Grendure - Privacy policy

Below you will find information on the processing of your personal data in connection with your use of the website available at: www.grendure.com ("Website"), as well as the processing of your personal data in other cases. In this Privacy Policy you will also find information on the cookies used on the Website.

Administrator data and contact with the administrator

Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ( "GDPR").

The administrator, i.e. the entity that determines the purposes and methods of processing your personal data, is Paulina Butt running a business under the name Grendure, address: Dworska 3 43-418 Pogwizdów, Polska , NIP number: 5482735517 , REGON number: 38847080200000 .

In matters relating to the processing of your personal data, you can contact me by writing to the e-mail address: [ info@grendure.com ].

Processing of data of persons contacting the administrator (by e-mail, telephone, contact form, communicators on social networks)

When you contact me by e-mail, telephone, via the contact form or communicator on social networks - e.g. via Messenger, WhatsApp, direct messages on Instagram or TikTok, I receive your personal data directly from you and they are processed for the following purposes and on the following grounds legal:

responding to your inquiries - which is my legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR;
taking actions before concluding the contract at your request, e.g. sending offers at your request - pursuant to art. 6 sec. 1 lit. b) GDPR;
establishing, investigating and defending claims, which is my legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR.

Providing personal data is voluntary, but necessary to achieve the above purposes, in particular to answer your inquiry or send you an offer.

Your personal data is processed for the period necessary to achieve the above purposes or until you submit an effective objection to the processing of personal data. In the event of concluding a contract with you, personal data collected in the course of correspondence are stored on the principles set out in the section "Processing of personal data of customers (natural persons)". If no contract is concluded between us, the personal data will be deleted no later than 6 months after contact.

Processing personal data of customers (natural persons)

In the event that we conclude a contract for the provision of services by me to you, when you create an account on my website, post your comment on the website, make a purchase in my online store, I receive personal data directly from you and process it for the following purposes and on the following legal grounds:

conclude a contract with you and its performance - pursuant to art. 6 sec. 1 lit. b) GDPR;
the implementation of services provided by me electronically, i.e. via the Website, including: enabling the use of an on-line account, identification of a person registering an account on-line / logging in to an on-line account, posting comments under the entries on the Website - on pursuant to Art. 6 sec. 1 lit. b) GDPR (data processing is necessary to perform the contract for the provision of electronic services);
ongoing contact regarding the provision of services, consideration of possible complaints, fraud prevention, which is my legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR;
implementation of my legal obligations in the field of taxes and accounting, in particular: issuing an invoice or other accounting document, accounting, tax settlements, data archiving for accounting purposes - pursuant to art. 6 sec. 1 lit. c) GDPR in connection with the provisions of the tax law and the Accounting Act;
establishing, investigating and defending claims, which is my legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR;
for marketing purposes, i.e. sending you commercial information by electronic means, including a newsletter, or sending you marketing messages over the phone, if you give your consent - pursuant to art. 6 sec. 1 lit. a) GDPR and in accordance with art. 10 of the Act on the provision of electronic services or

art. 172 of the polish Telecommunications Law.

Providing personal data to the extent necessary to fulfill my legal obligations is mandatory and results from tax regulations and the Accounting Act. Providing personal data in order to conclude a contract is voluntary, but necessary to conclude this contract and its implementation. Providing personal data in the remaining scope is voluntary and is not a condition for the conclusion of the contract and its implementation.

Personal data is stored for the duration of the contract, and then until the statutory data storage obligation ends (5 years from the end of the tax year) and until the expiry of the limitation period for claims. Personal data processed on the basis of consent are stored until its withdrawal.

In the case of an on-line account, the data processed on this account will be stored until the account is deleted (except for transaction data, which I am obliged to keep in accordance with statutory deadlines).

If you add content (entry, comment) on the Website, your personal data will be stored for the duration of the publication of the entry or comments under the entry, and after its removal, it will not be stored by me.

