Privacy Policy
- This Privacy Policy sets out the rules for the processing of personal data obtained via the larumi-fabrics.com online store (hereinafter referred to as the "Online Store").
- The owner of the Online Store and the controller of the data is Larumi Galina Sokolova with its registered office at: ul. Bratysławska 2C76, 31-201 Kraków NIP: 9452226262; REGON 382812503
- Personal data collected by larumi-fabrics.com via the Online Store are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR.
- Larumi Galina Sokolova takes special care to respect the privacy of customers visiting the Online Store.
§ 1 Type of data processed, purposes and legal basis
1. Larumi Galina Sokolova collects information about natural persons performing legal acts not directly related to their business activity, natural persons conducting business or professional activity on their own behalf, and natural persons representing legal persons or organizational units that are not legal persons but which are granted legal capacity by law, hereinafter collectively referred to as Customers.
2. Customers' personal data are collected in the event of:
a) Registering an account in the Online Store, in order to create and manage an individual account. Legal basis: necessity to perform the contract for the provision of the Account service (Article 6, paragraph 1, letter b of the GDPR);
b) placing an order in the Online Store in order to perform the sales contract. Legal basis: necessity to perform the sales contract (Article 6, paragraph 1, letter b of the GDPR);
c) subscribing to the newsletter (Newsletter) for the purpose of performing a contract for a service provided electronically. Legal basis – consent of the data subject to the performance of the contract for the provision of the Newsletter service (Article 6, paragraph 1, letter a of the GDPR);
d) using the "Post a review" service for the purpose of performing a contract for a service provided electronically. Legal basis – necessity for the performance of the contract for the provision of the "Post a review" service (Article 6, paragraph 1, letter b of the GDPR).
3. When registering an account in the Online Store, the Customer provides:
a) Email address;
b) name and surname;
c) telephone number.
4. When registering an account in the Online Store, the Customer independently sets a unique password for access to their account. The Customer may change the password at a later time, as described in §6.
5. When placing an order in the Online Store, the Customer provides the following data:
a) email address;
b) address details;
c) postal code and city;
d) country (state);
e) street with house/apartment number;
f) name and surname;
g) telephone number.
6. In the case of Entrepreneurs, the above scope of data is additionally extended to include:
a) the Entrepreneur's company name;
b) Tax Identification Number.
7. When using the Newsletter service, the Customer only provides his/her e-mail address.
8. In case of using the post a review service, the Customer provides the following data:
a) name and surname.
9. When using the Store Website, additional information may be downloaded, in particular: the IP address assigned to the Customer's computer or the external IP address of the Internet provider, domain name, browser type, access time, type of operating system.
10. Navigational data may also be collected from Customers, including information about links and hyperlinks they choose to click or other actions they take in the Online Store. Legal basis – legitimate interest (Article 6, paragraph 1, letter f of the GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services.
11. For the purpose of establishing, pursuing, and enforcing claims, certain personal data provided by the Customer when using the functionalities in the Online Store may be processed, such as: first name, last name, data regarding the use of services if the claims arise from the manner in which the Customer uses the services, and other data necessary to prove the existence of the claim, including the extent of the damage suffered. Legal basis – legitimate interest (Article 6, paragraph 1, letter f of the GDPR), consisting in the establishment, pursuit, and enforcement of claims, as well as defense against claims in proceedings before courts and other state authorities.
12. The provision of personal data to Larumi Galina Sokolova is voluntary, in connection with concluded sales contracts or the provision of services via the Online Store Website, provided, however, that failure to provide the data specified in the data forms during the Registration process prevents Registration and establishment of a Customer Account, and in the case of placing an order without Registration of the Customer Account, placement and fulfilment of the Customer order will be impossible.
§ 2 Who is the data shared or entrusted to and how long is it stored?
