Privacy Policy
The administrator of the website www.ekodama-studio.pl is Naturalny Zakr臋t - eKodama Educational and Development Center Magdalena G贸rska, 艢cinawa 56a, 55-200 O艂awa. You can contact us by email at naturalny.zakret@gmail.com or via the contact form on the website.
The Administrator has appointed a Data Protection Officer whom you can contact by email at naturalny.zakret@gmail.com.
I. For what purpose we collect your data and how we process it.
1. Newsletter. By subscribing to the newsletter, you receive news, valuable content, and industry information from us. During subscription, you provide us with your name and email address in the form. Providing this data is voluntary but necessary to receive valuable content via the newsletter. The legal basis for processing these data is your consent (Article 6(1)(a) of the GDPR) expressed during subscription. Additional data along with the IP address from which you subscribed to the newsletter will be saved on the mailing service provider's server with whom the Administrator has signed a data processing agreement. Your data is processed for the purpose of sending you the requested content and will be stored in the database for the period of providing the newsletter service, unless you resign from receiving it earlier, which will result in the deletion of your data from the database.
2. Contact form. You have the possibility to contact us by sending a query through the contact form on our website. In this case, you provide us with your email address and other information in the message content, which may contain personal data. Providing this data is voluntary but necessary to contact us via the form. The legal basis for processing these data is your consent (Article 6(1)(a) of the GDPR) expressed by initiating contact with us. Processing after the end of contact is based on the legitimate interest of the administrator (Article 6(1)(c) of the GDPR) related to archiving correspondence for internal needs. The personal data you provide is processed to respond to your message and will be stored for the duration of correspondence archiving. You have the right to access the history of correspondence (if it has been archived) and you have the right to request the deletion of the correspondence, unless its archiving is justified due to the overriding interests of the Administrator, e.g., defense against potential claims on your part.
3. Service account registration. If you decide to register in our service by creating a user account, you will be asked to provide the data necessary for its creation and management. Providing mandatory data such as first and last name, email address, date of birth (optional) is required to set up and manage the account. If you do not provide them, we will not be able to create your user account.
The data you provide is processed for the purpose of: 路 managing and maintaining the user account in the service, which is necessary for the performance of the contract (Article 6(1)(b) of the GDPR); 路 for statistical and analytical purposes, which is our legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which is to conduct analyses of behaviors and activities of Users and their preferences to improve the quality and adequacy of the functionalities and services provided; 路 possible pursuit of claims or defense against them, which is our legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which is to protect our rights; 路 Administrator's marketing purposes, which is our legitimate interest (Article 6(1)(f) of the GDPR), which is to present our offer to customers; Personal data will be processed until the purpose for which they were collected ceases or in the case of data whose processing requires your consent, until it is withdrawn.
4. Order form. When purchasing a product or service in our service, you are required to fill out the order form and provide the data necessary to finalize the sales process.
You will be asked to provide: first and last name, company data (if applicable), shipping address, email address, and phone number. If you additionally request an invoice, you will be required to provide the data enabling its issue. Mandatory data, which are necessary to place an order in our service, have been marked with an asterisk. Providing this data is voluntary but necessary to place an order in our service. The data you provide is processed for the purpose of: 路 order fulfillment, which is necessary for the performance of the contract (Article 6(1)(b) of the GDPR); 路 for statistical and analytical purposes, which is our legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which is to conduct analyses of behaviors and activities of Users and their preferences to improve the quality and adequacy of the functionalities and services provided; 路 possible pursuit of claims or defense against them, which is our legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which is to protect our rights; 路 Administrator's marketing purposes, which is our legitimate interest (Article 6(1)(f) of the GDPR), which is to present our offer to customers; Personal data will be processed until the purpose for which they were collected ceases or in the case of data whose processing requires your consent, until it is withdrawn.
5. Contract withdrawal form. On our website, we have provided a contract withdrawal form that facilitates the process related to the return of a product or service purchased in our service related to the withdrawal from the sales contract. By withdrawing from the contract, you are required to fill out the form and provide the data necessary to consider the return and finalize it.
You will be asked to provide: first and last name, company data (if applicable), residence address, email address, phone number, and account number. Providing data is voluntary but necessary to withdraw from the sales contract and make a return. The data you provide is processed for the purpose of:
路 realization of the right to withdraw from the contract, which is necessary for the performance of the contract (Article 6(1)(b) of the GDPR); 路 for statistical and analytical purposes, which is our legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which is to conduct analyses of behaviors and activities of Users and their preferences to improve the quality and adequacy of the functionalities and services provided; 路 possible pursuit of claims or defense against them, which is our legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which is to protect our rights; Personal data will be processed until the purpose for which they were collected ceases or in the case of data whose processing requires your consent, until it is withdrawn.
