The privacy policy sets out the rules for the processing and protection of personal data of Users and Customers (including potential customers) using the online store available at: www.heartbeat-clothing.pl and heartbeat-clothing.com, hereinafter referred to as the Store.
The administrator of Personal Data is the company “Pomarańcza Behnke Paweł ul. Żołnierska 73 b 58-562 Podgorzyn.
Respecting your rights as subjects of personal data (data subjects) and respecting applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation), hereinafter referred to as the GDPR, the Act on the protection of personal data (hereinafter the Act) and other relevant provisions on the protection of personal data, we undertake to maintain the security and confidentiality of personal data obtained from you. All employees have been properly trained in the processing of personal data, and our company as the Personal Data Administrator has implemented appropriate security and technical and organizational measures to ensure the highest level of protection of personal data. We have implemented procedures and policies for the protection of personal data in accordance with the GDPR, thanks to which we ensure compliance with the law and reliability of data processing processes, as well as the enforceability of all rights that you have as data subjects. In addition, if necessary, we cooperate with the supervisory body in the Republic of Poland, i.e. with the President of the Office for Personal Data Protection (hereinafter referred to as PUODO).
All queries, applications and complaints regarding the processing of personal data by our company (Personal Data Administrator), hereinafter referred to as Submissions, should be directed to the following e-mail address: anna@heartbeat-clothing.com or in writing to the address of the Personal Data Administrator, i.e. .: Personal Data Administrator, “Pomarańcza” Behnke Paweł ul. Złużrska 73b 58-562 Podgórzyn, Poland. The content of the Application should clearly indicate:
details of the person or persons concerned by the Application,
event which is the reason for the Report,
present your requests and the legal basis for those requests,
indicate the expected way of settling the matter.
In our Online Store, we collect, process and store the following personal data:
First name and last namecompany name
Tax identification number
Home / business address
Phone number
E-mail adress
Providing the data indicated in the preceding point is necessary to place an order in the Online Store. The Seller declares that providing the data by the Customer, in the above-mentioned scope, is voluntary. However, providing them may be necessary to conclude and implement the Sales Agreement in the Online Store. The scope of data required to conclude the contract is indicated previously on the Online Store website.
Our online store uses cookies to adapt its operation to your individual needs. Therefore, you can agree that the data and information entered by you will be remembered, so that it will be possible to use them the next time you visit our Online Store without the need to enter them again. Owners of other websites will not have access to this data and information. However, if you do not agree to personalize the Online Store, we suggest disabling cookies in your web browser options.
Each of you as a person using our Online Store has the option to choose whether and to what extent they want to use our services and provide information and data about themselves within the scope specified in the content of this Privacy Policy.
Your personal data is processed by our company as a Personal Data Administrator in order to perform services provided to you (i.e. data subjects) offered as part of the Online Store. In accordance with the principle of minimization, we process only those categories of personal data that are necessary to achieve the purposes referred to in the previous sentence.
We process personal data for the time necessary to achieve the purposes listed in the previous point. Personal data may be processed for a longer period than indicated in the previous sentence, if such permission or obligation imposed on the Personal Data Administrator results from specific legal provisions or when the service we provide is of a continuous nature (e.g. newsletter subscription).
The source of Personal Data processed by the Administrator are the data subjects.
Your personal data is not transferred to a third country within the meaning of the provisions of the GDPR.
Customers’ personal data (including Users) may be disclosed to the following categories of recipients:
entities supporting the implementation by the Seller of applicable law and the rights and obligations under these Regulations in connection with the provision of services through the Store, such as law firms and entities providing consultancy services with which the Administrator has entered into legally required contracts entrusting the processing of personal data;
entities to which the provision of data is necessary to ensure the correct implementation of services through the Store, in accordance with the request of a specific Customer (including the User) – entities providing electronic payment services (in the case of choosing such payment option), entities providing delivery of goods to the indicated address ( e.g. courier services).
We do not disclose any personal data to third parties without the express consent of the data subject. Personal data without the consent of the data subject may be made available only to public law entities, i.e. authorities and administration (e.g. tax authorities, law enforcement authorities and other entities authorized by generally applicable law).
Personal data may be entrusted for processing to entities processing such data for the benefit of our company as a Personal Data Administrator. In such a situation, as the Personal Data Administrator, we conclude with the entity processing the contract entrusting the processing of personal data. The processing entity processes the entrusted personal data, but only for the purposes to the extent and for the purposes indicated in the entrustment agreement referred to in the preceding sentence. Without entrusting your personal data for processing, we could not conduct our activities as part of the Online Store. As a Personal Data Administrator, we entrust personal data for processing to entities:
providing hosting services for the website on which our Online Store operates,
providing other services to us as the Administrator of personal data that are necessary for the current functioning of the Online Store
Personal data is not subject to profiling by the Personal Data Administrator.
