We care about your privacy. We collect and process your data only if it is necessary for the proper provision of the service.
In accordance with the GDPR, below we present you the data processing rules used by the Administrator.
I Who is the Data Administrator?
The data administrator is BOO-KA-BOO Agata Gągała, entered into the Central Register and Information on Economic Activity (CEIDG) kept by minister responsible for of the economy, NIP 8393192301, REGON 366417883
II W what purpose do we collect your data for? How long do we process them?
We may process your data for the following purposes:
1.Communication with you, including answering questions provided by the contact form, e-mail, as part of on-line meetings, etc.
The data will be processed based on the legitimate interest of the Administrator in the form of communication with the Users of the Website (Article 6 (1) (f) of the GDPR). Your data will be processed no longer than until you object or the business purpose ceases to exist. Providing this data is voluntary, but necessary to communicate with you. The data may also be processed for archiving for internal purposes based on the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) until an objection is raised or the business purpose ceases to exist.
2. Conclusion of the contract and its implementation (placing an order) .
3. Establishing, defending and pursuing claims.
4. Fulfillment of legal obligations incumbent on the Administrator (including tax and archiving obligations).
Data necessary to conclude and perform the contract will be processed for the duration of the contract, including for the duration of the rights arising from the contract, such as the right to complain under the warranty (Article 6 (1) (b) and (f) of the GDPR). P.providing this data is voluntary, but necessary for the conclusion and performance of the contract.
Additional data provided for the purpose of, inter alia, improving the performance of the contract will be processed no longer than until you object or the end of the business purpose based on the legitimate interest in the form of customer service (Article 6 (1) (f) of the GDPR) .
After this period, the data will be processed for the period of limitation of claims based on the legitimate interest of the Administratorin order to defend against claims, as well as to establish and pursue claims (Article 6 (1) (f) of the GDPR).
If the data is necessary to fulfill the legal obligations incumbent on the Administrator (e.g. issuing and storing invoices) – data will be processed for this purpose for no longer than 6 years (archiving obligations regarding accounting documents), unless the law requires a longer period (Article 6 (1) (c) of the GDPR).
The data may also be archived for internal and statistical purposes until you object or the business purpose ceases to exist based on the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) .
5. Sending marketing information (including sending a newsletter and other information about services, products, promotions, free content).
The data will be processed based on the legitimate interest of the Administrator for the purpose of marketing the Administrator’s products and services (Article 6 (1) (f) of the GDPR). Your data will be processed no longer than until you object or the end of the business purpose – whichever occurs first. Providing data is voluntary, but necessary to receive the newsletter.
For commercial communication purposes, I need your consent pursuant to Art. 10 of the Act on the provision of electronic services. You can withdraw it at any time by clicking the link in the footer of the e-mail or by writing to me at the address given above .
6. Administering and managing the website and groups on social platforms (including Facebook, Instagram) in the case of data processing on social platforms, including communication with you, directing marketing content to you .
These data will be processed only when you decide to like the page / join the group / choose the “Follow” option or otherwise leave your data on the platform managed by me, e.g. in the form of posting or commenting. The data will be processed for the duration of the website / group or until you object, which may occur by clicking the “Like”, “Follow” options, deleting a comment / post or in any other way provided for within the platform / page or by contacting with me.
I would like to inform you that the rules relating to the website / fanpage / group are set by the Administrator, while the rules for using the social network on which the website / fanpage / group is placed are established by the entity managing these websites.
7. Retrieving rejected baskets.
In the event that you do not complete the order, you will receive a reminder about the order that has been started but not finalized. The data will be processed based on the legitimate interest of the Administrator in the form of servicing potential customers and customers. These data will be processed for the time necessary to achieve business goals or to object.
III. Who can we transfer your data to?
We transfer your data to other entities only if it is necessary to achieve the purposes of processing referred to in point II.
If necessary, your data may be transferred to entities with whom we cooperate in the implementation of the above-mentioned purposes: hosting company, IT company / entity managing the website, company providing accounting and bookkeeping services, company providing an invoice program, company providing newsletter services, lawyers, couriers or postal operators, other entities supporting us in the implementation of processing purposes.
As a rule, data will not be transferred outside the EEA. However, if they are transferred outside the EEA, it will be based on your consent, standard contractual clauses or based on other safeguards provided for in the GDPR, after meeting, among others, information obligation. Your data may be transferred:
Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
IV What are your rights?
In connection with the GDPR, you have the right to:
- access to your personal data ,
- rectification of personal data,
- deletion of personal data ,
- restrictions on the processing of personal data ,
- object to the processing of personal data ,
- transferring personal data,
- withdrawal of consent; the withdrawal of consent does not affect the lawfulness of the processing carried out prior to its withdrawal.
If you believe that your personal data is being processed contrary to the applicable law, you have the right to lodge a complaint with the President of the Personal Data Protection Office. In this case, however, I encourage you to contact me in advance to clarify your doubts.
V Provisions of law applicable to personal data
In matters not covered, the relevant provisions of Polish and European law shall apply, including in particular the GDPR .
The Administrator uses technologies that monitor the actions taken by the User within the Website:
- Facebook conversion pixel – to manage Facebook ads and conduct remarketing activities ;
- Google Analytics code – to analyze Website statistics. Google Analytics uses its own cookies to analyze the activities and behavior of the Website Users. These files are used to store information, e.g. from which page the User has found the current website. They help to improve the Site;
- Google LLC;
- Vimeo Inc.
The website does not automatically collect any information, except for information contained in cookies.
Cookie files (so-called “cookies”) are IT data, in particular text files, which are stored on the Website User’s end device and are intended for the use of the Website. Cookies usually contain the name of the website they come from, the storage time on the end device and a unique number.
Cookies are used to adapt the content of the Website to the User’s preferences and to optimize the use of the Website; creating statistics that help to understand how Users use the Website, which allows improving its structure and content.
You can make changes to your cookie settings yourself. In many cases, the web browser allows cookies to be stored on the User’s end device by default. Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings.
Failure to consent to cookies may limit the operation of some functionalities on the Website .
VII Social plugins
The Website uses plug-ins and other social tools provided by websites such as: Instagram, Facebook, Pinterest.The rules for the processing of personal data are described directly on the websites of the service providers of these social networks.
The administrator of data processed for the purposes of statistics collected as part of the Facebook platform is BOO-KA-BOO Agata Gągała entered into the Central Register and Information on Economic Activity (CEIDG) kept by minister responsible for of the economy, NIP 8393192301, REGON 366417883 hereinafter / hereinafter referred to as the Administrator and Facebook Ireland Limited, with its registered office at 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, hereinafter referred to as the Co-administrator. These data are processed based on co-administration by the above-mentioned entities. Detailed rules regarding the co-administration of data, including information on the rights, are described on the website Information about website statistics: https://www.facebook.com/legal/terms/page_controller_addendum?hc_location=ufi
The administrator processes data based on the Administrator’s legitimate interest in conducting analyzes of Users’ activity, as well as their preferences, in order to improve the functionalities used and the services provided. In matters relating to personal data, you can contact both the Administrator and the Co-administrator.