CANVASINSPIRE.COM
Privacy Policy version 1.0 is effective from 01/10/2024
§ 1 GENERAL INFORMATION
1. The privacy policy of the Online Store does not constitute a source of obligations for the Visitor and the Customer of the Online Store. It is of an informative nature and is not an agreement or regulations.
2. All expressions and words written in capital letters (e.g. Online Store, Customer, etc.) should be understood in accordance with the provisions of the Online Store Regulations.
3. In the event of any discrepancies between this Privacy Policy and the consents to the processing of personal data granted by a natural person, the legal basis for determining the scope of the Administrator's activities is the voluntarily expressed consent or legal provisions that are applicable to a given factual situation.
§ 2 PERSONAL DATA CONTROLLER
1. The administrator of your personal data is DKJ GROUP SP. Z OO (hereinafter: Administrator).
2. In all matters related to the protection of personal data, we encourage you to contact us at the above address or via e-mail: info.canvasinspire@gmail.com
3. You can also send a request to the address provided to provide information about what personal data we have about you and for what purposes we process it.
4. The Administrator informs that it stores correspondence for statistical purposes and to improve the assistance system in the scope of GDPR, as well as in the scope of complaint resolutions and decisions made on the basis of reports of possible administrative interventions in the indicated Customer Account. Addresses and data collected in this way will not be used for communication for any purpose other than the implementation of the report, in particular they will not be used for marketing purposes and transferred to third parties.
5. In the event of contact with the Administrator in order to perform specific actions (e.g. filing a complaint, making a return), the Administrator may again ask the person to provide data, including personal data, e.g. in the form of name, surname, address, e-mail address, in order to confirm their identity and enable return contact in a given matter and perform the requested action. Providing this data is not mandatory, but may be necessary to perform the action or obtain information that interests the person.
6. If you have given additional consent to our use of cookies, our trusted partners may also be the administrators of data obtained on the basis of your online activity.
§ 3 DATA COLLECTION AND PURPOSE OF DATA PROCESSING
1. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR) and other currently applicable data protection laws at the time of processing specific data.
2. According to the content of the indicated legal acts, personal data is considered to be information about an identified or identifiable natural person. An identifiable natural person is a person who can be identified directly or indirectly, in particular on the basis of an identifier such as a name and surname, identification number, location data, internet identifier or one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.
3. We ensure that the data obtained from you is confidential, secure and processed only when necessary. We process data in accordance with the law, in a reliable and transparent manner for the data subject. We process only such data and only such content that is necessary due to the legally justified purpose, i.e. the reason for processing. Personal data is collected with due diligence and appropriately protected against access by unauthorized persons. We apply appropriate and adequate security measures and the state of technical knowledge to protect personal data against accidental loss and unauthorized access, use, change or disclosure. We store personal data in a way that allows the identification of the data subject for a period no longer than is necessary for the purposes for which the data is processed.
4. The Administrator obtains information about personal data in the following manner:
a) by making a purchase in the Store (online store) by the Customer;
b) by registering a Customer Account;
c) by voluntary subscription to the Newsletter service;
d) through information entered voluntarily in an e-mail, contact form or chatbot;
e) by sending a complaint, request, inquiry or letter of another nature;
f) through information entered voluntarily in an e-mail sent in connection with the desire to establish cooperation;
g) by posting a review of the product;
h) via cookies, pixels or similar internet technologies.
5. We inform you that the purpose and scope of data processed by the Administrator results from the consent of the Website Visitor or the Customer or legal regulations and in selected cases is specified as a result of actions taken by these persons in the Online Store or within other communication channels.
6. The provision of personal data by a Visitor or Customer of the Online Store is voluntary, but necessary in order to use certain functionalities of the Online Store (e.g. placing an Order by the Customer and settling it, registering a Customer Account or using contact forms).
7. Each time, the scope of data required to conclude an appropriate agreement is indicated in advance in the Online Store (we mark the data that is necessary to conclude an agreement/use a specific functionality), within other communication channels with the Visitor or Customer or in the Regulations. Failure to provide personal data may result in the inability to effectively use the functionality of the Website, e.g. the inability to place an order.
8. Your personal data are obtained by the Administrator for the following purposes:
Processing purpose Legal basis Legitimate purpose, if any
Maintaining statistics. Article 6, paragraph 1, letter f of the GDPR. Having information about the statistics of our activities, which allows us to improve our business activities.
Conducting marketing activities of own products and services without using electronic means of communication. Article 6 section 1 letter f of the GDPR. Conducting marketing activities promoting the conducted activity.