6. Complaint form. On our website, we have provided a complaint form that facilitates the process related to reporting defects in products or services purchased in our service. When making a complaint, you are required to fill out the form and provide the data necessary to consider the complaint. You will be asked to provide: first and last name, company data (if applicable), residence address, email address, phone number, and account number. Providing data is voluntary but necessary to make a complaint. The data you provide is processed for the purpose of: 路 Considering the complaint, which is necessary for the performance of the contract (Article 6(1)(b) of the GDPR); 路 for statistical and analytical purposes, which is our legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which is to conduct analyses of behaviors and activities of Users and their preferences to improve the quality and adequacy of the functionalities and services provided; 路 possible pursuit of claims or defense against them, which is our legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which is to protect our rights; Personal data will be processed until the purpose for which they were collected ceases or in the case of data whose processing requires your consent, until it is withdrawn.
7. Chat function communication. When you use the chat function to communicate with us, we collect message contents and information that you provide us through this functionality. The legal basis for processing these data is your consent (Article 6(1)(a) of the GDPR) expressed by initiating contact with us. Processing after the end of contact is based on the legitimate interest of the administrator (Article 6(1)(c) of the GDPR) related to archiving correspondence for internal needs. Personal data is processed for the purpose of contacting you and will be stored for the duration of correspondence archiving. You have the right to access the history of correspondence (if it has been archived) and you have the right to request the deletion of the correspondence, unless its archiving is justified due to the overriding interests of the Administrator, e.g., defense against potential claims on your part.
8. Comments. To post a comment on our website, you must fill out a form in which you provide us with your name and email address. Providing data is voluntary but necessary to add a comment. The legal basis for processing these data is your consent (Article 6(1)(a) of the GDPR) expressed by adding a comment. Your data is processed for the purpose of publishing the comment and will be processed for the period the comments are functioning on the site, unless you request its removal earlier, which will result in the deletion of your data from the database.
9. PUSH Notifications. If you wish to receive brief information, notifications, and want them to be displayed directly on your device, you can choose the appropriate settings that will enable us to display them. As a rule, PUSH notifications contain short messages focused on relevant information. The legal basis for processing this data is the performance of the contract or taking actions at the request of the data subject (Art. 6 (1) (a) of GDPR). These messages are not stored.
10. Payment Gateway. When making a purchase of a product or service, you make payments through an online payment system provider in the payment gateway. This is an operating application that is linked to authorization centers, banks, and other financial institutions and which allows for the transfer of data to the IT systems of these institutions to carry out online payment transactions (e.g., credit card payments, online, internet banking transfers). When making a payment, you will be asked to provide data necessary to initiate the payment process. Providing this data is voluntary but necessary to make a payment for a product or service. The legal basis for processing this data is the performance of the contract or taking actions at the request of the person whose data is concerned (Art. 6 (1) (a) of GDPR). Your data is stored on the service provider's server until it is no longer needed to achieve the purpose for which it was collected. The Administrator has entered into a personal data processing entrustment agreement with the service provider.
II. Cookie Policy
Our website uses cookies to ensure you get the best experience related to its use. Cookies are small text information stored on your end device (e.g., computer, tablet, smartphone), which can be read by our telecommunications system. Cookies allow us to:
路 ensure the proper functioning of the site as you expect, 路 improve the speed and security of using the site, 路 improve the features available to you on the site, 路 use analytical tools, 路 use marketing tools, 路 use the comment system, 路 display videos from YouTube and Vimeo on pages, 路 provide social features.
During your first visit to our site, you are shown information about the use of cookies. Accepting and closing this information means that you agree to the use of cookies in accordance with the provisions of this privacy policy. You can always withdraw your consent by deleting cookies or changing the cookie settings in your browser. However, remember that disabling cookies may cause difficulties in using the site, as well as many other websites that use cookies.
Types of cookies and tracking technologies on our site
1. Log files. Each time you visit our site, the system automatically collects information and data from your computer. Your data in the log files are stored to ensure the functionality of services, optimization of the site, and security of IT systems. These are the following data: internet protocol; IP address; the URL of the service from which redirection occurred and from which the file request took place; date and time of access; browser type and operating system; the page visited by the user; the amount of data transferred; access status (file transferred, file not found, etc.), duration and frequency of use. In the case of access to mobile applications, the following data and information are collected: internet protocol; IP address; date and time of access; device type and operating system; the amount of data transferred; access status (such as file transferred, file not found, etc.); duration and frequency of use. Temporary storage by the system of the IP address is necessary to enable the provision of services on the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. The legal basis for processing this data is the legitimate interest of the administrator (Art. 6 (1) (f) of GDPR). Your data is stored on the server until it is no longer needed to achieve the purpose for which it was collected. If the data is collected to provide the service, this takes place at the moment the particular session ends. Data collected in logs are necessary for the functioning of the service, therefore the user cannot object to their processing.
2. Google Analytics. To analyze the use of our service by users, we have installed a tool that allows us to create activity reports on the site, measure the effectiveness of content, and provide other services related to the use of the service and the Internet. Our site uses the "Google Analytics" service provided by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). The service uses cookies: text files stored on the user's device. The information collected by cookies is usually sent to a Google server and stored there. We use anonymization by shortening IP addresses, which prevents the association of the IP address with the user. The legal basis for processing this data is the legitimate interest of the administrator (Art. 6 (1) (f) of GDPR). These data will be retained by Google for a period of 26 months; due to the shortening of the IP address, no personal data will be stored. You have the option to block the storage of cookies on your device through the appropriate configuration of the browser. You can also use a browser plugin to block the transmission of information to Google. Link to the plugin: https://tools.google.com/dlpage/gaoptout.
