Privacy Policy of the Greypet.com Online Store
1. GENERAL PROVISIONS
1.1. The controller of personal data collected via the Greypet.com Online Store is Absolutico Sp. z o.o., 43-300 Bielsko-Biała, ul. Górska 73, e-mail address: [info@greypet.com](mailto:info@greypet.com), registered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Bielsko-Biała, 8th Commercial Division of the National Court Register under KRS No.: 0000544072, share capital: PLN 10,000, fully paid, NIP (Tax ID): 5472153073, REGON: 360802670 – hereinafter referred to as the “Controller”, who is at the same time the Service Provider of the Online Store and the Seller.
1.2. The Controller has appointed a Data Protection Officer, who can be contacted by e-mail at: [info@absolutico.com](mailto:info@absolutico.com) or by post at the address indicated above.
1.3. The Client’s personal data are processed in accordance with the Personal Data Protection Act of 10 May 2018 (Journal of Laws of 2018, item 1000), the Act on Rendering Electronic Services of 18 July 2002 (Journal of Laws No. 144, item 1204, as amended; hereinafter: the “Act”) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “GDPR”).
1.4. The Controller exercises particular care to protect the interests of data subjects, and in particular ensures that the data collected are: processed lawfully; collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes; factually correct and adequate in relation to the purposes for which they are processed; and stored in a form which permits identification of data subjects for no longer than is necessary for the purposes of the processing.
1.5. Any words, expressions and acronyms appearing on this website and starting with a capital letter (e.g. Seller, Online Store, Electronic Service) shall be understood as defined in the Terms and Conditions of the Online Store, available at: /pl/page/regulamin-sklepu
2. PURPOSE AND SCOPE OF DATA COLLECTION
2.1. The Seller processes the following personal data:
a) The Online Store processes your personal data for the following purposes:
– first name and surname or company name – necessary for issuing the sales document and addressing the shipment;
– address or addresses (street, building and unit number, postal code and city) – necessary for addressing the shipment and, in some cases, where the shipping address is different from the address to be indicated on the sales document;
– e-mail address – necessary for communication related to the execution of the order;
– telephone number – necessary if certain delivery methods are chosen (required by carriers);
– NIP (Tax ID) number – optionally, if the sales document is to be issued to a business.
b) transfer of your personal data to ING Bank Śląski S.A. (the “Bank”) in connection with:
a. the provision by the Bank to the Online Store of an infrastructure service enabling the processing of online payments (legal basis: Article 6(1)(f) GDPR);
b. handling and settlement by the Bank of payments made by customers of the Online Store via the Internet using payment instruments (legal basis: Article 6(1)(f) GDPR);
c. verification by the Bank of the proper performance of agreements concluded with the Online Store, in particular to ensure the protection of payers’ interests in connection with complaints submitted by them (legal basis: Article 6(1)(f) GDPR).
c) transfer of your personal data to Twisto Polska sp. z o.o. in connection with the possibility of offering you the option to pay for purchased goods or services by Twisto Polska sp. z o.o. under a mandate agreement covering the “Buy with Twisto” purchasing formula and the provision of this purchasing formula by the Online Store, as well as for the purpose of verifying by Twisto Polska sp. z o.o. the proper performance of such mandate agreements (legal basis: Article 6(1)(f) GDPR).
2.2. The data provided by the Client are processed, stored and used by the Seller exclusively for the purposes of selling the ordered products, establishing, pursuing or defending against claims, for analytical and archiving purposes, for keeping accounts, as well as for the direct offering to users of the Seller’s products and services (direct marketing, provided that the Client has given prior consent). The data for these purposes shall be processed on the basis of Article 6(1)(b), (c) and (f) GDPR.
2.3. The data provided by the Client may also be collected and used to create an order history, provided that the Client opens a Client Account in the Online Store by completing the registration process.
2.4. The data are stored for a period of 5 years counted from the end of the calendar year in which the last login occurred or, if no Client Account was created, from the date of the last sale.
2.5. Recipients of personal data:
In the case of a Client who uses a delivery method in the Online Store such as postal parcel, courier shipment or pallet shipment, the Controller provides the selected carrier or intermediary handling shipments on behalf of the Controller, chosen by the Client when placing the order, with the Client’s personal data such as first name and surname, address, telephone number and e-mail address, for no longer than necessary to perform the delivery.