1. The Customer's personal data is transferred to service providers used by Larumi Galina Sokolova in operating the Online Store. Depending on contractual arrangements and circumstances, the service providers to whom the personal data is transferred are either subject to instructions from Larumi Galina Sokolova regarding the purposes and methods of processing such data (processors) or independently determine the purposes and methods of processing (controllers).
a) Processors. Larumi Galina Sokolova uses suppliers who process personal data solely on Larumi Galina Sokolova's instructions. These include, among others, suppliers of hosting services, accounting services, marketing systems, systems for analyzing traffic in the Online Store, and systems for analyzing the effectiveness of marketing campaigns;
b) Data Controllers. Larumi Galina Sokolova uses providers who do not act solely on instructions and independently determine the purposes and methods of using Customers' personal data. They provide electronic payment and banking services.
2. Location. Service providers are based in Poland and other countries of the European Economic Area (EEA).
3. Customers' personal data are stored:
a) If consent is the basis for personal data processing, the Client's personal data will be processed by Larumi Galina Sokolova until the consent is revoked, and after the consent is revoked, for a period corresponding to the limitation period for claims that Larumi Galina Sokolova may bring and that may be brought against it. Unless specific provisions provide otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business activity, three years.
b) If the basis for data processing is the performance of a contract, then Larumi Galina Sokolova processes the Client's personal data for as long as necessary to perform the contract, and after that time for a period corresponding to the limitation period for claims. Unless a specific provision provides otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business activity – three years.
4. In the event of a purchase in the Online Store, personal data may be transferred, depending on the Customer's choice, to the following entities for the purpose of delivering the ordered goods:
a) courier company;
b) InPost Paczkomaty Sp. z o. o. with its registered office in Kraków, providing delivery services and operating a system of post office boxes (Paczkomaty);
c) DPD Polska based in Warsaw
5. Navigation data may be used to provide Customers with better service, analyze statistical data and adapt the Online Store to Customer preferences, as well as to administer the Online Store.
6. If the Customer subscribes to the newsletter (Newsletter), Larumi Galina Sokolova will send electronic messages containing commercial information about promotions and new products available in the Online Store to his/her e-mail address.
7. In the event of a request, Larumi Galina Sokolova provides personal data to authorized state authorities, in particular organizational units of the Prosecutor's Office, the Police, the President of the Office for Personal Data Protection, the President of the Office for Competition and Consumer Protection or the President of the Office of Electronic Communications.
§ 3 Cookie mechanism, IP address
1. The Online Store uses small files called cookies. Larumi Galina Sokolova stores them on the end device of a visitor to the Online Store, if the web browser allows it. A cookie typically contains the name of the domain from which it originates, its expiration date, and a randomly selected number identifying the file. Information collected using these types of files helps tailor the products offered by Larumi Galina Sokolova to the individual preferences and actual needs of visitors to the Online Store. They also enable the development of general statistics on visits to the products presented in the Online Store.
2. Larumi Galina Sokolova uses two types of cookies:
a) Session cookies: After ending a browser session or turning off the computer, the stored information is deleted from the device's memory. The session cookie mechanism does not allow the collection of any personal data or confidential information from Customers' computers.
b) Persistent cookies: These are stored in the memory of the Customer's end device and remain there until they are deleted or expire. The persistent cookie mechanism does not allow the collection of any personal data or any confidential information from the Customer's computer.
3. Larumi Galina Sokolova uses its own cookies for the following purposes:
a) authenticating the Customer in the Online Store and ensuring the Customer’s session in the Online Store (after logging in), thanks to which the Customer does not have to re-enter the login and password on each subpage of the Online Store;
b) analyses, research and audience audits, in particular to create anonymous statistics that help understand how Customers use the Store Website, which enables the improvement of its structure and content.
4. The cookie mechanism is safe for the computers of Online Store Customers. In particular, it is impossible for viruses or other unwanted software or malware to enter Customers' computers this way. However, Customers have the option of limiting or disabling cookie access to their computers in their browsers. If this option is used, the Online Store will still be available for use, except for functions that, by their nature, require cookies.
5. Larumi Galina Sokolova may collect Customer IP addresses. An IP address is a number assigned to the computer of a visitor to the Online Store by the Internet service provider. The IP number allows access to the Internet. In most cases, it is assigned to the computer dynamically, meaning it changes with each Internet connection. The IP address is used by Larumi Galina Sokolova to diagnose technical problems with the server, create statistical analyses (e.g., to determine which regions receive the most visits), as information useful in administering and improving the Online Store, as well as for security purposes and to identify server-burdening, unwanted automated programs for browsing the Online Store's content.
