Shipping policy
1. General Provisions
1.1. The Privacy Policy (hereinafter referred to as the "Policy") of the online store operated by Zuzanna Włodarz, conducting business under the name: Zuzanna Włodarz (full details below), on the website: https://loves-studio.com/, under the trade name: Loves Studio (hereinafter referred to as the "Online Store" or "Loves Studio") is informational in nature and aims to present the principles of personal data processing by the Administrator in the Online Store. This means that this document does not constitute a source of obligations for you (it is not a contract or regulation). Among the principles of processing are the bases, purposes, and the period during which personal data will be processed.
1.2. Definitions of terms starting with a capital letter in the text can be found in the Terms of Service of the Online Store or by clicking on the following link: https://loves-studio.com/policies/terms-of-service.
2. Personal Data Administrator
The administrator of your personal data is: Zuzanna Włodarz, conducting business under the name: Zuzanna Włodarz, ul. Kazimierza Pułaskiego 13/6, 30-305 Kraków, NIP: 6762667935, REGON: 528507405 (hereinafter referred to as the "Administrator").
3. Contact with the Administrator
The Administrator is available through the following contact channels:
- Email: contact@loves-studio.com;
- Phone: +48784154776 – charged as a standard call according to the operator's price list.
4. Main Basis and Purposes of Personal Data Processing
4.1. Your personal data may be processed by the Administrator based on applicable legal provisions. The main legal act that determines the principles of personal data processing is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR). The full text of the aforementioned regulation is available at the following internet address: https://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679
4.2. Personal data means information about an identified or identifiable natural person (hereinafter referred to as "Personal Data" or "Data");
4.3. Your personal data may be processed for various purposes and based on different legal grounds. The above-mentioned diversity, both in terms of purposes and legal grounds, depends on the type of actions taken by both the Customer and the Administrator;
4.4. The main purpose of processing personal data by the Administrator is to conclude and execute the contract. Additionally, the Online Store may process personal data for marketing, statistical, service quality improvement, or legal obligations purposes.
5. Detailed Specification of the Purposes, Grounds, and Period of Personal Data Processing
5.1. Order placed in the Loves Studio Store
Personal data provided in connection with placing an order in the Online Store, as well as data collected in connection with other activities on the Online Store's website (such as name, address of residence/business headquarters/delivery address, email address, landline/mobile phone number, bank account number, and in the case of non-consumer entities under the Civil Code also NIP, REGON, and company name), may be or are processed on the following grounds and for the following purposes:
5.1.1. Execution of the sales contract or the contract for the provision of electronic services or taking actions at the request of the person to whom the data relate, also before the contract conclusion.
Legal basis: Article 6(1)(b) GDPR.
Data are processed or stored for the period necessary to execute, terminate, or expire the concluded sales contract or contract for the provision of electronic services;
5.1.2. Marketing, statistical, and analytical activities undertaken directly by the Administrator, as well as by its business partners (a list of business partners cooperating with the data Administrator is available upon request at any time).
Legal basis: Article 6(1)(a) GDPR.
Data are processed or stored until the consent for their processing, given by the person to whom the data relate, is withdrawn;
5.1.3. Activities related to the legitimate interests of the Administrator, i.e., direct marketing by processing personal data to increase sales and take care of the image and good name of the Online Store.
Legal basis: Article 6(1)(f) GDPR.
Data are processed or stored until the legitimate interest of the Administrator exists or until the person to whom the data relate effectively objects;
5.1.4. Actions related to the submission of complaints (complaint form), necessary to fulfill the Administrator's legal obligations. Consideration of complaints, their settlement, and keeping accounting records.
Legal basis: Article 6(1)(c) GDPR.
Data are processed or stored for the period required by law regarding the retention of accounting records;
5.1.5. Determining, defending, and pursuing claims that may be raised by both the Administrator and against them. These are legitimate interests pursued by the Administrator or third parties.
Legal basis: Article 6(1)(f) GDPR.
Data are processed or stored for the limitation period of potential claims, according to the deadlines indicated by the law in the Civil Code;
5.1.6. Statistics and analysis of data flow and customers in the Online Store. Legitimate interest of the Administrator.
Legal basis: Article 6(1)(f) GDPR.
Data are processed or stored for the period of the legitimate interest of the Administrator, not longer than the limitation period of potential claims, according to the deadlines indicated by the law in the Civil Code;
5.1.7. Using the Online Store and its proper functioning. Legitimate interest of the Administrator, mainly consisting of ensuring access to the properly functioning Online Store.
Legal basis: Article 6(1)(f) GDPR.
Data are processed or stored for the period of the legitimate interest of the Administrator, not longer than the limitation period of potential claims, according to the deadlines indicated by the law in the Civil Code.
