PRIVACY POLICY

 

Your privacy is important to us. We collect and process your data only if it is necessary for us to successfully deliver the service we provide.

 

In accordance with GDPR, please find listed personal data processing rules used by the Administrator.

 

1. Who is Persona Data Administrator?

Personal Data Administrator is Atom Heart Healing by Emilia van Wijngaarden ,

 

Address: …Akacjowa 1, Huta Dłutowska, 95-081

 

 

You can contact me via e-mail: emilia.vw@outlook.com or phone: …+48 609 777 557….

​

 

1. Why do we collect your personal data? How long do we process it?

 

Your personal data can be processed for the purposes of:

 

1. Communicating with you, and answering any queries included in your contact form, email, or during online meetings conducted, etc.

The data will be processed based on legitimate Administrator’s interest, i.e. communicating with Website Users (art. 6 para.1 letter f GDPR). Your data will be processed up until receiving your official objection, or until business purpose is fulfilled. Providing the data is voluntary, however essential to communicate with you. The data can be also processed for the internal archiving purposes based on legitimate Administrator’s interest until receiving your official objection, or until business purpose is fulfilled (art. 6 para. 1 letter f GDPR).

 

1. Signing and fulfilling the contract (placing order).

2. Establishing, defending and vindicating claims.

3. Fulfilling Administrator’s obligatory legal duties (e.g. taxes and archiving)
   
   The data essential to signing and fulfilling the contract will be processed for the duration of contract fulfilment process, including fulfilling contractual entitlements, such as: warranty claims (art. 6 para. 1 letter b and f GDPR). Providing the data is voluntary, however essential to sign and fulfil the contract.

Additional data provided i. a. to optimise contract fulfilment will be processed up until receiving your official objection, or until business purpose is fulfilled, based on legitimate interest in the form of Client service (art. 6 para. 1 letter f GDPR).

After this period the data will be processed during the period of claims expiration, based on legitimate Administrator’s interest to defend against claims, and also establish and vindicate claims (art. 6 para. 1 letter f GDPR).

In case the data is vital for the Administrator to fulfil all legal obligations (e. g. issuing and retaining invoices) – data will be processed for this purpose no longer than 6 years (accounting documents archiving duties), unless law regulations require a longer period (art. 6 para. 1 letter c GDPR).

Data can also be archived for internal and statistic purposes up until receiving your official objection, or until business purpose is fulfilled, based on legitimate interest of the Administrator (art. 6 para. 1 letter f GDPR).

 

1. Sending marketing material (i. a. newsletter and other information on services, products, promotions, free content, etc.).

 
Data will be processed based on legitimate Administrator’s interest to conduct marketing of Administrator’s products and services (art. 6 para. 1 letter f GDPR). Your data will be processed up until receiving your official objection, or until business purpose is fulfilled – depending which happens earlier. Providing the data is voluntary, however essential to receive the newsletter.

Your consent is required to initiate commercial communication – in compliance with Article 10. of the Act on Providing Services by Electronic Means. Your consent can be withdrawn at any time by clicking the link in the email footnote, or by sending an email to the address mentioned above.

 

1. Administration and management of the website, social platform groups, (i. a.  Facebook, Instagram) in the case of processing the data on social platforms, including contacting you and sending you marketing content.

 

The data will only be processed, when you decide to press the like button; join certain group; choose observe option; or save your data on the platform managed by me by any other means (e.g. by submitting a new post or comment). The data will be processed for the period of the website/group functioning, or until you raise an objection to it by for example unclicking the like or observe buttons; deleting a comment or post; using any other means provided by the platform/website; or by contacting me directly.

 

Let me inform you that the rules related to the website/Fan Page/group are set by the Administrator, whereas social platform terms of use – where the website/Fan Page/group is based – are established by the entity managing those portals.

 

1. Recovering abandoned carts.

 

In case you do not finalize placing your order, you will receive a reminder about an order that is initiated, but not yet finalized. Data will be processed based on legitimate Administrator’s interest to serve potential clients. The data will be processed over the period required to fulfil business purposes, or raise an objection. 

