Privacy Policy

Privacy Policy

1.     Definitions

1.1 Controller – BEPROFI GROUP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, Ul. MAJORA WŁADYSŁAWA RAGINISA 5 /8 71-625 SZCZECIN ZACHODNIOPOMORSKIE  

1.2 Personal Data – information about an identified or identifiable natural person through one or more specific factors defining physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, online identifier, and information collected via cookies and other similar technology.

1.3 GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

1.4 Online Store – the online store operated by the Controller at www.test.sinyapilates.com

1.5 User – any natural person visiting the Online Store or using
any of the services or functionalities available in the Online Store

2.     Basic Information

2.1 This Privacy Policy aims to define the rules for processing Personal Data of Online Store Users, so that this process remains
fully compliant with the GDPR.

2.2 The User’s use of the Online Store constitutes acceptance of the processing of Personal Data for the purposes for which it is provided by the User, taking into account the principles set out in this Privacy Policy.

3. Scope, Purposes, and Grounds for Personal Data Processing

3.1 Personal Data is obtained directly from Users, in particular through registration forms, order forms, contact forms, newsletter subscriptions, and during email correspondence or phone calls. Furthermore, using the Online Store in any form results in the automatic collection of data related to the visitor’s activity,
in order to adapt content to User needs.

3.2 Personal Data in individual situations may be processed based
on the following grounds:

3.2.1 sending newsletters as a result of the User’s subscription, sending offers – the User’s consent to the processing of personal data – Art. 6(1)(a) GDPR;

3.2.2 registration of a User account in the Online Store – processing necessary for the conclusion of a contract and the provision of services by electronic means – Art. 6(1)(b) GDPR;

3.2.3 the User’s exercise of available rights related
to the prior conclusion of a contract by electronic means, e.g., submitting a complaint via a function available within the User’s Online Store account – processing necessary for the conclusion of a contract and the provision of services by electronic means – Art. 6(1)(b) GDPR;

3.2.4 placing an order in the Online Store – processing necessary for the conclusion of a contract and the provision of services by electronic means – Art. 6(1)(b) GDPR;

3.2.5 the User’s use of the option to provide feedback for the Online Store – processing necessary for the conclusion of a contract and the provision of services by electronic means – Art. 6(1)(b) GDPR;

3.2.6 transfer of Personal Data to a selected shipping company for the purpose of order delivery – processing necessary for the performance of the contract Art. 6(1)(b) GDPR;

3.2.7 transfer of personal data to external service providers handling online electronic payments – processing necessary for the performance of the contract Art. 6(1)(b) GDPR;

3.2.8 performance of legal obligations incumbent on the Controller, such as storing documentation related to concluded documents, issuing invoices, settlements with individual authorities – Art. 6(1)(c) GDPR;

3.2.9 collection of data by the Controller allowing for the improvement of the Online Store’s functionality, traffic analysis, personalization of User experiences – processing due to the legitimate interests of the Controller – Art. 6(1)(f) GDPR;

3.2.10 examining User satisfaction levels, for the purpose of providing high-quality services – processing due to the legitimate interests of the Controller – Art. 6(1)(f) GDPR;

3.2.11 performance of the Controller’s obligations, answering questions asked by Users using tools available in the Online Store – processing due to the legitimate interests of the Controller – Art. 6(1)(f) GDPR;

3.3 in accordance with Art. 6(4) GDPR, it is also possible to process collected Personal Data for the purposes of one or more legitimate interests of the Controller. The condition is that processing for another purpose remains compatible with the purpose for which the Personal Data was originally collected.

3.4 scope of personal data provided by the User in individual situations:

3.4.1 in case of User account registration in the Online Store: www.test.sinyapilates.com

3.4.2 in case of placing an order in the Online Store: www.test.sinyapilates.com

3.4.3 in case of newsletter subscription: www.test.sinyapilates.com

3.4.4 in case the User sends a request for contact with the Controller regarding a specified issue using the form: info@test.sinyapilates.com 

3.5 Data automatically collected by the Controller when the User uses the Online Store:

1. a) geolocation data – User’s device IP address, information about the internet service provider, and other information that allows determining the User’s location;
2. b) information obtained by Google Analytics – a tool used by the Controller to optimize its services by collecting anonymous information related to User traffic in the Online Store. The User has the option to block tracking of their activity using the above tool by installing an appropriate browser add-on;
3. c) server log information – the User’s use of the Online Store leaves information about the device’s IP number and the date
   and time of the action taken.

