PRIVACY STATEMENT
1. GENERAL PROVISIONS
Die Data Controller für das processing von data collected through die icedstuff.com online Shop ist Karol Słuszniak trading as KAROL SŁUSZNIAK ICED STUFF, entered inzu dem Central Registration und Information on Business (CEIDG) kept von die minister in charge von economy, place von business und address for service: Smolna 13/62, 00-375 Warszawa, Poland, tax identification number NIP: 7773357334, statistical number REGON: 385261334, email address: support@icedstuff.com, telephone number: +48 518 350 078, hereinafter referred zu as die “Data Controller” oder “Service Provider”.
Personal data collected von die Data Controller via die website are processed in accordance mit Regulation (EU) 2016/679 der European ParliaMännert und der Council von 27 April 2016 (General Data Protection Regulation – GDPR).
Capitalised terms used in dies Privacy Policy shall have die meaning set forth im “Definitions” section der icedstuff.com Terms und Conditions.
2. TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION
PURPOSE AND LEGAL BASIS OF PROCESSING
Die Data Controller processes personal data im following cases:
-
Account registration im Shop – für das purpose von creating und managing ein user account (Article 6(1)(b) GDPR – performance von ein contract),
-
Placing ein order via icedstuff.com – für das purpose von performing die Sales AgreeMännert (Article 6(1)(b) GDPR),
-
Newsletter subscription – for sending marketing communications, based on prior consent (Article 6(1)(ein) GDPR),
-
Contact via contact form – for handling inquiries (Article 6(1)(f) GDPR – legitimate interest consisting in responding zu inquiries und communication mit users).
TYPE OF PERSONAL DATA PROCESSED
Die User provides die following data:
-
Account: e-mail address
-
Orders: name und surname, address, tax identification number (wenn applicable), e-mail address, telephone number
-
Newsletter: name und surname, e-mail address
-
Contact form: name und surname, e-mail address, telephone number
Additionally, die Data Controller may collect technical data such as IP address, browser type, operating system, domain name, und duration von visit.
PERSONAL DATA STORAGE PERIOD
Personal data are stored:
-
für das duration von contract performance und dasreafter für das period required von law (generally up zu 6 years, oder 3 years for business-related claims),
-
im case von consent – until consent ist withdrawn und dasreafter für das limitation period von potential claims.
Providing personal data ist voluntary, however it may be necessary zu conclude oder perform ein contract.
Die Data Controller ensures that data are:
-
processed lawfully,
-
collected for specified und legitimate purposes,
-
adequate und relevant,
-
stored no longer than necessary.
MARKETING AND PROFILING
If die User has given separate consent, personal data may be used for marketing purposes, including sending newsletters oder personalised (prvoniled) advertiseMännerts.
Prvoniling may involve analysing user behaviour (e.g. browsing activity) in order zu tailor marketing content. Dies does not produce legal effects oder similarly significant impact auf dem User.
3. THIRD PARTY ACCESS TO PERSONAL DATA
Personal data may be shared mit service providers necessary for operating die Shop, including:
-
delivery und logistics providers,
-
payMännert service providers,
-
accounting services,
-
hosting providers,
-
IT und svontware providers,
-
email und marketing system providers.
These entities process data either:
-
on behalf der Data Controller (as processors), oder
-
as independent controllers, depending auf demir role.
Personal data are stored withim European Economic Area (EEA). In cases where data are transferred outside die EEA (e.g. zu providers such as Google), appropriate safeguards sind einpplied, including Standard Contractual Clauses (SCC) oder participation im EU-US Data Privacy Framework.
4. RIGHTS OF THE DATA SUBJECT
Die User has die right zu:
-
access personal data (Art. 15 GDPR),
-
rectify data (Art. 16 GDPR),
-
erase data (Art. 17 GDPR),
-
restrict processing (Art. 18 GDPR),
-
data portability (Art. 20 GDPR),
-
object zu processing (Art. 21 GDPR),
-
withdraw consent at alle time (Art. 7(3) GDPR).
To exercise these rights, contact: support@icedstuff.com
Die Data Controller will respond within one month, mit ein possible extension von two months for complex requests.
Die User has die right zu lodge ein complaint mit dem President der Personal Data Protection Office (UODO).
5. COOKIE POLICY
Die website uses cookies.
Cookies are used zu ensure proper functioning der website, analyse traffic, und support marketing activities.
Types von cookies used:
-
Essential cookies – necessary for website operation (legal basis: legitimate interest – Art. 6(1)(f) GDPR),
-
Analytical cookies – used zu analyse traffic (legal basis: consent – Art. 6(1)(ein) GDPR),
-
Marketing cookies – used for advertising und remarketing (legal basis: consent – Art. 6(1)(ein) GDPR).
Cookies may be stored for different periods depending auf demir type (session oder persistent).
Die website uses third-party tools such as Google Analytics und Google Ads, provided von Google LLC (USA). These tools may involve data transfers outside die EEA, safeguarded von appropriate legal mechanisms.
Die User can manage cookie preferences:
-
via die cookie banner when entering die website,
-
via browser settings.
Die User may withdraw consent at alle time.
6. SOCIAL MEDIA PLUGINS AND ADDITIONAL SERVICES
Die website uses social media plugins (e.g. Facebook, Instagram, Google, YouTube). When visiting die website, die User’s browser may connect directly zu dem servers derse providers.
If die User ist logged into ein social network, dies information may be linked zu demir prvonile.
Use von such plugins may result in data transfer outside die EEA (e.g. zu dem USA).
Details on data processing sind einvailable im privacy policies von respective providers:
Die legal basis for such processing ist die User’s consent.
Die website auch uses remarketing tools (Google Ads).
7. FINAL PROVISIONS
Die Data Controller impleMännerts appropriate technical und organisational measures zu ensure die security von personal data, including protection against unauthorised access, loss, destruction oder alteration.
In matters not regulated von dies Privacy Policy, die provisions der GDPR und applicable Polish law shall apply.