebook Inc. servers are located.
Linkedin Corp. is included in the list of entities participating in the Privacy Shield program (link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active), therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, pursuant to with Commission Implementing Decision (EU) 2016/1250 of 12 July 2016. on the adequacy of the protection provided by the EU-US Privacy Shield (link: https://eur-lex.europa.eu/legal-content/PL/TXT/HTML/?uri=CELEX:32016D1250&from=EN ).
In order to use the Hotjar statistical tool, your personal data may be transferred to the United States. In accordance with the privacy policy of the indicated tool, Hotjar has taken appropriate safeguards so that your personal data remains protected and requires that external service providers and partners also have appropriate safeguards. More information in Hotjar's Privacy Policy at the following link: https://www.hotjar.com/legal/policies/privacy/.
HOW WE PROCESS YOUR PERSONAL DATA THAT WE RECEIVE FROM OTHER DATA ADMINISTRATORS (E.G.. FACEBOOK)
Our online store allows you to:
sharing the content of the store on your Instagram profile,
sharing the content of the store on your Pinterest account,
sharing the content of the store on your Twitter account,
sharing the content of the store on your LinkedIn account,
sharing the content of the store on your Facebook account,
logging in to your account in the store using your Instagram profile,
logging in to your account in the store using your Facebook profile,
logging in to your account in the store using your Linkedin profile,
logging in to the account in the store using your Google account.
In such cases, we receive your personal data not directly from you, but from websites that provide these functionalities, i.e. Facebook, Instagram, Pinterest, Twitter, Google, Linkedin. In order to give you full control over your data, we provide below information about the processing of your personal data by us.
Categories of Personal Data Relevant
We process the following categories of relevant personal data:
identification data (i.e.. personal data that you have published in your profile on Facebook, Instagram, Pinterest, Twitter, Linkedin, Google, first of all name, surname, nickname, e-mail address and image).
Source of personal data
Your personal data comes from the website:
Facebook, the administrator of which is Facebook Ireland Ltd.,
Instagram, the administrator of which is Facebook Ireland Ltd.,
the Twitter service whose administrator is Twitter International Company,
Pinterest website, the administrator of which is Pinterest Europe Ltd.,
Linkedin website, whose administrator is LinkedIn Ireland Ltd.
Purposes and legal grounds for the processing of personal data
Your personal data that we have obtained will be processed for the following purposes:
Objective | Personal data | Legal basis for processing | Data storage time |
sharing content on your Facebook profile | name, surname, image | Art. 6 sec. 1 lit. f) GDPR, i.e.. processing to implement the Administrator's legitimate interest, consisting in enabling you to distribute the content of the online store using the functionality of Facebook | until you object to the processing of personal data |
sharing content on your Instagram profile | nickname, image | Art. 6 sec. 1 lit. f) GDPR, i.e.. processing to implement the Administrator's legitimate interest, consisting in enabling you to distribute the content of the online store using the functionality of the Instagram website | until you object to the processing of personal data |
sharing content on your Pinterest account | nickname, image | Art. 6 sec. 1 lit. f) GDPR, i.e.. processing to implement the Administrator's legitimate interest, consisting in enabling you to distribute the content of the online store using the functionality of the Pinterest website | until you object to the processing of personal data |
sharing content on your Twitter profile | nickname, image | Art. 6 sec. 1 lit. f) GDPR, i.e.. processing in order to implement the legitimate interest of the Administrator, consisting in enabling you to distribute the content of the online store using the functionality of the Twitter website | until you object to the processing of personal data |
sharing content on your profile on LinkedIn | name, surname, image | Art. 6 sec. 1 lit. f) GDPR, i.e.. processing to implement the Administrator's legitimate interest, consisting in enabling you to distribute the content of the online store using the functionality of the LinkedIn website | until you object to the processing of personal data |
logging in to the account in the store using the profile on Facebook | name, surname, image | Art. 6 sec. 1 lit. f) GDPR, i.e.. processing to implement the Administrator's legitimate interest, consisting in enabling you to log in to your account in the online store using your Facebook profile | until the account in the store is deleted |
logging in to the account in the store using the profile on Linkedin | name, surname, image | Art. 6 sec. 1 lit. f) GDPR, i.e.. processing to implement the Administrator's legitimate interest, consisting in enabling you to log in to your account in the online store using your Facebook profile | until the account in the store is deleted |
logging in to the account in the store using the Instagram profile | name, surname, image | Art. 6 sec. 1 lit. f) GDPR, i.e.. processing to implement the Administrator's legitimate interest, consisting in enabling you to log in to your account in the online store using your Facebook profile | until the account in the store is deleted |
logging in to the account in the store using a Google Account | name, surname, image | Art. 6 sec. 1 lit. f) GDPR, i.e.. processing to implement the Administrator's legitimate interest, consisting in enabling you to log in to your account in the online store using your Facebook profile | until the account in the store is deleted |
Under the GDPR, you have the right to:
request access to your personal data,
request rectification of your personal data,
request the deletion of your personal data,
requests to limit the processing of personal data,
object to the processing of personal data,
requests to transfer personal data.
