This document sets out the rules for processing personal data and using cookies in the online store operated at sinesilk.com (the “Store”).
The data controller of personal data processed in connection with the Store is Agnieszka Saweczko-Rutkowska, conducting business under the name SINE AGNIESZKA SAWECZKO-RUTKOWSKA, ul. Dębinki 7a/2, 80-211, Gdańsk, entered in the Central Register and Information on Economic Activity (CEIDG), Tax ID (NIP) 6040115066, REGON 221224719. You can contact the data controller by phone at 507 155 161 or by email at sinesilkscarf@gmail.com.
We process personal data on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR). Where we refer to: Art. 6(1)(a) GDPR – we process data on the basis of your consent; Art. 6(1)(b) GDPR – processing is necessary to enter into or perform a contract, or to take steps at your request prior to entering into it; Art. 6(1)(c) GDPR – processing is necessary to comply with a legal obligation; Art. 6(1)(f) GDPR – processing is necessary for the purposes of our legitimate interests.
1. We process the data necessary to enter into and perform a contract, including maintaining the Customer Account and fulfilling and delivering orders, and, before a contract is concluded, to take steps at your request (Art. 6(1)(b) GDPR). 2. During and after the performance of a contract, we process data to establish, pursue or defend against claims, which constitutes our legitimate interest (Art. 6(1)(f) GDPR). 3. We store data for as long as necessary to achieve these purposes, but no longer than until the limitation period for claims expires. 4. You have the right to access your data and to have it rectified, erased, its processing restricted and to data portability, and, with respect to processing based on legitimate interest, also the right to object, as well as the right to lodge a complaint with a supervisory authority. 5. Providing data is voluntary but necessary to enter into and perform a contract. 6. The recipients of the data are: the store platform and hosting provider, the email provider, shipping service providers, the accounting service provider, the payment service provider, the bank and, where necessary, providers of legal and debt collection services.
1. We process data in order to comply with obligations arising from legal provisions, in particular tax and accounting obligations (issuing and storing invoices and proofs of sale), and in order to handle complaints and notices of withdrawal from a contract (Art. 6(1)(c) GDPR). 2. We store accounting records for 5 years from the end of the calendar year in which the tax payment deadline expired. 3. Providing data is a statutory requirement to the extent necessary to issue a sales document. 4. The recipients of the data are: the accounting service provider, the store platform provider and authorities authorized under the law.
1. If you sign up for the newsletter, we process your email address in order to send it to you. The newsletter contains commercial and marketing information. 2. Processing is based on your consent (Art. 6(1)(a) GDPR). 3. You can withdraw your consent at any time, in particular by using the link included in every message. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. 4. We store data until you withdraw your consent or until we stop sending the newsletter. 5. You have the right to access your data and to have it rectified, erased, its processing restricted and to data portability, as well as the right to lodge a complaint with a supervisory authority. 6. Providing data is voluntary but necessary to receive the newsletter. 7. The recipient of the data is the store platform provider, which handles sending the newsletter.
1. We may process your data for direct marketing purposes, for example when, in replying to your message, we present details of our offer. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). 2. We store data until the purpose has been achieved or until you object. 3. You have the right to access your data, to have it rectified, erased and its processing restricted, to data portability, to object to processing for marketing purposes and to lodge a complaint with a supervisory authority. 4. The recipients of the data are: the store platform provider and the email provider.
1. From the moment you enter the Store website, we process, for security purposes, data such as: the public IP address of your device, browser type and language, the date and time of the request, the number of bytes transferred, the URL of the referring page and error information. 2. Our legitimate interest (Art. 6(1)(f) GDPR) is keeping server logs and protecting the Store against attacks and abuse. 3. We store data for as long as necessary for this purpose, but no longer than until the limitation period for claims expires. 4. You have the right to access your data, to have it rectified, erased and its processing restricted, to object and to lodge a complaint with a supervisory authority. 5. The recipient of the data is the store platform and hosting provider.
We use the services of external providers who may receive your data:
Store platform, hosting, newsletter delivery – Your Next Store, Inc., 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA, together with its subcontractors (including Vercel Inc. – hosting). Electronic payments – Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Email – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Shipping services – Furgonetka Sp. z o.o. Sp. k., ul. Inżynierska 8, 03-422 Warszawa, and carriers selected by the Customer. Accounting services – Policzeni Tomasz Sikorski, Jaśkowa Dolina 11c/3, 80-252 Gdańsk. Banking services – mBank S.A., ul. Prosta 18, 00-850 Warszawa. Advertising in ChatGPT (pixel and Conversions API) – OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Google analytics and advertising – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Advertising on Meta services – Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Legal and debt collection services – entities selected individually as needed.
1. Because we use the services of providers that are based in, or have affiliates in, the United States of America (in particular Your Next Store, Inc., Vercel Inc., Stripe, Google and OpenAI), your data may be transferred outside the European Economic Area. 2. Transfers of data to entities certified under the EU-US Data Privacy Framework take place on the basis of European Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 on the adequate level of data protection (Art. 45 GDPR). 3. Otherwise, transfers take place on the basis of standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR). You can obtain a copy of the safeguards applied by contacting us.