6. Recipients of Personal Data
6.1. The proper functioning of the Online Store requires the Administrator to use the services of third parties that provide IT and organizational solutions to enable the operation of the Online Store. Additionally, it also depends on the actions of the Customer who, what data, and who will process it;
6.2. Administrator's partners, processing personal data in a limited scope, may be responsible for the technical maintenance of the Online Store's website, providing hosting, email services, surveying, and supporting the ongoing operation of the Online Store's website. The Administrator shares personal data with selected entities to be used in accordance with the processing purpose indicated in this privacy policy;
6.3. In the case of electronic or card payments, the Administrator shares personal data with the entity handling these payments;
6.4. After placing an order and choosing the delivery option by courier or postal service, the Administrator shares personal data with the entity executing the shipment delivery. When the order is dispatched from a warehouse managed by a third party, the Administrator shares personal data with this entity to the extent necessary to execute the purpose, which is the execution of the placed order delivery;
6.5. After making purchases in the Online Store and consenting to conduct a customer satisfaction survey, the Administrator shares the customer's personal data with the entity providing the customer satisfaction survey system;
6.6. The Administrator uses external accounting, legal, and debt collection services. The Administrator shares personal data with the aforementioned entities to the extent necessary to achieve the purposes consistent with this privacy policy;
6.7. The Administrator selects business partners to ensure they respect GDPR regulations and have appropriate technical and organizational measures.
7. Recipients of Personal Data to Third Countries outside the EEA
7.1. In its ongoing operations, the Administrator uses tools offered by foreign companies, including Google (Alphabet Inc.) and Facebook (Meta Platforms Ireland Inc.). As a result, personal data may be transferred outside the European Economic Area, ensuring that the third-party entities to which personal data are transferred provide an appropriate level of protection.
8. Profiling
8.1. To ensure the best functioning of the Online Store, the Administrator may use profiling. Profiling is an element of direct marketing by presenting customers with advertisements, discounts, or reminders about unfinished purchases. This allows the Administrator to better tailor the offer to its audience;
8.2. Profiling is an automated process. It is based on analyzing customer behavior on the Online Store's website or predicting such behavior;
8.3. Profiling through the aforementioned activities, i.e., presenting discounts, advertisements, etc., does not affect the customer's decision-making freedom;
8.4. The person to whom the data relate has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
9. Commercial Information
9.1. The Administrator and selected cooperating entities have the technical capabilities to send commercial information electronically (email, SMS);
9.2. The Administrator may communicate with the Customer remotely after the customer consents to receive commercial information.
10. Personal Data Security
The Administrator makes every effort to ensure that the customers' personal data are adequately secured. Personal data are protected against unauthorized access and secured, among other things, by (the Administrator provides only a few technical measures protecting personal data to maintain the highest level of data protection):
- SSL certificate on the Online Store's websites;
- Customer Account access secured by login and password;
- Securing data collected in the Online Store against unauthorized access.
11. Rights of Individuals Whose Data Are Stored or Processed
11.1. Right to withdraw consent – in accordance with Article 9(2)(a) GDPR and Article 6(1)(a) GDPR, a person whose personal data are processed based on their consent has the right to withdraw it at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
11.2. Right to lodge a complaint with the President of the Office for Personal Data Protection (President of UODO, ul. Stawki 2, 00-193 Warsaw);
11.3. Right to object – a person whose personal data are concerned and are processed for the purpose of legitimate interests pursued by the Administrator or a third party (public interest, public tasks) has the right to object to the processing of personal data concerning them. Additionally, a person whose personal data are concerned has the right to object at any time to the processing of personal data for purposes related to direct marketing;
11.4. Right to request rectification and restriction of processing – in cases where there is an inaccuracy in personal data (rectification) or where they have been processed unlawfully (erasure);
11.5. Right to access personal data – a person whose personal data are concerned has the right to access their data.
12. Exercising the Rights of Individuals Whose Personal Data Are Concerned
A person whose personal data are concerned and who has the rights contained in the points above and wishes to exercise them can contact the Administrator by sending an appropriate
message/letter electronically or by traditional mail to the contact details indicated at the following link: https://loves-studio.com/policies/contact-information.
13. Links to Other Websites
The Online Store may contain links to other websites. The above privacy policy applies only to the actions of the Administrator. The Administrator recommends familiarizing yourself with the privacy policies contained on websites to which links from the Online Store's website may refer.
14. Effective Date of This Privacy Policy and How to Communicate Any Changes
This privacy policy is effective from 10.06.2024. The Administrator indicates that the Online Store's privacy policy may change. The Administrator will inform about any changes to the Online Store's privacy policy on the Online Store's website.