This document specifies the conditions for the processing of personal data (hereinafter also referred to as "data") and cookies in the area of ​​the csp-moto.com online store, run via the website, available at the URL: csp-moto.com, hereinafter referred to as The "shop".

TABLE OF CONTENTS

§1. HOW TO CONTACT THE DATA ADMINISTRATOR - 1

§2. ON WHAT BASIS WE PROCESS YOUR DATA - 1

§3. INFORMATION ON THE PROCESSING OF DATA FOR THE CONCLUSION AND PERFORMANCE OF CONTRACTS, POSSIBLE PURSUING CLAIMS AND DEFENSE AGAINST THEM - 1

§4. INFORMATION ON THE PROCESSING OF DATA FOR THE PURPOSE OF SENDING A NEWSLETTER - 2

§5. INFORMATION ON THE PROCESSING OF DATA FOR THE PURPOSE OF SENDING NOTIFICATIONS - 2

§6. INFORMATION ON DATA PROCESSING FOR DIRECT MARKETING - 2

§7. INFORMATION ON DATA PROCESSING FOR SECURITY - 2

§8. INFORMATION ON DATA RECIPIENTS - 3

§9. INFORMATION ON DATA TRANSFER TO THIRD COUNTRIES - 3

§10. ABSOLUTE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED - 3

§11. RELATIVE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED - 4

§12. COOKIES - INTRODUCTION - 5

§13. DATA ADMINISTRATOR COOKIES - 5

§14. THIRD PARTY COOKIES - 5

§15. CONSENT TO THE USE AND MANAGEMENT OF COOKIES - 6

§16. CURRENT MEMORY - 6

§17. LINKS TO OTHER WEBSITES OR SOFTWARE - 6

§18. CHANGES TO THE PRIVACY POLICY AND COOKIES - 6

§1. HOW TO CONTACT THE DATA ADMINISTRATOR

The administrator of personal data processed as part of the Store is Jakub Mrugalski, running a business under the name INVADER CNC Jakub Mrugalski, based in Luboń (62-030) at ul. Rivoliego 6, registered in the Central Register and Information on Economic Activity kept by the Minister of Development, under the NIP number 7773186393 and REGON number 387744031. The data administrator can be contacted by phone: +48 509 787 071 and using the e-mail address: kontakt @ csp-moto.com.

§2. ON WHAT BASIS WE PROCESS YOUR DATA

When collecting personal data, we always inform about the legal basis of their processing. It results from the provisions of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data on the free movement of such data and the repeal of Directive 95/46 / EC - General Data Protection Regulation). When we announce:

  • Article 6 point 1 lit. a) GDPR - this means that we process personal data on the basis of the consent received,
  • Article 6 point 1 lit. b) GDPR - this means that we process personal data because they are necessary to perform the contract or to take action before its conclusion, at the request received,
  • Article 6 point 1 lit. c) GDPR - this means that we process personal data in order to fulfill a legal obligation,
  • Article 6 point 1 lit. f) GDPR - this means that we process personal data in order to perform legitimate interests.

§3. INFORMATION ON THE PROCESSING OF DATA FOR THE CONCLUSION AND IMPLEMENTATION OF CONTRACTS, Possible CLAIMS AND DEFENSE AGAINST THEM

  1. We may process personal data necessary to perform the contract concluded with you. However, even before its conclusion, we may process personal data necessary to take action at your request. The processing of this data is based on Art. 6 point 1 lit. b) GDPR.
  2. During the performance of the contract and after its performance, we process the personal data of its party for the purpose of possible consideration of claims and their pursuit. Our legitimate interest is, for example, the possibility of responding to a possible complaint, to which we are obliged under separate provisions of civil law. In this case, we will process personal data based on the legitimate interest, which is the defense against possible claims or their pursuit. The processing of this data is based on Art. 6 point 1 lit. f) GDPR.
  3. We will store this data for the period necessary to achieve the designated purposes, no later than until the claims under separate legal provisions are time-barred.
  4. You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, and the right to lodge a complaint with the supervisory authority. In the event of data processing for the purpose set out in point 2, you also have the right to object to their processing.
  5. Providing this data is voluntary, but failure to provide this data will prevent the conclusion of the contract or its implementation.
  6. The recipients of this data are: our hosting provider, e-mail service provider, IT service provider, shipping service providers, provider of accounting services and software for handling invoices, provider of electronic and banking payment services, provider of advertised services, provider of legal and advisory services and debt collection services and other service providers that we use for a designated purpose.

