1. General provisions
1.1 This Privacy Policy is addressed to Buyers and other users of the Online Store operating at http://www.lyra-shop.pl, run by LYRA Justyna Wajgner Beauty Salon with its registered office in Aleksandrow Lodzki.
1.2 The Privacy Policy defines the rules of collecting and processing personal data obtained by the Administrator both when registering an account at the Service, using the Service, as well as when making purchases without creating an account and when subscribing to a newsletter.
2. personal data controller
The administrator of personal data is LYRA Justyna Wajgner Beauty Salon, 2/9 Legionowa Street, 95-070 Aleksandrow Lodzki, NIP: 947-190-14-57, REGON: 101730192, entered into the national court register kept by the District Court in Łódź, the National Court Register (KRS), Monitor Sądowy i Gospodarczy (MSiG). e-mail: salon-lyra@wp.pl, tel. +48 511 640 476.
3. Legal basis for the processing of personal data
3.1 Your personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the OPR).
3.2 The legal basis for the processing of your personal data by the Controller is:
a) the need to perform contracts concluded by you with the Administrator, as well as to take action prior to the conclusion of appointed contracts at your request (Article 6(1)(b) of the OPR);
b) processing is necessary to fulfil the legal obligation incumbent on the Administrator (Article 6(1)(c) of the OPR),
(c) the data subject’s consent to the processing of data for marketing purposes, including the sending of commercial communications through e.g. a newsletter (Article 6(1)(a) of the OPR),
3.3 The provision of personal data by you on the basis of points a) and b) above is voluntary, however, the refusal to provide data will prevent you from using the Store and the Application and services provided electronically by the Administrator.
3.4 The User may at any time withdraw consent to the processing of personal data in one or more cells.
3.5 Resignation from the newsletter subscription can be made at any time by clicking on the deactivation link in the newsletter content or by appropriate statements made to the Administrator via e-mail.
4. purposes and scope of personal data processing
4.1 Personal data provided by you will be processed for the purpose and to the extent necessary in connection with the conclusion and performance of the agreement and for the direct marketing of the Administrator’s goods and services.
4.2 In order to perform the contract, the Administrator will process the following data provided by you: name, surname, address, e-mail address, telephone number, NIP, company name, delivery address.
4.3 In order to send you information and commercial materials in the form of a newsletter, the Administrator will process the e-mail address or telephone number provided by you.
5. sharing personal data
5.1 Your personal data will be made available to the competent state authorities or third parties, if such an obligation arises from generally applicable law.
5.2 The Administrator shall make your personal data available to a selected carrier or intermediary processing shipments at the request of the Administrator for the purpose of delivery, as well as to an entity handling electronic payments or payments by credit card for the purpose of processing such payments.
6. Data protection
6.1 The Administrator is obliged to protect the Buyer’s data collected while shopping in the Store in accordance with applicable regulations and in accordance with the highest standards of security and data protection.
6.2 The Administrator ensures the security of personal data through the implementation of appropriate technical and organizational measures aimed at preventing unlawful processing of data and their accidental loss, destruction and damage. The controller shall take all possible measures to ensure that personal data are available:
(a) correct and processed in a lawful manner,
(b) obtained only for specified purposes and not further processed in a way incompatible with those purposes,
(c) adequate, relevant and not excessive,
(d) accurate and up-to-date,
(e) not kept longer than necessary,
(f) processed in accordance with the rights of the persons concerned, including the right to reservation of availability,
(g) securely stored,
(h) not transferred without adequate protection.
6.3 Personal data filing systems are protected against access by third parties. Only persons authorised by the Administrator, trained in the field of personal data protection and obliged to keep your personal data confidential are allowed to process your personal data.
6.4 Personal data collected for the purpose of concluding or performing the contract and fulfilling the Seller’s legal obligation are kept for the period necessary for: (1) securing or asserting any possible claims arising from the contract, (2) after-sales service of the Buyer (complaint handling), (3) fulfilling the legal obligation imposed on the Seller (e.g. resulting from accounting and tax regulations). Personal data processed for marketing purposes (e.g. newsletter) and other purposes are processed until the moment of withdrawal of consent to their processing or objection. Personal data related to newsletter subscription are processed, in the absence of withdrawal of consent to their processing, for the duration of newsletter subscription.