6. The Online Store contains links and references to other websites. Larumi Galina Sokolova is not responsible for the privacy policies of such websites.
§ 4 Rights of data subjects
1. Right to withdraw consent – legal basis: Article 7(3) of the GDPR.
a) The Customer has the right to withdraw any consent given to Larumi Galina Sokolova.
b) Withdrawal of consent takes effect from the moment of withdrawal of consent.
c) Withdrawal of consent does not affect the processing carried out by Larumi Galina Sokolova in accordance with the law before its withdrawal.
d) Withdrawal of consent does not entail any negative consequences for the Customer, but may prevent further use of services or functionalities which, according to the law, Larumi Galina Sokolova may only provide with consent.
2. Right to object to data processing – legal basis: Article 21 of the GDPR.
a) The Customer has the right to object at any time – for reasons related to his/her particular situation – to the processing of his/her personal data, including profiling, if Larumi Galina Sokolova processes his/her data based on a legitimate interest, e.g. marketing of Larumi Galina Sokolova's products and services, keeping statistics on the use of individual functionalities of the Online Store and facilitating the use of the Online Store, as well as satisfaction surveys.
b) Unsubscribing via e-mail from receiving marketing communications regarding products or services will mean the Customer's objection to the processing of his or her personal data, including profiling for these purposes.
c) If the Customer's objection proves to be justified and Larumi Galina Sokolova has no other legal basis for processing personal data, the Customer's personal data will be deleted to the processing of which the Customer has objected.
3. Right to erasure („right to be forgotten”) – legal basis: Article 17 GDPR.
a) The Customer has the right to request the deletion of all or some of his/her personal data.
b) The Customer has the right to request the deletion of personal data if:
b1) the personal data are no longer necessary for the purposes for which they were collected or processed;
b2) has withdrawn a specific consent to the extent that personal data were processed based on his consent;
b3) has objected to the use of his data for marketing purposes;
b4) personal data are processed unlawfully;
b5) personal data must be erased in order to comply with a legal obligation under Union law or the law of the Member State to which Larumi Galina Sokolova is subject;
b6) the personal data were collected in connection with the provision of information society services.
b7) Despite a request to erase personal data, in connection with an objection or withdrawal of consent, Larumi Galina Sokolova may retain certain personal data to the extent that processing is necessary for the establishment, exercise, or defense of legal claims, as well as for compliance with a legal obligation requiring processing under EU or Member State law to which Larumi Galina Sokolova is subject. This applies in particular to personal data including: first name, last name, email address, which are retained for the purpose of handling complaints and claims related to the use of Larumi Galina Sokolova's services, and additionally, residential/mailing address, and order number, which are retained for the purpose of handling complaints and claims related to concluded sales contracts or the provision of services.
4. Right to restrict data processing – legal basis: Article 18 GDPR.
a) The customer has the right to request the restriction of the processing of their personal data. Submitting a request, until it is resolved, will prevent the use of certain functionalities or services that would involve the processing of the data covered by the request. Larumi Galina Sokolova will also not send any communications, including marketing communications.
b) The Customer has the right to request the restriction of the use of personal data in the following cases:
b1) when he/she questions the accuracy of his/her personal data – then Larumi Galina Sokolova limits their use for the time needed to check the accuracy of the data, but no longer than for 7 days;
b2) when the processing of data is unlawful and instead of deleting the data, the Customer requests the restriction of their use;
b3) when personal data are no longer necessary for the purposes for which they were collected or used, but they are needed by the Customer to establish, pursue or defend claims;
b4) when he has objected to the use of his data – then the restriction takes place for the time needed to consider whether – due to the specific situation – the protection of the Client’s interests, rights and freedoms outweighs the interests pursued by the Controller in processing the Client’s personal data.
