Add products by adding codes
Privacy policy
PRIVACY POLICY OF INNPRO ONLINE SHOP
TABLE OF CONTENTS:
1. GENERAL PROVISIONS
2. THE BASIS OF DATA PROCESSING
3. PURPOSE, BASIS AND DURATION OF DATA PROCESSING IN THE ONLINE SHOP
4. RECIPIENTS OF DATA IN THE ONLINE SHOP
5. PROFILING IN THE ONLINE SHOP
6. DATA SUBJECT'S RIGHTS
7. COOKIES IN THE WEBSHOP AND ANALYTICS
8. FINAL PROVISIONS
1. GENERAL PROVISIONS
1.1 This Internet Shop's privacy policy is informative, which means that it is not a source of obligation
for the Service Recipients or the Customers of the Internet Shop. The Privacy Policy contains mainly the rules
regarding personal data processing by the Administrator in the Internet Shop, including the basis, purposes and
duration of personal data processing and the rights of data subjects, as well as information on the use of Cookies
and analytical tools in the Internet Shop.
1.2 The Administrator of the personal data collected via the Internet Shop is INNPRO Robert Błędowski sp. z o.o.
with its seat in Rybnik, at ul. Rudzka 65c, 44-200 Rybnik, registered in the register of companies kept by the
District Court in Gliwice, X Economic Department of the National Court Register, under KRS number 0000944160, the
amount of share capital of PLN 2,129,700.00, NIP: 6423234719, REGON: 520852137, BDO: 000556885, e-mail address:
dane.osobowe@innpro.pl - further referred to as “Administrator” and being at the same time the Internet Shop
Service Provider and Seller.
1.3 According to Article 4c of the Law on Prevention of Excessive Delays in Commercial Transactions of March 8,
2013, Journal of Laws 2023.1790, the Administrator declares that he has the status of a large entrepreneur.
1.4 Personal data in the Online Shop are processed by the Administrator in accordance with applicable laws,
in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of
27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free
movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred
to as "RODO" or "RODO Regulation". The official text of the RODO Regulation:
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679.
1.5 The use of the Online Shop, including making purchases, is voluntary. Similarly, the related provision of
personal data by the Service Recipient or Client using the Online Shop is voluntary, subject to two exceptions:
(1) conclusion of agreements with the Administrator – failure to provide personal data necessary for the conclusion
and performance of a Sales Agreement or an agreement for the provision of an Electronic Service with the
Administrator in the cases and to the extent indicated on the website of the Internet Shop and in the Terms and
Conditions of the Internet Shop and this Privacy Policy results in the impossibility to conclude that agreement.
Providing personal data in such a case is a contractual requirement and if the data subject wants to conclude a
given agreement with the Administrator, he or she is obliged to provide the required data. Each time the scope
of data required to conclude a contract is indicated previously on the website of the Internet Shop and in the
Terms and Conditions of the Internet Shop;
(2) statutory obligations of the Administrator – providing personal data is a statutory requirement resulting
from universally applicable laws imposing an obligation to process personal data on the Administrator (e.g.
processing of data for the purposes of keeping tax or accounting books) and failing to provide such data will
prevent the Administrator from fulfilling those obligations.
1.6 The Controller shall exercise particular care to protect the interests of persons to whom the personal
data processed by him/her relate, and in particular shall be responsible for and ensure that the data collected
by him/her are: (1) processed lawfully; (2) collected for specified, legitimate purposes and not subject to further
processing incompatible with those purposes; (3) substantively correct and adequate in relation to the purposes
for which they are processed; (4) kept in a form which permits identification of data subjects for no longer
than is necessary to achieve the purpose of processing; and (5) processed in a manner which ensures adequate
security of personal data, including protection against unauthorised or unlawful processing and accidental loss,
destruction or damage, by means of appropriate technical or organisational measures.
1.7 Having regard to the nature, scope, context and purposes of the processing and the risk of violation of
the rights or freedoms of natural persons of varying probability and seriousness, the Controller shall implement
appropriate technical and organisational measures to ensure that the processing is carried out in accordance with
this Regulation and to be able to demonstrate it. These measures shall be reviewed and updated as necessary. The
Controller shall apply technical measures to prevent unauthorised persons from acquiring and modifying personal
data transmitted electronically.