Processing of personal data of Contractors (natural persons conducting business activity)

If I conclude a contract with you for the provision of services to me or another contract, I receive personal data directly from you and process it for the following purposes and on the following legal grounds:

conclude a contract with you and its performance - pursuant to art. 6 sec. 1 lit. b) GDPR;
ongoing contact regarding the provision of services, consideration of possible complaints, fraud prevention, maintaining business relations, which is my legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR;
implementation of my legal obligations in the field of taxes and accounting, in particular: bookkeeping, tax settlements, data archiving for accounting purposes - pursuant to art. 6 sec. 1 lit. c) GDPR in connection with the provisions of the tax law and the Accounting Act;
establishing, investigating and defending claims, which is my legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR;
for marketing purposes, i.e. sending you commercial information by electronic means, including a newsletter, or sending you marketing messages over the phone, if you give your consent - pursuant to art. 6 sec. 1 lit. a) GDPR and in accordance with art. 10 of the Act on the provision of electronic services or art. 172 of the polish Telecommunications Law .

Processing of personal data of Representatives (persons representing clients or contractors)

If my client or contractor (both a natural person, a company or another type of entity) is represented by you or you have been appointed by him for ongoing contacts in connection with the conclusion and performance of the contract, I receive your personal data from the customer or contractor or directly from You.

Then I process your identification data (e.g. names, surnames, name of the entity you represent or work with, name of the position / name of the performed function, scope of matters that you deal with), data on the authorization granted (e.g. date of authorization, type and scope of the authorization granted), contact details (e.g. business phone number, email).

I process your personal data for the following purposes and on the following legal grounds:

in order to conclude and perform an agreement between the contractor or client and me, and in particular to verify your authorization to conclude the contract on behalf of the contractor or client and to contact you as a contact person in connection with the performance of the contract - pursuant to art. 6 sec. 1 lit. f) GDPR, i.e. on the basis of a legitimate interest pursued by both me and my contractor or client, which is to enable us to efficiently perform the contract and to verify your authorization to conclude the contract on behalf of the contractor or client;

b) in order to make tax settlements and keep accounting records - pursuant to art. 6 sec. 1 lit. c) GDPR, i.e. data processing is necessary for the fulfillment of legal obligations incumbent on me and resulting from generally applicable law, including tax law and accounting regulations;

c) in order to establish, investigate or defend claims between a contractor or a client and me - pursuant to art. 6 sec. 1 lit. f) GDPR, i.e. processing is necessary for the purposes of my legitimate interests, consisting in the possibility of establishing, pursuing or defending claims);

d) in order to establish or maintain business relationships with a contractor or client, through you, which is my legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR;

e) for marketing purposes, i.e. sending you commercial information by electronic means, including a newsletter, or directing marketing to you by phone - if you have given me your consent in accordance with art. 6 sec. 1 lit. a) GDPR and in accordance with art. 10 of the Act on the provision of electronic services or art. 172 of the Polish Telecommunications Law.

If you provide me with your personal data directly, it is voluntary, but necessary to conclude and perform the contract and establish business relationships. Failure to provide personal data results in the inability to conclude and perform the above contract, as well as maintain business relationships. Providing personal data for marketing purposes is completely voluntary.

Your personal data is processed for the period necessary to achieve the goals indicated above, in particular for the period of maintaining business relations and the performance of the contract concluded with my contractor or client, and then they will be stored by me until the claims are time-barred or until the obligation to store data resulting from legal regulations (e.g. tax law). Personal data processed on the basis of consent will be stored until its withdrawal.

Processing of personal data in connection with the subscription to the Newsletter

If you agree to receive the Newsletter from me by e-mail, I receive your personal data directly from you and process it on the basis of art. 6 sec. 1 lit. a) GDPR and in accordance with art. 10 of the Act on the provision of electronic services or art. 172 of the Telecommunications Law.

Providing personal information is voluntary. I will keep your personal data until you withdraw your consent.