4.     Cookies

4.1 The Controller uses a tool in the form of cookies in the Online Store.

4.2 Cookies are small text files automatically saved on the User’s end device. Cookies collect information that facilitates the use of the Online Store by adapting the content of the Online Store to the User’s preferences, taking into account the User’s individual needs. Cookies are divided into:

1. a) session cookies – files deleted after the browser session ends;
2. b) persistent cookies – files stored on the User’s end device, enabling the identification of the User’s browser upon subsequent entry to the Online Store, remembering actions performed by the User. They are stored for a period specified in the file parameters or until deleted by the User.

4.3 Cookies are safe for User devices.

4.4 Cookies are used to collect data, helpful for the Controller in increasing the functionality of the Online Store.

4.5 The Online Store distinguishes three types of cookies:

1. a) essential cookies – enabling the proper functioning of the Online Store, as well as the use of its basic functions. Used in response to actions taken by the User in the Online Store, such as privacy settings, filling out forms, or logging in. These files do not contain Personal Data. This group also includes so-called “secure cookies,” which are used to ensure User security by authenticating Users
   and protecting their data from unauthorized access;
2. b) functional cookies – primarily used to remember the User’s identity, their settings, and also allowing for the retention of information entered by the User while navigating between different content of the Online Store;
3. c) analytical cookies – used to monitor how the User reached the Online Store, and to determine the cooperation between the User and individual functionalities of the Online Store. These files are used to gain knowledge about the functioning of the Online Store’s elements, allowing to determine which of them require improvement. The information collected in these files is not linked to the identification of the User.

4.6 Web browsers most often allow, by default, the storage of cookies on the User’s end device. However, browser settings in this regard can be changed by the User at any time, according to their preferences. Detailed information on this aspect can be found in the internet browser settings.

4.7 It should be noted that restricting the use of cookies may affect some functionalities of the Online Store.

5.     Data Encryption

5.1 The Online Store operates using a data security tool provided by the User, in the form of the SSL protocol.

5.2 An SSL certificate allows authentication of both parties to the data exchange, both the Online Store and the User.

5.3 Information covered by data exchange during the User’s use
of the Online Store is encrypted.

6.     Data Recipients

6.1 Users’ Personal Data may be transferred to external entities cooperating
with the Controller, particularly in connection with their provision of IT, banking, legal, debt collection, HR, accounting, transport, courier, and postal services.

6.2 If the User gives consent, their personal data may also be shared with other entities for their own purposes, including marketing purposes.

6.3 The Controller uses only the services of processors that provide sufficient guarantees of implementing appropriate technical and organizational measures, so that processing meets GDPR standards
and protects the rights of data subjects.

6.4 Personal Data may be transferred by the Controller to a third country, provided that the Controller ensures that in such a case, it will take place in relation to a country ensuring an adequate level of protection, compliant with GDPR.
In the case of other countries, the transfer will take place on the basis of standard data protection clauses. The Controller ensures that the data subject has the opportunity to obtain a copy of their data. The Controller transfers collected personal data only if and to the extent necessary to achieve a given data processing purpose consistent with this Privacy Policy.[ŁG4]

7.     Newsletter

7.1 The User may give consent to the processing of Personal Data for the purpose of providing a service in the form of regular sending by the Controller of information covering its offer via electronic communication, to the email address provided by the User.

7.2 Consent to the processing of Personal Data for this purpose may be withdrawn by the User at any time.

7.3 Data will be stored for this purpose for the period of the Controller’s legitimate interest, but no longer than until the User withdraws consent to receive information about the Controller’s offer electronically to the provided email address or until the User objects to data processing.

