GENERAL PROVISIONS
This Privacy Policy (hereinafter referred to as the “Privacy Policy”) defines the rules of processing personal data obtained through the website https://store.feelmypaint.com (hereinafter referred to as the “Online Store”) and is addressed to the users of the Online Store. The owner of the Online Store and at the same time the data administrator is FEELMYPAINT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, address: Zagłoby 2F Street Kraków 31-980, registration data Company under the commercial law: entered in the register of entrepreneurs by the REGISTRAR’S COURT FOR KRAKOWA ŚRÓDMIEŚCIA IN KRAKOWA, XI WYDZ GOSPODARCZY KRAJOWEGO REJESTROWY SĄD (XI Wydział GOSPODARCZY KRAJOWEGO REJESTRowy SĄDowy) under the KRS number 0000986928. Share capital in the amount of 6000 PLN., NIP: 6783199623, REGON: 522825535, e-mail address: sklep@feelmypaint.com, (hereinafter referred to as “Administrator”). Contact with the Administrator is possible by letter and e-mail.
Personal data collected by the Administrator through the Online Store are processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) (hereinafter: “RODO”).
The Administrator attaches considerable importance to protecting the privacy of the users of the Online Store and the security of processing their personal data.
Capitalized terms used in this privacy policy have the meanings given to them in the Terms and Conditions of the Online Store available at https://store.feelmypaint.com.
PURPOSES, LEGAL BASIS FOR PROCESSING, CATEGORIES OF PERSONAL DATA
CONSENT
The Administrator processes your data on the basis of consent.
The Administrator processes your data on the basis of consent also in case you agree to the use of cookies other than those necessary for the delivery of the electronically provided service, including the installation of cookies by third parties and the transmission of the aforementioned. subjects of the data collected through these cookies. You may revoke your consent to the installation of cookies other than those necessary for the delivery of the electronically provided service at any time, in the browser settings on the device you are using or from the Online Store in the footer of the page by clicking on the “Change Privacy Settings” link. Withdrawal of consent does not affect the legality of the processing of data collected through cookies until the consent is withdrawn. For more information on the processing of personal data collected through the Administrator’s own cookies and those installed by third parties on the basis of consent, as well as the possibility of withdrawing consent, see FeelMyPaint’s Cookies Policy.
We use tools that allow us to display personalized advertising such as Google search ads, remarketing, display ads on YouTube and social media. Dedicated ads will be displayed if the search phrase you typed in coincides with the list of phrases we set up in the campaign; and also if Google’s algorithm matches you on a so-called “search engine” basis. targeting based on sites you visit, videos you watch on YouTube, etc. You may revoke your consent to our use of the above. tools including Google Marketing Platform from cookies. You can do this on the Google Marketing Platform opt-out page or on the Network Advertising Initiative opt-out page.
CONCLUSION AND PERFORMANCE OF THE CONTRACT
The Administrator processes your personal data in order to take, at your request, actions aimed at entering into a contract with the Administrator or when it is necessary for the performance of an already concluded contract (Article 6.1. b. RODO), including, among others. When it is necessary for:
To conclude agreements with the Administrator for the provision of services by electronic means, referred to in the Regulations of the Internet Store, related to the establishment of an Account in the Internet Store and its execution,
To conclude a Sales Agreement for goods with the Administrator and its execution,
submitting requests to the Administrator via e-mail or contact forms available on the Website.
LEGAL OBLIGATION
The Administrator processes your personal data in order to fulfill a legal obligation incumbent on the Administrator (Article 6(1)(c) of the DPA).
In practice, this means that your personal data must be processed in connection with the fulfillment of obligations under the law, in particular obligations under tax regulations, the Accounting Act, the Act on the provision of electronic services, the Civil Code, the Consumer Rights Act.
LEGITIMATE INTEREST OF THE ADMINISTRATOR OR A THIRD PARTY
The Administrator may process your personal data if it is necessary for purposes arising from legitimate interests pursued by the Administrator or by a third party (Article 6(1)(f) RODO), including but not limited to. In the following cases:
Customer Relationship Management
The administrator, for internal purposes, analyzes the past cooperation with you for the purpose of compiling analysis and sales statistics. Based on the aforementioned. information, the Administrator obtains knowledge to assist in making offers, setting price lists, better matching offers to your interests, undertaking better targeted marketing efforts, and improving the level of quality of services provided.