3. Facebook Pixel. For the purposes of analyzing, optimizing, and improving the operation of our services, we use a tracking option called "Facebook Pixel," which is provided by the social media service Facebook operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook Pixel is a piece of code placed on our website. This functionality allows us to understand the effectiveness of advertising on Facebook by gathering information about users who have been redirected to our services after clicking on an advertisement on Facebook. During the user's visit to our website, the Facebook Pixel establishes a direct connection with Facebook servers. Further information on the collection and use of data by Facebook, as well as user rights and privacy protection options, can be found in Facebook's data protection policy at https://www.facebook.com/about/privacy/update. Specific information and details about the Facebook Pixel feature and how it works are available in the Facebook help section at https://www.facebook.com/business/help/651294705016616. This function can be disabled as shown on the page https://www.facebook.com/settings?tab=ads. To do this, you must log in to Facebook. The legal basis for processing this data is the legitimate interest of the administrator (Art. 6 (1) (f) GDPR).
4. Google DoubleClick. In order to display tailored and relevant ads for you, we have installed on our website a service called DoubleClick using cookies, which is provided by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland ("Google")). Data is collected based on an identification number (ID) assigned to your browser, which allows checking which ads have been displayed in your browser and which ads have been interacted with. You can block the use of cookies by selecting the appropriate settings in your browser. However, remember that this may limit the full functionality of the service. You can also opt-out of the collection and categorization of interest-based information by disabling it on the DoubleClick cookie settings page https://support.google.com/ads/answer/7395996. The legal basis for processing this data is the legitimate interest of the administrator (Art. 6 (1) (f) GDPR).
5. Google Maps. Our site uses maps provided by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). When you visit our site, which includes a map while logged in through your Google account, Google may associate your browsing behavior on our site with other information. In this case, Google's data protection policy applies: https://policies.google.com/privacy?hl=de&gl=de. The legal basis for processing this data is the legitimate interest of the administrator (Art. 6 (1) (f) GDPR).
6. Facebook Button. Our site uses a button provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Content from Facebook servers is downloaded when you access our profile using the appropriate button. When you visit our site while logged in through your Facebook account, Facebook may associate your browsing behavior on our site with other information. In this case, Facebook's data protection policy applies: https://www.facebook.com/privacy/explanation. The legal basis for processing this data is the legitimate interest of the administrator (Art. 6 (1) (f) GDPR).
7. Instagram Button. Our site uses a button provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Content from Facebook servers is downloaded when you access our Instagram profile using the appropriate button. When you visit our site while logged in through your Instagram account, Facebook may associate your browsing behavior on our site with other information. In this case, Facebook's data protection policy applies: https://www.facebook.com/privacy/explanation. The legal basis for processing this data is the legitimate interest of the administrator (Art. 6 (1) (f) GDPR).
8. YouTube. Our site uses video recordings provided by YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company belonging to Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). When using this feature, we use the "enhanced data protection mode" provided by Youtube. When playing a video on our site through the Youtube channel, content from the YouTube portal will be loaded. If you are logged in to your YouTube account at this time, YouTube may associate your browsing behavior on our site with other information. In this case, the data protection policy of LinkedIn applies: https://www.google.de/intl/de/policies/privacy/. The legal basis for processing this data is the legitimate interest of the administrator (Art. 6 (1) (f) GDPR).
III. Your rights as a data subject
In connection with the processing of your personal data by us, you have the following rights:
1. The right to request access to your personal data, rectification, erasure, or restriction of processing, 2. The right to object to processing, 3. The right to data portability, 4. The right to withdraw consent to the processing of personal data for a specific purpose if you previously gave such consent, 5. The right to lodge a complaint with a supervisory authority concerning the processing of your personal data by us.
IV. Recipients of your personal data
In special situations where applicable law requires us to disclose collected data to state authorities, we will be obligated to provide such data. Additionally, the Administrator will transfer your personal data to accounting service providers, postal service providers, courier service providers, legal service providers, IT service and software providers supporting the management of the store, providers of services related to hosting email and website, banks, and other financial institutions for the purpose of payment processing, social media service owners (e.g., Facebook). If you want to know the list of entities to which we disclose or entrust your personal data, please contact us.
V. Do we transfer your data to countries outside the European Economic Area?
Personal data may be transferred outside the European Economic Area, especially when the service providers used in the service have their headquarters or servers outside the EEA. If such a transfer takes place, it will always be based on appropriate legal safeguards, which include, among others, standard contractual clauses regarding the transfer of personal data to data processing entities located in third countries, approved by the European Commission.
VI. Final provisions
The Administrator reserves the right to change the privacy policy if required by applicable law, if the technological conditions of the service operation change, or if the change introduces a standard higher than the minimum required by law. In case of any ambiguities, the binding version is the Polish version.
```