Conducting marketing activities of own products and services using electronic means of communication, including profiling. Article 6, paragraph 1, letter f of the GDPR, whereby these activities due to other applicable regulations,
in particular the Telecommunications Law and the Act on the provision of services by electronic means, are conducted solely on the basis of consents (Article 6, paragraph 1, letter a of the GDPR). Conducting marketing activities promoting the conducted business using e-mail addresses. Presenting advertisements, customizing discounts and promotions.
Posting an opinion in the Online Store. Article 6, paragraph 1, letter a of the GDPR. Product satisfaction survey.
Handling of notifications sent using the contact form, Chatbot, e-mails, complaints, other requests. Article 6, paragraph 1, letter a of the GDPR;
Article 6, paragraph 1, letter c of the GDPR. Responding to requests and inquiries sent using the contact form or in another form, including storing sensitive requests and responses provided in order to maintain the principle of accountability. Handling requests, responding to consumer complaints. Pursuing claims, including from third parties, defending against them.
Customer Account Service. Article 6, section 1, letter b of the GDPR.
Concluding and implementing a Service Provision Agreement (Account) or taking action at the request of a future Client before concluding the Agreement.
Conclusion and performance of the Agreement. Article 6, section 1, letter b of the GDPR.
Conclusion and performance of the Agreement or taking action at the request of a future Client prior to its conclusion.
Archiving of sales documents. Article 6, paragraph 1, letter c of the GDPR. Fulfillment of legal obligations resulting from regulations, e.g. tax and accounting, especially in the case of paid contracts.
9. In the case of an adult Customer or an adult Website Visitor, with their additional consent, Personal Data may also be processed for the purpose of presenting, creating, granting and implementing dedicated advertisements, offers or promotions (discounts) for a given Customer regarding the products or services of the Administrator and its partners, tailored to their preferences to the greatest possible extent (profiling), as a result of automated decision-making, which may have legal effects on them or significantly affect them in a similar manner, e.g. by offering a short-term discount dedicated exclusively to such a person on a specific product that they have recently viewed in our Online Store (this option is not available to persons who are not of legal age or who are of legal age but have not given their consent to such action).
10. Newsletter. If you wish to subscribe to our newsletter, you must provide us with your e-mail address via the newsletter subscription form. Providing your data is voluntary, but necessary to use the newsletter service.
The data provided to us when signing up for the newsletter are used to send you a newsletter in which we inform you about the company's activities, current collection, promotions and discounts. The legal basis for processing in this situation is your voluntary consent expressed when signing up for the newsletter.
In this case, your data is processed for the purpose of periodically sending the newsletter, and the basis for processing is Article 6 paragraph 1 letter a of the GDPR, i.e. your consent resulting from the desire to receive the service.
The data will be processed for the duration of the newsletter, unless you unsubscribe earlier, which will result in the permanent removal of your data from the database. In addition, you can rectify your data saved in the newsletter database at any time, as well as request its removal by unsubscribing from the newsletter. You also have the right to transfer data, as specified in Article 20 of the GDPR.
The newsletter database is appropriately secured by the Administrator. The newsletter as a database is operated by an external entity. The sent emails contain links to hidden images (so-called tracking pixels). In addition to its basic function, which is to count email openings, it is also optionally used to identify the Customer and conduct marketing activities.
11. E-mail contact, contact form, chatbot. When contacting us via e-mail, contact form or Chatbot, you provide us with your data, e.g. e-mail address as the sender's address. In addition, you can also include other personal data in the content of the message. Providing data is voluntary, but necessary to establish contact with us.
In this case, your data is processed for the purpose of contacting you, and the basis for processing is Article 6 paragraph 1 letter a of the GDPR, i.e. your consent resulting from the desire to contact us. The legal basis for processing after the end of contact is the justified purpose of archiving correspondence for internal purposes (Article 6 paragraph 1 letter c of the GDPR).
The content of correspondence may be subject to archiving and we are unable to clearly determine when it will be deleted, however, it will be no longer than 5 years. You have the right to request a history of correspondence that you have conducted with us (if it was subject to archiving), as well as to request its deletion, unless its archiving is justified due to our overriding interests.
12. Opinions. If you want to add your opinion about the product entry, you must fill out the form.
In this case, your data is processed in order to enable the posting of Opinions, and the basis for processing is Article 6 paragraph 1 letter a of the GDPR, i.e. your consent resulting from the desire to post your entry on our website.
The data will be processed for the duration of the opinion's existence on the website, unless you request the deletion of the opinion earlier, which will result in the deletion of your data related to the opinion from the database.
You can rectify your data in the opinion at any time, as well as request its deletion. You also have the right to transfer data, as specified in Article 20 of the GDPR.