Investigation of claims by the Administrator and defense against claims directed against the Administrator.
If you fail to fulfill or improperly fulfill the contract concluded with the Administrator, the Administrator, within the framework of the applicable law, may assert claims against you, such as seeking payment for the goods sold.
If you direct claims against the Administrator, the Administrator processes your personal data for the purpose of defending against such claims.
Enable customers to make payments through payment services
If you choose an online payment method, the Administrator will transfer your personal data to the payment service provider in order to enable you to make payment by the method you have chosen (payment card or bank transfer).
Contacting the Administrator
You may contact the Administrator via e-mail, telephone, or online contact forms available on the Website. In this case, we may process your personal data for the purpose of communicating with you and handling the case initiated by you.
Storage of data to ensure accountability, i.e.
to prove compliance with regulations on the processing of personal data.
Website Maintenance
The Administrator uses the necessary cookies for the proper operation of the Website. The use of necessary cookies may involve the processing of your personal data based on the Administrator’s legitimate interest in operating the website.
Creation of customer bases
If you are a logged-in Customer, your email address stored in the Administrator’s mailing database may be sent to Facebook Ireland Ltd. in order to create a group of advertising recipients using that e-mail address. When using this feature, the email address is hashed before being sent to Facebook and Instagram to create an audience. The email address will be used in the matching process conducted by Facebook and Instagram. Facebook and Instagram do not share the email address with third parties or other advertisers and removes the email address immediately after the matching process. Facebook and Instagram have implemented processes and procedures to ensure the confidentiality and security of the email address sent to it and the set of Facebook user IDs that make up the group of recipients created using the email address, among other things, through the use of technical and physical safeguards.
Profiling
Based on the information we have about you gathered in the course of past cooperation (i.e. information on. history of purchases in the Online Store, history of your activities in the Online Store, the Administrator displays personalized advertisements to you, on the Online Store website https://store.feelmypaint.com.
Marketing of products and services offered by the Administrator
The Administrator sends you marketing information about the goods and services offered by the Administrator, provided that you have previously consented on the site to be contacted by phone (SMS messages) or to be contacted by e-mail, made for the purpose of direct marketing.
The administrator does not send spam, i.e. unsolicited commercial information.
The administrator shall not provide any personal data, in particular e-mail addresses or telephone numbers to third parties for the purpose of enabling them to undertake direct marketing activities concerning goods and services
RECIPIENTS OF PERSONAL DATA
In connection with the processing of your personal data, for the purposes referred to in Part. I Privacy Policy The Administrator may share your data with the following recipients or categories of recipients:
Entities providing the following services: transportation, postal services, logistics, marketing, bookkeeping, auditing, legal consulting, information technology, payment services, banks in which the Administrator has a bank account in connection with the transfer through them of amounts to your account in case of return of goods, complaints, overpayments, attorneys at law representing the Administrator, entities responsible for providing cookies – detailed information on this subject can be found in the FeelMyPaint Cookies Policy.
PLANNED DATA RETENTION PERIOD
Personal data shall be kept for the period necessary to fulfill the purposes indicated in Part. I of this Privacy Policy.
In the case of data processed on the basis of consent (applies to cookies), until the withdrawal of consent or the expiration of the retention periods for individual cookies indicated in FeelMyPaint’s Cookies Policy if this occurs prior to the withdrawal of consent.
In the case of data processed for the purpose of concluding and performing a contract (part. I.2 Privacy Policy), the Administrator shall process personal data until the expiration of the statute of limitations for civil law claims arising therefrom.
In the case of data processed to perform a legal obligation (ch. I.3 Privacy Policy) the period of data processing is determined by law.
In the case of data processed for the legitimate interest of the Controller or a third party (ch. I.4 Privacy Policy) the storage period for personal data varies depending on the specific purpose of processing:
In the case of data processing for the purpose of customer relationship management, the data is processed until you file an objection under Art. 21 para. 1 of the RODO Regulation in connection with your particular situation, but no longer than you use the Administrator’s services or have a business relationship with the Administrator;
In the case of processing of personal data for the purpose of asserting claims by the Administrator or for the purpose of undertaking defense against claims directed against the Administrator, the Administrator shall process personal data for this purpose until the asserted claim is enforced or the statute of limitations for claims has expired, whichever occurs first.
