Privacy and Cookies Policy for the shopcleanwave.com online store

This document defines the terms for processing personal data (hereinafter also referred to as "data") and cookies within the shopcleanwave.com online store, operated via the website available at the URL: shopcleanwave.com, hereinafter referred to as the "Store".

TABLE OF CONTENTS

  • §1. HOW TO CONTACT THE DATA ADMINISTRATOR
  • §2. ON WHAT BASIS DO WE PROCESS YOUR DATA
  • §3. INFORMATION ON DATA PROCESSING FOR THE CONCLUSION AND PERFORMANCE OF CONTRACTS, AND FOR THE PURSUIT OF AND DEFENSE AGAINST CLAIMS
  • §4. INFORMATION ON DATA PROCESSING FOR SENDING THE NEWSLETTER
  • §5. INFORMATION ON DATA PROCESSING FOR DIRECT MARKETING
  • §6. INFORMATION ON DATA PROCESSING FOR SECURITY PURPOSES
  • §7. INFORMATION ON DATA RECIPIENTS
  • §8. INFORMATION ON DATA TRANSFERS TO THIRD COUNTRIES
  • §9. ABSOLUTE RIGHTS OF DATA SUBJECTS
  • §10. CONDITIONAL RIGHTS OF DATA SUBJECTS
  • §11. COOKIES - INTRODUCTION
  • §12. DATA ADMINISTRATOR'S COOKIES
  • §13. THIRD-PARTY COOKIES
  • §14. CONSENT TO THE USE OF COOKIES AND THEIR MANAGEMENT
  • §15. CACHE
  • §16. PIXEL TAGS
  • §17. LINKS TO OTHER WEBSITES OR SOFTWARE
  • §18. CHANGES TO THE PRIVACY AND COOKIES POLICY

§1. HOW TO CONTACT THE DATA ADMINISTRATOR

The administrator of personal data processed within the Store is TECHWISH sp. z o.o. with its registered office in Rzeplin (55-020) at aleja LED 8, entered into the Register of Entrepreneurs of the National Court Register under the number KRS: 0000838215, NIP: 8961594246, and REGON: 385930203, being the service provider, administrator, and owner of the Store. The Data Administrator can be contacted using the email address: hello@shopcleanwave.com.

§2. ON WHAT BASIS DO WE PROCESS YOUR DATA

When collecting personal data, we always inform you of the legal basis for its processing. It derives from the provisions of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016). When we refer to:

  • Art. 6(1)(a) GDPR – this means that we process personal data based on the consent received,
  • Art. 6(1)(b) GDPR – this means that we process personal data because it is necessary for the performance of a contract or to take steps at your request before entering into a contract,
  • Art. 6(1)(c) GDPR – this means that we process personal data to comply with a legal obligation,
  • Art. 6(1)(f) GDPR – this means that we process personal data to pursue legitimate interests.

§3. INFORMATION ON DATA PROCESSING FOR THE CONCLUSION AND PERFORMANCE OF CONTRACTS, AND FOR THE PURSUIT OF AND DEFENSE AGAINST CLAIMS

We may process personal data necessary for the performance of the contract concluded with you. However, even before its conclusion, we may process personal data necessary to take action at your request. The processing of this data is based on Art. 6(1)(b) GDPR.

During and after the performance of the contract, we process the personal data of its party for the purpose of handling potential claims and pursuing them. Our legitimate interest is, for example, the ability to respond to a potential complaint. In such a case, we will process personal data based on a legitimate interest, which is the defense against or pursuit of potential claims. The processing of this data is based on Art. 6(1)(f) GDPR.

We will store this data for the period necessary to achieve the specified purposes, but no longer than until the statute of limitations for claims arising from separate legal provisions expires.

Providing this data is voluntary, but failure to provide it will make it impossible to conclude or perform the contract.

§4. INFORMATION ON DATA PROCESSING FOR SENDING THE NEWSLETTER

We allow you to subscribe to our newsletter list. If you have used this functionality, we process your personal data for the purpose of sending it. The newsletter may contain advertising, commercial, or marketing content. The processing of this data is based on your consent and thus on Art. 6(1)(a) GDPR.

You have the right to withdraw your consent at any time. However, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. We will store your data until you withdraw your consent.

Providing this data is voluntary, but failure to provide it will make it impossible to send the newsletter.

§5. INFORMATION ON DATA PROCESSING FOR DIRECT MARKETING

We may process your personal data for direct marketing purposes. This happens, for example, when we respond to your message by presenting the details of our offer. The processing of this data is based on Art. 6(1)(f) GDPR.

Providing this data is voluntary, and failure to provide it will prevent the implementation of direct marketing activities.