8.     Personal Data Retention Period

8.1 The period of Personal Data processing by the Controller depends on the purpose of processing and the type of service provided. As a rule, Personal Data is processed no longer than necessary to achieve the purposes indicated in the Privacy Policy and for the duration of the service provision or order fulfillment until the expressed consent is withdrawn or an effective objection to data processing is raised in cases where the legal basis for data processing is the Controller’s legitimate interest.

8.2 The data processing period is extended if processing is necessary to establish and pursue possible claims or defend against claims, and if we are subject to such an obligation resulting
from legal provisions (e.g., storing accounting documentation). After the expiry of the last of these periods, Personal Data is irrevocably deleted or anonymized.

8.3 The Controller declares that if the User resigns from having an account
in the Online Store, it will be deleted along with the data entered into it, no longer than within one month. When using the services of the Online Store, the Controller may store the User’s Personal Data for the period specified in point 8.2 of this document.

9.     Rights of the Data Subject

9.1 Each User has the right to request from the Controller access to their Personal Data, to obtain confirmation whether Personal Data is processed by the Controller, and to obtain an answer as to the scope and purposes.

9.2 Each User has the right to rectify their Personal Data if it proves to be incorrect.

9.3 Users have the right to “be forgotten”, which involves requesting the deletion of the User’s Personal Data, particularly when:

1. a) Personal Data is no longer necessary for the purposes for which it was processed;
2. b) an effective objection has been lodged;
3. c) Personal Data is processed unlawfully;
4. d) Personal Data must be erased to comply with a legal obligation provided for in Polish or EU law.

9.4 The User has the right to request from the Controller the restriction of Personal Data processing, which involves the necessity to restrict the processing of the User’s Personal Data solely to its storage. Processing beyond the scope of storage is possible only
if the User has given consent; for the establishment, exercise or defense of legal claims; for the protection of the rights of another natural or legal person;
or for reasons of important public interest of the Union or of a Member State.

9.5 A User whose Personal Data is processed by the Controller based on previously given consent, in accordance with Art. 6(1)(a) GDPR, has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

9.6 A User whose Personal Data is processed by the Controller has the right to lodge a complaint with the supervisory authority in the manner and procedure specified in the provisions of the GDPR and Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Personal Data Protection Office. More information can be found at https://uodo.gov.pl/pl/p/skargi.

9.7 A User whose Personal Data is concerned may at any time object to its processing by the Controller. As a rule, if the User decides to object to the processing of Personal Data, it may be effective if the Controller does not demonstrate that there are any compelling legitimate grounds for the Controller regarding the Personal Data that override the User’s interests, rights
and freedoms, or the User’s Personal Data will be necessary for the possible establishment, exercise or defense of claims.

9.8 In cases where Personal Data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of their Personal Data for such marketing, including profiling, to the extent that it is related to such direct marketing.

9.9 To exercise the rights referred to in this point of the Privacy Policy, the User may contact the Controller by sending an appropriate message in writing or by email to the Controller’s address indicated at the beginning of the privacy policy or by using the contact form available on the Online Store’s website.

9.10 The exercise of each of the above rights takes place upon the User’s request. The Controller carefully analyzes the submitted request and sends a response immediately, no later than within 1 month from the date of receipt of the request.

9.11 The Controller reserves the right to respond later than stated above (up to two months) due to the number of inquiries or the complex nature of the submitted inquiry. In such a situation, the Controller informs the User about this fact before the expiry of one month from the date of the User’s request.

10. Voluntariness

10.1The Controller indicates that providing Personal Data in the Online Store is entirely voluntary.

10.2However, failure to provide Personal Data will prevent placing an order in the Online Store, constituting an obstacle to the effective conclusion of a contract and the Controller’s fulfillment of its legal requirements, e.g., issuing an invoice.

10.3To the extent that the Controller collects consent for the processing of Personal Data, providing it is entirely voluntary (e.g., newsletter subscription).

11. Changes to the Privacy Policy

11.1 In order to improve the quality of services provided, taking into account the proper protection of the User’s Personal Data, the Privacy Policy may be modified.
The User will be informed of every change.

11.2 Any questions related to the Privacy Policy can be directed by the User to the following email address: rodo@test.sinyapilates.com