This document defines the principles of the Privacy Policy in the Online Store (hereinafter referred to as the “Online Store”).

1. The administrator of the Online Store is 4MA ​​Mariusz Zdzieszyński with its registered office in Banino, ul. Wspólna 42/2, NIP: 5781186395, REGON: 170762413.
2. As the Administrator, we have not appointed a personal data protection officer. In all matters regarding the processing of personal data by us and the exercise of rights related to data processing, you can contact us at the email address: kontakt@staffonly.pl, or in writing to the address of the company’s registered office.
3. The personal data administrator processes your personal data for the following purposes and scope:
   • take action before concluding the Agreement at your request (e.g. setting up an Account), i.e. data provided in the registration form in the Online Store, i.e. e-mail address and established password, gender; and if you register when purchasing Goods, we collect your name and surname and data provided in order to process the Order, such as the shipping address; in order to provide Services requiring the creation of an Account, such as: keeping the history of Orders, informing about the status of the Order, we process your data provided in the Account and when purchasing Goods;
   • in order to provide Services that do not require the creation of an Account and the purchase of Goods, i.e. browsing the websites of the Online Store, search engine for Goods, we process personal data regarding your activity in the Online Store, i.e. data on the Goods you browse, data on your device session, operating system, browser, location and unique ID, IP address;
   • in order to perform the Agreement for the sale of Goods (e.g. delivery of ordered Goods), we process personal data provided by you when purchasing Goods, such as name and surname, e-mail address, address details, payment details, and if you make a purchase via an Account, additionally established password;
   • for statistics on the use of individual functionalities available in the Online Store, facilitating the use of the Online Store and ensuring IT security of the Online Store, we process personal data regarding your activity in the Online Store and the amount of time spent on each of the subpages in the Online Store, your search history, location , IP address, device ID, data about your web browser and operating system;
   • for the purpose of marketing our Goods and Services as well as our Clients and partners, we process personal data provided by you when creating an Account and updating it, data regarding your activity in the Online Store, including Orders, which are registered and stored via “cookies”, and in in particular, the history of Orders, search history, clicks in the Online Store, login and registration dates, history and your activity related to our communication with you. In the case of remarketing, we use data about your activity to reach you with our marketing messages outside the Online Store and we use the services of external providers for this purpose. These services consist in displaying our messages on websites other than the Online Store. Details on this subject can be found in the provisions regarding “cookies”;
   • in order to establish, pursue and enforce claims and defend against claims in court proceedings and other enforcement authorities, we may process your personal data provided when purchasing Goods or setting up an Account and other data necessary to prove the existence of a claim or which result from a legal requirement, court order or another legal procedure;
   • in order to research opinions on our services and products by us or our partners, i.e. information about the Order, your data provided in the Account or when purchasing the Goods, e-mail address. Data collected as part of market research and opinion polls are not used by us for advertising purposes. Detailed instructions are given in the information about the given survey or in the place where you enter your data;

4. As the Administrator of your personal data, we do not use automated decision-making towards you, unless you agree to it by checking the appropriate box.
5. The personal data controller processes the following categories of relevant personal data:

• contact details;
• data on activity in the Online Store;
• data regarding Orders in the Online Store;
• data on complaints and requests;
• data regarding Marketing Services.

6. Personal data processing period:

• Your personal data will be stored until the statute of limitations for claims under the contract / provision of services or until the expiry of the obligation to store data under the law, in particular the obligation to store accounting documents regarding the contract.
• Where we process personal data based on the justified interest of the Administrator, personal data will not be processed for specific purposes if you object to such processing.
• If we process data based on your consent, personal data will be processed until it is withdrawn.
• When the data subject does not take action for more than 10 years (inactive contact);

7. In connection with the processing of personal data for the purposes set out in this Privacy Policy for the purposes necessary for the provision of services, your personal data may be made available by the Online Store to other recipients or categories of recipients of personal data, which may be:

• state authorities
• transport and courier companies such as DPD Polska sp. z o. o. and InPost sp. z o. o.

8. The collected personal data will not be transferred to recipients located in countries outside the European Economic Area (European Union countries as well as Iceland, Liechtenstein and Norway).
9. You have the right to access your data and the right to request their rectification, deletion, processing restrictions. If the basis for the processing of your personal data is the legitimate interest of the Administrator, you can object to the processing of your personal data. In particular, you have the right to object to processing for direct marketing purposes, including automated profiling and for analytical purposes.
10. To the extent that the basis for the processing of your personal data is consent, you have the right to withdraw your consent. Withdrawal of consent does not affect the lawfulness of the processing that was made on the basis of consent before its withdrawal.
11. You have the right to be forgotten.
12. To the extent that your data is processed for the purpose of concluding and performing the contract / provision of services or processed on the basis of consent – you also have the right to transfer personal data. In such a situation, you will receive your personal data from us in a structured, commonly used, machine-readable format. You can send this data to another data controller.
13. You have the right to lodge a complaint with the supervisory authority dealing with the protection of personal data, in particular in the Member State of your habitual residence, place of work or place of alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the President of the Office for Personal Data Protection (PUODO).

14. Providing personal data in connection with the concluded contract / services provided on its basis is voluntary, but necessary for the conclusion and performance of the contract. The consequence of not providing this data will be the inability to conclude a contract with the Online Store
    

• If you provide your personal data in order to transfer your personal data to Twisto Polska sp. z o. o. before concluding a contract for the sale of goods (or services) purchased in the Online Store, the provision of this data is a condition for concluding a sales contract in connection with the business model adopted by the Online Store.
• If you provide your personal data to the Bank in connection with the handling and settlement of payments made by you to the Online Store via the Internet using payment instruments, providing the data is required in order to make the payment and provide confirmation of its execution by the Bank to item of the online store.

• If you provide your personal data to the Bank in order for the Bank to verify the proper performance of contracts concluded with the Online Store, in particular to ensure the protection of payers’ interests in connection with their complaints, providing this data is required to enable the performance of the contract concluded between the Online Store and the Bank.

15. Providing personal data for marketing purposes is voluntary.

16. This privacy policy is effective from August 11, 2020. The Administrator reserves the right to change the privacy policy and adapt it to the law in force at a given moment.

17. In matters not covered by this Privacy Policy, the provisions of the Civil Code and relevant acts of Polish law, as well as European Union law, in particular the GDPR (Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, shall apply. on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).