Processing of personal data on social media

I run profiles on the following social media:

Facebook - [https://www.facebook.com/search/top?q=grendure]

Instagram - [https://www.instagram.com/grendure.official/]

TikTok - [link]

In connection with the maintenance of the above profiles, I obtain your personal data in connection with your subscription to my fanpages or channels in social media (clicking the "Like", "Follow", "Subscribe" icon, etc.), posting a comment by you at any of the posts posted on the fanpage or channel, as well as in connection with sending me messages via the social network. I process your personal data in particular in the following scope:

Your user ID (may include your first and last name);
Your identification data and other information to the extent published by you on your own profile on a given social networking site;
profile photo (I can get to know your image in some cases);
other photos (which may also show an image) you have voluntarily posted under my posts;
the content of the comments and the content of the conversation with you via the given social networking site;
statistics on visits to my profiles or channels on social media.

In connection with the above, I process your personal data for the following purposes and on the following legal grounds:

keeping a profile on social media, on the terms and conditions set out by the operators of these social networks and using it to inform about activities, services, promoting various events, competitions that I organize, sharing knowledge, as well as to build and maintain the community and in the purpose of communication via the available functionalities of social networking sites (comments, chat, messages, including event subscriptions), which is my legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR;
conducting analyzes of the functioning, popularity and method of using profiles in social media, which is my legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR.

When using the statistics function on Facebook, me and Facebook Ireland Limited act as joint controllers of data processed for the purposes of statistics. The arrangements between the joint controllers, defining the scope of responsibility for the processing of personal data, can be found here: https://www.facebook.com/legal/terms/page_controller_addendum .

According to them, Facebook Ireland has assumed primary responsibility under the GDPR for the processing of data for the purposes of statistics and for the fulfillment of all relevant obligations under the GDPR.

Tracking activity on websites can take place regardless of whether you are logged in or registered on a social network. I would like to point out that I have no influence on the tracking of Internet activity used by a given social networking site and I cannot, for example, turn it off.

Detailed information on activity tracking can be found in the privacy policies of social network operators. As for the statistics I receive from operators, I have a limited influence on them and I can prevent their transmission only to a limited extent. If you are a logged in / registered user of a given social networking site, please verify your privacy settings to suit your preferences.

Providing personal information is voluntary.

Information that is contained in private messages sent to me via social networks will be stored for the duration of answering the questions sent (for a maximum of [12] months ) or until the cooperation is terminated or your user profile is deleted on the social network in whichever comes first.

In the case of information I have as part of the comments you have shared, it will be available on my profile until you delete it.

Personal data collected by a given social networking site, i.e. history of entries, history of activity and messages sent, are stored on the terms set out in the regulations of a given social networking site.

Statistical data on people visiting my profiles in social media will be processed as long as this data is available on a given social network in accordance with its regulations.

Remember that apart from me, the administrator of your personal data is the operator of the given social network that you use and through it you visit my profile. I have limited influence on the way your personal data is processed by a given social network operator. Please read the terms and conditions and privacy policy of the social network you use and through which you visit my profile.

Information on the processing of your personal data by operators can be found here:

Facebook: https://www.facebook.com/privacy/explanation

Instagram: https: //help.instagram.com/519522125107875 \

TikTok: https://www.tiktok.com/legal/privacy-policy?lang=pl

Processing of personal data of competition participants

If you take part in a competition organized by me on my website or in social media, the rules for the processing of personal data may be separately specified in the rules of such competition. If nothing else results from these separate rules, I process your personal data provided directly by you for the following purposes and on the following legal grounds:

conducting a competition, selecting a winner, informing him about the award, handing over the award - on the basis of the consent referred to in Art. 6 sec. 1 lit. a) GDPR;
in order to fulfill the legal obligations incumbent on me in connection with the organization of the competition and the transfer of the prize to the winner, if the nature of the competition and the awarded prize requires it - pursuant to art. 6 sec. 1 lit. c) GDPR in connection with tax regulations;
to consider complaints, establish, assert and defend claims - which is my legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR.

Providing personal data is voluntary, but necessary to participate in the competition. If the awarding of the award involves the fulfillment of tax obligations, providing your personal data will be mandatory.

