Dear user!
We care about your privacy and want you to feel comfortable when using our services. Therefore, we present below the most important information regarding the principles of our processing of your personal data and the cookies used by our store. This information has been prepared taking into account the GDPR, the General Data Protection Regulation.
PERSONAL DATA CONTROLLER ("Controller")
MIMII SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, whose registered office is located at ul. 30stycznia 38B, 38-110 Tczew, registered in the National Court Register - Register of Entrepreneurs by the District Court Gdańsk-North in Gdańsk, 7th Economic Division of the National Court Register, under number KRS 0000943877, NIP 5932630848, REGON 520826826, share capital PLN 5000.00. Contact by email: info@mimii.pl
PERSONAL DATA AND PRIVACY
If you intend to create a user account and use our services, including placing product orders, you will be asked to provide us with your personal data.
Your data is processed by us for the purposes indicated below, related to the operation of the store and the provision of the services offered there.
Purpose of processing:
Depending on what you choose, this may be:
- Provision of services offered in the store.
- Execution of your orders.
- Direct marketing of offered services, such as newsletters.
Basis of processing:
- The sales contract or measures taken at your request to conclude the contract (Article 6(1)(b) of the GDPR).
- A legal obligation incumbent on us, for example related to accounting (Art. 6(1)(c) GDPR).
- Your consent given in the store, for example for the newsletter (Art. 6(1)(a) GDPR).
- A service contract or measures taken at your request to conclude such a contract, for example registering an account in the store (Article 6(1)(b) of the GDPR).
- Our legitimate interest in processing your data to establish, assert, or defend any claims (Article 6(1)(f) of the GDPR).
- Our legitimate interest in carrying out direct marketing (Article 6(1)(f) of the GDPR).
- Our legitimate interest in processing data for analytical and statistical purposes (Article 6(1)(f) of the GDPR).
- Our legitimate interest in conducting customer satisfaction surveys (Article 6(1)(f) of the GDPR).
Provision of data:
Voluntary, but in some cases, it may be necessary to conclude a contract. Providing personal data for the conclusion of a sales or service contract is a contractual obligation and, in some cases, also a legal obligation, for example providing the tax identification number for tax purposes.
Effect of absence of data:
Depending on the purpose for which the data is provided:
- Inability to register in the store
- Inability to use the store's services.
- Inability to make purchases in the store
Possibility to withdraw consent:
The processing of data remains lawful until you withdraw your consent.
PROCESSING PERIOD
We will only process your data as long as we have a legal basis to do so, that is until.. :
- We are no longer subject to a legal obligation requiring us to process your data (for example, tax obligations, keeping accounting records).
- It is no longer possible to establish, assert, or defend any claims related to the contract concluded by the store between the parties (the limitation period for sales contracts is 2 years for the seller from the end of the calendar year).
- You will withdraw your consent to the processing of your data if it constituted the basis.
- Your objection to the processing of your personal data will be accepted - if the basis for processing your data was a legitimate interest of the data controller or if the data was processed for direct marketing purposes.
- As applicable in the case and to occur no later than.
DATA SECURITY
When processing your personal data, we apply organizational and technical measures in accordance with applicable law, including the use of connection encryption with an SSL certificate.
YOUR RIGHTS
You have the right to request:
- access to your personal data,
- rectification
- erasure,
- restriction of processing,
- to request the transfer of your data to another data controller,
as well as:
- :To object at any time to the processing of your data:
- for reasons related to your particular situation, to the processing of personal data concerning you based on Article 6, paragraph 1, point f) of the GDPR (i.e., on the legitimate interests pursued by the data controller),
- If your personal data is processed for direct marketing purposes, to the extent that the processing is related to this direct marketing.
Contact us if you wish to exercise your rights.
If you believe your data is being processed illegally, you can file a complaint with the supervisory authority - the President of the Office for Personal Data Protection, headquartered in Warsaw.
EXTERNAL SERVICES / DATA RECIPIENTS
We use external parties to whom your data may be transferred. Below is a list of possible recipients of your data:
- provider of software necessary for the operation of the online store
- delivery service provider
- payment service provider
- accounting office
- business support software provider (e.g., accounting software)
- technical support service provider
- marketing service provider
- statistical service provider
The administrator may share anonymous data (i.e., data that does not allow the identification of specific users) with external service providers in order to better identify the appeal of advertisements and services to users and, in this regard, due to the location of software providers, the data may be transferred - subject to data protection rules - to third countries (for example, the United States in the case of Google or Facebook).
