Privacy Policy
The administrator of the Website (www.snoop-shop.com) and the administrator of personal data is: SNOOP SHOP Waldemar Rakoczy with registered seat in Krakow, address: ul. Długa 55/1, 31-147 Kraków, NIP: 6791934600, REGON: 351204771 (hereinafter: „Administrator”).
In case of any doubts regarding the Privacy Policy, please contact us at: office@snoop-shop.com
§ 1. Defined terms
Website – any website operating in the domain www.snoop-shop.com
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC - General Data Protection Regulation (Journal of Laws UE.L 2016 No. 119, p. 1)
User – any natural person using the Website
§ 2. Processing of personal data
The Administrator processes the following personal data as part of individual services. In order to obtain information about individual services of the Administrator, we encourage you to read the Terms and conditions.
Contact
1. By using the contact form or by sending an e-mail to office@snoop-shop.com, the User provides his e-mail address, and may also provide other personal data.
2. Providing data by the User is voluntary, but necessary to contact the Administrator.
3. The data is processed in order to contact the User, on the basis of the consent granted by sending a message (Article 6 section 1 letter a of the GDPR), and then for an indefinite period in order to possibly need to show the course and content of the contact (Article 6 section 1 letter f of the GDPR).
User Account
1. In order to create an Account by the User, the User provides his e-mail address and Account name (login), and also creates a password.
2. Providing data is voluntary, but necessary to register and maintain a User Account.
3. The data is processed in order to set up and maintain a User Account, enable the tracking of the history of participation orders and the implementation of purchases (Article 6 section 1 letter b of the GDPR), settlement and possible complaint or claim proceedings (Article 6 section 1 letter c and f of the GDPR), as well as for archiving and statistical purposes (Article 6 section 1 letter f of the GDPR).
4. Data on the use of the User Account may be automatically processed in order to send personalized advertisements and content proposals to the User based on the User's previous choices. Automatic processing also helps the Administrator to adjust the functionalities of the Website and User Account to improve their use by Users. Personalized content is provided based on the User's consent (Article 6 section 1 letter a of the GDPR), other automation processes take place for purposes arising from the legitimate interests of the Administrator and to enable the best quality of services offered by the Administrator or via the Website (Article 6 section 1 letter b and f of the GDPR).
Newsletter
1. In order to subscribe to the Newsletter, the User provides his e-mail address.
2. Providing an e-mail address is voluntary, but necessary to use the Newsletter service.
3. The provided e-mail address is processed only for the purpose of sending the Newsletter to it, until the newsletter is canceled.
4. The basis for processing the e-mail address is the User's consent (Article 6 section 1 letter a of the GDPR), expressed by selecting the appropriate check box when entering the e-mail address.
Opinion
1. The Administrator may enable Users to post their opinions and comments on the Website. Posting an opinion or comment requires the User to indicate a nickname (which may be a first name or any other designation), which will be visible to other Users.
2. Providing a nickname is voluntary, but necessary to post an Opinion. Nick does not have to contain real personal data of the User.
3. The User may provide any data in the content of the Opinion, subject to compliance with the Terms and conditions and applicable law. If, in the opinion of the User, he provides personal data, they will be visible to other Users.
4. The nickname and the content of the Opinion will be displayed on the Website until this Opinion is removed.
5. The Administrator may use parts or all of the Opinions posted for marketing and promotional purposes, after anonymizing the Opinions.
6. The basis for processing the data contained in the nickname and the content of the Opinion is the User's consent (Article 6 section 1 letter a of the GDPR).
Order
1. When placing an Order via the Website, the User provides the data necessary to perform the order, in particular name, surname (company name), tax identification number (if applicable), billing address, delivery address, e-mail address, telephone number (if applicable). The data required for the execution of the Order are appropriately marked in the Order form.
2. The User may also voluntarily provide other data.
3. The data provided is processed for the purpose of executing the Order (concluding a sales contract and delivering the ordered goods or services) until the completion of the order.
4. The basis for the processing of data necessary to perform the Order is art. 6 section 1 letter b of the GDPR. In terms of the data referred to in section 2 above, the basis for their processing is the User's consent (Article 6 section 1 letter a of the GDPR).
5. Billing data related to transactions concluded with the User must be stored and archived by the Administrator for the period specified in the Accounting Act and other tax regulations for purposes related to accounting and tax settlements. The standard period of storage of such data is 5 years, unless the laws provide otherwise. The basis for the processing of these data is their necessity to fulfill the legal obligations incumbent on the Administrator (Article 6 section 1 letter c of the GDPR).
