Privacy Policy

Privacy Policy

1. General provisions

1.1 This Privacy Policy is addressed to Customers and others using the online store at hairmax.net.pl.
1.2. The policy determines the rules for the collection and processing of personal data received by the Administrator, both when a user registers an account on the site, and when buys something without opening an account, as well as in the case of a subscription to a newsletter.

2. Personal Data Administrator

The administrator of your personal data is Marzena Grzejda, the director of the company called VASARI Marzena Grzejda, registered at street T. Kościuszki 46, 42-122, Ostrowy nad Okszą, NIP: 5741909574, REGON: 241504768, email: info@hairmax.net.pl, tel. 22 266 77 55.

3. Legal basis for the processing of personal data

3.1. Your personal data is processed in accordance with the Regulations of the European Parliament and Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of their personal data and the free transfer of such data and the repeal of Directive 95/46 / EC. (hereinafter: RODO).
3.2. Legal basis for the processing of your personal data by the Administrator:
a) the need to fulfill the terms of the contracts you entered into with the Administrator, and to take action before concluding designated agreements upon your request (Article 6 paragraph 1 letter b) of RODO);
b) processing is necessary to fulfill the legal obligation of the Administrator (Article 6 paragraph 1 letter c) of RODO),
c) the consent of the person whose data is to be processed for marketing purposes, including the sending of commercial information, for example, through a newsletter (Article 6, paragraph 1, letter a) of RODO), The provision of your personal data based on the above points a) and b) is voluntary, but the refusal to provide information will prevent the use of the services of the Store, the Application and the Administrator in electronic form.
3.4. The user may at any time withdraw consent to the processing of personal data for one or several purposes.

4. Purpose and scope of personal data processing

4.1. The personal data you provide will be processed in order and to the extent necessary in connection with the conclusion and execution of the terms of the contract, as well as for the direct sale of the goods and services of the Administrator.
4.2. Under the terms of the contract, the Administrator will process the following personal data of the user: name, surname, address, email address, telephone number, tax identification number, company name, delivery address.
4.3. To send you information and commercial materials in the form of a newsletter, the Administrator will process your email address or phone number.
4.4. In case the Administrator plans further processing of personal data for purposes other than the original, he will inform the user about the new intention and provide any other relevant information on this account.

5. Transfer of personal data

5.1. Your personal data will be provided to the competent state authorities or third parties, if such an obligation arises from generally applicable law.
5.2. The Administrator provides the collected personal customer data to the selected carrier or intermediary performing the shipment of the goods purchased by the customer at the request of the Administrator.

6. Protection of personal data and its storage period

6.1. In accordance with the rules on security and data protection, the Administrator may not disclose information about the Customer, collected when making the latest purchases in the Store.
6.2. The administrator ensures the security of personal data through appropriate technical and organizational measures taken to prevent illegal data processing and accidental loss, destruction and damage. The Administrator takes all possible measures to ensure that personal data:
a) were properly collected and processed in accordance with the law,
b) were obtained and used only for specific purposes and were not subjected to further processing for other purposes,
c) in an adequate manner, in accordance with all the rules and not violating them,
d) accurate and relevant,
e) not stored longer than necessary,
f) processed based on user rights, including the right to prohibit data transmission
g) security
h) not transmitted over unprotected channels.
6.3. The process of collecting personal data is protected from access by third parties. Only persons authorized by the Administrator who have been trained in the field of personal data protection and who are obliged to keep this data secret can process personal information received from you.
6.4. Personal data collected for the purpose of concluding or fulfilling the terms of the contract by the Seller is stored for the period necessary to: (1) review any claims under the contract, (2) the after-sales service of the buyer (consideration of complaints), (3) compliance with the legal obligation imposed on the Seller (derived, for example, from accounting rules and tax rules). Personal data is processed for marketing purposes (for example, newsletters) and other cases until such consent is withdrawn by the user. Personal data used for the newsletter is transmitted in the absence of consent to their processing during the period of subscription to the newsletter. You can unsubscribe from the newsletter at any time by clicking on the deactivation link in the newsletter or by sending the corresponding request to the Administrator by email.
6.5. The data of people who have created an account in the online store is processed until the account is deleted from the portal.

7. Permissions

7.1. You have the right to request from the Administrator access to personal data, their correction, deletion or restriction in processing, the right to transfer data, as well as to object to this. You have the right to withdraw your prior consent to the processing of personal data at any time.
7.2. You have the right to receive from the Administrator the following information:
a) the purpose, scope and method of processing your personal data,
b) from which date your data is being processed,
c) the source of your data,
d) recipients or categories of recipients who are provided with data.
7.3. In addition, at your request, the Administrator will add, update and correct your personal data, as well as suspend (temporarily or permanently) their processing or delete if the data is incomplete, outdated, incorrect or collected in violation of the law, as well as in case of loss of relevance this data in connection with the original purpose.
7.4. In addition, in the case of the processing of your data by the administrator for the purpose of marketing mailing, you have the right to refuse to transfer your personal data for such purposes at any time, including creating a profile if it is necessary for marketing mailings. To exercise the rights specified in this paragraph, send the corresponding request to the email address to the Administrator. To exercise the rights specified in this paragraph, send the corresponding request to the email address to the Administrator.
7.5. You have the right to file a complaint with the supervisory authority, if you consider that the processing of personal data violates the provisions of RODO.

8. Data Change

If your personal data has changed, please update this information yourself in the user account, if it was created, or notify the Administrator by phone, letter to the company address or message to the Administrator email address.

9. Cookies

9.1. The administrator states that he uses cookies.
9.2. Cookies are information that is sent by the server and stored on your device (for example, on the hard disk of a computer or phone).
9.3. The data obtained through the use of cookies does not allow you to identify you, but allows the Administrator to determine whether the store was visited from this computer (which is not synonymous with information about who visited) and what the user was looking for (what interested him most in the store).
9.4. The Administrator uses internal cookies to:
a) ensure the proper functioning of the store and the application,
b) keep records of statistics,
c) improve the store in accordance with user preferences.
9.5. The administrator can place both permanent and temporary files on your device.
9.6. Temporary files are usually deleted when the browser is closed, but permanent files remain on the device after the browser is closed.
9.7. Temporary files are used to identify the user to log on to the system.
9.8. Permanent files provide certain functions not only during this session, but also during the entire period of their storage on the computer. Permanent files are necessary for: collecting information about the use of the store and the application, including data about the user’s visited sub-pages and any errors, checking the effectiveness of advertising, improving work by registering any errors, testing various design options, storing the User’s settings, demonstrating to Clients, that they entered the store or application.
9.9. The store uses Google Analytics, which collects cookies on your device to provide statistics on the amount of traffic in the store.
9.10. The administrator uses the services of Google AdWords, which use cookies on your device, to advertise the Store.
9.11. At any time, you can delete cookies left by the Store from your device in accordance with the instructions for your web browser.
9.12. You can block the access of cookies to your device by setting the browser accordingly, but in this case the Store may not work correctly.
9.13. The Administrator uses a server that automatically makes entries in the server logs to analyze system information about the device you use when entering the Store, that is, the type of device and browser you are using, the IP address of your computer, the date and time of entry, a text description of the event and his qualifications.
9.14. Only people authorized to administer the information system have access to the log files. Data files can be used to collect statistics on the frequency of visits to the store and to report on the occurrence of errors that make your identification impossible.

10. Final provisions

10.1. The administrator reserves the right to change the Policy at any time by posting updated information on hairmax.net.pl.
10.2. The policy in the new edition comes into force from the date of its publication at the address specified in clause 10.1.