Privacy policy

privacy policy

Loftparts.pl online store in force from May 25, 2018

The www.loftparts.pl online store (hereinafter also the "Store") is administered by Loftparts Wacław Chochół based at ul. Przejazdowa 11 in Wrocław. Postal code: 51-167, NIP 632-112-75-46 (hereinafter also the "Administrator").

This privacy policy defines the conditions, method of collecting and processing personal data of Store users by the Administrator.

The administrator, on the terms and for the purposes indicated in this privacy policy, collects personal data of users, including: name, surname, address, e-mail address and telephone number.
The collected personal data is processed on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection) - hereinafter also "GDPR", in order to:
Proper relationship of the requested service ie selling items.
Direct marketing for the purposes of legitimate interests pursued by the Administrator - sending users commercial information related to the functioning of the Store, including information on the availability of goods, promotions, newsletter - pursuant to art. 6 sec. 1 lit. f) GDPR (the basis for processing is the legitimate interest of the administrator)
All personal data of users are protected in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection) and the Act on the provision of electronic services (Journal of Laws No. 133, item 1204).
The collected personal data will be stored until the user exercises the rights leading to the cessation of the processing of his personal data, e.g. exercising the rights referred to in point. 6 and point 10 of this privacy policy or the user's revocation of consent to their processing.
The User has the right to obtain from the Administrator confirmation whether his personal data is being processed, and if so, he is entitled to access them and the following information:
The purpose of the processing;
The categories of personal data concerned;
Information on recipients or categories of recipients to whom personal data has been or will be disclosed, in particular about recipients in third countries or international organizations;
If possible, the planned period of storage of personal data, and if this is not possible, the criteria for determining this period;
Information on the right to request the administrator to rectify, delete or limit the processing of personal data relating to the data subject, and to object to such processing;
Information on the right to lodge a complaint with the supervisory authority;
Information on automated decision making, including profiling referred to in art. 22 sec. 1 and 4 of the GDPR, and important information about the rules for their taking, as well as the significance and anticipated consequences of such processing for the data subject - at the moment, the Administrator does not undertake and does not plan to take such actions.
The User has the right to request the Administrator to immediately correct incorrect personal data concerning him. Taking into account the purposes of processing, the data subject has the right to request supplementing incomplete personal data, including by providing an additional statement.
The User has the right to request the Administrator to immediately delete his personal data, and the Administrator is obliged to delete personal data without undue delay, if one of the following circumstances occurs ("Right to be forgotten):
Personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
The data subject has withdrawn consent on which the processing is based in accordance with art. 6 sec. 1 lit. a) and there is no other legal basis for the processing;
The data subject objects to the processing pursuant to Art. 21 paragraph 1 GDPR against processing and there are no overriding legitimate grounds for processing or the data subject objects to the processing pursuant to Art. 21 paragraph 2 GDPR against processing;
The personal data has been processed unlawfully;
Personal data must be removed in order to comply with the legal obligation provided for in the Union law or the law of the Member State to which the controller is subject;
The personal data was collected in relation to the offering of information society services referred to in art. 8 sec. 1 GDPR.
The data subject has the right to request the Administrator to limit processing