6. Users' data may also be processed by the Administrator in order to establish, investigate or defend against claims related to the sale or provision of services to Users (in particular, this applies to complaints and compensation claims). These data are processed until the complaint is examined or claims are pursued, but no longer than until the expiry of the period of limitation or expiry of claims related to the legal relations between the User and the Administrator (in particular contracts), and an additional six months from the end of these periods - in connection with the possibility of make a claim at the last minute. The basis for the processing of this data is the legitimate interest of the Administrator, consisting in the possibility of establishing, investigating or defending against claims (Article 6 section 1 letter f of the GDPR).
7. After placing the Order, until the expiry of the limitation period for claims, the User may not request rectification, deletion or cessation of processing data regarding the Order. In the case of invoices, the User may not request the deletion or cessation of data processing until the end of the statutory period. After the expiry of the invoice storage period and the limitation period for claims, the User may request the deletion of data or the cessation of data processing for statistical purposes.
Marketing and promotional campaigns
1. In order to take part in any capmaign organised by the Administrator, the User provides the data indicated each time in the regulations of a given action.
2. Providing the data is voluntary, but necessary to participate in the campaign. Data processing takes place for the purposes each time justified by the type and conditions of the campaign, in particular on the basis of the User's consent (Article 6 section 1 letter f of the GDPR) for the purposes of implementing and settling any contracts and for archiving and evidence purposes (Article 6 section 1 letter b, c and f of the GDPR).
§ 3. User's rights in connection with data processing
1. The User, subject to the preceding provisions and legal regulations, has the following rights in connection with the processing of his data:
a. right to express and withdraw consent to data processing,
b. right to rectify or delete data,
c. the right to limit data processing,
d. the right to object to the processing of data,
e. the right to data portability
f. the right to access the processed data (information about the processed data),
g. the right to lodge a complaint with the President of the Personal Data Protection Office.
2. In order to exercise the right referred to in section 1 letter g above, the User may send a complaint by letter to the address: ul. Stawki 2, 00-193 Warszawa or electronically via the ePUAP inbox: /UODO/SkrytkaESP.
§ 4. Cookies and similar tools
1. The Administrator uses cookies on the Website to ensure the proper operation of the Website, the User Account and the services offered, and to send the User content personalised in terms of actions taken by the User on the Website, in particular to better match the proposed goods and services to the User's preferences.
2. The Administrator also uses third party cookies (in particular Google, Facebook) to monitor the browsing of the Website by Users and to target personalised advertisements in terms of the User's actions.
3. Information collected using cookies is anonymous, in the sense that the Administrator will not identify a specific User with their help. However, third parties may use the collected data for their own purposes, in particular marketing.
4. Cookies are not used by the Administrator to obtain Users' personal data.
5. The user can manage cookies from the level of his browser, as well as completely block them. However, limiting or blocking cookies may result in incorrect operation of the Website or incomplete use of its functionality.
6. The Website may contain links to other websites, including social networks (Facebook, Instagram, Twitter, YouTube, etc.). If the User is logged in to a given social network, the website will receive information about the User's activity. Data processing by external websites and services takes place on the terms specified by them.
7. Using the Website involves saving information in the so-called server logs. The logs include the User's IP address, date, time in a given time zone and information about the web browser and the User's operating system.
8. The data saved in the logs are not assigned to a specific User and are not used by the Administrator to identify the User. Logs can be used to create statistics of visits to the Website.
9. Only persons authorised to administer the server have access to the logs.
§ 5. Data recipients
1. Data is processed only by authorized and properly trained persons. The Administrator exercises due diligence to ensure the confidentiality of data and protection of data against unauthorised access.
2. The data may be transferred to third parties (entities whose services are used by the Administrator in the provision of services and data processing). These are, in particular, entities that are administrators of the website and mailbox servers on which data are stored, entities handling electronic payments (PayPal, PayU), entities providing technical support related to the operation of the Website and online store, Administrator's employees, shipping companies, marketing agencies, as well as courts and authorised state bodies.
3. Data may be transferred outside of Poland and the European Union - if the registered office of the entity providing services to the Administrator is abroad. In particular, it applies to services provided by Google (e-mail server, Google Ads, Google Analytics).