Data processing in connection with sending requests regarding the exercise of rights under the GDPR

Due to the fact that you have certain rights in connection with the processing of your personal data by me, you can send me correspondence regarding the implementation of these rights. In consequence, the processing of your identity, contact information, and other data provided in correspondence with you or another person who on your behalf sends me a request for realization of your rights under GDPR. If the application is not sent directly by you, but by an attorney or legal representative, I also process the data of that attorney or representative, i.e. their identification details, contact details and the type of authorization.

The personal data of applicants are processed by me for the following purposes and on the following legal grounds:

for the purposes of contact and correspondence regarding the sent application regarding the exercise of rights under the GDPR - pursuant to art. 6 sec. 1 lit. c) GDPR, because the processing of personal data is necessary to fulfill the legal obligation incumbent on me pursuant to art. 12 sec. 1-3 GDPR;
in order to archive correspondence conducted regarding the handling of the submitted application regarding the exercise of rights under the GDPR, for evidence purposes and to demonstrate that I responded to the submitted application on time, which is my legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR.

Providing personal data is necessary to fulfill the request.

Personal data is processed for the period of correspondence, and then will be archived for evidence purposes until the expiry of the limitation period for claims.

Recipients of personal data

Your personal data may be disclosed by me to other entities, i.e .:

my subcontractors, contractors, in particular entities providing legal, training, accounting, marketing and IT services (in most cases these are processors with whom I have concluded agreements for entrusting the processing of personal data);
banks or intermediary institutions in making payments in the online store;
couriers, post office;
entities authorized under the law;
when you publish content on my Website or on a profile in social media, your personal data may also be visible to people visiting the Website or my profiles on social media.

Automated decision making

If you consent to the use of advertising cookies on the Website (as described below in the Privacy Policy) or if you are a subscriber of the Newsletter, I analyze the data on the history of browsing the content on the Website, the history of transactions made in the online store, activity history on my social media profiles, as well as data from the Newsletters I send. This analysis is performed by automated means, taking into account your actions, click behavior on the Website or in the Newsletter (if you subscribe to it). However, this information will not cause any legal effects to you or similarly significantly affect your situation. This analysis is aimed at the selection of advertisements displayed to you while browsing websites and the selection of products offered to you. You can receive special offers via personalized e-mail, postal or online advertising on my Website or on external channels (e.g. social media).

Data transfer outside the EEA

In connection with my running profiles or channels on social networking sites, your personal data is processed through a specific social networking site, the servers of which may be located in the United States or another country outside the European Economic Area (EEA). When personal data is transferred outside the EEA, the operators of social networking sites are required to apply appropriate safeguards, in particular the EU Standard Contractual Clauses. In such cases, you can request a copy of these relevant safeguards. More detailed information can be found in the privacy policies of individual social networks.

In connection with my use of Google Analytics, e-mail and potentially other service providers, your personal data may also be transferred to a third country, only on the basis of appropriate safeguards provided for in the GDPR, in in particular, on the basis of the EU Standard Contractual Clauses.

In the case of the Google Analytics service, anonymous collection of IP addresses (so-called IP masking) by the code "gat._anonymizelp ();" has been implemented on the Website. As a result, the user's IP address is shortened by Google within the territory of the EU and EEA. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. You can read more about information processing as part of the Google Analytics service here: https://policies.google.com/privacy

Your rights

Due to the processing of your personal data by me, you have the following rights:

access to your personal data (Article 15 of the GDPR), including obtaining a copy of the data (Article 15 (3) of the GDPR),

b) rectification (correction) or supplementation of incomplete personal data (Article 16 of the GDPR),

c) request deletion of personal data in cases provided for by law (Article 17 of the GDPR),

d) requests to limit the processing of personal data (Article 18 of the GDPR),

e) receive your data in a structured, commonly used format and their transfer when the processing is based on your consent or contract in an automated manner (Article 20 of the GDPR),

f) object to the processing of your personal data in the event of their processing in order to implement my legitimate interest, for reasons related to your particular situation (Article 21 of the GDPR),

g) withdraw the consents granted at any time, without affecting the lawfulness of the processing that took place on the basis of the consents before their withdrawal.

