This Privacy Policy sets out the rules for the processing of personal data by the By Rieske online store available at www.byrieske.pl and www.byrieske.com.
The controller of personal data is Monika Rieske, conducting business under the name BY RIESKE Monika Rieske, hereinafter referred to as the “Controller”.
The Controller processes personal data in accordance with applicable laws, in particular:
Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
Polish personal data protection regulations,
regulations on the provision of electronic services.
Contact with the Controller regarding personal data matters is possible electronically, in particular via the contact form available on the Store’s website or by e-mail.
§2. Scope of processed data
The Controller may process the following personal data:
first and last name,
e-mail address,
telephone number (if provided voluntarily),
residential address or delivery address,
invoicing details,
data included in the content of correspondence,
technical data related to the use of the website (IP address, cookies data, information about the device and browser).
§3. Purposes and legal bases of processing
Personal data are processed for the following purposes:
processing orders and concluding sales contracts – Article 6(1)(b) GDPR,
handling contact and enquiries addressed to the Controller – Article 6(1)(f) GDPR,
fulfilling accounting and tax obligations – Article 6(1)(c) GDPR,
sending commercial information about the Controller’s products to customers with whom the Controller remains in a business relationship – Article 6(1)(f) GDPR,
statistical analysis and improving the Store’s operation – Article 6(1)(f) GDPR,
the Controller’s marketing and promotional activities – Article 6(1)(f) GDPR, or Article 6(1)(a) GDPR where consent is required.
§4. Recipients of data
Personal data may be transferred to entities cooperating with the Controller, only to the extent necessary to achieve the purposes of processing, in particular to:
payment operators (Przelewy24, PayPal),
courier companies (DPD),
the accounting service provider and iFirma invoicing system,
the Selesto e-commerce platform provider,
providers of analytics and marketing tools (Google Analytics 4, Google Ads, Meta – Facebook and Instagram, Pinterest).
§5. Analytics and marketing tools
The Store uses Google Analytics 4 tools which enable traffic analysis on the website.
The Controller may use marketing tools offered by Google (including Google Ads), Meta (Facebook and Instagram) and Pinterest, to the extent these tools are used in the Store’s operations.
These tools may use cookies and similar technologies.
§6. Cookies
The Store uses cookies for the purposes of:
ensuring the proper functioning of the website,
statistical analysis,
marketing activities.
The user may manage cookie settings through their web browser settings.
Restricting the use of cookies may affect certain Store functionalities.
§7. Transfer of data outside the EU/EEA
Personal data may be transferred outside the European Economic Area, in particular to:
the United Kingdom,
the United States.
Such transfers are carried out on the basis of:
decisions confirming an adequate level of protection,
standard contractual clauses, in accordance with applicable regulations.
§8. Data retention period
Personal data are processed for the period necessary to fulfil the purposes for which they were collected.
Data related to order processing and accounting documentation are stored for the period required by law.
Data processed for marketing purposes are stored until an objection is raised, and where processing is based on consent – until consent is withdrawn.
§9. Rights of data subjects
Each data subject has the right to:
access their data,
rectify their data,
erase data,
restrict processing,
data portability,
object to processing,
lodge a complaint with the President of the Personal Data Protection Office in Poland (PUODO).
§10. Data security
The Controller applies appropriate technical and organisational measures to protect personal data against loss, unauthorised access or disclosure.
§11. Final provisions
This Privacy Policy is effective from the date of its publication on the Store’s website.
The Controller reserves the right to make changes to this Privacy Policy.
The current version of the Privacy Policy is always available on the Store’s website.
