INFORMATIVA SULLA PRIVACY

PRIVACY STATEMENT

 

 

1. GENERAL PROVISIONS

Il Data Controller per il processing di data collected through il icedstuff.com online Shop è Karol Słuszniak trading as KAROL SŁUSZNIAK ICED STUFF, entered inal Central Registration e Information on Business (CEIDG) kept da il minister in charge di economy, place di business e address for service: Smolna 13/62, 00-375 Warszawa, Poland, tax identification number NIP: 7773357334, statistical number REGON: 385261334, email address: support@icedstuff.com, telephone number: +48 518 350 078, hereinafter referred a as il “Data Controller” o “Service Provider”.

Personal data collected da il Data Controller via il website are processed in accordance con Regulation (EU) 2016/679 del European Parliauominit e del Council di 27 April 2016 (General Data Protection Regulation – GDPR).

Capitalised terms used in questo Privacy Policy shall have il meaning set forth nel “Definitions” section del icedstuff.com Terms e Conditions.

 

 

2. TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION

PURPOSE AND LEGAL BASIS OF PROCESSING

Il Data Controller processes personal data nel following cases:

  • Account registration nel Shop – per il purpose di creating e managing un user account (Article 6(1)(b) GDPR – performance di un contract),

  • Placing un order via icedstuff.com – per il purpose di performing il Sales Agreeuominit (Article 6(1)(b) GDPR),

  • Newsletter subscription – for sending marketing communications, based on prior consent (Article 6(1)(un) GDPR),

  • Contact via contact form – for handling inquiries (Article 6(1)(f) GDPR – legitimate interest consisting in responding a inquiries e communication con users).

TYPE OF PERSONAL DATA PROCESSED

Il User provides il following data:

  • Account: e-mail address

  • Orders: name e surname, address, tax identification number (se applicable), e-mail address, telephone number

  • Newsletter: name e surname, e-mail address

  • Contact form: name e surname, e-mail address, telephone number

Additionally, il Data Controller may collect technical data such as IP address, browser type, operating system, domain name, e duration di visit.

PERSONAL DATA STORAGE PERIOD

Personal data are stored:

  • per il duration di contract performance e ilreafter per il period required da law (generally up a 6 years, o 3 years for business-related claims),

  • nel case di consent – until consent è withdrawn e ilreafter per il limitation period di potential claims.

Providing personal data è voluntary, however it may be necessary a conclude o perform un contract.

Il Data Controller ensures that data are:

  • processed lawfully,

  • collected for specified e legitimate purposes,

  • adequate e relevant,

  • stored no longer than necessary.

MARKETING AND PROFILING

If il User has given separate consent, personal data may be used for marketing purposes, including sending newsletters o personalised (prdiiled) advertiseuominits.

Prdiiling may involve analysing user behaviour (e.g. browsing activity) in order a tailor marketing content. Questo does not produce legal effects o similarly significant impact sul User.

 

 

3. THIRD PARTY ACCESS TO PERSONAL DATA

Personal data may be shared con service providers necessary for operating il Shop, including:

  • delivery e logistics providers,

  • payuominit service providers,

  • accounting services,

  • hosting providers,

  • IT e sditware providers,

  • email e marketing system providers.

These entities process data either:

  • on behalf del Data Controller (as processors), o

  • as independent controllers, depending sulir role.

Personal data are stored withnel European Economic Area (EEA). In cases where data are transferred outside il EEA (e.g. a providers such as Google), appropriate safeguards sono unpplied, including Standard Contractual Clauses (SCC) o participation nel EU-US Data Privacy Framework.

 

 

4. RIGHTS OF THE DATA SUBJECT

Il User has il right a:

  • access personal data (Art. 15 GDPR),

  • rectify data (Art. 16 GDPR),

  • erase data (Art. 17 GDPR),

  • restrict processing (Art. 18 GDPR),

  • data portability (Art. 20 GDPR),

  • object a processing (Art. 21 GDPR),

  • withdraw consent at qualsiasi time (Art. 7(3) GDPR).

To exercise these rights, contact: support@icedstuff.com

Il Data Controller will respond within one month, con un possible extension di two months for complex requests.

Il User has il right a lodge un complaint con il President del Personal Data Protection Office (UODO).

 

 

5. COOKIE POLICY

Il website uses cookies.

Cookies are used a ensure proper functioning del website, analyse traffic, e support marketing activities.

Types di cookies used:

  • Essential cookies – necessary for website operation (legal basis: legitimate interest – Art. 6(1)(f) GDPR),

  • Analytical cookies – used a analyse traffic (legal basis: consent – Art. 6(1)(un) GDPR),

  • Marketing cookies – used for advertising e remarketing (legal basis: consent – Art. 6(1)(un) GDPR).

Cookies may be stored for different periods depending sulir type (session o persistent).

Il website uses third-party tools such as Google Analytics e Google Ads, provided da Google LLC (USA). These tools may involve data transfers outside il EEA, safeguarded da appropriate legal mechanisms.

Il User can manage cookie preferences:

  • via il cookie banner when entering il website,

  • via browser settings.

Il User may withdraw consent at qualsiasi time.

 

 

6. SOCIAL MEDIA PLUGINS AND ADDITIONAL SERVICES

Il website uses social media plugins (e.g. Facebook, Instagram, Google, YouTube). When visiting il website, il User’s browser may connect directly al servers delse providers.

If il User è logged into un social network, questo information may be linked alir prdiile.

Use di such plugins may result in data transfer outside il EEA (e.g. al USA).

Details on data processing sono unvailable nel privacy policies di respective providers:

Il legal basis for such processing è il User’s consent.

Il website anche uses remarketing tools (Google Ads).

 

 

7. FINAL PROVISIONS

Il Data Controller impleuominits appropriate technical e organisational measures a ensure il security di personal data, including protection against unauthorised access, loss, destruction o alteration.

In matters not regulated da questo Privacy Policy, il provisions del GDPR e applicable Polish law shall apply.