13. Customer Account. By creating a Customer Account on our Website, you provide us with your e-mail address, first and last name, and phone number. This is voluntary, but necessary for the effective registration of the Customer Account. Then, in the Customer Panel, you can also provide your address data.
In this case, your data is processed for the purpose of maintaining the Customer Account, and the basis for processing is Article 6 paragraph 1 letter b of the GDPR.
The data will be processed for the duration of your Customer Account, unless you request its deletion earlier, which will result in the deletion of your data from the database.
At any time, you can rectify your data assigned to the Customer Account, as well as request their deletion. You also have the right to transfer data, as specified in Article 20 of the GDPR.
When setting up a Customer Account, you may – but do not have to – consent to subscribing to the newsletter service.
§ 4 CATEGORIES OF PERSONAL DATA
1. The personal data administrator may process the following categories of personal data:
a) personal data provided in the form when creating a Customer Account in the Online Store, in particular: e-mail address, first name and last name, and in the case of Customers who are not consumers, additionally the company name and tax identification number [NIP];
b) personal data necessary to place an Order, in particular: name and surname; e-mail address; contact telephone number, and in the case of some Products also residential address [street, house number, apartment number, postal code, city, country].
c) personal data provided for the purpose of using the Newsletter, provided when using the contact form, Chatobot, posting opinions and sent via e-mail; or provided when submitting complaints, claims or requests, in particular: first name and last name; e-mail address; contact telephone number; address [street, house number, apartment number, postal code, town, country], bank account number;
d) personal data provided for the purpose of participating in competitions/promotional campaigns: first name and last name; e-mail address; contact telephone number; residential address [street, house number, apartment number, postal code, city, country];
e) other data, in particular obtained based on the Customer's activity on the Internet, including data obtained via the Online Store or other channels of communication with the Customer, using cookies and similar technologies.
§ 5 RECIPIENTS OF PERSONAL DATA
1. Your personal data may be processed by our partners and subcontractors, i.e. entities whose services we use to process data and provide services to you. To our knowledge, all entities to which we entrust the processing of personal data guarantee the use of appropriate measures for the protection and security of personal data required by law.
2. The Administrator may transfer your personal data to:
a) state authorities or other entities authorized under the law, in order to perform our obligations;
b) The Administrator's partners may participate in the processing of personal data to a limited extent, in particular those who technically help to efficiently run the Online Store (e.g. support us in sending e-mails, and in the case of advertising activities - also in marketing campaigns), providers of hosting or ICT services, carriers or intermediaries carrying out the shipment of Orders, entities handling electronic payments or card payments in the Online Store, companies that service software, support the Administrator in marketing campaigns, as well as providers of legal and advisory services and external accounting;
c) in addition, we may share fully anonymised data (which cannot identify you) with entities with which we cooperate.
3. As part of its marketing (advertising) activities, the Administrator uses the services of third parties that use cookies, pixels or marketing functions similar to cookies in the Online Store. The list of these entities is specified in detail in § 8 of this Policy.
§ 6 ARCHIVING PERSONAL DATA
1. The Administrator will store your personal data only as long as necessary for the purposes set out in this Privacy Policy and/or to meet legal and regulatory requirements. After this period, the Administrator will securely delete your personal data.
2. We store data for the periods indicated below:
Data related to the conclusion of Agreements. 8 years
Data for marketing purposes. In the case of data processing based on consent - until it is withdrawn.
In the case of data processing based on a legitimate purpose – until an objection is raised.
Data transferred using the contact form, Chatbot, e-mail. For a period of 3 years in order to maintain the principle of accountability.
Data contained in opinions. In the case of data processing based on consent – until its withdrawal. In the case of data processing based on a legally justified purpose – until an objection is filed.
Personal data associated with cookies and similar functions. Until these files are deleted using the website/browser/device settings (however, deleting files is not always the same as deleting Personal Data obtained through these files – then the personal data will be deleted until an objection is filed).
Data transferred during the complaint procedure and other procedures related to the Client's claims. 6 years.
Other categories of data (except data from cookies, more about which in our Cookies Policy).
5 years.
3. In each case, personal data will also be stored when legal regulations (e.g. accounting or tax regulations) oblige the Administrator to process them; we will store personal data longer in the event that the Customer has any claims against the Administrator, for the purpose of pursuing claims by the Administrator, or for the purpose of pursuing or defending against third party claims, for the period of their limitation specified by law, in particular the Civil Code.
4. Depending on the scope of personal data and the purposes of their processing, they may be stored for different periods. In each case, the longer period for which personal data is stored is decisive.
