Privacy policy

With our customers in mind, we pay special attention to your privacy and your data. We would like you to feel comfortable while using our services.

For this reason we have presented the most important information on principles of processing your personal data and cookies used by our store. The aforesaid information has been prepared with special regard to the Resolution of the European Parliament and Council (EU) 2016/679 dated 27 April 2016 on protection of natural persons due to personal data processing and on free flow of such data, and repeal of the directive 95/46/CE (hereinafter called: GDPR).

YOUR PERSONAL DATA CONTROLLER

The controller of your personal data collected through the website zeegma.com is BrandLine Group sp. z o.o. [limited liability company] entered into the National Court Register under the number: 0000552768, NIP [taxpayer’s ID]: 7822579840, REGON [business ID]: 361233546, at ul. A. Kręglewskiego 1, 61-248 Poznań (hereinafter referred to as: Controller).

As your data Controller, we do our utmost to properly protect and process them:

data are processed legally, in a transparent way for the person who they apply to;
data are collected for specific and clearly defined purposes, and processed only in this way;
data are collected only to the extent required to achieve a specific goal;
processed data are subject to specific protection against disallowed and illegal processing and against damage or destruction.

To all matters related to personal data protection, please contact the Controller:

through a traditional letter sent to ul. A. Kręglewskiego 1, 61-248 Poznań,
by electronic means: [email protected]

SCOPE OF DATA COLLECTION

The Controller processes personal data required to render and develop its services and functionalities available on zeegma.com.
The scope of data collection is appropriate to the purpose of collection. It is in particular the following: first and last name, e-mail address, phone number, delivery address, in some cases also NIP, REGON, name and place of business.

PURPOSES AND LEGAL BASES FOR PROCESSING YOUR DATA

Personal data may be processed by the Controller for the following purposes:
to register the account and verify the customer’s identity – based on the acceptance of the Terms of Use (art. 6 para. 1 b) of GDPR);
to conclude and execute the electronic services agreement in accordance with the act dated 18 July 2002 on rendering electronic services, in particular through allowed use of the online store, browsing products, making purchases (by registered or unregistered customers) and lodging complaints (art. 6 para. 1 b) of GDPR);
to fulfill the Controller’s legal obligations related to accounting and taxes, as well as for archival purposes (art. 6 para.1 c) of GDPR);
to communicate with the customer in order to supply required information and build a positive and reliable relationship, which represents a legally justified interest of the Controller (art. 6 para. 1 f) of GDPR);
to provide marketing information by electronic means and/or through phone notifications, including the newsletter, as long as the customer has given its consent for receiving such notifications (art. 6 para. 1 a) of GDPR);
to collect and present reviews on the products, and to check customer satisfaction, which is a legally justified interest of the Controller (art. 6 para. 1 f) of GDPR);
for analytical and statistical purposes on the basis of the legally justified interest of the Controller, being verification of customers’ activity and their preferences for optimization of services and products and functionalities of the site (art. 6 para. 1 f) of GDPR);
to possibly establish, pursue claims or defend against them on the basis of a legally justified interest of the Controller through protecting its rights (art. 6 para. 1 f) of GDPR).
In any of the aforementioned cases, it is voluntary to enter data, yet required to conclude the agreement or use other functionalities of the site.

PERSONAL DATA PROCESSING PERIOD

Personal data will be processed as long as a specific person remains a registered customer in the online store, and when the account is deleted for the period of time required to remain compliant with law, to pursue or defend against potential claims, yet not longer than for 6 years after termination of the electronic services agreement.
When it comes to customers who do not register but make a purchase, personal data will be processed for the period of time required to remain compliant with law, pursue or defend against potential claims, yet not longer than for 6 years after termination of the electronic services agreement.
The data processed for the purposes of sending marketing information, and also providing the newsletter service, will be processed until withdrawal of the approval, with a stipulation that withdrawal of the aforesaid approval does not influence compliance of data processing made before withdrawal.
In any other cases, personal data will be processed as long as required for the purpose which they have been collected for, yet not longer than until you object to such a processing by the Controller.

INFORMATION ON PROCESSING

Depending on the purpose of processing, personal data may be disclosed:
to trusted entities cooperating with the Controller, including systems and IT solutions suppliers and operators,
online payment operators,
couriers and post offices,
law firms.
In principle the personal data processed by the Controller will not be disclosed out of the European Economic Area or to international organizations.

YOUR RIGHTS

Right to access your data

Pursuant to the art. 15 of GDPR, a registered customer always has the unlimited access to:

all its personal data handed to the controller, orders history, order complaint history, list of favorite products and its reviews
information on processing its personal data as specified in the Privacy Protection Policy and Terms of Use.

To receive information on its personal data processed by the Controller, a non-registered customer must contact the Controller:

through a traditional letter sent to ul. A. Kręglewskiego 1, 61-248 Poznań,
by electronic means: [email protected]

Right to rectify your data

The right to rectify data applies when the customer’s data are incorrect, especially because they have been wrongly collected or changed. This right also allows the customer to add missing data.

If registered, the customer may feel free to rectify its personal data in its Profile at any time.

