PRIVACY POLICY FLUFFYCANS
Since you've come to this document, it means that the security of your online data is important to you. Know that we make sure your personal information is handled properly.
Respecting your time, we have prepared for you an abbreviated version of the most important policies related to privacy. If you find the basic information insufficient, below you will find a broader description in which we explain how we handle the personal data you entrust to us.
I. Basic Information
1. The administrator of the personal data is Fluffycans Sp. z o.o., Warszawska 56, 43-300 Bielsko-Biała, Poland, NIP (tax ID): PL5472240895, Company files kept in the District Court in Bielsko-Biała, VIII Commercial Division of the National Court Register under the KRS number: 0001061461; E: office@fluffycans.com.
2. Please note that, for the most part, the provision of personal data, including consent to their processing, is completely voluntary, but necessary for us to be able to fulfill the purpose for which they are provided. Any personal data provided is processed only to the extent and for the purpose for which it was provided.
3. You have the right to update or completely delete your personal data at any time.
4. We are committed to the proper protection of your personal data, ensuring you that it will be processed only for the purpose for which it was provided, stored in a secure manner and not made available to unauthorized parties.
5. When you contact us or place an order, you provide your personal data and we guarantee that your information will remain secure.
6. Similar to what happens on almost every website, we also use cookies.
7. The basic personal data that we process are name and family name or business name, address for delivery, phone number, e-mail address.
II. Administrator
The administrator of the personal data, responsible for its security is:
Fluffycans Sp. z o.o.
Warszawska 56
43-300 Bielsko-Biała
Poland
NIP (tax ID): PL5472240895
Company files kept in the District Court in Bielsko-Biała, VIII Commercial Division of the National Court Register under the KRS number: 0001061461
E: office@fluffycans.com
III. Your rights
Current laws grant you a number of rights related to the processing of your personal data:
1. Access to personal data
You have the right to access your data that we hold as an administrator. You can exercise this right by contacting us at the contact information provided.
2. Change, correction or deletion of personal data
You can make changes, including updating, correcting or deleting your personal data that we process by contacting us at the contact details provided.
You can exercise your right to delete your data when your data is no longer necessary for the purposes for which it was collected by us, or when you withdraw your consent to data processing.
3. Withdrawal of consent
If your personal data is processed based on consent, you may withdraw that consent at any time. We inform you of this right at any time of consent collection and allow you to withdraw your consent as easily as you gave it. To withdraw your consent, please contact us at the contact information provided.
4. The right to restrict processing or object to the processing of personal data
You have the right to restrict processing or object to the processing of your personal data at any time, based on your particular situation, unless the processing is required by law.
You may object to the processing of your personal data when:
1) the processing of personal data is carried out on the basis of a legitimate interest or for statistical purposes, and the objection is justified by a specific situation;
2) personal data is processed for direct marketing purposes, including being profiled for this purpose.
In turn, with regard to the request for restriction of data processing, we inform you that you are entitled to it when:
1) you question the accuracy of your personal data - for a period that allows us to check the accuracy of the data;
2) the processing is not lawful, and you object to the deletion of your personal data, requesting instead a restriction on its use;
3) we no longer need the personal data for the purposes of processing, but they are needed by you, to establish, assert or defend claims;
4) you have objected under Article 21(1) of the RODO[GDPR] to our processing of your data until we determine whether the legitimate grounds on our side override your grounds for objection.
5. Right to transfer data
You have the right to transfer data concerning you and you have the right to send this data through us to another administrator if:
1) processing is based on consent, pursuant to Article 6(1)(a) of the RODO[GDPR] or Article 9(2)(a) of the RODO[GDPR]; or
2) the processing is carried out on the basis of a contract, pursuant to Article 6(1)(b) of the RODO[GDPR]; and
3) processing is conducted by automated means.
When exercising the right to transfer data, you may request that we send your personal data directly to another administrator, as long as this is technically possible.
The right to transfer data must not adversely affect the rights and freedoms of others. If you wish to exercise these rights, please contact us at the contact details provided.
6. Any outstanding questions, concerns and complaints
If there are any questions, concerns or doubts about the content of this Privacy Policy or the way in which personal data is processed, as well as complaints regarding these issues, please contact us at the contact details provided with details of your complaint. Any complaints received will be investigated and responded to.
You also have the right to file a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.
Remember that you can also always request that we provide you with more information about what data we have about you and for what purposes we process it. All you need to do is send a message to the e-mail address provided above.
IV. The purposes for which I process your personal data
1. Ordering and issuance of billing documents
When you order a product or service from us, you provide the data necessary to process your order (including, but not limited to, identifying information as to your identity, or contact information). Providing data is voluntary, but necessary to place an order.
Data provided in connection with an order is processed for the purpose of processing the order, issuing billing documents, providing contact, and may also be used for archival and statistical purposes.
The data will be processed for the time necessary for the execution of the order, and later until the expiration of the statute of limitations for claims under the concluded contract. In addition, we are required to store billing documents with data for a period of 5 years from the end of the fiscal year in which the said document was issued.
In the case of data provided for the execution of the contract, you may not object to the processing of data and request the deletion of data until the expiration of the statute of limitations and archiving.
Personal data are processed on several legal grounds expressed under Article 6 of the RODO[GDPR], including the need to perform a contract (deliver the subject matter of the contract, conduct communications) or to take action prior to entering into a contract i.e. under Article 6(1) lit. b RODO[GDPR]; for the need to fulfill a legal obligation of the administrator (settlement of transactions, issuance of a settlement document) i.e. on the basis of Article 6(1)(c) RODO[GDPR]; for the legitimate interest pursued by the administrator (defense against claims, archiving, direct marketing) i.e. on the basis of Article 6(1)(f) RODO[GDPR].