Right of access. You have the right to obtain confirmation as to whether we process your data and, if so, to access it and to receive information about the purposes of processing, the categories of data, the recipients (including those in third countries), the retention period, your rights, the source of the data and automated decision-making. Upon request, we will provide a copy of your data; if the request is submitted electronically, we will respond in the same way unless you ask otherwise. Right to rectification. You may request that inaccurate data be rectified without undue delay and that incomplete data be completed. Right to erasure. You may request the erasure of your data if: it is no longer necessary for the purposes for which it was collected; you have withdrawn your consent and there is no other legal basis for processing; you have successfully objected; the data was processed unlawfully; erasure is required by law; or the data was collected in connection with the offer of information society services to a child. Right to restriction of processing. You may request restriction of processing if you contest the accuracy of the data (for the period needed to verify it), the processing is unlawful but you do not want the data erased, we no longer need the data but you need it to establish, pursue or defend claims, or you have objected – until your objection has been considered. Automated decisions. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision is necessary to enter into or perform a contract, is authorized by law or is based on your explicit consent. We do not make such decisions. Right to lodge a complaint. You may lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warszawa, phone: 22 531 03 00, email: kancelaria@uodo.gov.pl.
Right to withdraw consent. If we process data on the basis of your consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal. Right to data portability. If we process data by automated means on the basis of consent or a contract, you may receive the data you provided to us in a structured, commonly used and machine-readable format and request that it be transmitted to another controller, where technically feasible. Right to object. If we process data on the basis of legitimate interest (Art. 6(1)(f) GDPR), you may object on grounds relating to your particular situation. We will then stop processing the data unless we demonstrate compelling legitimate grounds that override your interests, or grounds for establishing, pursuing or defending claims. An objection to processing for direct marketing purposes is always effective.
The Store website uses cookies, i.e. small text files stored on your device (computer, tablet, smartphone), as well as similar technologies. We use: strictly necessary cookies – these enable the Store to function, e.g. by supporting the Cart, login, payments and security; without them, it is not possible to use the Store. Functional cookies – these remember your settings, e.g. language or currency. Analytics cookies – these allow us to measure traffic and how the Store is used. Marketing cookies – these are used to measure the effectiveness of and optimize advertising, including advertising in ChatGPT. Based on how long they are stored, we distinguish between session cookies (deleted when you close your browser) and persistent cookies. Cookies may come from us or from third parties.
1. We use strictly necessary cookies without your consent, as they are essential to provide the service you request (Art. 399(3) of the Electronic Communications Law Act (Prawo komunikacji elektronicznej)). 2. We use functional, analytics and marketing cookies, including third-party cookies (OpenAI – §14, as well as Google and Meta – §13), only after you give your consent in the banner displayed on your first visit to the Store. Until you give your consent, these cookies are not stored and data about your orders is not shared with advertising entities. 3. Consent is voluntary. You can change or withdraw it at any time using the “Cookie settings” button available in the website footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. 4. Independently of this, you can manage cookies in your browser settings, including blocking and deleting them. Blocking strictly necessary cookies may make it impossible to use the Store.
1. Once you give your consent, we use cookies from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as part of the Google Analytics and Google Ads services. The data collected is pseudonymous and includes, in particular, online identifiers, approximate location, device and browser information, the source of your visit to the website and how you use the Store. 2. Once you give your consent, we use pixel tag technology from Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) to measure the effectiveness of advertising on Facebook and Instagram. 3. The legal basis for processing is your consent (Art. 6(1)(a) GDPR). These entities also process data in accordance with the rules described in their own privacy policies.
1. We run advertising campaigns on ChatGPT. If you consent to marketing cookies, the OpenAI conversion pixel runs on the Store website, and we share information about selected events (e.g. page views, adding items to the cart, placing an order together with its value) with OpenAI, including directly from our server (Conversions API). The purpose is to measure the effectiveness of advertising and optimize campaigns. 2. The data shared may include cookie identifiers, IP address, device and browser information, order information, and your email address or phone number in hashed form. 3. The legal basis for processing is your consent (Art. 6(1)(a) GDPR). Without your consent, the pixel is not activated and data about your orders is not shared with OpenAI. You can withdraw your consent at any time in the cookie settings. 4. OpenAI processes the data it receives as a separate controller, in accordance with the rules described in its privacy policy. Data may be transferred to the USA on the basis of standard contractual clauses adopted by the European Commission. 5. The recipient of the data is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.
When you use the Store, we may automatically use your device’s cache to store data between visits. The purpose is to speed up the Store by avoiding downloading the same data multiple times.
The Store may contain links to other websites, including our profile on Instagram. We are not responsible for the privacy practices of those websites and recommend that you review their privacy policies.
1. The Privacy Policy takes effect on the date it is published on the Store website. 2. The Privacy Policy is amended by publishing its new content on the Store website no later than 3 days before the date on which it takes effect.