This privacy policy of the Online Store is for informational purposes, which means that it is not a source of obligation for you (it is not a contract or terms and conditions). The purpose of the Policy is to clearly present the rules of operation of the Online Store, as well as the rules of handling and processing personal data.
- DEFINITIONS
Administrator – the company Deeerhrn Sp. z o. o. based in Wrocław, ul. Mieszczańska 29/11, 50 -201 Wrocław entered in the Register of Entrepreneurs of the National Court Register, kept by the District Court in Wrocław, VIII Economic Division of the National Court Register, under KRS number: 0000992231; NIP: 8982282925; REGON: 523165199.
Personal data – information about a natural person identified or identifiable by one or more specific factors that determine physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, Internet ID and information collected through cookies and other similar technology.
Policy – this Privacy Policy.
RODO – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation).
Service – the Internet service/shop run by the Administrator at www.deerhorn.pl
User – any natural person visiting the Site or using one or more of the services or functionalities described in the Policy.
- PROCESSING OF PERSONAL DATA IN CONNECTION WITH THE USE OF THE SITE
- In connection with the User’s use of the Website, the Administrator collects data to the extent necessary to provide the particular services offered.
- We obtain your personal information when you place an order, sign up for our newsletter, add a comment or product review, or contact us.
- We take care of the security of your personal information, among other things. by constantly monitoring their security risks, implementing cyber security and data protection measures. If you have any questions about your personal information, please contact us by email at: [email protected]
- Deerhorn uses the following information in the course of its operations and provision of services: identification information – e.g. your name, contact information – e.g. mailing address, e-mail address, telephone number; e-mail address, telephone number, information about orders placed, data contained in correspondence addressed to us, data contained in a published comment; financial information – e.g. payment information – e.g. bank account number, payment status, invoices, information about the use of the selected payment provider; shipping and service information – e.g. shipment reference number, routing information, shipment location and status data, place of delivery, type of packaging, number of pieces, weight; information about you and your preferences – e.g., number of shipments, complaints, purchase history and related commercial activities, communications, survey information, purchase preferences; data of business entities – e.g., company name, tax ID number, contact person data; automatically generated information – e.g., IP address, unique device or user number, type of system and search engine, websites visited, clickstream information and device location.
III. PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA ON THE SITE
The personal data of all persons using the Website is processed by the Administrator for the following purposes:
– Order processing (Article 6(1)(b) RODO),
– Handling of correspondence (Article 6(1)(f) RODO),
– handling of comments (Article 6(1)(a) of the RODO),
– newsletter mailing (Article 6(1)(a) of the RODO),
– Performing tax and accounting obligations (Article 6(1)(c) of the DPA),
– To create an archive for the purpose of establishing and asserting claims or defending against claims, as well as for the purpose of identifying a returning customer (Article 6(1)(f) of the DPA).
ORDER HANDLING
When placing an order, it is necessary to provide the data necessary to complete the order. Depending on the type of order you place, the data catalog may be different. If it is necessary to issue a VAT invoice to a company, it is necessary to provide a VAT number and business address.
Provision of data is voluntary, but necessary to place an order.
Each order is saved in the database, which means that your personal data assigned to the order is also accompanied by information about the order, such as the products ordered, the selected payment method, the selected delivery method, the date of payment.
Data collected in connection with an order, is processed for the purpose of executing the contract concluded by placing the order (Art. 6(1)(b) RODO), issuing an invoice (Art. 6(1)(c) RODO in connection with the regulations governing the issuance of invoices), including the invoice in the accounting records and fulfilling other tax and accounting obligations (Art. 6(1)(c) RODO in connection with the provisions governing tax and accounting obligations) and for archival purposes for the possible need to defend, establish or assert claims, as well as to identify a returning customer, which is our legitimate interest (Art. 6(1)(f) RODO).
Order data will be processed for the time necessary for the execution of the order, and then until the expiration of the statute of limitations for claims under the contract. In addition, after the expiration of this period, the data may still be processed by us for archival purposes for the possible need to defend, establish or assert claims, as well as to identify the returning customer. Remember also that we are required to keep accounting records, which may contain your personal information, for the period required by law.
CORRESPONDENCE HANDLING
By contacting us you provide us with your personal information contained in the body of your correspondence, in particular your e-mail address and name. Provision of data is voluntary, but necessary to make contact.
Your data in this case is processed for the purpose of contacting you, and the basis for processing is Art. 6 paragraph. 1(f) RODO, i.e. our legitimate interest. The legal basis for post-contact processing is also our legitimate purpose of archiving correspondence for the purpose of ensuring that we can prove certain facts in the future (Article 6(1)(f) RODO).