2. Displaying your works
If you are an artist or a person who displays works on our site, know that your data will also be subject to processing for the performance of the contract you enter into with us. In this case, all that has been described in point 1 above will also apply to the processing of your data.
3. Account creation
If you open an account with us, the processing of your data may take place:
1) Based on your consent - if you are a customer, to facilitate your use of the site, track your orders and maintain a history of your purchasing activity on our site - that is 6(1)(a) of the RODO[GDPR]. In this case, it is your voluntary choice whether you create an account, as it is also possible to purchase goods or services in "guest" mode;
2) For the performance of the contract - if you are an artist or a person who publishes works on the site, for the purpose of entering into a contract and enabling the exhibition of works - that is 6(1)(b) of the RODO[GDPR]. In this case, it is necessary for you to start working with us.
4. Direct contact or via contact form
When you contact us no matter by which form of contact, you provide us with your contact information. It is up to you whether to provide additional data in the content of the message addressed to us. Providing the data is voluntary, but necessary to make contact and provide a response.
Your data is processed in this case for the purpose of contacting you. The basis, for processing your data is your consent, which you can withdraw at any time.
5. Social media and referrals to other creators
On our website you can find links to social networks where information about us and our activities is posted, as well as to other sources, including accounts of people with whom we cooperate for the information required
The administrator of the data within the social network, i.e. your personal data provided within your individual account, is both us as the owner of the social account and the owner of the social network.
In the case of independent accounts to which we refer, the administrator of your data will be the owner of the account (of the particular one you visit).
Personal data is processed on the basis of consent, i.e. on the basis of Article 6(1)(a) of the RODO[GDPR] expressed through your action on our profile (e.g. writing a message, publishing a post on our profile, leaving a comment, giving a rating on the profile). Consent is voluntary and free and can be withdrawn at any time.
6. Newsletter
If you wish to subscribe to the newsletter, you need to provide us first of all with your email address via the newsletter signup form.
The data provided to us when you sign up for the newsletter is used for the purpose of sending you the newsletter, and the legal basis for its processing is your consent (Article 6(1)(a) RODO) given when you signed up for the newsletter.
The data will be processed for the duration of the operation of the newsletter, unless you unsubscribe earlier, which will result in the deletion of your data from the database.
V. Entrusting the processing of personal data and making it available
Your data may be processed by third parties to whom we outsource particular activities related to ensuring the proper functioning of the website. Entities to which we outsource the processing of personal data guarantee the application of appropriate measures for the protection and security of personal data required by law. Entities to whom we outsource data processing are:
1) Server Owner: Hetzner Online GmbH Industriestr. 25 91710 Gunzenhausen Germany VAT Reg. No.: DE812871812
2) Domain: OVH Sp. z o.o. 1 Swobodna St. 50-088 Wrocław NIP[TIN]: 8992520556
3) And all remaining reliable partners who process and possess access to personal data for certain parts of our operational activity and on our behalf.
Data is also shared with the entity handling your payment, and the sharing occurs spontaneously, at your will and as a result of your action of initiating the payment.
VI. Data processing period
The length of time we will process personal data depends on the legal basis for processing. We inform you that:
1) where we process personal data on the basis of consent (Article 6(1)(a) of the RODO[GDPR]), the processing period lasts until the intended purpose is achieved or the consent is withdrawn;
2) in case we process personal data for the purpose of performing a contract or taking actions prior to the performance of a contract (Article 6(1)(b) of the RODO[GDPR]), for the period of service provision, and after its termination for the period of the statute of limitations for claims and archiving of accounting records (5 years), in accordance with applicable laws;
3) where we process personal data on the basis of a legitimate interest (Article 6(1)(f) of the RODO[GDPR]), the period of processing shall last until the aforementioned interest ceases to exist (including, but not limited to, the statute of limitations for civil law claims) or until you object to further such processing - in situations where you are entitled to such objection under the law;
4) where we process personal data because it is necessary due to applicable laws and regulations (Article 6(1)(c) of the RODO[GDPR]), the processing periods for this purpose are determined by those laws and regulations.
VII. Server Logs
By using our website, you are sending, using your device, queries to the server where my website is stored. Logs include, but are not limited to, your IP address, the date and time of the server, information about the web browser and operating system you are using. Logs are saved and stored on the server. The server logs are only support material for the administration of the site. Their contents are not disclosed to anyone.
The data recorded in the server logs is not associated with specific individuals using the site and is not used to identify specific individuals.
VIII. Cookies
Cookies files (so-called "cookies") are computer data that is stored on your terminal device. The website uses two main types of cookies: session cookies and permanent cookies. Session cookies are temporary files that are stored on your end device until you log off, leave the website or turn off your software (web browser). Permanent cookies are stored on your end device for the time specified in the parameters of the cookies or until you delete them.
The settings regarding cookies can be changed, in particular, in such a way as to block the automatic handling of cookies in the settings of your web browser or inform about their placement on your device each time. Detailed information about the possibility and methods of handling cookies is available in the settings of your web browser software. Please note that disabling or restricting cookies may cause difficulties in using the site.
We use proprietary cookies in order to:
1) ensure the proper operation of the site,
2) proper operation of forms.
IX. Change in privacy and cookies policy
We reserve the right to make changes to the Privacy policy. Changes will be made if required by applicable law or if technological conditions of website operation change. The current text of the privacy policy will always be on the website.