You can exercise the above rights by writing to me at the following e-mail address: info@grendure.com

In addition, if you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the supervisory body, i.e. the President of the Office for Personal Data Protection based in Warsaw. Details on submitting complaints can be found on the UODO website, at: https://uodo.gov.pl/pl/83/155

Cookies

I use cookies or other similar technologies on the website. Cookies are small text files that contain information about your activity on the Website and store it on the device from which you access the Website.

In accordance with applicable law, I can store cookies on your device if they are necessary for the functioning of the Website (I describe these files below as necessary). I need your permission to use all other types of cookies (especially analytical and advertising cookies).

By using the website, through your browser settings, you consent to the use of cookies and other similar technologies in accordance with this Privacy Policy. You can change your mind and withdraw your consent at any time by changing your browser settings in accordance with the instructions provided below.

I use the following types of cookies on the Website:

a) Strictly necessary cookies, which by law do NOT require your prior consent, are necessary for the proper functioning of the Website, including for the performance of specific tasks, such as the performance of services you have requested through the Website, saving your preferences (for example, your preferences regarding cookies) or to keep you logged in to your account. These files are not deleted after you finish browsing the website, but they have a specific expiry date. The installation of strictly necessary cookies does not require your prior consent: they are automatically installed on your device when you enter the Website or make specific selections on the website.

b) Performance cookies are used to verify the number of visits to the Website and the sources from which you came to my Website, which is used to analyze the effectiveness of the Website and to identify areas for improvement. These cookies require your prior consent.

c) Functional cookies are needed to perform certain functions on the Website, such as video functions or live chats. They can be used, for example, to store technical data necessary to play video or audio content that you may want to watch or listen to on the website. These cookies require your prior consent.

d) Cookies related to advertisements and their recipients, which may include third party files. These files require your prior consent. These third parties have access to the information collected by their cookies. These are the following entities:

Google Inc. (via Google Analytics and Google Doubleclick and, where applicable, via the Google Plus plug-in );
Facebook (via plugins);
Instagram (via plugins);
TikTok (via plugins).

Cookies related to advertising and their recipients may include profiling cookies, i.e. those that create user profiles to deliver advertisements in line with the preferences shown by users while using the Internet, used for advertising purposes, and retargeting cookies, which are used for advertising purposes. delivering advertisements about products similar to those you have shown interest in (e.g. displaying pages about products you have visited on my Website when you browse related pages) or to measure the effectiveness of marketing campaigns ( mine or that of third parties).

e) Social media cookies which allow the operators of social networks to install their own cookies through their plugins. These files require your prior consent. They are managed directly by third parties and may also be used when you browse other websites to provide you with advertisements that are in line with your preferences.

As indicated above, in order to use cookies other than necessary, your consent is required. Therefore, when you visit my Website for the first time, a cookie banner is displayed. In the future, the next time you visit the Website, it should no longer be displayed, as the necessary cookies will save your preferences. If you decide to also delete strictly necessary cookies after visiting the Website, the cookie banner will be displayed again the next time you visit the Website.

You can freely decide at any time to block the installation of any cookies on the Website or to withdraw previously given consent through the settings of your browser. Please remember that disabling one or more cookies may affect some functions of the Website.

Detailed information on how to change your browser settings regarding the use of cookies can be found at the following links:

Chrome - https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=pl

Firefox - https://support.mozilla.org/pl/kb/usewka-ciasteczek-i-danych-stron-firefox?redirectslug=usewka-ciasteczek&redirectlocale=pl

Edge - https://support.microsoft.com/pl-pl/microsoft-edge/usarzenia-plik%C3%B3w-cookie-w-przegl%C4%85darce-microsoft-edge-63947406-40ac-c3b8-57b9- 2a946a29ae09

Opera - https://help.opera.com/pl/latest/web-preferences/

Safari - https://www.apple.com/legal/privacy/pl/cookies/

Changes to the Privacy Policy

This Privacy Policy may be updated in the event of a change in the legal provisions that affect the processing of your personal data or the use of cookies, as well as if the processes of personal data processing by me and the types of cookies used change.

This Privacy Policy was introduced on 10/01/2022 .