GENERAL PROVISIONS

These provisions of the Privacy Policy concern the establishment of the principles of personal data processing, in particular the collection, storage and use of personal data of users of the website http://balansis.pl, hereinafter referred to as “Users”. The Privacy Policy covers data provided directly by the User.

The administrator of personal data is BALANSIS COSMETICS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Warsaw (address: ul. Mickiewicza 37/58), REGON:520162088, NIP: 7792531313, entered into the Register of Entrepreneurs of the National Court Register under the KRS number: 0000926124hereinafter referred to as the “Administrator”.

In case of questions regarding the processing of personal data and the rights granted in this respect, the user can contact us by e-mail at the following address: balance@balansis.pl

The Administrator complies with the principles set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as “GDPR”, appropriately protects the personal data of Users against unlawful access to personal data by third parties, in particular encrypts personal data, archives personal data, assesses the means of securing personal data, ensures confidentiality, integrity, availability and resilience of processing systems and services.

User’s personal data: (name, surname, address, e-mail address, telephone number) will be processed solely for the purpose of enabling the use of the functionality of the website http://balansis.pl including the online store and for the purpose of determining, pursuing or defending against claims, for analytical, archival and accounting purposes, as well as for the purpose of offering products and services directly to Users by the Administrator (direct marketing). Data for these purposes will be processed on the basis of art. 6 sec. 1 letters b), c) and f) of the GDPR, and therefore when: processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject before concluding a contract; processing is necessary to fulfill a legal obligation incumbent on the administrator; processing is necessary for the purposes of legitimate interests pursued by the administrator or by a third party, except for situations in which the interests or fundamental rights and freedoms of the data subject, requiring protection of personal data, override those interests.

Personal data will be transferred to payment operators: DotPay and ING Bank Śląski S.A. (“Bank”) in connection with: the provision by the Bank of the service of providing the Internet payment infrastructure to the Online Store, the handling and settlement by the Bank of payments made by customers of the Online Store via the Internet using payment instruments, and for the Bank to verify the proper performance of agreements concluded with the Online Store, in particular to ensure the protection of payers’ interests in connection with complaints submitted by them. Personal data will also be transferred to the DPD courier company.

The processing of Users’ personal data for the purpose of marketing products or services of business partners BALANSIS COSMETICS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ  will only take place after the User has expressed consent pursuant to art. 6 sec. 1 letter a) of the GDPR.

The User has the right to:

• access their data and receive a copy thereof;
• correct (amend) their data;
• delete data – if in the User’s opinion there is no basis for us to process their data;
• limit data processing – if in the User’s opinion we have incorrect data about them or we process them without justification; or the User does not want us to delete them because they need them to establish, pursue or defend claims; or for the duration of the User’s objection to data processing;
• to object to data processing for the purpose of conducting direct marketing and the right to object to data processing based on a legitimate interest for purposes other than direct marketing, as well as when processing is necessary for us to perform a task carried out in the public interest or to exercise public authority entrusted to us;
• to transfer data – the User has the right to receive from the Administrator in a structured, commonly used machine-readable format their personal data, which they have provided to the Administrator on the basis of a contract or consent, the user may also commission the Administrator to send this data directly to another entity;
• to file a complaint with the supervisory authority – if the User believes that we are processing their data unlawfully, they may file a complaint in this matter with the President of the Personal Data Protection Office or another competent supervisory authority;
• the right to withdraw consent to the processing of personal data – at any time the user has the right to withdraw consent to the processing of such personal data that the Administrator processes based on their consent; withdrawal of consent will not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal.

The User provides all data voluntarily and consciously, however, failure to provide basic data necessary for the identification of the User prevents the provision of services in the form of the sale of products and any other activities that are the basis for the functioning of the Website http://balansis.pl.

The following categories of entities may have access to the User’s personal data:

• authorized employees and associates of the Administrator;
• service providers supplying the Administrator with technical and organizational solutions that enable the performance of the contract for the provision of the functionalities of the Service and the management of the Administrator’s organization (in particular courier and postal companies, entities providing IT and marketing services, legal and advisory service providers and their authorized employees and associates);

The Administrator will not transfer or allow the transfer of personal data provided by the User outside the territory of the EEA, unless it takes the necessary measures to ensure that the transfer is in accordance with the GDPR. The measures in question may include, in particular, the transfer of personal data to a recipient in a country that, in accordance with the decision of the European Commission, ensures adequate protection of personal data or to a recipient in the United States that has certified compliance with the EU-US Privacy Shield program.

The Administrator also uses Google Analytics, HotJar and an interactive agency, which examines, among other things, how Users use the Service and how they reached it.

Users’ personal data will be processed no longer than necessary, i.e. for the period of having an account on the https:www.phlov.com service or signing up for the newsletter, and after deleting or unsubscribing from the newsletter until the expiry of the limitation period for any claims that the Administrator may raise and which may be raised against the Administrator. Therefore, we will not process data longer than 6 years from the deletion of the account. Personal data processed for the purposes covered by the declaration of consent will be processed for these purposes until the consent is withdrawn, and after its withdrawal until the expiry of the limitation period for any claims that the Administrator may raise and which may be raised against the Administrator.

The User has the right to lodge a complaint with the supervisory authority dealing with personal data protection – the President of the Office for Personal Data Protection.

PROVIDING PERSONAL DATA

Users using the Administrator’s services, products and services may in some cases be asked to leave some of their personal data. We only require the data that is necessary for the proper functioning of the service and the execution of orders. Failure to provide the required data will block the possibility of carrying out the activity to which the data pertained.

NEWSLETTER SUBSCRIPTIONS

Subscription to the electronic newsletter on the http://balansis.pl service requires providing your e-mail address and consent to sending commercial information electronically. E-mail addresses obtained in this way are added to the Service’s mailing list. The e-mail address is necessary to send the newsletter to the user.

ORDERING SERVICES AND PRODUCTS

Ordering services and products offered by the http://balansis.pl Service requires providing more complete address data in the appropriate form. Required fields are marked.

NEWS

The Service reserves the right to send commercial information to persons whose contact details it has and who have agreed to receive it.

By commercial information we mean information directly related to our service (e.g. changes, internal promotions), non-commercial lists and commercial information, the distribution of which concerns our products and services.

Commercial information is filtered to the extent possible so that the user receives only messages that are of interest to them, their volume is limited and they are sent sporadically.

COOKIES

The http://balansis.pl service uses cookie technology s, i.e. small text files saved on the Client’s computer, identifying him/her each time he/she reconnects to the online store from that computer. Cookies are also used to collect statistical data solely for the company’s needs. This data does not violate the user’s privacy and is protected against access by third parties. It is possible to disable cookies in the web browser options, the method of disabling files depends on the type of browser used.

On our websites, third parties place information in the form of cookies and other similar technologies on your end device (e.g. computer, smartphone) and gain access to them. These are our trusted partners with whom we constantly cooperate to adapt advertising on our and their websites, as well as services provided by us and our trusted partners, to your needs and interests.