1.8 All words, phrases and acronyms appearing in this Privacy Policy and starting with a capital letter (e.g.
Seller, Internet Shop, Electronic Service) shall be understood in accordance with their definition contained in
the Rules of the Internet Shop available at the websites of the Internet Shop.
2. THE BASIS OF DATA PROCESSING
2.1 The Controller shall be entitled to process personal data where, and to the extent that, one or more of
the following conditions are met: (1) the data subject has given his or her consent to the processing of his
or her personal data in one or more specified purposes; (2) processing is necessary for the performance of a
contract to which the data subject is party or in order to take steps at the request of the data subject prior
to entering into a contract; (3) processing is necessary for compliance with a legal obligation incumbent on
the Controller; or (4) processing is necessary for the purposes of legitimate interests pursued by the Controller
or by a third party, except where such interests are overridden by the interests or fundamental rights and
freedoms of the data subject which require protection of personal data, in particular where the data subject
is a child.
2.2 The processing of personal data by the Controller shall in each case require the existence of at least
one of the grounds indicated in Point 2.1 of the Privacy Policy. Specific grounds for processing of personal
data of the Internet Shop's Customers and clients by the Administrator are indicated in the next point of this
Privacy Policy – with reference to a given purpose of personal data processing by the Administrator.
3. PURPOSE, BASIS AND DURATION OF DATA PROCESSING IN THE ONLINE SHOP
3.1 In each case, the purpose, basis and period and the recipients of personal data processed by the
Administrator result from the actions taken by a given Service Recipient or Client in the Internet Shop or by
the Administrator. For example, if the Customer decides to make purchases in the Internet Shop and chooses
personal collection of the purchased Product instead of courier delivery, his or her personal data will
be processed in order to perform the concluded Sales Agreement, but will no longer be made available
to the carrier performing the shipment on behalf of the Administrator.
3.2 The Administrator can process personal data within the Internet Shop for the following purposes, on the
basis and for the periods indicated in the table below:
Purpose of data processing | Legal basis of data processing | Data storage period |
---|---|---|
Performance of a Sales Agreement or an agreement for the provision of Electronic Services or taking action at the request of the data subject prior to entering into the aforementioned agreements | Article 6(1)(b) of the RODO Regulation (performance of a contract) – processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract | The data shall be stored for the period necessary for the execution, termination or other expiration of the concluded Sales Agreement or Electronic Service Agreement. |
Direct marketing | Article 6(1)(f) of the RODO Regulation (legitimate interest of the controller) – processing is necessary for the purposes deriving from the Administrator's legitimate interests – consisting in promoting the interests and the good image of the Administrator, its Internet Shop and striving to sell the Products |
The data shall be stored for the period of existence of the legally justified interest pursued by
the Administrator, however, not longer than for the period within which the Administrator's claims
against the data subject by virtue of the Administrator's economic activity are time-barred. The
period of limitation shall be determined by law, in particular the Civil Code (the basic limitation
period for claims related to business activities is three years, and for a Sales Agreement two years). The Administrator may not process data for the purposes of direct marketing in the case of an effective objection to this effect expressed by the data subject. |
Marketing | Article 6(1)(a) of the RODO Regulation (consent) – the data subject has given consent for his/her personal data to be processed for marketing purposes by the Administrator | Data shall be stored until the data subject withdraws his/her consent to the further processing of his/her data for this purpose. |
Bookkeeping | Article 6(1)(c) of the RODO Regulation in conjunction with Article 74(2) of the Accounting Act, i.e. of 30 January 2018 (Journal of Laws of 2018, item 395) – processing is necessary for the fulfilment of a legal obligation incumbent on the Administrator | The data are kept for the period required by legal regulations requiring the Administrator to keep accounting books (5 years, counting from the beginning of the year following the financial year to which the data refer). |
Establishing, asserting or defending claims which may be raised by the Administrator or which may be raised against the Administrator | Article 6(1)(f) of the RODO Regulation (legitimate interest of the controller) – processing is necessary for the purposes resulting from the Administrator's legitimate interests – consisting in determining, asserting or defending claims which may be raised by the Administrator or which may be raised against the Administrator | The data is stored for the period of existence of the legally justified interest pursued by the Administrator, however no longer than for the period of limitation of claims that may be raised against the Administrator (the basic limitation period for claims against the Administrator is six years). |
