Privacy policy

§1 Data Controller's Identity

1. The data controller for personal data provided while using the Service and the Store operated under the name www.vespoint.eu is Mariana Kozova, conducting business under the name VES Mariana Kozova, VAT ID: 9482633115, REGON: 521637027, address: ul. Andrzeja Struga 18, 26-600 Radom, email: info@vespoint.eu.

2. The principles of cookie file processing are provided in the Cookie Policy available at: www.vespoint.eu/de/cookies-policy/

3. This Privacy Policy covers the principles of processing data of Buyers, Users of the Website/Store, and Observers on the Fanpage - Facebook "@vespoint.eu" or Instagram "@ves.point", as well as data collected through contact via email (email address) or by phone.

4. The data is processed in accordance with the currently applicable law, i.e., the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR), the Act of 10 May 2018 on the protection of personal data, and the Act of 18 July 2002 on the provision of electronic services.

§2 Definitions

1. In this policy, the following definitions apply:

1. Service/Store - the website available at www.vespoint.eu, through which the User can browse its content, contact the data controller, place orders for Goods, request commercial and marketing information (newsletter), create an account in the store, and add opinions about the Goods.
2. Data Controller - the entity that determines the purpose and means of data processing, i.e., Mariana Kozova, conducting business under the name VES Mariana Kozova, VAT ID: 9482633115, REGON: 521637027, address: ul. Andrzeja Struga 18, 26-600 Radom, email: info@vespoint.eu.
3. User - a natural person whose data is processed and who uses the services available on the Website/Store, as well as the Buyer through messages sent to the Fanpage - Facebook "@vespoint.eu" or Instagram "@ves.point".
4. Personal Data - any information that, without undue time and cost, can lead to the identification of a natural person, including their identification, address, and contact details.

§3 Purposes of Data Processing

1. The data controller processes the personal data of Users and Buyers for the following purposes:

1. to perform a contract in which the data subject is a party or to take action at the request of the data subject, i.e., to place and fulfill an order in the Store, fulfill the data subject's rights related to order fulfillment, including withdrawal from the contract and warranty, based on Art. 6(1)(b) of the GDPR,
2. to respond to inquiries submitted through the contact form or via contact details available on the Website/Store or through social media, based on Art. 6(1)(b) of the GDPR, i.e., the necessity of data for contract performance or prior to its conclusion, at the request of the data subject,
3. to document sales, including issuing an invoice or receipt for an individual, based on Art. 6(1)(c) of the GDPR, i.e., for the purpose of fulfilling legal obligations incumbent on the Personal Data Administrator, pursuant to Art. 70 of the Tax Ordinance Act of 29 August 1997,
4. to add an opinion or comment on the Store's website, with the consent of the data subject, based on Art. 6(1)(a) of the GDPR, i.e., the consent of the data subject,
5. to send a survey regarding opinions on the services and products of the Data Administrator through external customer satisfaction survey services, with the consent of the data subject, based on Art. 6(1)(a) of the GDPR, i.e., the consent of the data subject,
6. for marketing the Data Administrator's own products and services through traditional means, based on Art. 6(1)(f) of the GDPR, i.e., for the purpose of pursuing the legitimate interests of the data administrator or the data subject,
7. to send commercial and marketing information by the Data Administrator (Newsletter) to the email address provided by the User during newsletter subscription, with the consent of the data subject, based on Art. 6(1)(a) of the GDPR, i.e., the consent of the data subject,
8. to assert rights and claims by the data administrator or the data subject, based on Art. 6(1)(f) of the GDPR, i.e., for the purpose of pursuing the legitimate interests of the data administrator or the data subject.

2. Providing data is necessary for order fulfillment, issuing sales documents, asserting claims, and responding to inquiries.

3. Providing other data is voluntary.

4. Failure to provide the required data will prevent the proper fulfillment of the order, issuing an invoice or receipt, or initiating contact at the request of the data subject.