If you submit any of the above requests to us, without undue delay - or in any case within one month of receiving the request - we will provide you with information about the actions taken in connection with the request you made..
If necessary, we can extend the monthly period by another two months due to the complex nature of the request or the number of requests.
In any case, we will inform you within one month of receiving the request to extend the deadline and provide you with the reasons for the delay.
You have the right to obtain information as to whether we process your personal data. If we process your personal data, you have the right to:
access to personal data,
obtain information about the purposes of processing, categories of personal data processed, about the recipients or categories of recipients of these data, the planned period of storage of your data or the criteria for determining this period, about your rights under the GDPR and the right to lodge a complaint with the President of the Office for Personal Data Protection, about the source of this data, about automated decision making, including profiling, and about the security measures used in connection with the transfer of this data outside the European Union;
obtain a copy of your personal data.
If you want to request access to your personal data, please submit your request to: info@plantspirit.eu
If your personal data is incorrect, you have the right to request us to correct your personal data immediately. You also have the right to request that we supplement your personal data. If you want to request rectification or supplementation of your personal data, please submit your request to: info@plantspirit.eu
You have the right to request the deletion of your personal data when:
Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
you have withdrawn your specific consent to the extent that personal data was processed based on your consent;
Your personal data has been processed unlawfully;
you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent to which the processing of personal data is related to direct marketing;
you have objected to the processing of your personal data in connection with the processing necessary to perform a task carried out in the public interest or the processing necessary for purposes arising from legitimate interests pursued by us or a third party.
Despite the request to delete personal data, we may process your data further in order to establish, assert or defend claims about which you will be informed / informed.
If you want to request the deletion of your personal data, please submit your request to: info@plantspirit.eu
You have the right to request the restriction of the processing of your personal data when:
you question the correctness of your personal data - in this case, we will limit the processing of your personal data for a period allowing for the verification of the correctness of this data;
the processing of your data is unlawful, and instead of deleting your personal data, you will request the restriction of the processing of your personal data;
Your personal data are no longer needed for the purposes of processing, but they are needed to establish, assert or defend your claims;
you have objected to the processing of your personal data - until it is determined whether our legitimate interests override the grounds indicated in your objection.
If you want to restrict the processing of your personal data, please submit your request to the following address: info@plantspirit.eu
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
processing necessary to perform a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Administrator of personal data or a third party;
processing for the purposes of direct marketing.
If you want to object to the processing of your personal data, please submit your request to: info@plantspirit.eu
You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to send it to another personal data controller.
As a standard, we will provide you with your personal data in CSV format. If you prefer the data to be made available to you in a different format, indicate the preferred format in your request. Where possible, we will try to provide you with the data in the format you prefer.
You can also request that we send your personal data directly to another administrator (if it is technically possible).
If you want to request the transfer of your personal data, please submit your request to: info@plantspirit.eu
You can withdraw your consent to the processing of your personal data at any time. Withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out by us on the basis of your consent before its withdrawal.
If you want to withdraw your consent to the processing of your personal data, submit your request to the following address: info@plantspirit.eu
W przypadku, gdy chcesz cofnąć zgodę na przetwarzanie danych osobowych w celu świadczenia usługi "Newsletter" możesz z niego zrezygnować tutaj [link do strony unsuscribe].
If you believe that the processing of your personal data violates the provisions on the protection of personal data, you have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
In Poland, the supervisory body within the meaning of the GDPR is the President of the Personal Data Protection Office, who replaced GIODO on May 25, 2018.
Find out more here.
When browsing the websites of the Online Store, "cookies" are used, hereinafter referred to as Cookies, i.e. small text information that is saved on your end device in connection with the use of the Online Store. Their use is aimed at the correct operation of the Online Store websites.
These files allow you to identify the software used by you and adjust the Online Store individually to your needs.
Cookies usually contain the name of the domain they come from, their storage time on the device and the assigned value.
The cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to enter your devices through cookies.
We use two types of cookies:
Session cookies: they are stored on your device and remain there until the end of the browser session. The saved information is then permanently deleted from the memory of your device. The session cookies mechanism does not allow the collection of any personal data or any confidential information from your device.
Persistent cookies: they are stored on your device and remain there until they are deleted. Ending a browser session or turning off the device does not delete them from your device. The persistent cookies mechanism does not allow the collection of any personal data or any confidential information from your device.