With respect to the Client’s personal data such as first name and surname, address and NIP number indicated as the data to be shown on the sales document, these data are transferred in the form of a sales document to the accounting system run in Enova by the accounting office BESKID-LEX Sp. z o.o., address: 43-318 Bielsko-Biała, ul. Górska 73.
In the case of a Client who uses electronic payment or card payment methods in the Online Store, the Controller provides the collected personal data of the Client, to the extent and for no longer than is necessary to process the payment, to the selected entity handling such payments in the Online Store.
Where payments are made using an external payment system, all data provided after being redirected to the payment operator’s website are recorded solely in its database and are not in any way accessible to or stored by the Controller.
The Online Store cooperates with the following payment operators:
– PayU.pl – PayU S.A. with its registered office in Poznań, 60-166 Poznań, ul. Grunwaldzka 182, a national payment institution supervised by the Polish Financial Supervision Authority, entered in the Register of Payment Services under number IP1/2012, entered in the Register of Entrepreneurs kept by the District Court Poznań–Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register under KRS number 0000274399, with share capital of PLN 4,944,000, fully paid, NIP: 779-23-08-495, REGON: 300523444;
– Paypal.pl – PayPal (Europe) S.à r.l. & Cie, S.C.A., with its registered office at L-1150 Luxembourg, holding a valid licence as a Luxembourg credit institution within the meaning of Article 2 of the law of 5 April 1993 on the financial sector, as amended, and subject to the supervision of the Luxembourg supervisory authority Commission de Surveillance du Secteur Financier (CSSF). As the service is limited to electronic payment operations which, under the law, are not regarded as deposits or investment services, PayPal customers are not covered by the Luxembourg deposit guarantee schemes operated by the Association pour la Garantie des Dépôts Luxembourg (AGDL);
– Tpay.com – KIP (Company) – Krajowy Integrator Płatności Spółka Akcyjna with its registered office in Poznań, ul. Św. Marcin 73/6, 61-808 Poznań, entered in the National Court Register kept by the District Court Poznań–Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register under KRS number 0000412357, NIP: 777-306-15-79, REGON: 300878437, share capital of PLN 5,494,980.00, fully paid.
2.6. The Controller processes the following personal data of Service Recipients (Clients): first name and surname; e-mail address; contact telephone number; address (street, building number, unit number, postal code, city). In the case of Service Recipients (Clients) who are not consumers, the Controller additionally processes the company name and tax identification number (NIP).
2.7. Providing the personal data referred to in point 2.3. is necessary for the Service Provider to render Electronic Services within the Online Store or to conclude a Sales Agreement for Products. The scope of data required in each case is also indicated in the Terms and Conditions of the Online Store and prior to the commencement of a specific Electronic Service or the conclusion of a Sales Agreement on the Online Store’s website.
2.8. In the case of newsletter subscription and consent to receive it given during registration or when placing an order, the Controller processes data such as the e-mail address to which commercial information from the Online Store will be sent. The Client may unsubscribe at any time by logging into their account in the Online Store or by clicking the unsubscribe link contained in the footer of each newsletter.
2.9. If personal data that are not necessary for the performance of the order or for compliance with a legal obligation are provided, e.g. in correspondence with the Online Store or in withdrawal-from-contract, warranty or guarantee forms, such data will be promptly deleted or anonymised and will not be processed.
3. COOKIES AND OPERATIONAL DATA
3.1. Cookies are small text information in the form of text files sent by the server and stored on the side of the user visiting the Online Store’s website (e.g. on the hard drive of a computer, laptop, or on the memory card of a smartphone – depending on the device used to visit our Online Store). Detailed information on cookies and their history can be found, for example, here: [http://pl.wikipedia.org/wiki/Ciasteczko](http://pl.wikipedia.org/wiki/Ciasteczko).
3.2. The Service Provider processes the data contained in cookies while visitors use the Online Store’s website for the following purposes:
– identifying Service Recipients as logged in to the Online Store and showing that they are logged in;
– remembering Products added to the cart in order to place an Order;
– remembering data from completed Order Forms, surveys or login data to the Online Store;
– adjusting the content of the Online Store’s pages to the individual preferences of the Service Recipient (e.g. with regard to colours, font size, page layout) and optimising the use of the Online Store’s pages;
– compiling anonymous statistics showing how the Online Store’s website is used and analysing the needs of Service Recipients, excluding the personal identification of a Service Recipient.