The contents of the correspondence may be subject to archiving. You have the right to request the history of correspondence you have had with us (if it was subject to archiving), as well as to request its deletion, unless its archiving is justified by our legitimate interests, e.g. to defend against potential claims on your part.
COMMENTS
When adding a comment, you must provide at least your name, which will be assigned to the comment, and your email address. Providing this data is voluntary, but necessary to add a comment.
Data provided in connection with the addition of a comment will be processed for the purpose of publishing the comment on the site. The basis for processing is your consent (Article 6.1.a) resulting from submitting the form used to publish comments. You can withdraw your consent at any time by requesting that your comment be deleted.
Your comment will be publicly available on the site for the duration of its online availability, unless you request that the comment be removed beforehand.
NEWSLETTER
When signing up for our newsletter, it is necessary to provide us with your name and email address. Providing data is voluntary, but necessary to subscribe to the newsletter.
As part of the system we use for the newsletter, we create groups of recipients, and the assigned group of recipients will influence the content we will send you in the newsletter. We want you to receive the most relevant information possible within the newsletter.
The data provided to us by you in connection with signing up for the newsletter, is used for the purpose of sending you the newsletter, and the legal basis for its processing is your consent (Article 6(1)(a) RODO) given when signing up for the newsletter. Regarding the processing of information that does not come from you, but is collected automatically by our mailing system, we rely in this regard on our legitimate interest (Article 6(1)(f) RODO) to analyze the behavior of newsletter subscribers in order to optimize mailing activities.
You can unsubscribe from the newsletter at any time by clicking on the dedicated link included in each message sent as part of the newsletter or by simply contacting us. Despite your unsubscribing from the newsletter, your data will continue to be stored in our database for the purpose of identifying the returning subscriber and for the possible defense of claims related to the sending of the newsletter to you, in particular for the purpose of proving the fact that you gave your consent to receive the newsletter and when you withdrew it, which is our legitimate interest referred to in Art. 6 para. 1(f) RODO.
You can modify your information provided for receiving the newsletter at any time by clicking on the appropriate link visible in each message sent as part of the newsletter or by simply contacting us.
TAX AND ACCOUNTING OBLIGATIONS
If we issue an invoice to you, it becomes part of our accounting records, which will be kept for the period of time required by law. Your personal data is then processed for the purpose of fulfilling our tax and accounting obligations (Article 6(1)(c) of the RODO in conjunction with the provisions governing tax and accounting obligations).
ARCHIVE
As part of the description of the various purposes for processing personal data above, we have indicated the time limits for storing personal data. These deadlines are often related to our archiving of certain data for the purpose of ensuring that we can prove certain facts in the future, reconstruct the course of cooperation with the customer, exchanged correspondence, defense, establishment or assertion of claims. In this regard, we rely on our legitimate interest as referred to in Art. 6 para. 1(f) RODO
- TRANSFER OF PERSONAL DATA
In connection with the Administrator’s use of third parties, it is necessary to process personal data by the following entities:
- The hosting provider where we store our data on the server,
- provider of the mailing system where we store your data if you are a newsletter subscriber,
- provider of a sales software program in which we store your data to improve the customer service process and for archiving purposes,
- provider of an invoicing system that stores your data for invoicing purposes,
- other subcontractors, such as maintenance, legal services, who gain access to data if the scope of their activities requires such access.
Your personal data may also be transferred to the tax authorities to the extent necessary for the performance of tax-settlement and accounting duties, such as declarations, reports, statements and other accounting documents, and may be made available to entities, authorities or institutions authorized to access the data under the law, such as police services, courts, prosecutors.
As part of our operations, we are supported by tools that collect additional information related to the use of our service that is not personal in nature, including but not limited to. information about the operating system and web browser you use, the postings you browse, the time you spend on a particular page, transitions between subpages, the source from which you go to our store, the products you view, clicks on particular links, the age range you are in, your gender, your approximate location limited to your town, your interests determined by your online activity.
This information is collected and processed by third-party tools we use to improve our services and website, as well as to analyze the effectiveness of advertisements, protect against fraud and abuse, and personalize the content and ads displayed on each service.
In connection with the use of certain tools, it is necessary to transfer your personal data, as well as anonymous information about you, to third countries, and which store personal data on servers located in third countries, including the United States of America (USA). The providers of these tools guarantee an adequate level of personal data protection through the relevant compliance mechanisms provided by the RODO, in particular through the use of standard contractual clauses.
The storage of personal data on servers located in third countries takes place within the framework of the GetReposnde mailing system, the provider of which is GetResponse, a limited liability company based in Gdansk, ul. Arkońska 6/A3, 80-387 Gdańsk, KRS 0000187388, NIP 9581468984 – in the scope of your name, e-mail address, IP address and statistical information related to your reactions to messages sent by us,
GetResponse, as well as the entities they work with, ensure an adequate level of protection of personal data by applying the compliance mechanisms provided for by the RODO, in particular through the use of standard contractual clauses.