To rectify their personal data processed by the Controller, non-registered customers need to contact the Controller:

through a traditional letter sent to ul. A. Kręglewskiego 1, 61-248 Poznań,
by electronic means: [email protected]

Right to delete your data

Pursuant to the art. 17 of GDPR, any customer may send a request directly to the Controller, at any time, to delete its personal data:

through a traditional letter sent to ul. A. Kręglewskiego 1, 61-248 Poznań,
by electronic means: [email protected]

The Controller may refuse to acknowledge the data deletion request if allowed by law, in particular when further processing is required to fulfill its legal obligation to process on the basis of EU law or domestic law, or in order to establish, pursue or defend against claims.

Pursuant to the Terms of Use, any customer may delete its account at any time. Deletion of the account is not tantamount to deletion of data, as referred to above. If the account is deleted, the Controller keeps on processing personal data for 6 years after termination of the electronic services agreement in order to fulfill its tax-related obligations (in accordance with the art. 74 of the accounting act) and to establish, pursue or defend against potential claims (as long as the user has made a purchase in our online store).

Right to limit processing

In order to exercise the right to limit data processing, the customer must send a petition to the Controller in the following way:

through a traditional letter sent to ul. A. Kręglewskiego 1, 61-248 Poznań,
by electronic means: [email protected]

In the petition, please enter the scope of data to be limited and justify your request. This right applies particularly when it is suspected that processed data are incorrect, processing is illegal or data have ceased to be indispensable to the Controller but for reasons dependent upon the User cannot be deleted.

Right to transfer your data

Any customer has a right to transfer its personal data to other controller. To do so, the former must request the latter to disclose data. The petition must be provided in the following way:

through a traditional letter sent to ul. A. Kręglewskiego 1, 61-248 Poznań,
by electronic means: [email protected]

In the petition, please specify if data are to be disclosed to the person who they apply to or other controller.

Right to object

The right to object to processing personal data applies to data processed on the basis of the legally justified interest of the controller, that is art. 6 para. 1 f) of GDPR. In order to exercise this right, the customer should contact the Controller by sending a petition in the following way:

through a traditional letter sent to ul. A. Kręglewskiego 1, 61-248 Poznań,
by electronic means: [email protected]

The Controller may refuse to acknowledge the petition if allowed by law, particularly when further processing is required to fulfill its legal obligation to process on the basis of EU law or domestic law or in order to establish, pursue or defend against claims.

Right to withdraw a consent

Any customer may feel free to withdraw a personal data processing consent, at any time, for the purposes of sending the marketing information. The aforesaid withdrawal may be performed by:

activating the link available in any newsletter message,
filing a petition to the e-mail address: [email protected] or through a traditional letter sent to A. Kręglewskiego 1, 61-248 Poznań.

The Controller explains that withdrawal of the consent will not influence compliance with the right to process made on the basis of this consent before withdrawal.

Right to lodge a complaint to the supervisory body

Any customer has a right to lodge a complaint to the Head of the Personal Data Protection Office if it decides that processing violates its right and freedoms, particularly the ones arising from GDPR;

AUTOMATED DECISION-MAKING PROCESS, INCLUDING PROFILING

The Controller adopts systems used for an automatic decision-making process, also through profiling, yet this will not trigger any legal effects towards our customers or otherwise substantially affect their situation.
Personal data profiling by the Controller is concerned with data processing (also in an automated way) by using them to assess some information, in particular to analyze or forecast personal preferences of our customers.
The information obtained as a result of the automated decision-making process, including profiling, will be used only in order to adapt our marketing actions to the purposes or preferences of customers.

COOKIES POLICY

WHAT ARE COOKIES?

Cookies is information recorded in the form of a text on the user’s final device, when the user accepts them or otherwise configures its web browser. The information recorded in cookies files may be read by the website which the user is currently on, and the access to files of other sites is impossible.

WHAT KIND OF COOKIES ARE USED?

In our systems, the following cookies are used:

systemic: required for proper operation of the website and to maintain the session when being logged in,
analytical and statistic: required for studying website traffic, learning our users’ preferences,
preference: for memorizing the website settings, and to set particular elements, design, font sizes, region of the connection,
marketing and advertising: allow adapting the advertisements to our customers’ preferences and conducting customized marketing campaigns,
third-party files used for the automated decision-making process, including profiling.

The website uses both first-party cookies (files which come directly from the website) and third-party cookies (files which come from other entities’ website).

STORAGE TIME AND LEGAL BASIS FOR PROCESSING

The cookies we use are processed on the following legal grounds:

systemic: depending on a specific type, these are permanent files or stored from 1 to 28 days,
analytical and statistical: depending on a specific type, they are stored from 1 day to 2 years,
preference: files stored 1 day after recording,
marketing and advertising: depending on a specific type, these are permanent files or stored from 1 day to 10 years,
third-party files used for the automated decision-making process, including profiling: depending on a specific type, these are session files, permanent files, or stored from 1 day to 10 years.

MANAGEMENT OF COOKIES, APPROVAL FOR USE

In principle most web browsers available on the market by default accept saving Cookies. The customer can specify terms of using cookies by setting its own web browser. This means that it can partly limit (e.g. temporarily) or completely prevent cookies from being saved on its device. If the latter is chosen, it may however affect some functions of the website.

The settings of the user’s web browser with regard to cookies are crucial from the point of view of the approval for using cookies by the platform – as per regulations such an approval may also be expressed through settings of the web browser.

Details on changing settings related to cookies and their own deletion in the most popular web browsers are available in the web browser help desk.