Privacy Policy

Thank you for taking interest in our e-store. The protection of your privacy is of great importance to us. This privacy policy sets forth detailed information on the processing of your personal data.

1. Data controller and contact information

Your personal data controller is “Nagaz Stefanowski” Spółka Komandytowa in Łódź, 47 Al. 1 Maja, 90-740 Łódź, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Łódź-Śródmieście in Łódź (Poland), 20th National Court Register Commercial Division, at number KRS 1077818, NIP PL (Taxpayer Identification Number) 729-18-81-261, REGON (National Business Registry Number) 471424198.

You can contact us by writing to the above-mentioned address of our company or our email address shop@nagaz24.com, or by calling our telephone number +48 42 638-05-09 or +48 42 638-05-08.

2. Purpose and lawfulness of personal data processing

We only collect personal data you provide voluntarily when creating your customer account, placing your order, or contacting us (e.g. by email). Form fields for compulsory completion are identified as such, because information disclosed therein is necessary for us to deliver your contract or create your customer account. Without it, we can't effect your order or create your customer account. What information is collected is conditional upon forms on which it is recorded.

Data you provide will only be processed for the following purposes:

  • maintaining a customer account in the e-store – if you create any, in which case processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract (legal basis: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, OJ L 119, p. 1)(hereinafter 'GDPR'), Art. 6 Sec. 1 L.b);
  • entering into and delivering a contract for sale of products on offer in our e-store – if you purchase any, in which case processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract (legal basis: GDPR, Art. 6 Sec. 1 L.b);
  • discharging the data controller's legal obligations, specifically the obligation to store issued VAT invoices for the prescribed period (legal basis: GDPR, Art. 6 Sec. 1 L.c; Accounting Act of 29 September 1994, Art. 74 Sec. 2 Pt. 4 (Journal of Laws No. 121 1994, Heading 591), in which case processing is necessary for compliance with a legal obligation to which the controller is subject;
  • possibly dealing with, bringing or defending against claims, investigating complaints and grievances (legal basis: GDPR, Art. 6 Sec. 1 L.f – the legitimate interests pursued by the controller, consisting in the aforesaid actions);
  • sending current information on available products and promotions – if you have given your consent (legal basis: GDPR, Art. 6 Sec. 1 L.a – your consent to the processing);
  • opinion polling on purchase satisfaction – if you have given your consent ((legal basis: GDPR, Art. 6 Sec. 1 L.a – your consent to the processing);
  • the legitimate interests pursued by the controller, consisting in the proper display of our website, creating our website traffic statistics, and understanding how the website is used by its users (which allows us to improve its layout and content) – by using cookies and other web analytics tools (legal basis: GDPR, Art. 6 Sec. 1 L.f – the legitimate interests pursued by the controller).

If your data are processed based on your consent, you are free to withdraw your consent in any form at any time, such withdrawal not affecting the lawfulness of processing based on consent before its withdrawal.

3. Duration of data processing

We use data you provide mainly to render services to you and deliver a contract – only for the duration of such services and the term of a contract. Upon delivery of a contract (or termination or expiration thereof) and completion of services, the processing of your data will be restricted only to serve the following purposes:

  • compliance with the legal obligations to which the controller is subject, including the obligation to store accounting documents for a period of 5 years as of the beginning of the year following the financial year in which operations, transactions or procedures were finally closed, repaid, squared, or fell under the statute of limitations; or
  • possibly dealing with, bringing or defending against claims, investigating complaints and grievances, until these fall under the statute of limitations.

Your customer account can be deleted at any time. To do so, you should send a message to our contact address as indicated in the section 'Data controller and contact information' or use the applicable function on your customer account.

If your data are processed based on your consent, we can only process them until you withdraw it, whereupon your data may only be processed to a limited extent with the sole purpose of proving the lawfulness and adequacy of our processing thereof for the duration of the validity of your consent (i.e. for the purposes of ascertaining, bringing or defending against claims).