PROFILING
We use tools that allow for automated processing, including profiling, but these activities do not change your situation as a customer including the terms of the contract you may enter into with us. As part of the tracking mechanisms, we use information that does not allow you to be identified, and this is data such as:
information about the operating system and web browser you use, the postings you browse, the time you spend on the site, the transitions between sub-pages, the source from which you go to our store, the age range you are in, your gender, your approximate location limited to your town, your interests as determined by your online activities.
The information collected in this way is not tied to your personal information we have in our database. The information provided above is completely anonymous and does not identify you. This information is stored on the servers of the providers of the individual tools, and these servers can most often be located around the world.
We use these tools to target you with personalized advertising based on previous actions you have taken within our service or to suggest products that may interest you
- COOKIES
Deerhorn.co.uk intenet store uses cookies, i.e. text information stored on your terminal device (e.g. computer, tablet, smartphone), which can be read by our ICT system (our own cookies) or third-party ICT systems (third-party cookies). Cookies may record and store certain information, which can then be accessed by ICT systems for specific purposes.
Proprietary cookies are used to ensure the proper functioning of the various mechanisms on the store’s website, including remembering recently viewed products and products added to the shopping cart.
We use cookies on the basis of your consent, except when cookies are necessary for the proper provision of electronic services to you. Regarding your consent to cookies, we adopt the option that you give such consent through the settings of your Internet browser or additional software that supports the management of cookies. We assume that you agree to all cookies used by us that are not blocked by your browser or the additional software you use.
Disabling or restricting cookies may prevent you from using some of the features available on our site and cause difficulties in using the site.
Some of the cookies we use are deleted when the browser session ends, i.e. when the browser is closed (so-called session cookies). Other cookies are stored on your terminal device and allow us to recognize your browser the next time you visit the site (persistent cookies).
You can also delete previously saved cookies and other site and plug-in data at any time.
The following third-party cookies such as Google Analytics and Google AdWords operate within our store.
GOOGLE ANALYTICS
We use Google Analytics provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We carry out activities in this regard based on our legitimate interest in creating statistics and analyzing them in order to optimize our websites. Google Analytics automatically collects information about your use of our website. The information gathered in this way is usually transmitted to Google’s servers, which may be located around the world and stored there.
Google Analytics does not collect any data that would identify you. Accordingly, the data collected through Google Analytics is not personal to us. The information we have access to as part of Google Analytics is, in particular: information about the operating system and web browser you use, the sub-pages you view within our site, the time spent on our site and its sub-pages, transitions between sub-pages, the source from which you go to our store.
GOOGLE ADWORDS
We use features available within the Google AdWords system operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We carry out activities in this regard based on our legitimate interest in marketing our own products and services.
When you visit our website store, a Google remarketing cookie is automatically left on your device to collect information about your activity on our website. With the information gathered in this way, we are able to display ads to you within the Google network depending on your behavior on our site.
Google Ads, does not collect any data that would allow you to be identified.
- RIGHTS IN CONNECTION WITH THE PROCESSING OF PERSONAL DATA
Based on the provisions of the RODO, in particular Art. 16 – 21, you have the following rights related to the processing of your personal data :
– The right to access your data and receive a copy of it,
– The right to rectify (amend) your data,
– The right to erasure (if, in your opinion, there is no basis for us to process your data, you can request that we erase it),
– The right to restrict data processing (you can request that we restrict the processing of your data only to storing it or performing activities agreed with you, if in your opinion we have incorrect data or are processing it unduly),
– The right to object to processing (you have the right to object to processing on the basis of a legitimate interest; you should indicate the particular situation that you think justifies us stopping the processing covered by the objection; we will stop processing your data for these purposes unless we demonstrate that the grounds for our processing override your rights or that your data are necessary for us to establish, assert or defend claims),
– The right to data portability (you have the right to receive from us in a structured, commonly used machine-readable format the personal data you have provided to us on the basis of a contract or your consent; you can have us send this data directly to another entity),
– The right to withdraw consent to the processing of personal data, if you have previously given such consent,
– The right to lodge a complaint with a supervisory authority (if you find that we are processing your data unlawfully, you can file a complaint about it with the President of the Office for Personal Data Protection or any other competent supervisory authority).
The Administrator provides the possibility to contact him, on any matter related to the processing of your data, at the following email address: [email protected]
- PRIVACY POLICY CHANGES
The Administrator may change the Policy in the future. Each time it will then post a notice of such change on the Online Store website, and with each change the new version of the Policy will appear with a new date.
This version of the Policy is effective as of July 10, 2023.