In the case of processing of personal data for the purpose of securing claims related to the sale of goods, the Administrator processes personal data for an indefinite period of time, as long as you have a business relationship with the Administrator or there are unsatisfied claims of the Administrator against you.
In the case of processing personal data for the purpose of accountability, the Administrator shall process personal data for as long as necessary to document compliance with legal requirements and to allow inspection of compliance by authorized public authorities.
In the case of data processing for profiling purposes, data shall be processed until you object under Art. 21 para. 2 of the RODO Regulation, while no longer than you use the Administrator’s services or have a business relationship with the Administrator.
In the case of processing personal data for the purpose of marketing products and services offered by the Administrator, the Administrator processes personal data for this purpose until you withdraw your consent to send commercial information to you via e-mail, SMS or object to the processing of personal data.
RIGHTS OF THE DATA SUBJECT
RIGHT OF ACCESS TO DATA
You have the right to access your data, including the right to obtain a copy of your data, including electronically.
RIGHT TO RECTIFICATION
You have the right to request rectification of incorrect above. personal data. You have the right to request completion of the incomplete above. personal data.
RIGHT TO ERASURE
You have the right to request that the Administrator delete your personal data in the event that:
data are no longer necessary for the purposes for which they were collected or otherwise processed;
you raise an objection, based on your particular situation, to the Administrator’s processing of your personal data based on the premise of the Administrator’s or a third party’s legitimate interest and there are no overriding legitimate grounds for the processing.
you object to the processing of your data for direct marketing purposes
Your personal data was processed illegally;
personal data must be deleted in order to comply with a legal obligation under European Union law or Polish law to which the Administrator is subject. However, the administrator notes that this right is subject to significant limitations. The administrator will not be able to fulfill your request if further processing is necessary for:
fulfillment by the Administrator of a legal obligation requiring processing under EU or national law (e.g., the statute of limitations for tax liabilities related to a contract concluded between the Administrator and you has not yet expired, the period for storing accounting documents issued in connection with a contract concluded between the Administrator and you has not yet expired);
establish, assert or defend against claims.
RIGHT TO RESTRICT PROCESSING
You have the right to request the restriction of the processing of your personal data if:
you question the accuracy of your personal data – for a period that allows the Administrator to verify the accuracy of the data;
processing is unlawful, and you object to the deletion of your personal data, requesting instead that its use be restricted;
The controller no longer needs your personal data for the purposes of processing, but you need them to establish, assert or defend your claims;
you have objected, on the basis of your particular situation, to the Administrator’s processing of your personal data based on the premise of the Administrator’s or a third party’s legitimate purpose – until it is determined whether the Administrator’s legitimate grounds override the grounds for your objection.
RIGHT TO DATA PORTABILITY
You have the right to receive, in the form of a file in a commonly used computer program-readable format, the data provided by you that the Administrator processes by automated means on the basis of the contract concluded with you or on the basis of the consent you have given. You also have the right to request that the aforementioned be sent to you. file to another data controller as far as it is technically possible.
RIGHT TO OBJECT
You have the right at any time to object – on grounds related to your particular situation – to the processing of personal data concerning you based on a legitimate purpose of the Administrator or a third party (Part I.4 of this Privacy Policy).
The controller has the right to refuse to stop processing your data if it demonstrates:
the existence of valid legitimate grounds for processing, overriding your interests or rights and freedoms, or
existence of grounds for establishing, asserting or defending claims
You have the right to object at any time if the Administrator processes your data for direct marketing purposes, including profiling.
The Administrator, respecting your right to privacy, gives you the opportunity to decide for yourself the extent of profiling applied to you in terms of displaying personalized advertisements. When you log in to your Online Store Account, under the “Privacy” tab you have the option to uncheck the “check-box”, which will stop the Administrator from processing your data for this purpose. At any time you can re-tick the above. check-box.