§4. INFORMATION ON THE PROCESSING OF DATA FOR THE PURPOSE OF SENDING A NEWSLETTER

  1. We enable subscribing to the list of our newsletter recipients. If you have used this functionality, we process your personal data for the purpose of sending it. The newsletter may contain advertising, commercial or marketing content.
  2. The processing of this data is based on your consent and thus Art. 6 point 1 lit. a) GDPR.
  3. You have the right to withdraw your consent at any time. However, the withdrawal of consent does not affect the lawfulness of the earlier data processing.
  4. We will store your data until your consent is withdrawn. If you never revoke it, we will process your data until we stop sending the newsletter.
  5. You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, and the right to lodge a complaint with the supervisory authority.
  6. Providing this data is voluntary, but failure to provide this data will prevent sending the newsletter.
  7. Recipients of this data are: our hosting provider, IT service provider, e-mail service provider and newsletter sending service provider.

§5. INFORMATION ON THE PROCESSING OF DATA FOR THE PURPOSE OF SENDING NOTIFICATIONS

  1. We allow you to subscribe to the list of recipients of our notifications displayed via a web browser. If you have used this functionality, we process your personal data for the purpose of sending it. Notices may contain advertising, commercial or marketing content.
  2. The processing of this data is based on your consent and thus Art. 6 point 1 lit. a) GDPR.
  3. You have the right to withdraw your consent at any time. However, the withdrawal of consent does not affect the lawfulness of the earlier data processing.
  4. We will store your data until your consent is withdrawn. In the event that you never revoke it, we will process your data until we stop sending notifications.
  5. You can withdraw your consent to data processing in your web browser.
  6. You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, and the right to lodge a complaint with the supervisory authority.
  7. Providing this data is voluntary, but failure to provide this data will prevent sending notifications.
  8. Recipients of this data are our hosting provider, advertiser and notification provider.

§6. INFORMATION ON DATA PROCESSING FOR DIRECT MARKETING

  1. We may process your personal data for direct marketing purposes. This happens, for example, when we reply to your message by providing details of our offer.
  2. The processing of this data is based on Art. 6 point 1 lit. f) GDPR.
  3. We will keep your data for the time necessary for the purpose.
  4. You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, the right to object to data processing, and the right to lodge a complaint with the supervisory authority.
  5. Providing this data is voluntary, and failure to provide this data will prevent direct marketing activities.
  6. The recipients of this data are: our hosting provider, IT service provider, e-mail service provider, advertising service provider and messenger provider available on the Store's website.

§7. INFORMATION ON DATA PROCESSING TO ENSURE SECURITY

  1. From the moment you launch our website, in order to ensure the security of our services, we process data such as: • public - - device IP address, from which request came in,
    - browser type and language,
    - date and time of the request,
    - number of bytes sent by the server,
    - URL of the previously visited page, if the visit took place using this link,
    - information about errors that occurred while processing the query.
  2. Our legitimate interest in this processing is keeping logs of server events and securing the Store against potential hacking attacks and other abuses. Including the ability to determine the IP address of a person performing an unlawful activity in the Store, such as an attempt to break security, or publication of prohibited content, or attempted illegal activities with the use of our servers.
  3. The processing of this data is based on Art. 6 point 1 lit. f) GDPR.
  4. We will store this data for the period necessary to achieve the designated purposes, no later than until the claims under separate legal provisions are time-barred.
  5. You have the right to access your data, rectify it, delete it, limit processing, object to its processing, and the right to lodge a complaint with the supervisory authority.
  6. Providing this data is a condition for using the Store. Failure to provide this data will prevent the use of the Store.
  7. The recipient of this data is our hosting provider and IT service provider.

§8. INFORMATION ON DATA RECIPIENTS

When processing personal data, we use external services. Therefore, third parties may be recipients of your personal data. When collecting personal data, we always inform about these recipients, but due to the primacy of legibility of the message, we do it briefly. Therefore, we hereby explain that when we inform about individual categories of recipients, they are the following entities:

