Formal information for starters – the administrator of the website is Marcin Szałek running a business under Fidev Marcin Szałek with its registered office in Lodz at ul. Popieluszki 21/48, 94-052 Lodz, entered into the Central Register and Information on Economic Activity, NIP 7272833404, REGON 381437262.
Short version – the most important information
We care about your privacy, but also about your time. That is why we have prepared an abridged version of the most important rules related to privacy protection for you.
- By creating a user account via the site, placing an order, subscribing to the newsletter, submitting a complaint, withdrawing from the contract or simply contacting us, you provide us with your personal data and we guarantee that your data will remain confidential, secure and will not be available to any third party without your express consent.
- We entrust the processing of personal data only to verified and trusted entities providing services related to the processing of personal data.
- We use Google Analytics analytical tools that collect information about your website visits, such as the subpages that you have viewed, the time you spent on the website, and the transitions between individual subpages. For this purpose, Google LLC cookies are used for the Google Analytics service. As part of the mechanism for managing cookie settings, you have the option of deciding whether we will be able to use marketing functions or not as part of the Google Analytics service.
If the above information is not enough for you, you will find further details below.
The administrator of your personal data in the meaning of the provisions on the protection of personal data is Marcin Szałek running a business under the name Fidev Marcin Szałek with its registered office in Lodz at ul. Popieluszki 21/48, 94-052 Lodz, entered into the Central Register and Information on Economic Activity, NIP 7272833404, REGON 381437262.
The purposes, legal bases and period of personal data processing are indicated separately for each purpose of data processing (see the description of the individual purposes of processing personal data below).
Permissions. GDPR grants you the following potential rights related to the processing of your personal data:
- the right to access personal data,
- the right to rectify personal data,
- the right to delete personal data,
- the right to limit the processing of personal data,
- the right to object to the processing of personal data,
- the right to transfer data,
- the right to lodge a complaint to the supervisory body,
- the right to withdraw consent to the processing of personal data, if you have given such consent.
The rules related to the implementation of the indicated powers are described in detail in articles 16 – 21 GDPR. We encourage you to read these regulations. For our part, we consider it necessary to explain to you that the above-mentioned entitlements are not absolute and you will not be entitled to all processing of your personal data. For your convenience, we have made every effort to indicate the rights to which you are entitled as part of the description of individual data processing operations.
We emphasize that you always have one of the rights indicated above – if you believe that in the processing of your personal data we have violated the provisions on the protection of personal data, you have the opportunity to lodge a complaint with the supervisory body (President of the Office of Personal Data Protection).
Security. We guarantee the confidentiality of all personal data provided to us. We ensure that all security measures and protection of personal data required by the provisions on the protection of personal data are taken. Personal data is collected with due diligence and properly protected against access by unauthorized persons.
List of assignments. We entrust the processing of personal data to the following entities:
- BOMB.PL with registered office in Katowice, address: ul. Mickiewicza 15/401 40-092 Katowice, Poland, NIP: 6462533515 – in order to store personal data on the server,
- The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000
Atlanta, GA 30308 USA- in order to use the mailing system in which your data is processed, if you subscribed to the newsletter,
All entities entrusted with the processing of personal data guarantee the use of appropriate security measures and the security of personal data required by law.
Objectives and processing activities
User’s account. By creating a user account, you must enter your email address and define your account password. Providing data is voluntary, but necessary to create an account. As part of the user profile edition, you can provide further data about yourself, i.e. your name, billing address and shipping address. Providing this data is completely voluntary. You can have an account without providing further data. In this situation, you will need to enter this data manually by placing an order.
The data entered by you as part of the user account is processed only to maintain the account and provide you with the possibility of using it. Providing data in the user’s account is to facilitate the submission of orders in the store by automatically substituting data for the order form.
The legal basis for the processing of your personal data as part of the user account is the implementation of the account agreement, which you include based on the regulations of the store – article 6 GDPR.
The data collected in the user’s account are processed as part of the WordPress system and stored on a server provided by BOMB.PL.
Your data will be processed as part of your account for as long as you have a user account. After removing the account, your data will be removed from the database, except for the data about submitted orders.
You can access your personal data processed within your account at any time by logging in to your user account. After logging in to your account, you can modify your data at any time, as well as delete it, except for data about submitted orders. You can also decide to delete your account at any time.
In relation to the data collected in the user’s account, you also have the right to transfer the data referred to in article 20 GDPR.
Newsletter. If you want to subscribe to the newsletter, you must provide us with your e-mail address via the subscription form for the newsletter.
The data provided to us when subscribing to the newsletter is used to send you a newsletter, and the legal basis for their processing is your consent (Article 6 GDPR) when you subscribe to the newsletter.
The data is processed as part of the MailChimp mailing system and stored on a server provided by The Rocket Science Group LLC.
The data will be processed for the duration of the newsletter operation, unless you cancel your receipt earlier, which will delete your data from the database.
At any time, you can correct your data stored in the newsletter database, as well as request their removal, giving up receiving the newsletter. You also have the right to transfer the data referred to in article 20 GDPR.
Complaints and withdrawal from the contract. If you make a complaint or withdraw from the contract, you provide us with personal data contained in the content of the complaint or a statement of withdrawal, which includes your name, address, telephone number, e-mail address, bank account number.
The data provided to us in connection with the submission of a complaint or withdrawal from the contract are used to implement the complaint procedure or the procedure for withdrawing from the contract (Article 6 (1) (c) of the GDPR).
The data will be processed for the time necessary to carry out the complaint procedure or the withdrawal procedure. Complaints and statements about withdrawal from the contract may also be archived for statistical purposes.
In the case of data contained in complaints and declarations of withdrawal from the contract, you can not rectify this data. You also can not object to the processing of data and require the deletion of data until the expiry of the period of limitation of claims under the contract. After the expiry of the period of limitation of claims under the contract you can, however, oppose the processing of your data for statistical purposes, as well as request removal of your data from our database.
E-mail contact. By contacting us via e-mail, including by sending an inquiry via the contact form, you naturally provide us with your e-mail address as the sender’s address. In addition, you can also include other personal information in the body of the message.
Your data is processed in this case in order to contact you and the basis for processing is Article 6 (1) (c) of the GDPR, or your consent resulting from initiating contact with us. The legal basis for processing after the end of contact is a justified purpose in the form of archiving correspondence for internal needs (Article 6 (1) (c) of the GDPR).
The content of the correspondence can be archived and we can not clearly determine when it will be deleted. You have the right to request a communication history that you carried out with us (if it was subject to archiving), as well as request its removal, unless its archiving is justified due to our overriding interests, e.g. protection against potential claims on your part.
Cookie files and other tracking technologies
Cookies are small text information stored on your terminal device (eg computer, tablet, smartphone) that can be read by our teleinformation system.
You can find more details below.
Marketing. We use marketing tools, such as Facebook Pixel, to target you. This is related to the use of Facebook cookies. As part of the cookie settings you can decide whether you agree to use Pixel Facebook for us in your case or not.
We embed the video from YouTube on the site. When you play such recordings, Google LLC cookies are used for the YouTube service.
We use the site from the Disqus comments system. This is related to the use of Disqus cookies.
Using the website involves sending queries to the server on which the page is stored. Each query addressed to the server is saved in the server logs.
Logs include Your IP address, server date and time, information about the web browser and operating system you are using. Logs are saved and stored on the server.
The data stored in the server logs are not associated with specific people using the site and are not used by us to identify you.
The server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone except those authorized to administer the server.