Using the Internet Shop website and ensuring its proper operation | Article 6(1)(f) of the RODO Regulation (legitimate interest of the Administrator) – processing is necessary for the purposes deriving from the Administrator's legitimate interests – consisting in running and maintaining the Internet Shop's website | The data shall be stored for the period of existence of the legally justified interest pursued by the Administrator, however not longer than the period within which the Administrator's claims against the data subject by virtue of the Administrator's economic activity are time-barred. The period of limitation shall be determined by law, in particular the Civil Code (the basic limitation period for claims related to business activities is three years, and for a Sales Agreement two years). |
Keeping statistics and analysing traffic in the Internet Shop | Article 6(1)(f) of the RODO Regulation (legitimate interest of the controller) – processing is necessary for the purposes resulting from the Administrator's legitimate interests – consisting in conducting statistics and traffic analysis in the Internet Shop in order to improve the functioning of the Internet Shop and increase sales of Products | The data shall be stored for the period of existence of the legally justified interest pursued by the Administrator, however, no longer than for the period of expiration of the Administrator's claims against the data subject on account of the Administrator's economic activity. The period of limitation shall be determined by law, in particular the Civil Code (the basic limitation period for claims related to business activities is three years, and for a Sales Agreement two years). |
4. RECIPIENTS OF DATA IN THE ONLINE SHOP
4.1 For the proper functioning of the Internet Shop, including the performance of Sales Agreements
concluded, it is necessary for the Administrator to use the services of external entities (such as e.g.
software provider, courier or payment processor). The Administrator shall only use the services of such
processors who provide sufficient guarantees to implement appropriate technical and organisational
measures so that the processing complies with the requirements of the RODO Regulation and protects the
rights of data subjects.
4.2 The transfer of data by the Controller does not take place in every case and not to all recipients or
categories of recipients indicated in the Privacy Policy – the Controller transfers data only if it is
necessary to achieve a given purpose of personal data processing and only to the extent necessary to
achieve it. For example, if the Customer uses personal collection, his/her data will not be transferred
to the carrier cooperating with the Administrator.
4.3 Personal data of Service Recipients and Customers of the Internet Shop may be transferred to the
following recipients or categories of recipients:
1.1.1. carriers / forwarders / courier brokers / entities operating the warehouse and/or the dispatch process
– in the case of a Customer who uses the method of Product delivery in the Internet Shop by mail or by courier,
the Administrator makes the collected personal data of the Customer available to the selected carrier,
forwarder or intermediary performing the shipment on behalf of the Administrator, and if the shipment is
made from an external warehouse – to the entity operating the warehouse and/or the dispatch process –
to the extent necessary to complete the delivery of the Product to the Customer.
1.1.2. entities processing electronic or credit card payments – if a Customer uses the electronic or credit
card payment method in the Internet Shop, the Administrator shall make available collected personal data
of the Customer to a selected entity processing the aforementioned payments in the Internet Shop on the
basis of the Administrator's order, to the extent necessary to handle the payment made by the Customer.
1.1.3. crediting entities / lessors – in the case of a Customer who uses the instalment or leasing payment
method in the Internet Shop, the Administrator shall make available the collected personal data of the Customer
to a selected creditor or lessor handling the aforementioned payments in the Internet Shop on the order of the
Administrator to the extent necessary to handle the payment executed by the Customer.
1.1.4. service providers supplying the Administrator with technical, IT and organisational solutions, which
enable the Administrator to run its business, including the Internet Shop and the Electronic Services
provided by means of it (in particular, suppliers of computer software for running the Internet Shop,
e-mail and hosting providers, as well as suppliers of business management and technical support software
for the Administrator) – the Administrator shall make the collected personal data of the Customer available
to a chosen supplier acting on its behalf only in the case and to the extent necessary to carry out a given
purpose of data processing in accordance with this Privacy Policy.
1.1.5. accounting, legal and advisory service providers providing the Administrator with accounting, legal
or advisory support (in particular an accounting office, a law firm or a debt collection agency) – the
Administrator shall make the collected personal data of the Client available to the chosen provider
acting on its behalf only if and to the extent necessary for the accomplishment of a given purpose
of data processing in accordance with this Privacy Policy.
5. PROFILING IN THE ONLINE SHOP
5.1 The RODO Regulation imposes an obligation on the Controller to provide information on automated
decision-making, including profiling, as referred to in Article 22(1) and (4) of the RODO Regulation, and –
at least in these cases – relevant information on the principles of their making, as well as on the significance
and the envisaged consequences of such processing for the data subject. With this in mind, the Controller
provides information on possible profiling in this section of the Privacy Policy.