3.3. As a rule, most web browsers available on the market accept the storage of cookies by default. Everyone may define the conditions for the use of cookies via their own browser settings. This means that you can, for example, partially limit (e.g. temporarily) or completely disable the storage of cookies on your computer – in the latter case, however, this may affect some functionalities of the Online Store (for example, it may not be possible to follow the Order path via the Order Form).
3.4. Browser settings regarding cookies are relevant for the consent to the use of cookies by our Online Store – in accordance with the law, such consent may also be expressed through browser settings.
3.5. Detailed information on how to change cookie settings and how to delete cookies yourself in the most popular web browsers can be found in the browser’s help section and on the following pages (just click on the relevant link):
– Chrome: [https://support.google.com/](https://support.google.com/)
– Firefox: [https://support.mozilla.org/pl/](https://support.mozilla.org/pl/)
– Internet Explorer: [https://support.microsoft.com/pl-pl/](https://support.microsoft.com/pl-pl/)
– Opera: [https://help.opera.com/pl/](https://help.opera.com/pl/)
– Safari: [https://support.apple.com/](https://support.apple.com/)
3.6. The Service Provider also processes anonymised operational data (so-called logs – IP address, domain) to generate statistics helpful in administering the Online Store. These data are aggregated and anonymous, i.e. they do not contain features identifying persons visiting the Online Store’s website. Logs are not disclosed to third parties.
4. LEGAL BASIS FOR DATA PROCESSING
4.1. Providing personal data by the Service Recipient/Client is voluntary; however, failure to provide the personal data indicated in the Terms and Conditions and in this Privacy Policy as necessary to conclude a Sales Agreement or an agreement for the provision of an Electronic Service will result in the refusal to conclude such an agreement. The data required to conclude a Sales Agreement or an agreement for the provision of an Electronic Service are indicated each time on the Online Store’s website.
Where your personal data are provided for the purpose of transferring them to Twisto Polska sp. z o.o. prior to concluding a contract for the sale of goods (or services) purchased in the Online Store, the transfer of such data is a condition for concluding the sales contract due to the business model adopted by the Online Store.
Where your personal data are transferred to the Bank in connection with the handling and settlement of payments made by you to the Online Store via the Internet using payment instruments, providing the data is required to process the payment and to send the payment confirmation from the Bank to the Online Store.
4.2. The legal basis for processing the personal data of the Service Recipient/Client is the necessity to perform a contract to which the Service Recipient/Client is a party, or to take steps at the request of the Service Recipient/Client prior to entering into such a contract. In the case of data processing for the purpose of direct marketing of the Controller’s own products or services, the legal basis for such processing is the consent of the Service Recipient/Client.
Where your personal data are transferred to the Bank for the purpose of verifying the proper performance of agreements concluded with the Online Store, in particular to ensure the protection of payers’ interests in connection with complaints submitted by them, providing such data is required to enable the performance of the agreement concluded between the Online Store and the Bank.
Where your personal data are transferred to Twisto Polska sp. z o.o. in connection with the possibility of offering you the option to pay for goods or services purchased by you via Twisto Polska sp. z o.o. under a mandate agreement covering the “Buy with Twisto” purchasing formula and the provision of this purchasing formula by the Online Store, providing such data and processing them for this purpose is required due to the business model adopted by the Online Store and for the performance of the agreement concluded between the Online Store and Twisto Polska Sp. z o.o.
5. RIGHT TO CONTROL, ACCESS AND RECTIFY YOUR DATA
5.1. The Service Recipient has the right to access their personal data and to rectify them.
5.2. Every person has the right to control the processing of data concerning them, contained in the data filing system of the Controller, and in particular the right to request that their personal data be supplemented, updated, rectified, temporarily or permanently suspended from processing, to withdraw consent to their processing or to have them erased, as well as anonymised, and to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office.
5.3. Where data are processed for the purpose of direct marketing of the Controller’s own products or services, the data subject is also entitled to submit a reasoned request to cease processing their data due to their particular situation and to object to the processing of their data.
