Privacy Policy and Cookies
Privacy and Cookies Policy – Winiety24.eu
This document defines the principles of personal data processing ("data") and the use of cookies on the Winiety24.eu website (hereinafter: "Store").
§1. How to contact the data administrator
The personal data administrator is Prospect Group Sp. z o.o. with its registered office in Jastrzębie-Zdrój (44-330), ul. 11 Listopada 79, KRS: 0000543140, NIP: 6332233708, REGON: 360768340. Contact: +48 796 683 007, e-mail: bok@winiety24.eu.
§2. On what basis do we process your data
We process data in accordance with GDPR (EU 2016/679):
- Art. 6 sec. 1 lit. a – consent,
- Art. 6 sec. 1 lit. b – necessity for the contract or pre-contractual actions,
- Art. 6 sec. 1 lit. c – legal obligation,
- Art. 6 sec. 1 lit. f – legitimate interest of the administrator.
§3. Data processing for the conclusion and performance of contracts
1) We process data necessary for the performance of the contract or actions at your request (Art. 6 sec. 1 lit. b GDPR).
2) After contract performance, we may process data for the purpose of asserting/defending claims (Art. 6 sec. 1 lit. f GDPR).
3) Storage period: until the expiry of claim limitation periods.
4) Rights: access, rectification, erasure, restriction, portability, objection, complaint to the President of the Personal Data Protection Office (DPPA).
5) Providing data is voluntary, but necessary for concluding the contract.
6) Recipients: hosting, IT, mail, carriers, accounting, invoicing, payments, legal services, debt collection.
§4. Data processing for sending newsletters
1) If you subscribe, we process data for sending the newsletter (may contain marketing content).
2) Basis: Art. 6 sec. 1 lit. f (administrator's legitimate interest) or Art. 6 sec. 1 lit. a (consent – if required).
3) Unsubscription is possible at any time (link in the message footer).
4) Period: until unsubscription or cessation of sending.
5) Rights: as above (access, rectification, erasure, restriction, portability, objection, complaint).
6) Voluntary — no consent = no newsletter.
7) Recipients: hosting, IT, mail, mailing system.
§5. Direct marketing
1) Data may be used for direct marketing (e.g., replying to your message).
2) We may use profiling based on activity in the Store. You have the right to object.
3) Basis: Art. 6 sec. 1 lit. f, and with consent — Art. 6 sec. 1 lit. a.
4) Period: until the purpose is achieved or consent is withdrawn.
5) Rights: as above.
6) Voluntary — lack of data prevents marketing activities.
7) Recipients: hosting, IT, advertisers.
§6. Ensuring security
1) We process, among others, IP, browser type/language, timestamp, server errors, URL — to protect services.
2) Legitimate interest: preventing abuse/attacks.
3) Basis: Art. 6 sec. 1 lit. f GDPR.
4) Period: until the expiry of claim limitation periods.
5) Rights: as above.
6) Condition for using the Store.
7) Recipients: hosting, IT.
§7. Expressing opinions about goods
1) Data for publishing opinions: consent (Art. 6 sec. 1 lit. a) and/or legitimate interest of the administrator (Art. 6 sec. 1 lit. f).
2) You can withdraw consent at any time.
3) Period: until consent is withdrawn; logs — until the expiry of claim limitation periods.
4) Rights: as above.
5) Voluntary — lack of data prevents adding an opinion.
6) Recipients: hosting, IT, website users.
§8. Data recipients
Data may be shared with: IT providers, hosting (OVH), mail (OVH), advertising entities (Prospect Group), accounting (BR ACARTUS), invoicing (Fakturownia), legal services, newsletter (Prospect Group), payment operator (PayPro S.A.).
§9. Absolute rights of data subjects
You have the right to: access data, rectification, erasure ("to be forgotten"), restriction, objection, data portability, and to lodge a complaint with the President of the Personal Data Protection Office (DPPA) (ul. Stawki 2, 00-193 Warszawa).
§10. Relative rights of data subjects
If processing is based on consent — you can withdraw it at any time. You have the right to data portability, to request its transfer to another administrator, and to object to processing (including direct marketing).
§11. Cookies — introduction
We use cookies: essential (Art. 6 sec. 1 lit. f), as well as analytical/marketing (Art. 6 sec. 1 lit. a — consent). We distinguish between session, persistent, first-party, and third-party cookies.
§12. Administrator's cookies
They ensure login and session, security (CSRF/anti-bot), remembering forms, shopping cart, and preferences.
§13. Third-party cookies
We use, among others, Google (Ads, Analytics) and Meta (Facebook). Details: Google, Facebook.
§14. Consent to the use of cookies and their management
Apart from essential cookies, processing is based on consent, which you can withdraw at any time in your device/browser settings or in the consent panel (cookie banner). Lack of consent may limit the functionality of the Store.
§15. Cache memory (cache)
The Store may use browser/device cache for faster operation and lower data transfer (e.g., static resources).
§16. Links to other websites and software
Links lead to external websites/applications. We are not responsible for their policies. Please familiarize yourself with the policies of these entities.
§17. Changes to the privacy and cookie policy
1) The policy is effective from the date of publication in the Store.
2) Changes come into effect upon publication of a new version.
3) We publish a change notification at least 3 days before it comes into effect.