If your data are processed based on the legitimate interests pursued by the controller, we shall desist from processing them in case you have objected to the processing.

4. Data recipients, data transfers to third countries or international organizations, no automated decision-making

The controller may transfer your data to its authorized employees, external IT, hosting, newsletter, courier, postal, accounting, online payment, opinion and experience exchange platform or other e-store support service providers, or public administration authorities.

In order to perform a contract, we transfer your data to a courier or postal delivery company if that is necessary to have your ordered products delivered.

If, placing an order, you choose the method of payment through an online payment service provider, we make your payment information collected for this purpose available to your chosen online payment service provider. Some payment service providers collect such data independently if you create an account on their site. In such cases, when placing an order, you should log onto a payment service provider's site by entering your logging credentials. Both in case an online payment service provider receives your data from us as well as in case you create an account directly on such a provider's site, that provider is the controller of your personal data processed thereby for the purpose of its services, subject to that particular online payment service provider's privacy policy and rules.

We shall not transfer your data to any third country or international organization (with the proviso referenced in section 8 herein).

We shall desist from decision-making based only on automated processing, profiling included.

5. Access data and hosting

Our websites can be accessed without creating an account and providing personal data. Every time our website is called, the server automatically records only so called server logs, e.g. a requested file name, your IP address, date and time of request, amount of data transferred and inquiring Internet service provider (access data), as well as website access request.

Such data are analyzed with the sole aim of assuring the correct operation of the website and improving our offer. The foregoing serves the purpose of the proper presentation of our offer only. The above-mentioned access data are deleted within one year upon termination of your visit to the site.

Hosting services provided by an external service provider

An external service provider of our choice, entrusted with processing your personal data, renders website presentation and hosting services to us. All data, collected in the process of using our website or on our e-store forms, intended specially for this purpose, as described herein, are stored on that service provider's servers. Processing on other servers takes place only to an extent as stipulated herein. The referenced service provider is based inside the territory of a European Union or European Economic Area Member State.

6. Newsletter

We can send current information about products on offer by email once you have subscribed to our newsletter.

You are free to withdraw your consent for receiving our newsletter by sending us a relevant notification or using the relevant link in the newsletter. When you sign off, your email address will be removed unless you explicitly consent to us making further use of your data for other purposes, or unless such data can be processed on any other legal basis. The newsletter is sent as part of the service(s) rendered by our external service provider, entrusted with processing your data and given your email address for this purpose.

The referenced service provider is based inside the territory of a European Union or European Economic Area Member State.

7. Your rights as the data subject

You have the right of freedom of information regarding your personal data we store, as well as the right to access contents of your data, including receiving a copy thereof, and to demand that your personal data be rectified, processed to a limited extent, erased, or transferred.

In case of any inquiries about the processing of your personal data or exercising your rights as the data subject, including the right to demand that your data be rectified or erased, to withdraw any of your consents given, or to object to the use of your specific data, please contact your data controller.

Furthermore, you have the right to lodge a complaint with the Inspector General for the Protection of Personal Data, and to file an objection to the processing of your data with your data controller.

If we process your personal data for the purposes of our legitimate interests as described herein, you can object to the processing of your data for such purposes, effective ex nunc.

Once you have exercised your right to object, we shall no longer process your personal data unless we demonstrate the existence of important, legally legitimate grounds for processing, overriding your rights and interests, or unless the processing of your data serves the purpose of ascertaining, asserting or defending claims.

8. No obligation to provide data

The provision of your data identified as mandatory on the website is not a statutory requirement, but a prerequisite for our provision of services for you (maintaining an e-store customer account, delivering the newsletter) or for a contract to be entered into and performed; failure to provide such data will make it impossible for you to use our services or enter into a contract and have the same delivered. The provision of any other data is optional.

 

Report an error

 

⚠ Report an error Talk to us!  
 
Chat with a Nagaz24 advisor
Loading...
 
Cookie settings