  • Provider of transport services / couriers: InPost SA, ul. Wielicka 28, 30-552 Kraków.
  • IT service provider: Intermedia Agencja Reklamowa, ul. S. Moniuszki 16/113, 65-409 Zielona Góra.
  • Hosting provider: MasterNET.pl Szczepanik Adrian, Oś. Piastów 56B / 36, 31-625 Kraków; Globtel Internet Szymon Hersztek, ul. Matecznikowa 2/1, 80-126 Gdańsk.
  • Provider of electronic mail services: Globtel Internet Szymon Hersztek, ul. Matecznikowa 2/1, 80-126 Gdańsk.
  • Messenger provider: Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, United States.
  • Advertising service provider.
  • Provider of accounting services: Biuro Rachunkowe Agnieszka Dopierała, ul. 3 Maja 9, 62-030 Luboń.
  • Invoice processing software supplier: Streamsoft sp. z o.o. sp. k., al. Wojska Polskiego 11, 65-077 Zielona Góra.
  • Provider of legal / advisory / debt collection services - these service providers are appointed individually, in the event of a specific need.
  • Provider of the newsletter sending service: FreshMail Sp. z o. o., Al. 29 November 155 c, 31-406 Krakow.
  • Banking service provider: Santander Consumer Bank SA, ul. Legnicka 48 B, 54-202 Wrocław.
  • Provider of electronic payment services: Krajowy Integrator Płatności SA, ul. Święty Marcin 73/6, 61-808 Poznań; PayPro SA, ul. Kanclerska 15A, 60-326 Poznań.

§9. INFORMATION ON TRANSMISSION OF DATA TO THIRD COUNTRIES

  1. Due to the fact that we use the services of other suppliers, your personal data may be transferred outside the European Economic Area, namely to the country: United States of America (USA).
  2. The European Commission has determined that some countries outside the European Economic Area (EEA) protect personal data adequately.
  3. Since the country to which we transfer personal data has not been recognized as a safe country, the transfer of data takes place on the basis of an agreement containing standard data protection clauses adopted by the European Commission.

§10. ABSOLUTE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED

When we write about the rights related to the processing of your personal data, we refer to the rights described below. The possibility of exercising the following rights is independent of the legal basis for the processing of personal data.

Right of access to data
You have the right to obtain confirmation from us as to whether we process personal data concerning you. If so, you have the right to access this data, as well as receive additional information about:

  • purposes of processing,
  • categories of data concerned,
  • recipients or categories of recipients to whom the data have been or will be disclosed, in particular about recipients in third countries or international organizations,
  • if possible, the planned period of data storage, and if this is not possible, about the criteria for determining this period,
  • the right to request us to rectify, delete or limit data processing, to object to such processing, as well as the right to lodge a complaint with the supervisory authority,
  • the data source if your data has not been collected from you,
  • automated decision making, including profiling and the rules for making them, as well as the significance and anticipated consequences of such processing for you.

Upon receipt of such request, we are required to provide a copy of the personal data undergoing processing. If such a request is received electronically and if we do not receive any other objection, we will also provide information electronically.

Right to rectify data
You have the right to request us to immediately rectify incorrect personal data concerning you. Taking into account the purposes of processing, you have the right to request that incomplete personal data be supplemented, including by providing an additional statement.

Right to erasure (to be forgotten)
You have the right to request us to erase your personal data immediately. We are then obliged to delete personal data without undue delay if one of the following circumstances applies:

  • you have withdrawn your consent to the processing of your personal data and we have no other basis for processing it,
  • you have lodged an effective objection to the processing of your data,
  • your personal data has been processed unlawfully,
  • Your personal data must be deleted in order to comply with a legal obligation,
  • Your data has been collected in relation to the offering of information society services.

Right to restriction of processing
You have the right to request processing restriction from us in the following cases:

  • when you question the correctness of the data - for a period allowing us to verify their correctness,
  • the processing is unlawful and you oppose the erasure of the data and request the restriction of their use instead,
  • we no longer need personal data for the purposes of processing, but you need them to establish, assert or defend claims,
  • you have objected to the processing of your data - until it is determined whether the legitimate grounds on our side override the grounds of your objection.

Automated decisions, including profiling
You have the right not to be subject to a decision which is based solely on automated processing, including profiling, and has legal or legal effects on you. similar way affects you significantly.

The law does not apply if this decision:

  • is necessary for the conclusion or performance of a contract between you and us,
  • is permitted by EU law or the law of the Republic of Poland and which provides for appropriate measures to protect your rights, freedoms and legitimate interests, or
  • is based on your explicit consent.

The right to lodge a complaint
You have the right to lodge a complaint regarding the processing of your personal data to the supervisory body: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, tel. 22 531 03 00, fax. 22 531 03 01, e-mail: kancelaria@uodo.gov.pl.

§11. RELATIVE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED

When we write about the rights related to the processing of your personal data, we refer to the rights described below. The possibility of using them depends each time on the legal basis for the processing of personal data.

The right to withdraw consent to processing
If we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time. Naturally, the withdrawal of the consent granted does not affect the lawfulness of the prior processing of personal data.

Right to data portability
You have the right to receive your personal data provided by you in a structured and commonly used machine-readable format. You also have the right to send this personal data to another administrator without any obstacles on our part, if the processing takes place:

  • by consent or contract, and
  • in an automated manner.