5.4. In order to exercise the rights referred to above, one may use the functionalities available within the Account or send an appropriate request by e-mail to: [info@absolutico.com](mailto:info@absolutico.com) or in writing to the Controller’s address.
5.5. The Controller transfers personal data only to entities authorised to receive them under applicable law and on the basis of separate data processing agreements, solely and insofar as it is necessary to perform the Controller’s contractual or legal obligations. The categories of entities to which data may be transferred include: advertising agencies, banks, accounting and bookkeeping offices, IT service providers, courier companies, logistics companies, payment institutions and carriers.
5.6. In the case of data transfers referred to in point 5.5 above, the Controller concludes appropriate data processing agreements with such entities, guaranteeing the highest standard of protection and confidentiality, as well as the security of personal data and their use solely for the purpose of performing the Controller’s contractual or legal obligations.
6. FINAL PROVISIONS
6.1. The Online Store may contain links to other websites. The Controller recommends that, upon navigating to other websites, you read the privacy policy applicable there. This Privacy Policy applies only to this Online Store.
6.2. The Controller applies technical and organisational measures ensuring the protection of processed personal data appropriate to the risks and the category of data subject to protection, and in particular secures the data against disclosure to unauthorised persons, removal by an unauthorised person, processing in violation of applicable law, and change, loss, damage or destruction.
6.3. The Controller reserves the right to amend this Privacy Policy if required by applicable law, if the technological conditions of the Online Store’s operation change, or if the amendment introduces a higher standard than the minimum required by law. The Controller will notify Users of any changes by e-mail (to the e-mail address provided during registration).
6.4. The Service Provider makes available the following technical measures to prevent unauthorised persons from obtaining and modifying personal data transmitted electronically:
– securing the data filing system against unauthorised access;
– access to the Account only after providing an individual login and password;
– personal data are processed only by persons holding appropriate, personal authorisations with a strictly defined scope of access; such persons are properly trained in personal data protection and provide assurance of data security;
– an SSL certificate ensuring encryption of communication with the Store using a 256-bit key;
– use of appropriate antivirus software and a password system to access personal data.
7. COOKIES POLICY
7.1. The Store does not automatically collect any information, except for information contained in cookies.
7.2. Cookies are IT data, in particular text files, which are stored in the end user’s device and are intended for the use of the Store’s websites. Cookies usually contain the name of the website from which they originate, the period of storage on the end device and a unique number.
7.3. The entity placing cookies on the end user’s device and accessing them is the Store operator.
7.4. Cookies are used for the purpose of:
– adapting the content of the Store’s websites to the User’s preferences and optimising the use of the websites; in particular, these files allow recognition of the Store User’s device and proper display of the website, tailored to their individual needs;
– creating statistics that help understand how Store Users use the websites, which makes it possible to improve their structure and content.
7.5. Within the Store, two basic types of cookies are used: “session” cookies and “persistent” cookies. “Session” cookies are temporary files that are stored on the User’s end device until leaving the website or disabling the browser (web browser). “Persistent” cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.
7.6. The following types of cookies are used within the Store:
– “necessary” cookies, enabling the use of services available within the Store, e.g. authentication cookies used for services requiring authentication within the Store;
– cookies used to ensure security, e.g. used to detect abuses in the field of authentication within the Store;
– “performance” cookies, enabling the collection of information on how the Store’s websites are used;
– “functional” cookies, enabling the “remembering” of User-selected settings and personalisation of the User interface, e.g. regarding selected language or region from which the User comes, font size, website appearance, etc.;
– “advertising” cookies, enabling the delivery of advertising content to Users more tailored to their interests.
7.7. In many cases, web browsing software (web browser) allows cookies to be stored on the User’s end device by default. Store Users may change cookie settings at any time. These settings may be changed in particular in such a way as to block the automatic handling of cookies in the browser settings or to inform the User each time cookies are placed on their device. Detailed information on the possibilities and ways of handling cookies is available in the software (web browser) settings.
7.8. The Store operator informs that restrictions on the use of cookies may affect some of the functionalities available on the Store’s websites.
7.9. Cookies placed on the Store User’s end device may also be used by advertisers and partners cooperating with the Store operator.
7.10. More information about cookies is available at [www.wszystkoociasteczkach.pl](http://www.wszystkoociasteczkach.pl) or in the “Help” section of the web browser menu.