Personal data
Personal data protection
What is the GDPR?
GDPR is a colloquial term for Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulations on data protection). In connection with the start of the GDPR application from May 25, 2018, we provide information below regarding the processing of your personal data.
Who is the Administrator of your personal data?
The administrator of your personal data is Cosmo Group Spółka z ograniczoną odpowiedzialnością Sp. K. with its registered office in Poznań (60-476), ul. Jasielska 10 A, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań, VIII Commercial Department of the National Court Register under the number KRS 0000437232, NIP: 9721241158, REGON: 302250849.
How can you contact the Administrator?
You can contact the Administrator via:
a)a letter-post item sent to the address of the Administrator's registered office,
b) an electronic message sent to the following address: gdpr@cosmogroup.pl,
c)by calling the phone number: +48 61 250 24 91.
For what purpose and on what legal basis can the Administrator process your personal data?
Your personal data may be processed for the following purposes:
a)erformance of the contract concluded with us - we process your personal data on the basis of the concluded contract (art.6 par.1 lit.b RODO) - if you have concluded any contract with us,
b) conducting marketing of own products and services - we process your personal data on the basis of your consent (art.6 par.1 lit.a RODO) - if you have consented to the processing of data for marketing purposes - if you have concluded any contract with us,
c)settlement of the contract concluded by you - we process your personal data on the basis of the concluded contract (art.6 par.1 lit.b RODO) - if you have concluded any contract with us,
d) fulfillment of the legal obligation incumbent on the Administrator - we process your personal data on the basis of generally applicable provisions of law, e.g. tax law (art.6 par.1 lit.c RODO),
e) establishing, investigating and defending against all claims that we may have or may be directed to us for the implementation of the contract concluded with us, e.g. consideration of submitted complaints - we process your personal data on the basis of our legitimate interests (art. 6 paragraph 1 point f of the GDPR),
f) subscription to the newsletter (Newsletter) - we process your personal data on the basis of your consent (art.6 par.1 lit.a RODO) - if you subscribed to our Newsletter,
g) answering the question sent to us via the contact form - we process your personal data on the basis of your consent (art.6 par.1 lit.a RODO) - if you have sent us a question,
h)notifying you about the availability of the product you are looking for - we process your personal data on the basis of the implementation of the contract concluded electronically (Article 6 paragraph 1 letter b. GDPR) - if you have asked about the availability of the selected product,
i)enabling you to post an opinion on our product - we process your personal data on the basis of the implementation of the contract concluded electronically (Article 6 paragraph 1 letter b. GDPR) - if you have posted a product opinion.
Who can we transfer your personal data to?
We may transfer your personal data to the following entities:
a) IT service providers that we use to run an online store,
b)entities through which we deliver our products - if you made purchases in our online store. Depending on your choice, they will be: a courier company, InPost Paczkomaty sp.z o.o. or Poczta Polska S.A.,
c) payment service providers - if you have chosen the method of payment for our products through the dotpay.pl system,
d) authorized state bodies - if the Administrator is asked to disclose your data,e) to other entities - if you have agreed to provide your data.
For what period will the Administrator store your personal data?
a)when we process your personal data based on the concluded contract - we will store your data for the period necessary to perform the concluded contract,
b) when we process your personal data based on your consent - we will store your personal data until you withdraw your consent,
c) in a situation where we process your personal data on the basis of generally applicable law - we will store your personal data for the period necessary to fulfill the legal obligation imposed on Administratorad) in a situation where we process your personal data on the basis of our legitimate interest - we will store your personal data until the expiration of any claims that may arise from the implementation of the concluded contract..
What rights do you have regarding the processing of your personal data?
In connection with the processing of your personal data, as the owner of this data, the GDPR grants you a number of rights that you can freely use. These are:
a) the right to access your personal data and receive a copy thereof,
b)the right to rectify and supplement your data,
c)the right to limit data processing,
d)the right to delete your data (the right to be forgotten),
e) the right to transfer data to another Administrator or receive their data in a commonly used format,
f) the right to object to the processing of your personal data,
g) the right to withdraw your consent if we process your personal data on the basis of consent. You can withdraw your consent at any time. Revocation of your consent does not affect the lawfulness of the processing of personal data carried out before its withdrawal,
h)the right to lodge a complaint to the President of the Office for Personal Data Protection if you feel that we are processing your personal data in violation of legal provisions, including the EU GDPR.
Is providing your data mandatory or voluntary?
Providing your personal data is voluntary. However, in a situation where providing data is a requirement to conclude a contract with the Administrator, failure to do so will result in the conclusion and implementation of the contract impossible.
Does the Administrator use profiling?
As part of our marketing activities, we make decisions in an automated manner based on your internet browsing history. These decisions are made automatically based on statistical analysis and have an impact on the selection of ads displayed when using the Internet. Profiling means any form of automated processing of personal data that involves the use of personal data to evaluate certain personal factors of a natural person, in particular to analyze or forecast aspects relating to, e.g. personal preferences of the individual, his interests, credibility, behavior, location or movement . Making decisions in an automated manner for marketing purposes is based on the consent you gave.