COMPLAINT TO THE SUPERVISORY AUTHORITY
You have the right to file a complaint with the supervisory authority, i.e. President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
VOLUNTARINESS OF PROVIDING DATA
If you create an account in the Online Store as a consumer, it is necessary to provide the following data, i.e. e-mail address, account login password, first and last name, telephone number, street, house number, postal code, city. The application of the aforementioned. The data is voluntary, however, refusal to provide it prevents the establishment of an Account in the Online Store.
If you create an account in the Online Store as an entrepreneur (COMPANY), it is necessary to provide the following data, i.e. E-mail address, account login password, first and last name, telephone number, tax ID number, the name under which you do business (Field: company name), street, house number, postal code, city. The application of the aforementioned. The data is voluntary, however, refusal to provide it prevents the establishment of an Account in the Online Store.
When concluding a contract for the sale of goods, in addition, you can provide a different delivery address than during registration. The application of the aforementioned. The data is voluntary.
If you agree to receive VAT invoices electronically, the Administrator will send them to the address provided during account registration in the Online Store, however, you can provide a different e-mail address at the stage of placing an order in the Online Store. The application of the aforementioned. The data is voluntary, however, refusal to provide it will result in invoices being sent by default to the e-mail address indicated when creating an account with the Online Store.
If you place an order via the Online Store to collect the returned goods from you, the Administrator processes your data to the extent necessary to fulfill this agreement, i.e. name, telephone number, e-mail address, number of invoice or receipt to which the returned goods relate, designation of the returned goods, address from which the returned goods should be collected. You also have the opportunity to provide a bank account number to which a refund will be made in the returned goods. The application of the aforementioned. The data is voluntary, however, refusal to provide it makes it impossible to place an order to collect the returned goods from you via the returns form on the website of the Online Store.
In case you want to make a complaint related to the goods, through the complaint form available in the Online Store, you must provide the following personal information: name, surname, company name(if applicable), mailing address, contact telephone number, e-mail address, number of invoice or receipt related to the advertised goods, designation of the advertised goods. You also have the option to provide a bank account number to which the refund will be made in the money. The application of the aforementioned. The data is voluntary, however, refusal to provide it makes it impossible to submit a complaint via the complaint form on the website of the Online Store.
If, without setting up an Account in the Online Store, you wish to subscribe to the newsletter, you must provide an e-mail address and agree to send commercial information to this address, as defined in Art. 2 pts. 2 of the Law of 18.07.2002. On the provision of electronic services, for direct marketing purposes. The application of the aforementioned. The data is voluntary, however, refusal to provide it prevents the newsletter from being sent to you.
If you want to receive by phone (sending SMS), e-mail, information about promotions, news and discounts concerning the Administrator’s offer, you must agree to be contacted by phone and to have commercial information sent to your phone number within the meaning of Art. 2 pts. 2 of the Law of 18.07.2002. On the provision of electronic services, for direct marketing purposes. The application of the aforementioned. data is voluntary, however, refusal to provide it prevents the Administrator from contacting you by phone (sending SMS), e-mail, .
SOURCES OF DATA ACQUISITION
The administrator obtains your personal data directly from you.
TRANSFER OF DATA TO THIRD COUNTRIES
If you accept cookies installed on the Website by third parties, data collected through these cookies may be transferred to third countries in accordance with the information provided in FeelMyPaint’s Cookies Policy.
COOKIES AND OTHER TRACKING TECHNOLOGIES
Detailed information about the Administrator’s use of cookies can be found in FeelMyPaint’s Cookies Policy
SECURITY OF PERSONAL DATA
The Administrator shall apply technical and organizational measures to protect personal data against unauthorized access, loss or damage, appropriate to the identified risks associated with data processing.
In order to prevent unauthorized persons from obtaining and modifying the personal data you send when registering and logging into your account at the Online Store, the Administrator provides encryption of the connection to the Administrator’s server using an SSL certificate.
The measures taken by the Administrator may not be sufficient if you do not maintain security yourself. In particular, you should keep your username and password for your Online Store account confidential and not share them with third parties. The administrator will not ask you to provide them, except to provide them during login.
In order to prevent the use of your Account by unauthorized persons, you should log out each time you finish using the Online Store.
The privacy policy is effective as of 26.11.2023.