5. Right of access to data – legal basis: Article 15 of the GDPR.
a) The Customer has the right to obtain confirmation from the Controller whether he processes personal data, and if so, the Customer has the right to:
a1) obtain access to your personal data;
a2) obtain information on the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data, the planned period of storage of the Customer's data or the criteria for determining this period (when it is not possible to determine the planned period of data processing), the rights of the Customer under the GDPR and the right to lodge a complaint with the supervisory authority, the source of such data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;
a3) obtain a copy of your personal data.
6. Right to rectification – legal basis: Article 16 of the GDPR.
a) The Customer has the right to request immediate rectification of any inaccurate personal data concerning them by the Controller. Taking into account the purposes of processing, the Customer whose data is processed has the right to request the completion of incomplete personal data, including by providing an additional statement, by sending a request to the email address specified in §7 of the Privacy Policy.
7. Right to data portability – legal basis: Article 20 of the GDPR.
a) The Client has the right to receive their personal data provided to the Controller and then send it to another personal data controller of their choice. The Client also has the right to request that the Controller send their personal data directly to such controller, if technically feasible. In such a case, the Controller will send the Client's personal data in a CSV file, which is a commonly used, machine-readable format that allows the data to be sent to another personal data controller.
8. If the Customer exercises the above rights, Larumi Galina Sokolova will either comply with the request or refuse to comply with it immediately, but no later than one month after receiving it. However, if – due to the complex nature of the request or the number of requests – Larumi Galina Sokolova is unable to comply with the request within one month, it will comply within the next two months, informing the Customer within one month of receiving the request of the intended extension and the reasons therefor.
9. The Customer may submit complaints, inquiries and requests to the Administrator regarding the processing of his or her personal data and the exercise of his or her rights.
10. The Customer has the right to request from Larumi Galina Sokolova a copy of the standard contractual clauses by sending an inquiry in the manner indicated in §7 of the Privacy Policy.
11. The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office regarding the violation of his/her rights to the protection of personal data or other rights granted under the GDPR.
§ 5 Services tailored to preferences and interests (profiling)
1. Profiling means any form of automated Processing of Personal Data which involves the use of Personal Data to evaluate certain personal factors relating to a Natural Person, in particular to analyse or forecast aspects relating to the performance of that Natural Person at work, their economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
2. Customers' personal data may be processed in an automated manner (profiling), however, this will not produce any legal effects or have a similar significant impact on the situation of Customers.
3. Profiling of personal data by Larumi Galina Sokolova involves the processing of Customer data in an automated and manual manner, by using it to evaluate certain information about the Customer, in particular to analyze or forecast his or her personal preferences and interests.
4. In order to reach the Customer with marketing messages via the Online Store Website, Larumi Galina Sokolova uses the services of external providers. These services consist of displaying marketing messages on the Online Store Websites. For this purpose, external providers install, for example, appropriate code or pixels to retrieve information about the Customer's activity on the Online Store Website. Details regarding the cookies used can be found in §3. Legal basis – legitimate interest (Article 6, paragraph 1, letter f of the GDPR), consisting in tailoring marketing messages to preferences and interests.
§ 6 Security management – password
1. Larumi Galina Sokolova provides Customers with a secure and encrypted connection when transmitting personal data and when logging into their Customer Account on the Website. Larumi Galina Sokolova uses an SSL certificate issued by one of the world's leading companies in the field of security and encryption of data transmitted over the Internet.
2. If a Customer with an Online Store account has lost their password in any way, the Online Store allows you to generate a new password. Larumi Galina Sokolova does not send password reminders. The password is stored in an encrypted form, making it unreadable. To generate a new password, enter your email address in the form available under the "Forgot your password" link in the Online Store account login form. The Customer will receive an email at the email address provided during registration or in the last account profile change, redirecting you to a dedicated form available on the Store's website, where you will be able to set a new password.
3. Larumi Galina Sokolova never sends any correspondence, including electronic correspondence, with a request to provide login details, in particular the access password to the Customer's account.
§ 7 Changes to the Privacy Policy
1. The Privacy Policy may be subject to change, of which Larumi Galina Sokolova will inform Customers 7 days in advance.
2. Please send any questions regarding the Privacy Policy to: shop@larumi-fabrics.com
3. Date of last modification: 01/05/2021.