I. General provisions

This document specifies the rules for the processing of personal data obtained from Customers by the GreyIggy Online Store run at www.greyiggy.pl by Miłosz Żurek and registered in CEIDG under the name EkoAudyt Miłosz Żurek, NIP number - 9251975117. It also contains information on the use of cookies and analytical tools in the Online Store.
The administrator of personal data is EkoAudyt Miłosz Żurek, located in Nowa Sól, Świerkowa 5, who can be contacted by e-mail at the following email address: shop@greyiggy.pl
Personal data collected via the Online Store are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation), hereinafter referred to as GDPR.
The GreyIggy store informs that Customers' personal data will be processed only for the purpose of performing and fulfilling the contract concluded with the Buyer/Customer. With additional consent, personal data will also be processed for the purpose of providing information materials and marketing offers in the form of a Newsletter.
The GreyIggy Online Store makes every effort to ensure respect for your privacy and protection of the personal information provided when using and making purchases within the store, and for this purpose it uses, among others: secure communication encryption protocol (SSL).
Providing personal data is voluntary, however, failure to provide data marked as necessary makes it impossible to register or place an Order.

II. Types, purposes and legal basis of personal data processing

In the GreyIggy Online Store, personal data is collected in the following cases:

in order to perform the contract concluded with the Customer for the sale of goods from the Store related to registering an Account and placing Orders - the basis for processing is Art. 6 section 1 letter b) GDPR (performance of the contract).
in order to establish, pursue or enforce claims - legal basis: Art. 6 section 1 letter f) GDPR
a) in these cases, the necessary scope of data processed includes name and surname; e-mail address; contact telephone number; address: street, house number, apartment number, postal code, city, country, address of residence/business/registered office, bank account number (in the case of returns), and in the case of Customers who are not consumers, additionally the company name and tax identification number - NIP and other data collected while using the Online Store.
subscription to the information bulletin (Newsletter), in order to perform the contract, the subject of which is a service provided electronically. Legal basis - consent of the data subject to perform the contract for the provision of the Newsletter service (Art. 6 section 1 letter a of the GDPR)
a) in this case, the necessary scope of processed data includes the e-mail address and contact telephone number.

III. Sharing personal information

For the proper functioning of the Online Store, it is necessary for the Administrator to use the services of external entities. The Administrator ensures that he uses the services of entities processing data in a proper manner in accordance with the provisions of law, including the EU GDPR regulation.
The administrator provides data only when it is necessary to achieve the purpose of processing and only to the extent necessary for this purpose.
Customers' personal data may be transferred to the following entities:
a) providers of hosting and ICT services,
b) carriers shipping Orders (listed in the Online Store Regulations),
c) entities handling electronic payments in the Online Store,
d) entities providing accounting, legal and advisory services,
e) companies through which the Newsletter service is provided,
f) IT service and support companies performing or responsible for maintaining IT infrastructure.

IV. Personal data storage period

The personal data provided will be processed within the period:
a) necessary for the implementation of the concluded contract for the sale of Goods, including the Customer's complaint claims and the pursuit of claims or defense of claims by the Administrator - but no longer than 10 years from the date of transfer of data.

V. Profiling

The GreyIggy Online Store may use the profiling function, which consists in any automated processing of personal data allowing to assess the personal factors of a natural person, and in particular to analyze or forecast aspects of Customers' preferences and interests.
a) this function allows the Administrator to display advertisements tailored to the Customer's preferences and interests and to present products that will best suit his needs. This function also allows you to use appropriate methods of communication including selecting the communication language.
b) the data subject has the right not to be subject to a decision which is based solely on automated processing, including profiling, and which produces legal effects concerning him or her or similarly significantly affects him or her.

VI. Rights of the data subject

Pursuant to the GDPR, a person who provides his or her personal data has a number of rights, such as:
a) the right to information on how personal data is processed,
b) the right to access and update data,
c) the right to withdraw consent - legal basis: art. 7 section 3 GDPR,
d) the right to object to the processing of personal data - legal basis: art. 21 GDPR i) The Customer has the right to object at any time - for reasons related to his particular situation - to the processing of his personal data, including profiling, if the GreyIggy Online Store processes his data based on a legitimate interest,
e) the right to delete the so-called data "right to be forgotten" - legal basis of art. 17 GDPR,
f) the right to limit data processing - legal basis: art. 18 GDPR,
g) the right to transfer data - legal basis: art. 20 GDPR,
h) the right to lodge a complaint with the supervisory authority.

VII. Cookies files

The GreyIggy online store uses cookies. These are small text files sent by the web server and stored by the computer's browser software. When the browser reconnects to the site, the site recognizes the type of device the user is connecting from. Parameters allow the information contained in them to be read only by the server that created them. Cookies therefore make it easier to use previously visited websites.
The Administrator uses its own Cookies to properly configure the Store, in particular to:
a) adapting the content of the Store's websites to the Customer's preferences and optimizing the use of websites;
b) recognizing the Store Customer's device and its location and appropriately displaying the website/Store, tailored to his individual needs;
c) remembering the settings selected by the Customer and personalizing the interface, e.g. in terms of the selected language or the region it comes from;
d) matching appropriate advertisements in accordance with the customer's preferences;
e) remembering the history of visited pages on the website/Store in order to recommend content;
f) font size, website/Store appearance, etc.
The Administrator uses its own Cookies to authenticate the user in the Store and ensure the maintenance of the user's session on the website, in particular to:
a) maintaining the Store Customer's session (after logging in), thanks to which the Customer does not have to re-enter the login and password on each subpage of the website/Store;
b) correct configuration of selected functions of the Store/Website, enabling in particular verification of the authenticity of the browser session;
c) optimizing and increasing the efficiency of services provided by the Administrator.
The Administrator uses its own Cookies to implement processes necessary for the full functionality of the Store/websites, in particular:
a) adapting the content of the Website/Store's websites to the User's preferences and optimizing the use of the Website/Store's websites. In particular, these files allow you to recognize the basic parameters of the User's Device and properly display the website, tailored to your individual needs;
b) correct operation of the affiliate program, enabling in particular verification of the sources of User redirection to the websites of the Website/Store.
The Administrator cooperates with the following external websites, which may place external cookies:
a) Google Inc. based in the USA (including Google AdSense, Google Analytics, Google Ads, Google Maps API, Google Doubleclick, Google Tag Manager, Google Search Console) More informations https://support.google.com/googleads/answer/2407785;
b) Facebook Inc. based in the USA or Facebook Ireland based in Ireland;
c) Twitter operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA,
d) Instagram operated by Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
The User may independently change the cookie settings at any time, specifying the conditions for storing them and accessing the User's Device via Cookies. The User can change the settings referred to in the previous sentence using the web browser settings or via the service configuration. These settings can be changed in particular in such a way as to block the automatic handling of Cookies in the web browser settings or to inform about each time Cookies are placed on the User's device. Detailed information about the possibilities and methods of handling Cookies is available in the software (web browser) settings.
The user may delete cookies at any time using the available functions in the web browser he or she uses.
Restricting the use of cookies may affect some of the functionalities available on the website of the Website/Store.

VIII. Final Provisions

The Online Store Administrator reserves the right to change this privacy policy at any time and place, at the same time committing to immediately publish the new privacy policy on the Store's websites and inform all registered Users about this fact.
To the extent not regulated by this Privacy Policy, generally binding provisions on the protection of personal data shall apply.
Please send any questions related to the Privacy Policy and personal data protection to shop@greyiggy.pl.
This Privacy Policy is valid from 01.01.2024.