§4 Scope of Processed Data

1. The scope of processed personal data has been limited to the minimum necessary to achieve the purpose for which the data is processed, i.e.:

1. when placing an order in the Store: name, email address, telephone number, delivery address, and optionally, a pickup point address,
2. when submitting an inquiry through the contact form or via contact details on the website: email address, telephone number, name, and any other data voluntarily provided by the data subject,
3. when subscribing to the newsletter: name and email address,
4. when registering an account in the Store: name, email address, password, and username,
5. when issuing an invoice or receipt: name and surname or company name, registered office address, tax identification number, and other settlement data.

§5 Methods of Data Acquisition

1. User's personal data is collected directly from the data subjects themselves, i.e., through:

1. completing the order form in the Store, completing the contact form on the website with contact details, completing the newsletter subscription form,
2. registering an account in the Store,
3. providing data necessary for preparing and concluding a contract,
4. direct contact with the data administrator via contact details available on the website or in traditional form at the place of business.

§6 Data Retention Period

1. Personal data is processed for the period necessary to achieve the purpose for which it was collected, i.e.:

1. for the duration of the concluded contract,
2. for the period necessary to document the executed contract, including issuing an invoice or receipt - data is stored for 5 years, counted from the end of the calendar year in which the tax payment deadline expired,
3. for the period necessary to respond to an inquiry submitted through the contact form or by phone,
4. until consent is withdrawn if the processing of data is based on the consent of the data subject, including for the purpose of sending the Newsletter or issuing opinions about the products available in the Store.

§7 Data Recipients

1. The User's personal data may be entrusted to other entities for the purpose of providing services on behalf of the data administrator, in particular for:

1. hosting the website and maintaining the Store's email,
2. servicing and maintaining the IT systems in which the data is processed, including the automation of the newsletter, issuing invoices, order processing, etc.,
3. conducting accounting services by an external accounting office,
4. shipping orders through a courier service broker.

2. The User's personal data may also be disclosed to entities supporting the data administrator, including entities providing courier and postal services, online payment or credit services (in accordance with the operator specified in the Store's Terms and Conditions).

3. Personal data may be transferred to third countries, i.e., outside the European Economic Area (EEA), in particular to the United States of America. This applies to situations where data processing outside the EEA will take place in connection with the use of IT systems through which the data is processed.

4. The Administrator is the data administrator for Buyers and Observers who use electronic communication means on the Fanpage - Facebook "@vespoint.eu" or Instagram "ves.point" when contacting through them. In other respects, the data administrator for users of these social media platforms is Facebook, Inc., headquartered at 1 Hacker Way, Menlo Park, CA 94025, USA, and the processing of this data is carried out in accordance with the regulations and privacy policies of the users of these platforms, including at: https://www.facebook.com/privacy.

5. Processing of data outside the European Economic Area will be based on standard contractual clauses between the Data Controller and the service provider. The processing of data will not violate the privacy of individuals. The data administrator and the service provider will ensure the highest guarantees for the protection of entrusted data.

§8 Rights of Data Subjects

1. The data subject has the right:

1. to access and rectify their data,
2. to erase their data, unless other legal provisions require the data controller to archive the data for a specified period,
3. to data portability, provided that the processing of data is based on a contract or the consent of the data subject and the data processing is carried out in an automated manner,
4. to object to the processing of data for direct marketing purposes, carried out by the data controller based on a legitimate legal interest, as well as to restrict processing,
5. not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them,
6. to control the processing of data and obtain information about who is the data controller, as well as information about the purpose, scope, and manner of data processing, the content of the data, the source of the data, and the method of sharing, including recipients or categories of recipients of the data,
7. to withdraw consent at any time, if the processing of data is based on the consent of the data subject. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal,
8. to lodge a complaint with the President of the Office for Personal Data Protection (PUODO) if the data subject considers that the processing of their data violates the currently applicable provisions in this regard.

§9 Cookies

The rules for the use of cookies by the Website and the Store, known as "cookies," are specified in the Cookie Policy, available at www.vespoint.eu/de/cookies-policy/.

§10 Final Provisions

In the event of a change in the applicable privacy policy, particularly if the implemented technical solutions or changes in privacy laws require it, appropriate modifications to the above provisions will be introduced and will be effective within 14 days from their publication on the Store's website.