When exercising the right to data portability, you have the right to request that personal data be sent by us directly to another administrator, if technically possible. This right shall not adversely affect the rights and freedoms of others.

Right to object
If we process your personal data pursuant to Art. 6 point 1 lit. f) GDPR, you have the right to object to the processing of this data for reasons related to your particular situation.

Then we are no longer allowed to process this personal data, unless we can prove the existence:

  • valid, legitimate grounds for processing, where these grounds must override your interests, rights and freedoms, or
  • grounds for establishing, pursuing or defending claims.

Also, if you object to the processing of your personal data for direct marketing purposes, then we will not be able to process it for such purposes.

§12. COOKIES - INTRODUCTION

The Store's website uses cookies. These are commonly used, small files containing a string of characters that are sent and saved on the end device (e.g. computer, laptop, tablet, smartphone) used when visiting the Store. This information is sent to the memory of the browser used, which sends it back at the next visits to the website. We can categorize cookies in three ways.

In terms of the purposes of using cookies, we distinguish between three categories:

  • Necessary files - these files enable the proper operation of the website and its functionality, e.g. authentication or security cookies. Without saving them on your device, you will not be able to use the website.
  • Analytical files - these files allow you to monitor the opened websites, traffic sources, time spent on the website. Without saving them, the use of the website functionality will not be limited.
  • Advertising files - these files enable the display of personalized advertisements within the area of ​​the website or outside it. Without saving them, the use of the website functionality will not be limited.
  • session files - existing until the end of the session,
  • persistent files - existing after the end of the session.
  • our cookies,
  • third party cookies.

§13. DATA ADMINISTRATOR COOKIES

The cookies we administer allow you to:

  • access authentication,
  • keeping session after logging in,
  • securing the Store against hacker attacks,
  • "remembering" by the browser the contents of the fields completed in forms (optional),
  • "remembering" by the browser items added to the cart. Thanks to this, the use of the Store's functionality becomes easier and more enjoyable.

§14. THIRD PARTY COOKIES

The use of third party cookies is subject to the privacy and cookie policy applied by these entities. GOOGLE

We use cookies administered by Google Inc. 1600 Amphitheater Pkwy, Mountain View, CA 94043, United States as part of the services:

  • Google Analytics - analytical files used to study the behavior and traffic of users and to compile traffic statistics.

Collected by Google Inc are anonymous and collective. In particular, they do not contain identifying features (understood as personal data) of Store users. By using the above-mentioned services, we collect data such as the sources of acquiring users visiting the Store, as well as the manner of their behavior on the Store's website, information about the devices and browsers used by them, IP address, domain, demographic data (age, gender), interests and data. geographical. More information in this regard can be found here: https://policies.google.com/technologies/cookies?hl=pl

The use of third party cookies is conditioned by the privacy and cookie policy applied by these entities. The current rules of third parties in this regard can be found on the above-mentioned websites and here: https://www.e-regulapii.pl/biuletyn/polityki-prywatnosci-i-plikow-cookies/.

§15. CONSENT TO THE USE AND MANAGEMENT OF COOKIES

With the exception of essential cookies, their processing is based on the user's consent.

Consent to the processing of cookies is voluntary and may be withdrawn at any time. However, it should be remembered that the lack of consent to the use of certain cookies may limit the use of the Store and its functionality, and even prevent it from being used.

Consent to the processing of cookies may take place:

  • using the settings of the software installed on the telecommunications end device used by the user,
  • by using the button containing a declaration of consent to the processing of cookies or confirmation of reading its terms,
  • with the settings available in the website area.

§16. CRAFT MEMORY

When you use the Store's website, we may automatically use the cache installed on your device.

As part of the local memory, it is possible to store data between sessions, i.e. between subsequent visits to the Store's website. The purpose of using the cache is to accelerate the use of the Store by eliminating the situation in which the same data would be repeatedly downloaded from the Store, thus burdening the user's Internet connection. The cache can also store data such as login password.

§17. LINKS TO OTHER WEBSITES OR SOFTWARE

The Store may contain links to other websites or software. We are not responsible for the rules of compliance with the privacy policy and the processing of cookies on these websites or in this software. We recommend that you read the privacy and cookie policies of these websites or software after entering them or before installing them.

§18. CHANGES TO THE PRIVACY POLICY AND COOKIES

  1. The privacy and cookie policy shall enter into force on the date of publication on the Store's website.
  2. Changing the Privacy Policy and cookies is done by publishing its new content on the Store's website.
  3. We publish the information on the change of the Privacy and Cookie Policy in the area of ​​the Store's website no later than 3 days before the effective date of its new wording.