5.2 The Controller may use profiling in the Internet Shop for direct marketing purposes, but the decisions
taken on its basis by the Controller do not concern the conclusion or refusal of the conclusion of a Sales
Agreement or the possibility of using Electronic Services in the Internet Shop. The effect of using profiling
in the Internet Shop may be e.g. granting a given person a discount, sending him/her a discount code, reminding
about unfinished shopping, sending a proposal of a Product which may correspond to the interests or preferences
of a given person or offering better conditions compared to the standard offer of the Internet Shop. Despite
the profiling, it is up to the individual to freely decide whether to take advantage of the discount or better
conditions received in this way and make a purchase in the Internet Shop.
5.3 Profiling in the Internet Shop consists in the automatic analysis or prediction of the behavior of a
given person on the website of the Internet Shop, e.g. by adding a specific Product to the basket, viewing
the page of a specific Product in the Internet Shop or by analyzing the history of previous purchases made in
the Internet Shop. The condition for such profiling is that the Administrator has the personal data of the
person in question in order to be able to send, for example, a discount code.
5.4 The person whose data is concerned has the right not to be subject to a decision based solely on automated
processing, including profiling, which has legal effects on that person or similarly significantly affects him/her.
6. DATA SUBJECT'S RIGHTS
6.1 The right of access, rectification, restriction, erasure or portability – the data subject has the right
to request the Controller to grant access to his/her personal data, to rectify them, erase them ("the right
to be forgotten") or to restrict their processing, and also has the right to object to the processing as well
as the right to data portability. Detailed conditions for exercising the aforementioned rights are set out in
Articles 15–21 of the RODO Regulation.
6.2 The right to withdraw consent at any time – a person whose data is processed by the Administrator on the
basis of consent (pursuant to Article 6(1)(a) or Article 9(2)(a) of the RODO Regulation) has the right to
withdraw this consent at any time without affecting the lawfulness of the processing carried out on the basis
of this consent before its withdrawal.
6.3 The right to lodge a complaint with a supervisory authority – a person whose data is processed by the
Administrator has the right to lodge a complaint with a supervisory authority in the manner and mode provided
for in the RODO Regulation and in Polish law, in particular in the Act on Personal Data Protection. The
supervisory authority in Poland is the President of the Personal Data Protection Office.
6.4 The right to object – the data subject has the right, at any time, for reasons connected with his/her
particular situation, to object to the processing of his/her personal data based on Article 6(1)(e) (public
interest or tasks) or (f) (legitimate interest of the Administrator), including profiling on the basis of
these provisions. In such a case, the Administrator may no longer process these personal data, unless the
Administrator demonstrates the existence of valid legitimate grounds for processing, overriding the interests,
rights and freedoms of the data subject or grounds for establishing, pursuing or defending claims.
6.5 The right to object to direct marketing – if personal data is processed for the purposes of direct
marketing, the data subject has the right to object at any time to the processing of his/her personal data
for such marketing purposes, including profiling, to the extent that the processing is related to such direct
marketing.
6.6 In order to exercise the rights referred to in this paragraph of the Privacy Policy, you can contact
the Administrator by sending an appropriate message in writing or by e-mail to the address of the
Administrator indicated at the beginning of this Privacy Policy or by using the contact form available
on the website of the Internet Shop.
7. COOKIES IN THE WEBSHOP AND ANALYTICS
7.1 Cookies are small information in the form of text files sent by a server and stored on the side of the
person visiting the Online Shop website (e.g. on the hard disk of a computer, laptop or smartphone memory
card – depending on the device used by the visitor to our Online Shop). Detailed information about Cookies,
as well as the history of their creation, can be found, among others, here:
https://pl.wikipedia.org/wiki/HTTP_cookie.
7.2 Cookies that may be sent by the Online Shop website can be divided into different types, according
to the following criteria:
By their provider:
1) own (created by the Administrator's Online Shop website), and
2) belonging to third parties (other than the Administrator).
By their storage period on the device of the visitor to the Online Shop:
1) session (stored until logging out of the Online Shop or turning off the Internet browser), and
2) permanent (stored for a defined period specified by the parameters of a given file or until manually removed).