We also use third party cookies for the following purposes:
configuration of the Online Store;
presentation of the Certificate of Conformity via the website solidregulamin.pl, the administrator of which is APM Poniatowska-Maj Kancelaria Prawna sp. k., with its seat in Gdańsk, the Privacy Policy is available at the following link: - http://solidnyregulamin.pl/polityka-prywatnosci/;
analyzing user activity, in order to match the content displayed to them to their profile, which allows improving the management of advertising campaigns through the DoubleClick analytical tools, the administrator of which is Google Inc. based in the US, Google's privacy policy is available at the following links: http: // www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/.
examining the opinion on the level of customer satisfaction with the purchase or covering the purchases with buyer protection by Trusted Shops, the administrator of which is Trusted Shops GmbH based in Cologne, the Privacy Policy is available at the following link: https://www.trustedshops.pl/dane-firmy -data protection/
popularizing the Online Store using social networking sites using the addthis.com tool, the administrator of which is AddThis Inc. based in the USA, the Privacy Policy is available at the following link: http://www.addthis.com/privacy.
facilitating communication via the website of the Online Store using the skype.com tool, whose administrator is Microsoft Corporation based in the USA, the Privacy Policy is available at the following link: - https://www.microsoft.com/pl-pl/privacystatement/ default.aspx.
in order to post opinions on products or to examine opinions on the level of customer satisfaction with the purchase carried out by Grupa Okazje Sp. z o. o. based in Łódź,
collecting information about the User's behavior using the Facebook Pixel tool, the administrator of which is Facebook Ireland Ltd. based in Ireland, the Facebook Privacy Policy is available at the following link: https://www.facebook.com/help/cookies/ ;
presenting and expressing opinions on the websites of the external website Ceneo.pl, the administrator of which is Ceneo.pl sp. z o. o. based in Poznań, Cookies policy available at the following link: http://info.ceneo.pl/polityka_plikow_cookies.
popularizing the Website via YouTube.com, the administrator of which is Google Ireland Ltd. based in Ireland, the Privacy Policy is available at the following link: https://policies.google.com/privacy?hl=pl&gl=pl.
popularizing the online store on Facebook, the administrator of which is Facebook Ireland Ltd. Facebook's privacy policy is available at the following link: https://pl-pl.facebook.com/privacy/explanation.
popularizing the online store on Instagram, the administrator of which is Facebook Ireland Ltd. Instagram's privacy policy is available at the following link: https://help.instagram.com/519522125107875.
popularizing the online store on Twitter, the administrator of which is Twitter International Company. Twitter's privacy policy is available at the following link: https://twitter.com/en/privacy
popularizing the online store on Linkedin, the administrator of which is Linkedin Corp. The LinkedIn privacy policy is available at the following link: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
creating statistics that help to understand how website users use websites, which allows improving their structure and content through Google Analytics analytical tools, the administrator of which is Google Ireland Ltd. based in Ireland, the Google Privacy Policy is available at the following link: https://policies.google.com/privacy?fg=1 ;
using the chat via the Tawk.to messenger, the administrator of which is Tawk.to Inc based in the USA. Tawk.to's privacy policy is available at the link: https://www.tawk.to/privacy-policy/ ;
determining the Customer's profile in order to display him tailored materials in advertising networks, using the Google Adwords online advertising tool, the administrator of which is Google Inc. based in the USA, the Google Privacy Policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/ ;
popularizing the Online Store using the nk.pl social network, administered by Grupa Onet SA. based in Kraków, the nk.pl Privacy Policy is available at the following link: https://polityka-prywatnosci.onet.pl/index.html
creating statistics and performance of content and, through Hotjar tools, the administrator of which is Hotjar Ltd, based in Malta, the Hotjar Privacy Policy is available at the following link: https://www.hotjar.com/legal/policies/privacy/ ;
creating statistics that help to understand how website users use websites, which allows improving their structure and content through PIWIK analytical tools, the administrator of which is PIWIK PRO sp. z o. o. with its seat in Wrocław, the PIWIK Privacy Policy is available at the following link: https://piwik.pro/privacy-policy/ ;
popularizing the online store on Pinterest, the administrator of which is Pinterest Europe Ltd. based in Ireland The Pinterest privacy policy is available at the following link: https://policy.pinterest.com/pl/privacy-policy.
To learn the rules of using Cookies, we recommend that you read the privacy policies of the above-mentioned companies.
Cookies can be used by advertising networks, in particular the Google network, to display advertisements tailored to your preferences. For this purpose, information about how you navigate on the web or when you use the website may be stored.
To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at https://www.google.com/ads/preferences/.
By using the web browser settings or by using the service configuration, you can change your Cookie settings at any time, specifying the conditions for their storage and access to your device via Cookies. You can change these settings so as to block the automatic handling of cookies in your web browser settings or inform about their every posting on your device.. Detailed information on the possibilities and methods of handling cookies is available in the settings of your software (web browser).