6.5 Data of persons who have created an account in the Internet shop are processed until this account is removed from the portal.
7. rights
7.1 You are entitled to demand from the controller access to personal data, rectification, erasure or restriction of the processing, the right to transfer and object to the processing, and the right to transfer the data. You have the right to withdraw your prior consent to the processing of personal data at any time.
7.2 You have the right to obtain the following information from the Administrator:
a) the purpose, scope and manner of processing of your personal data,
(b) from when your data are processed,
(c) the source of your data,
(d) the recipients or categories of recipients to whom the data are made available.
7.3 Furthermore, at your request, the Administrator will complete, update and correct your personal data, as well as suspend (temporarily or permanently) their processing or delete them if your data are incomplete, outdated, untrue or have been collected in violation of the law or are no longer necessary for the purpose for which they were collected.
7.4 Furthermore, if the controller processes your data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing, including profiling, to the extent that the processing is related to such direct marketing. In order to exercise the rights referred to in this paragraph, the Administrator must be presented with an appropriate request to the e-mail address.
7.5 You have the right to lodge a complaint with the supervisory authority if you believe that the processing of personal data violates the provisions of the FODO.
8. change of data
In the event that your personal data changes, we ask you to update it in your user account, if it has been established, or to notify the Administrator about this fact by phone, letter to the company’s registered office address or by e-mail to the Administrator’s e-mail address.
9. cookies
9.1 The Administrator declares that it uses “cookies” files (cookies).
9.2 Cookies are information sent by a server and saved on your device (e.g. hard disk of your computer or phone).
9.3 Data obtained with the use of cookies do not allow to identify you, but allow the Administrator to determine whether a particular computer was used to visit the Store (which is not tantamount to information about who visited the Store) and what preferences the user had at that time (which was the most interesting for him/her in the Store).
9.4 The Administrator uses internal cookies for this purpose:
a) ensure the proper functioning of the Store and Application,
(b) statistical,
c) adapt the Store to your preferences.
9.5 The Administrator may place both permanent and temporary files on your device.
9.6 Temporary files are usually deleted when you close your browser, while for permanent files, closing your browser does not delete them.
9.7 Temporary files are used to identify the User as logged in.
9.8 Persistent files are files that provide specific functions not only during a session, but throughout the entire period of their storage on your computer. Persistent files are used for: collect information on how you use the Store and the Application, including information on the pages you visit and any errors, checking the effectiveness of Store and Application ads, improving the functionality of the Store and Application by recording errors, testing various styling options for the Store and Application, remembering your preferences, showing your customers that they are logged in to the Store or Application.
9.9 The Store uses Google Analytics, which uses cookies on your device in order to compile statistics on the amount of traffic in the Store and the way you use the Store.
9.10. The Administrator uses the following services in order to advertise the Shop and the services provided by the Administrator
9.11. At any time you can delete the cookies left by the Shop from your device in accordance with the instructions of the manufacturer of your web browser.
9.12. It is also possible to block the access of cookies to your device by configuring your browser, however, the Shop may not function properly.
9.13. The administrator uses a server, which automatically saves in the server logs in order to analyze the operation of the IT system information about the device you use when connecting to the Store, i.e. the type of device and browser you are using, the IP of your computer, the date and time of entry, text description of the event, qualification of the event.
9.14. Only persons authorized to administer the IT system have access to log files. Log files may be used to compile statistics on the evaluation of traffic in the Store and the occurrence of errors that make it impossible to identify you.
Final provisions
10.1 The Administrator reserves the right to change the Privacy Policy at any time by posting the changed Privacy Policy at http://www.lyra-shop.pl/.
10.2 The new wording of the Privacy Policy shall be effective from the date of its publication at the address indicated in point 10.1.
A