Dear Sir or Madam,
On May 25, 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of their personal data, on the free movement of such data and repealing Directive 95/46/EC (hereinafter: GDPR) entered into force.
The aim of the GDPR is to harmonize the rules for the processing of personal data in the European Union and to ensure the rights of data subjects.
Accordingly, please find below information about the processing and protection of your personal data by Shop Retro-Collectibles, ul. Juraty 24; 80-299 Gdańsk, NIP: 584-204-36-91, REGON: 220758904.
DUTY TO INFORM
Pursuant to Article 13(1) and (2) of the General Data Protection Regulation of 27 April 2016, we inform you that:
The administrator of your personal data is Shop Retro-Collectibles, ul. Juraty 24; 80-299 Gdańsk, NIP: 584-204-36-91, REGON: 220758904.
The Administrator has not appointed a data protection officer. For data protection issues and to exercise your rights, we provide you with a contact address in the form of an email address: firstname.lastname@example.org
As the controller of your personal data, we inform you that your personal data will be collected and processed exclusively for the following purposes:
- Processing of your purchases in the online store Retro-Collectibles Shop www.poke collectibles.store
- Your permission for us to send you a newsletter with commercial information such as promotions, discounts, new products
- To support your service,
- To comply with our legal obligations.
The basis for processing your data is the legitimate interest of Retro-Collectibles Shop in conducting its business and expanding the market for its services.
Your personal data will be disclosed to external entities that cooperate with Retro-Collectibles Shop and provide accounting and invoicing services.
Your personal data will be processed on the basis of Article 6(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and in accordance with the content of the General Data Protection Regulation.
Your personal data will be processed as long as the purpose for which they are processed is valid or until other legal provisions, including accounting rules, form the basis. In the case of claims, your personal data will be processed until they are time-barred under the Civil Code. After these periods have expired, your data will be deleted.
As a natural person, you have the right to access the content of your data, rectify it, request its erasure or restriction of its processing, transfer it to another controller and object to its processing. We would also like to inform you that you have the right to file a complaint with the data protection supervisory authority [after May 25, 2018: the President of the Office for Personal Data Protection].
Providing your personal data is voluntary, but it is necessary in order to provide services based on concluded contracts and / or orders / proformas, as well as to prepare an offer and conclude a contract for the provision of other services of the Administrator.
Data collection and processing
Every access to our website and every retrieval of a file stored on this website is logged. The storage serves internal system-related and statistical purposes. Logged are: Name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, web browser and requesting domain. In addition, the IP addresses of the requesting computers are logged. Further personal data is only recorded if the user of the website and/or customer provides information voluntarily, for example in the context of an inquiry or registration or for the conclusion of a contract or via the settings of his browser.
Use and disclosure of personal data
Insofar as the user of our website has provided personal data, we use this data only to respond to inquiries from the user of the website and/or customer, to process contracts concluded with the user of the website and/or customer and for technical administration. Personal data will only be disclosed or otherwise transferred to third parties by us if this is necessary for the purpose of contract execution or for billing purposes or if the user of the website and/or customer has previously consented. The user of the website and/or customer has the right to revoke a given consent with effect for the future at any time.
The deletion of the stored personal data takes place if the user of the website and/or customer revokes the consent for storage, if their knowledge is no longer necessary for the fulfillment of the purpose pursued with the storage or if their storage is inadmissible for other legal reasons. Data for billing and accounting purposes are not affected by a request for deletion.
Right to information
Upon written request, we will inform the user of the website and/or the customer about the personal data stored about him. The request is to be sent to our address given in the imprint of the website.
Notes on data processing in connection with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller on this website is located outside the European Economic Area or Switzerland, then the Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as “Google”.
Google Analytics uses “cookies”, which are text files placed on the computer of the site visitor, to help the website analyze how users use the site. The information generated by the cookie about the use of this website by the site visitor (including the shortened IP address) is usually transmitted to a Google server and stored there.
Google Analytics is used exclusively with the extension “_anonymizeIp()” on this website. This extension ensures anonymization of the IP address by shortening and excludes a direct personal reference. Through the extension, the IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The IP address transmitted by the corresponding browser within the scope of Google Analytics is not merged with other Google data.
On behalf of the site operator, Google will use the resulting information to evaluate the use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the site operator (Art. 6 para. 1 lit. f DSGVO). The legitimate interest in the data processing lies in the optimization of this website, the analysis of the use of the website and the adaptation of the content. The interests of the users are sufficiently protected by the pseudonymization.
Google LLC. is certified under the so-called Privacy Shield (list entry here) and on this basis ensures an adequate level of data protection. The data sent and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 50 months. The deletion of data whose retention period has been reached takes place automatically once a month.
The collection by Google Analytics can be prevented by the site visitor adjusting the cookie settings for this website. The collection and storage of the IP address and the data generated by cookies can also be objected to at any time with effect for the future. The corresponding browser plugin can be downloaded and installed at the following link: https://tools.google.com/dlpage/gaoptout.
The site visitor can prevent the collection by Google Analytics on this website by clicking on the following link. An opt-out cookie will be set, which prevents the future collection of data when visiting this website.