According to the rules of the GDPR, every person whose personal data we process as the Personal Data Administrator has the right to:
to be informed about the processing of personal data referred to in art. 12 GDPR – the Administrator is obliged to provide you, as persons whose data will be processed, with information specified in the GDPR (e.g. about your data, IOD contact details, purposes and legal grounds for processing personal data, recipients or categories of recipients of personal data, provided that exist whether the period for which the data will be processed or the criteria for determining this period); this obligation should be met at the time of obtaining the data (i.e. e.g. when the customer places an order in the online store), and if the data is not obtained from the data subject, but from another source – within a reasonable time, depending on the circumstances; The administrator may refrain from providing this information if the data subject already has it,
access to your personal data referred to in art. 15 GDPR – by providing us with personal data, you have the right to access and access them; however, this does not mean that you have the right to access all documents on which your data appears, as they may contain confidential information; However, you have the right to information about your data and for what purposes we process and the right to obtain a copy of your personal data, the first copy is issued free of charge, and for each subsequent one we charge the appropriate administrative fee corresponding to the costs of making a copy,
correct, complete, update and correct personal data referred to in art. 16 GDPR – if your personal data have changed, please inform us as a Personal Data Administrator about this fact, so that the data we possess are accurate and current; also in a situation where there has been no change in personal data, but for any reason this data is incorrect or was incorrectly recorded (e.g. due to a typing error), please inform us to correct or correct such data,
deletion of data (the right to be forgotten) referred to in art. 17 GDPR – in other words, you have the right to request “erasure” of the data we have as the Personal Data Administrator and the right to request us as the Personal Data Administrator to inform other administrators to whom we have transferred your data about the need to delete them. You can request the deletion of your personal data primarily if:
the purposes for which personal data have been collected has been achieved, e.g. we have completed in full the sales contract concluded with you,
the basis for the processing of your personal data was only consent, which was subsequently revoked and there are no other legal grounds for further processing of your personal data, e.g. if you unsubscribe from the newsletter and otherwise no longer use our company offer,
you raised an objection based on art. 21 GDPR and you believe that we do not have any overarching legal grounds for further processing of your personal data,
Your personal data was processed unlawfully, i.e. for unlawful purposes or without any basis for processing personal data – please remember that in this case you must have a basis for your request,
the need to delete your personal data results from legal provisions,
personal data relates to a minor and was collected in connection with the provision of information society services,
processing restrictions referred to in art. 18 GDPR – you can contact our company with a request to limit the processing of your personal data (which would mean that until the clarification of the weld, our company would primarily only store it) if:
you question the accuracy of your personal data, or
you believe that we process your data without a legal basis, but at the same time you do not want us to delete this personal data (i.e. you do not use the right referred to in the preceding letter), or
you have submitted the objection referred to in point f of this point, or
Your personal data is needed to determine, pursue or defend claims e.g. in court,
data transfer referred to in art. 20 GDPR – you have the right to obtain your data in a format that allows you to read this data on your computer and the right to send this data in this format to another administrator; You only have this right if the basis for the processing of your data was consent (e.g. for subscribing to the newsletter) or these data were processed automatically,
objecting to the processing of personal data, as referred to in art. 21 GDPR – you have the right to object if you do not agree to the processing of personal data by us which we have previously processed for legitimate purposes consistent with legal provisions,
not being subject to profiling referred to in art. 22 in connection from art. 4 point 4 GDPR – in our Online Store you will not be subject to automated decision making or profiling within the meaning of the GDPR, unless you agree to it; in addition, we will always inform you about profiling if it were to take place,
lodging a complaint to the supervisory body (i.e. to the President of the Office for the Protection of Personal Data) referred to in art. 77 GDPR – if you believe that we process your personal data unlawfully or in any way violate the rights arising from the generally applicable laws on the protection of personal data.
With regard to the right to delete data (the right to be forgotten), we point out that, in accordance with the provisions of the GDPR, you do not have the right to exercise this right if:
the processing of your personal data is necessary to exercise the right to freedom of expression and information, e.g. if you have posted your data on a blog, in comments, etc.,
the processing of personal data is necessary for our company to comply with legal obligations arising from regulations – we cannot delete your data for the period necessary to fulfill the obligations (e.g. tax) that impose legal provisions on us,
the processing of your data is carried out for the purposes of pursuing, establishing or defending claims.
If you want to use your rights referred to in the previous point, please use the appropriate tabs in the Online Store, which allow you to delete your account and data collected in our Online Store or please send an e-mail message to the e-mail address: anna@ heartbeat-clothing.com
Each identified breach of security is documented, and in the event of one of the situations specified in the provisions of the GDPR or the Act, such data breaches are notified to data subjects and, if applicable, to PUODO.
All capitalized words have the meaning given to them in the Regulations of our Online Store, unless otherwise stated in the content of this Privacy Policy.
In matters not covered by this Privacy Policy, the relevant provisions of generally applicable law shall apply. In the event of non-compliance of the provisions of this Privacy Policy with the above provisions, priority is given to these provisions.