§ 7 RIGHTS, ACCESS AND UPDATING PERSONAL DATA, COMPLAINTS
In accordance with Article 15 of the GDPR, you have the right to obtain information from the Personal Data Controller as to whether your personal data are being processed.
If the Administrator processes your personal data, you have the right to:
a) access to personal data;
b) obtain information on the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of this data, the planned period for which your data will be stored or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with a supervisory authority, the source of this data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of this data outside the European Union;
c) obtain a copy of your personal data.
In addition, you may request the correction of your personal data (Article 16 GDPR), the deletion of your personal data (Article 17 GDPR), object to the processing of your personal data (Article 21 GDPR) and, where technically feasible, request the transfer of your personal data to another organisation (Article 20 GDPR).
In connection with the right to be forgotten, the Administrator will update or delete your data, unless it has a legal obligation to retain them for business purposes or to comply with the law. In some cases, you have the right to request the restriction of the processing of personal data (Article 18 of the GDPR). You can also contact the Administrator in the event of any objections to the method of collecting, storing or using personal data.
The Administrator tries to promptly consider all requests regarding the above operations on your personal data, but no later than within 30 days from the date of receipt of the request. Due to the complex nature of the request, the Administrator has the right to consider your requests in a period exceeding 30 days, of which the User will be informed in advance.
The Administrator aims to finally consider complaints, but if you are still dissatisfied with the response you receive, you can file a complaint with the supervisory authority responsible for personal data protection, your local data protection authority. In Poland, the supervisory authority within the meaning of the GDPR is the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.
§ 8 AUTOMATED PROCESSING OF PERSONAL DATA
COOKIE POLICY
1. Our Website, like almost all other websites, uses cookies. The cookie policy applies to both Online Store Customers and Online Store Visitors, i.e. users who browse the Store's content but do not make purchases.
2. The Cookie Policy is a document that is an integral part of this Privacy Policy. The content of the Cookie Policy can be found here .
3. The Website also uses functionalities similar to cookies. Therefore, individual provisions of the Cookie Policy should be applied accordingly to these technologies.
4. Selected cookies process your personal data. The processing of personal data from cookies or similar technologies on our Website takes place for the purposes of ensuring the functioning of the Website, adapting the Website to the preferences of the Visitor and the Customer, or for analytical purposes. The processing takes place on the basis of our legitimate interest. The legal basis for the processing of personal data for advertising purposes will be your additional consent, expressed by making a selection and checking the checkbox during the process of expressing consent to cookies.
5. When a Visitor uses the Online Store, cookies are used to identify their browser or device - cookies collect various types of information that, in principle, do not constitute personal data. Some information, depending on its content and method of use, may, however, be linked to a specific person - assigning certain behaviors to a specific Visitor or Customer, e.g. by linking them to the data provided when registering an Account in the Online Store, or a specific e-mail address - and thus be considered personal data.
6. In relation to information collected by cookies that may be associated with a specific person, the provisions of the Online Store Privacy Policy relating to personal data apply, in particular those relating to the rights of the data subject.
7. The Website uses profiling. Thanks to the cookies used in the Online Store, it is possible for the Administrator to learn about the preferences of the Visitor/Customer - e.g. by analyzing how often they visit the Online Store and whether and what products they buy. Analysis of online behavior helps to better understand the habits and expectations of Customers and Visitors and to adapt to their needs and interests. Thanks to this technology, it is possible to present Visitors with advertisements tailored to their needs and interests and to prepare better promotions and surprises for adult Visitors who have agreed to this.
§ 9 CHANGES TO PRIVACY POLICY
1. These Privacy Policy 1.0 principles are effective from 01/10/2024.
2. The Administrator declares that he has the right to make changes to this document for important reasons, including:
a) changes in applicable regulations, in particular in the field of GDPR, telecommunications law, services provided electronically and regulating consumer rights, affecting the rights and obligations of the Administrator or the rights and obligations of the data subject;
b) the development of electronic functionalities or services caused by the progress of Internet technology, including the implementation of new IT, technological or technical solutions on the Website, affecting the scope of this Privacy Policy.
3. The Administrator undertakes to inform Users about any changes in sufficient time to allow them to become familiar with the content of the amended document, e.g. by placing the uniform text of the Privacy Policy on the main page of the Website.
4. In the case of users using the newsletter function, if the Administrator makes fundamental changes to the content of the Privacy Policy, then he will inform the Users about them by e-mail. In the event of any objections to the change of the Policy, the User has the right to stop using the newsletter by sending a request to unsubscribe from the newsletter or by requesting the removal of his personal data.