§6. INFORMATION ON DATA PROCESSING FOR SECURITY PURPOSES

From the moment you launch our website, to ensure the security of services, we process data such as:

  • the public IP address of the device from which the request came,
  • browser type and language,
  • date and time of the request,
  • number of bytes sent by the server,
  • the URL of the previously visited page,
  • information about errors that occurred during the request.

Our legitimate interest in this processing is to maintain server event logs and secure the Store against potential hacking attacks. The processing of this data is based on Art. 6(1)(f) GDPR.

Providing this data is a condition for using the Store. Failure to provide this data will make it impossible to use the Store.

§7. INFORMATION ON DATA RECIPIENTS

When processing personal data, we use external services. Therefore, third parties may be the recipients of your personal data. When we refer to the individual categories of recipients, these are the following entities:

  • Shipping service provider / couriers: DHL, DPD, FedEx, InPost, Rholig Suus, Poczta Polska
  • Hosting provider: Squarespace Ireland Limited, Ship Street Great, Dublin 8, D08 N12C, Ireland
  • Email service provider: Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA.
  • Advertising service provider: Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA.
  • Accounting service provider: I.T.A. Kancelaria Podatkowa Hruszowiec Jarosław, ul. Tadeusza Kościuszki 18, 58-100 Świdnica.
  • Legal / advisory / debt collection service provider: these service providers are appointed individually when the need arises.
  • Electronic payment service provider: PayPro S.A. with its registered office in Poznań (ul. Pastelowa 8, 60-198)
  • Translation service provider: Weglot, 7 cité Paradis, 75010, Paris, France

§8. INFORMATION ON DATA TRANSFERS TO THIRD COUNTRIES

As we may use services from international providers (e.g., Google, Meta), your personal data may be transferred outside the European Economic Area (EEA), particularly to the United States of America (USA).

Data transfer is based on appropriate legal mechanisms, such as adequacy decisions by the European Commission that confirm an adequate level of data protection, or Standard Contractual Clauses approved by the European Commission.

§9. ABSOLUTE RIGHTS OF DATA SUBJECTS

You have the following rights, regardless of the legal basis for processing:

  • Right of access to data: the right to obtain confirmation from us as to whether we process your data, and information about that processing (Art. 15 GDPR).
  • Right to rectification: the right to request the immediate correction of inaccurate data (Art. 16 GDPR).
  • Right to erasure ('right to be forgotten'): the right to request the erasure of data if one of the circumstances specified in Art. 17 GDPR applies.
  • Right to restriction of processing: the right to request the restriction of processing in the cases specified in Art. 18 GDPR.
  • Right to lodge a complaint: the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

§10. CONDITIONAL RIGHTS OF DATA SUBJECTS

You also have rights that depend on the legal basis of the processing:

  • Right to withdraw consent: If data is processed based on consent, you have the right to withdraw it at any time.
  • Right to data portability: If processing is based on consent or a contract, you have the right to receive the data you provided in a structured format (Art. 20 GDPR).
  • Right to object: If data is processed based on our legitimate interest, you have the right to object (Art. 21 GDPR).

§11. COOKIES - INTRODUCTION

The Store's website uses cookies. These are small text files saved on your device. We distinguish the following types of cookies:

  • Necessary: They enable the proper functioning of the Store. Without them, using the Store is impossible.
  • Functional: They allow your settings to be remembered and the interface to be personalized.
  • Business / Marketing: They enable marketing activities and traffic analysis.

§12. DATA ADMINISTRATOR'S COOKIES

The cookies we administer allow for access authentication, session maintenance, securing the Store, and remembering the contents of the shopping cart.

§13. THIRD-PARTY COOKIES

We use tools and cookies from third parties, such as Google (Analytics, Ads) and Meta (Facebook Pixel). Their use is subject to the privacy policies of these entities.

§14. CONSENT TO THE USE OF COOKIES AND THEIR MANAGEMENT

Consent to the processing of cookies is voluntary and can be withdrawn at any time. However, lack of consent for some cookies may limit the functionality of the Store. You can manage your consent through your web browser's settings.

§15. CACHE

When you use the Store's website, we may automatically use the cache installed on your device to speed up the loading of the page during subsequent visits.

§16. PIXEL TAGS

We may use pixel tag technology (e.g., Facebook Pixel) to record activity on the website and evaluate the effectiveness of advertisements.

§17. LINKS TO OTHER WEBSITES OR SOFTWARE

The Store may contain links to other websites. We are not responsible for the privacy policies on those sites. We recommend that you read their privacy policies.

§18. CHANGES TO THE PRIVACY AND COOKIES POLICY

The Policy comes into force on the date of its publication on the Store's website. A change to the Policy is made by publishing its new content on the Store's website. Information about the change will be published on the Store's website no later than 3 days before its new wording comes into force.