 

 

1. Posting comments.

Data displayed on our website next to submitted comments is processed to administer and manage the website, and to communicate with you based on legitimate Administrator’s interest (art. 6 para. 1 letter f GDPR) over the period required to fulfil business purposes, or raise an objection.

 

1. Sensitive data collection.

Sensitive data is collected to perform the contract, and fulfil it correctly based on your conscious and voluntary consent (art. 9 para. 2 letter a GDPR) – until the business purpose is fulfilled or consent withdrawn Providing the data is voluntary, however essential to correct contract fulfilment.

 

 

1. To whom can your data be disclosed?

We disclose your personal data to other entities only when It is essential to fulfil the processing purposes described in point II.

 

If need be, your data can be disclosed to entities we cooperate with to fulfil the above mentioned purposes.  Hosting provider, IT provider/webpage admin, accounting and bookkeeping office, invoicing software provider, newsletter services provider, cloud provider, advertising agency, virtual assistant, subcontractors, lawyers, curriers or postmen, training platform, customer service platform, and other entities providing us with support in personal data processing.

 

In principle, the data will not be disclosed outside EOG. Should it need to be disclosed outside EOG, it will only happen with your consent; based on contractual clauses; or based on other protection means included in GDPR – i. a. after the information duty is fulfilled.

 

1. What rights are you entitled to?

With regard to GDPR you are entitled to:

• access your personal data.

• correct personal data,

• remove personal data,

• restrict the processing of personal data,

• object to processing of personal data,

• move personal data,

• withdraw your consent; withdrawing the consent does not impact the lawfulness of data processing performed before the consent was withdrawn.

If you believe that your personal data is being processed against the applicable law, you are entitled to file a complaint to President of the Personal Data Protection Office. In such case I urge you, however, to contact me beforehand to express your doubts.

 

 

 

 

1. Legal provisions applicable in the context of personal data

In the unregulated cases the correct Polish and European law provisions are applied, especially GDPR.

 

1. Cookies policy

 

Administrator uses following tools tracking user behaviour while browsing the Website:

1. Facebook Pixel – in order to manage commercial content  and conduct remarketing on Facebook;

2. Google Analytics – to analyse the Website statistics. Google Analytics uses own Cookies to analyse Website Users’ actions and behaviour. The text files store information, e.g. which website the user visited before entering current one. They help to improve the Website;

The Website does not collect any information automatically, apart from information contained in Cookies.

Cookies files are small pieces of data – most frequently text files -- stored on user's device, while browsing the Website. Cookies usually contain the name of the webpage they originate from; their storing time on the end device; and a unique serial number.

Cookies are used to match Website content to User preferences and to optimize overall Website use; create statistics that help understand how Users use the Website. This enables improving the Site’s structure and content.

You can make individual changes in Cookies settings. In many cases web browsers allow storing Cookies on user devices by default. Detailed information on options and means to modify cookies is available in software (web browser) settings.

Lack of consent to cookies may restrict access to some functionalities on the Website.

 

1. Social plugins

The Website uses plugins and other social IT tools distributed by portals as: Facebook (Meta) and Google. The rules about processing personal data are described directly on websites of social platform providers.

 

CO-ADMINISTRATION
The Administrator of the data processed by Facebook (Meta) platform for the sake of  statistics collection is Atom Heart Healing by Emilia van Wijngaarden, henceforth called Administrator, and Meta Platforms Ireland Limited, registered at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, henceforth called Co-administrator. The data is processed based on co-administration conducted by the above mentioned entities. Detailed data co-administration rules – including information on user rights – were described on the Website. Information on the Website statistics.

Administrator processes the data based on legitimate Administrator’s interest, involving conducting User activity and preferences analysis to improve applied functionalities and services provided. In relation to matters pertaining personal data both Administrator and Co-administrator can be contacted.