By the purpose of their application:
1) necessary (enabling the correct functioning of the Online Shop website),
2) functional/preferential (enabling the adaptation of the Online Shop website to the preferences of the person
visiting the website),
3) analytical and performance (collecting information on how the Online Shop website is used),
4) marketing, advertising and social (collecting information about the visitor to the Online Shop website
in order to display personalized advertisements to that person and to conduct other marketing activities,
including on websites separate from the Online Shop website, such as social networking sites).
7.3 The Administrator may process the data contained in Cookies when visitors use the Online Shop website
for the following specific purposes:
1) identifying Service Recipients as logged in to the Online Shop and displaying that they are logged in
(necessary Cookies),
2) remembering Products added to the basket in order to place an Order (necessary Cookies),
3) remembering data from completed Order Forms, surveys or login data to the Online Shop (necessary and/or
functional/preferential Cookies),
4) adapting the content of the Online Shop website to the individual preferences of the Service Recipient
(e.g. in terms of colours, font size, page layout) and optimizing the use of the Online Shop pages
(functional/preferential Cookies),
5) keeping anonymous statistics showing how the Online Shop website is used (statistical Cookies).
7.4 Checking in the most popular web browsers which Cookies (including the lifetime of the Cookies and
their provider) are currently sent by the Online Shop website can be done as follows:
In the Chrome browser:
(1) click the padlock icon on the left side of the address bar, (2) go to the
"Cookies" tab.
In Firefox:
(1) in the address bar click the shield icon on the left, (2) go to the "Allowed" or "Blocked"
tab, (3) click "Cross-site tracking cookies", "Social media tracking elements" or "Content with tracking
elements".
In Internet Explorer:
(1) click the "Tools" menu, (2) go to the "Internet Options" tab, (3) go to the
"General" tab, (4) go to the "Settings" tab, (5) click "View files".
In the Opera browser:
(1) in the address bar, click the padlock icon on the left, (2) go to the
"Cookies" tab.
In the Safari browser:
(1) click the "Preferences" menu, (2) go to the "Privacy" tab, (3) click
"Manage website data".
Regardless of the browser, you can also use tools available, for example, at https://www.cookiemetrix.com/
or https://www.cookie-checker.com/
7.5 By default, most web browsers available on the market accept the storing of Cookies. Everyone has
the option to define the conditions for the use of Cookies using the settings of his/her own Internet browser.
This means that you can, for example, partially restrict (e.g. temporarily) or completely disable the option
of saving Cookies – in the latter case, however, this may affect some functionalities of the Online Shop
(for example, it may be impossible to proceed through the Order path via the Order Form due to not remembering
the Products in the basket at subsequent steps of placing the Order).
7.6 The settings of your Internet browser regarding Cookies are important from the point of view of your
consent to use Cookies by our Online Shop – according to the regulations, such consent can also be expressed
through your browser settings. Detailed information on changing settings concerning Cookies and their
independent deletion in the most popular Internet browsers can be found in the help section of your
Internet browser and on the following pages (just click the link):
7.7. in the Chrome browser
7.8. in the Firefox browser
7.9. in the Internet Explorer browser
7.10. in the Opera browser
7.11. in the Safari browser
7.12. in the Microsoft Edge browser
7.13 The Administrator may use Google Analytics and Universal Analytics services provided by Google Ireland
Limited (Gordon House, Barrow Street, Dublin 4, Ireland). These services help the Administrator keep statistics
and analyze traffic in the Online Shop. The data collected within these services are used to generate
statistics helpful in administering the Online Shop and analyzing traffic in the Online Shop. These data
are aggregated. By using these services in the Online Shop, the Administrator collects data such as the
sources and medium of acquisition of visitors to the Online Shop, and how visitors behave on the Online
Shop website, information on devices and browsers used to visit the website, IP and domain, geographic and
demographic data (age, gender), and interests.
7.14 It is possible to block in an easy way the sharing with Google Analytics of information about a
person's activity on the Online Shop website – for this purpose, for example, you can install a browser
add-on provided by Google Ireland Ltd. available here: https://tools.google.com/dlpage/gaoptout?hl=pl.
8. FINAL PROVISIONS
8.1 The Online Shop may contain links to other websites. The Administrator encourages you, after going to
other websites, to read the privacy policy established there. This Privacy Policy applies only to the
Administrator's Online Shop.