Privacy and Cookie Policy
Privacy and Cookie Policy – Winiety24.eu
This document defines the rules for processing personal data ("data") and the use of cookies on the Winiety24.eu website (hereinafter: "Store").
§1. How to contact the data administrator
The personal data administrator is Prospect Group Sp. z o.o. with its registered office in Jastrzębie-Zdrój (44-330), ul. Władysława Jagiełły 9, KRS: 0000543140, NIP: 6332233708, REGON: 360768340. Contact: +48 796 683 007, e-mail: bok@winiety24.eu.
§2. On what basis do we process your data?
We process data in accordance with GDPR (EU 2016/679):
- Art. 6 sec. 1 lit. a – consent,
- Art. 6 sec. 1 lit. b – necessity for a contract or pre-contractual actions,
- Art. 6 sec. 1 lit. c – legal obligation,
- Art. 6 sec. 1 lit. f – legitimate interest of the administrator.
§3. Processing data for the purpose of concluding and performing contracts
1) We process data necessary for the performance of the contract or actions at your request (Art. 6 sec. 1 lit. b GDPR).
2) After the contract is completed, we may process data for the purpose of pursuing/defending claims (Art. 6 sec. 1 lit. f GDPR).
3) Retention period: until the expiration of the limitation periods for claims.
4) Rights: access, rectification, erasure, restriction, data portability, objection, complaint to the UODO.
5) Providing data is voluntary, but necessary for concluding the contract.
6) Recipients: hosting, IT, mail, carriers, accounting, invoicing, payments, legal services, debt collection.
§4. Processing data for sending newsletters
1) If you sign up, we process data for sending newsletters (which may contain marketing content).
2) Basis: Art. 6 sec. 1 lit. f (administrator's legitimate interest) or Art. 6 sec. 1 lit. a (consent – if required).
3) Unsubscription is possible at any time (link in the message footer).
4) Period: until unsubscription or termination of sending.
5) Rights: as above (access, rectification, erasure, restriction, data portability, objection, complaint).
6) Voluntary — no consent = no newsletter.
7) Recipients: hosting, IT, mail, mailing system.
§5. Direct marketing
1) Data may be used for direct marketing (e.g., responding to your message).
2) We may use profiling based on activity in the Store. You have the right to object.
3) Basis: Art. 6 sec. 1 lit. f, and with consent — Art. 6 sec. 1 lit. a.
4) Period: until the purpose is achieved or consent is withdrawn.
5) Rights: as above.
6) Voluntary — lack of data prevents marketing activities.
7) Recipients: hosting, IT, advertisers.
§6. Ensuring security
1) We process, among others, IP, browser type/language, timestamp, server errors, URL — to protect services.
2) Legal interest: counteracting abuse/attacks.
3) Basis: Art. 6 sec. 1 lit. f GDPR.
4) Period: until the expiration of claims.
5) Rights: as above.
6) Condition for using the Store.
7) Recipients: hosting, IT.
§7. Expressing opinions about goods
1) Data for publishing opinions: consent (Art. 6 sec. 1 lit. a) and/or administrator's interest (Art. 6 sec. 1 lit. f).
2) You can withdraw your consent at any time.
3) Period: until consent is withdrawn; logs — until the expiration of claims.
4) Rights: as above.
5) Voluntary — lack of data prevents adding opinions.
6) Recipients: hosting, IT, website users.
§8. Data recipients
Data may be shared with: IT providers, hosting (OVH), mail (OVH), advertising entities (Prospect Group), accounting (BR ACARTUS), invoicing (Fakturownia), legal services, newsletter (Prospect Group), payment operator (PayPro S.A.).
§9. Absolute rights of data subjects
You have the right to: access data, rectification, erasure ("to be forgotten"), restriction, objection, obtaining a copy of data, and lodging a complaint with the President of UODO (ul. Stawki 2, 00-193 Warszawa, Poland).
§10. Relative rights of data subjects
If processing is based on consent, you can withdraw it at any time. You have the right to data portability, to request their transfer to another administrator, and to object to processing (including direct marketing).
§11. Cookies — introduction
We use cookies: essential (Art. 6 sec. 1 lit. f), as well as analytical/marketing cookies (Art. 6 sec. 1 lit. a — consent). We distinguish between session, persistent, first-party, and third-party cookies.
§12. Administrator's cookies
They ensure login and session, security (CSRF/anti-bot), remembering forms, shopping cart, and preferences.
§13. Third-party cookies
We use, among others, Google (Ads, Analytics) and Meta (Facebook). Details: Google, Facebook.
§14. Consent to the use of cookies and their management
Except for essential cookies, processing takes place based on your consent, which you can withdraw at any time in your device/browser settings or in the consent panel (cookie banner). Lack of consent may limit the functionalities of the Store.
§15. Cache memory
The Store may use browser/device cache for faster operation and lower data transfer (e.g., static resources).
§16. Links to other websites and software
Links lead to external websites/applications. We are not responsible for their policies. Please familiarize yourself with the rules of these entities.
§17. Changes to the privacy and cookie policy
1) The policy is effective from the date of publication in the Store.
2) Changes come into force upon the publication of a new version.
3) A notice of change will be published at least 3 days before it takes effect.