PRIVACY POLICY

In order to outline what information is being collected and how it is being used and to inform you how Agnieszka Golasińska-Smolarczyk cares for the safety of your personal data acquired through the STEPBYPET.PL online store (hereinafter referred to as “the online Store”), we have developed and implemented the present privacy policy. We ask that you acquaint yourselves with the rules listed below.

1. Agnieszka Golasińska-Smolarczyk, conducting business activity under the company name Agnieszka Golasińska-Smolarczyk (Tax ID [NIP]: PL6182081058, National Business Registry Number [REGON]: 363488598, shortly referred to as “STEPBYPET.PL”), is both the controller of the personal data and the owner of the online Store.
2. The personal data acquired by Agnieszka Golasińska-Smolarczyk through the online Store is processed in accordance with the applicable legal provisions, in particular with the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as “GDPR,” and with the Personal Data Protection Act of 10 May 2018. The measures taken by Agnieszka Golasińska-Smolarczyk aim to provide adequate protection to everyone who visits the online Store.
3. It is possible to visit STEPBYPET.PL’s website without revealing any personal data. The Store does not automatically collect any information, except for the information contained in the cookie files.
4. Name and surname, e-mail address, shipping address (city, street, house/ apartment number), telephone number, and the data saved in the cookies. In the case of Entrepreneurs, the scope of the collected data is extended to include the name of the Entrepreneur’s company and their tax identification number (NIP). 

PURPOSE AND BASIS OF DATA PROCESSING

Your personal data will be processed:

1. to perform a sales contract when an order is placed at the online Store. (based on point [b] of Article 6[1] of the Regulation).
2. to perform a contract for the provision of an individual account when you register an account at the online Store (based on point [b] of Article 6[1] of the Regulation).
3. to perform a contract for the provision of the contact form service when the online Store’s contact form is used (based on point [b] of Article 6[1] of the Regulation).
4. to potentially determine, seek the satisfaction of, or defend against claims, which is Agnieszka Golasińsa-Smolarczyk’s legally justified interest (based on point [f] of Article 6[1] of the Regulation).
5. to keep accounting books and fulfil tax obligations (based on point [c] of Article 6[1] of the Regulation).
6. to personalize the marketing content we provide you, including advertisements (based on point [f] of Article 6[1] of the Regulation).
7. to adapt both the content shown on the Store’s website and the content displayed by our partners to your needs (based on point [f] of Article 6[1] of the Regulation). In order to facilitate the use of electronically provided services and to improve their functionality, navigational data may also be collected from the site’s users. This includes information about the links you click and your other activities at the online Store (point [f] of Article 6[1] of the GDPR). Providing personal data is voluntary, with the reservation that failing to provide the required data will prevent the contract from being concluded.

DATA RECIPIENTS

The data is transferred to:

1. entities providing Agnieszka Golasińska–Smolarczyk with services necessary for the proper functioning of the online Store. This includes, in particular, delivery and transport companies, partners offering IT support, and companies providing accounting services.
2. authorised state institutions, if required by the applicable legal provisions. This includes, in particular, tax offices, courts, the organisational units of the prosecutor’s office, and the police.

THE STORAGE PERIOD OF YOUR PERSONAL DATA

The storage period of your personal data depends on the legal basis of its processing and can have, among others, the following durations:

• Where the processing is based on point (c) of Article 6(1) of the GDPR, the personal data collected in order to fulfil obligations resulting from legal provisions will be stored for the period necessary to fulfil these obligations and for the period stipulated by legal provisions. Data processed for tax purposes and for the fulfilment of tax obligations is processed for the period stipulated in Article 74 of the Accounting Act, i.e. in principle for a period of 5 years from the beginning of the year following the financial year which the data concerns.
• Where the processing is based on point (b) of Article 6(1) of the GDPR, the personal data will be processed until all factual and legal activities necessary to conclude the contract and to secure potential claims have been completed.
• Where the processing is based on point (f) of Article 6(1) of the GDPR, the personal data will be processed until the Controller’s legally justified interests, which serve as the basis for the processing, have been implemented or until you object to such processing. Where the personal data is processed to pursue claims, this data will be processed until the dispute is completely resolved and any dispute-related claims are timebarred.
• Where the processing is based on point (a) of Article 6(1) of the GDPR, your personal data will be processed until you revoke your consent.

RIGHTS OF THE PERSONS WHOM THE DATA CONCERNS

The scope of these rights and the circumstances in which they can be exercised are regulated by the relevant legal provisions (Articles 15-21 of the Regulation) and dependent on the facts of the situation.

You have the right to request that the Controller grants you access to your personal data and the right to receive a copy of this data. You are entitled to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning you. You also have the right to object to such processing and the right to data portability.

Furthermore, if the Controller processes the personal data based on your consent, you have the right to revoke the consent for personal data processing at any time. Withdrawal of the consent does not affect the legal compliance of the processing performed based on the consent prior to withdrawal.

You can withdraw your consent at any time by sending a suitable statement to kontakt@stepbypet.pl or to our physical address, ul. Poselska 20/26, 42-202 Czestochowa, Polska.

You have the right to lodge a complaint to the Inspector General of Personal Data Protection if you think that the processing of your personal data violates the law. Should you choose to exercise one or more of the above mentioned rights, the Controller will adopt a position on the matter within 30 days, unless compliance with this deadline would be unduly burdensome or impossible.

PASSWORD MANAGEMENT

During the registration process on our Store website, you will be required to create a password. While sending data and logging into your account, you are provided with a secure and encrypted connection by the Controller (SSL certificate).

If you forget or lose your password, you need to create a new one. In order to do so, use the form available in the “I forgot my password” link and enter the e-mail address provided during the registration process. Alternatively, you can enter the address listedin your account profile. An e-mail containing a link that will allow you to create a new password will be sent to the chosen address.

CHANGES TO THE PRIVACY POLICY

1. The privacy policy may change at any time. Any such changes will be posted on the Store’s website for your information.
2. Please send all questions and doubts regarding the Privacy Policy to the following e-mail address: kontakt@stepbypet.pl.