INFORMATION CLAUSE SERAFIN SERVICE

Dear User,

Striving to provide the best possible protection of personal data, we want to assure you that we handle personal data at the highest level. In this document, you will find all the information about the personal data we process in the Serafin service and for what purpose.

  1. Data Controller

The data controller of personal data is Serafin Andrzejak, conducting business under the name “Serafin Andrzejak,” with its registered office at Ligocka 2/1 Street, 02-556 Warsaw, having tax identification number NIP: 6961819508, REGON: 302745321.

  1. How to contact us?

If you have any questions or concerns regarding data processing, please contact us:

via email: by mail: Ligocka 2/1 Street, 02-556 Warsaw Requests for rectification or deletion of personal data should be addressed to us at the above address.

  1. What data do we collect and for what purpose?

The scope and purpose of data collection in our service depend on your activity on our website.

a. Placing an order on the website

If you have placed an order on the website, your personal data is processed for the purpose of order fulfillment.

Providing data marked as mandatory is necessary for order fulfillment, and failure to provide such data will result in the order not being accepted. Providing other data is optional.

Personal data is processed for the following purposes:

  • Order fulfillment (including handling potential complaints) – the legal basis for processing is the necessity of processing for the performance of a contract, and in the case of optional data provided, the legal basis is consent.
  • Fulfillment of legal obligations incumbent on the controller, resulting in particular from tax regulations and accounting regulations, including the need to issue a sales invoice and its archiving – the legal basis for processing is a legal obligation.
  • Determination, investigation, or defense against claims – the legal basis for processing is a legitimate interest consisting of protecting our rights.
  • Analytical and statistical purposes – the legal basis for processing is a legitimate interest consisting of conducting analyses of user activity on the website, as well as their purchasing preferences, in order to improve the applied functionalities.

b. Creating an account on the website

When creating an account on the website, you are asked to provide necessary data for account creation and management, such as email address and password.

Providing data marked as mandatory is necessary for creating an account, and failure to provide such data will result in the inability to create an account on the website.

Personal data is processed for the following purposes:

  • Provision of services related to the operation and management of the account on the website – the legal basis for processing is the necessity of processing for the performance of a contract, and in the case of optional data provided, the legal basis is consent.
  • Determination, investigation, or defense against claims – the legal basis for processing is a legitimate interest consisting of protecting our rights.

c. Newsletter

If you have given your consent, we will send you newsletters, which are commercial information about our products or services. Providing this data is voluntary but necessary for newsletter delivery. The legal basis for processing is a legitimate interest in connection with the given consent.

d. Contact form

When contacting us through the contact form, you are asked to provide identification data, such as your name, surname, and email address. You may be asked to provide additional data only if it is necessary to handle the specific matter of your inquiry. The legal basis in such a case is our legitimate interest consisting of the necessity to respond to your inquiry.

e. User data from social media profiles

Our profiles on Facebook and Instagram are public. If you visit our profiles and engage with our content or interact with us through social media, we may process certain personal data associated with your social media profile, such as your username, profile picture, and public posts or comments. The legal basis for processing this data is our legitimate interest in managing and promoting our social media presence.

  1. Data recipients

We may share your personal data with third-party service providers who assist us in operating our website and providing our services, such as hosting providers, payment processors, and delivery companies. These service providers are bound by contractual obligations to handle your data securely and only process it in accordance with our instructions.

We may also disclose your personal data to public authorities or law enforcement agencies if required by law or if necessary to protect our rights, interests, or the safety of others.

  1. Data retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. The specific retention periods may vary depending on the type of data and the purposes of processing.

  1. Your rights

As a data subject, you have certain rights regarding your personal data:

  • Right of access: You have the right to request information about the personal data we hold about you and to receive a copy of that data.
  • Right to rectification: If you believe that the personal data we hold about you is inaccurate or incomplete, you have the right to request its correction or completion.
  • Right to erasure: You have the right to request the erasure of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or if you withdraw your consent and there is no other legal basis for processing.
  • Right to restrict processing: You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful.
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another data controller.
  • Right to object: You have the right to object to the processing of your personal data in certain circumstances, such as when the processing is based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: If we rely on your consent as the legal basis for processing your personal data, you have the right to withdraw your consent at any time.
  • Right to lodge a complaint: If you believe that we have violated your data protection rights, you have the right to lodge a complaint with the relevant supervisory authority.

To exercise your rights or if you have any questions or concerns regarding the processing of your personal data, please contact us using the contact information provided in section 2.

  1. Data security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

  1. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or legal obligations. We will post the updated version on our website and indicate the date of the last revision. We encourage you to review this Privacy Policy periodically.

Thank you for taking the time to read our Privacy Policy. If you have any further questions or require additional information, please don’t hesitate to contact us.