Administrator - Ritmo based in Łódź, ul. Stefan Jaracz, 90-262.

Personal data - all information about a natural person identified or identifiable by one or more specific factors defining a natural person, including name, surname, telephone number, e-mail address, device IP, location data, internet identifier and information collected via cookies and other similar technology.

Policy - this Privacy Policy.

GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and the repeal of Directive 95/46 / EC.

​

1. DATA PROCESSING IN CONNECTION WITH THE USE OF THE STORE

1. In connection with the Customer's use of the Store, the Administrator collects data to the extent necessary to provide individual services offered, as well as information about the Customer's activity in the Store.

​

1. OBJECTIVES AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA 1 Using the Store (without registration)

Personal data of all people using the Store (including IP address or other identifiers and information collected via cookies or other similar technologies), as well as people who are not registered customers (i.e. people who do not have an account in the Store) are processed by the Administrator:

1. in order to provide services by electronic means in the scope of making the content collected in the Store available to Customers - the legal basis for processing is the necessity to process for the performance of the contract to which the data subject is a party (Article 6 (1) (b) of the GDPR);

2. in order to handle purchases made without registration in the Store - the legal basis for processing is the necessity of processing to perform the contract to which the data subject is a party (Article 6 (1) (b) of the GDPR);

3. in order to handle complaints - the legal basis for processing is the necessity of processing to perform the contract to which the data subject is a party (Article 6 (1) (b) of the GDPR);

4. for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in conducting analyzes of Customers' activity, as well as their preferences in order to improve the functionalities used and the services provided;

5. in order to possibly establish and pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the protection of his rights;

6. for the Administrator's marketing purposes - the legal basis for processing is the consent of the person to the processing of their personal data (Article 6 (1) (a) of the GDPR).

2.Register in the Store

1. Persons who register in the Store are asked to provide the data necessary to create and operate the account, i.e. name, surname, e-mail address, telephone number and delivery address.

2. Personal data is processed:

1. in order to provide services related to the operation and maintenance of an account in the Store - the legal basis for processing is the necessity of processing to perform the contract to which the data subject is a party (Article 6 (1) (b) of the GDPR);

2. for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in conducting analyzes of Customers' activity in the Store and the manner of using the account, as well as their preferences in order to improve the functionalities used;

3. in order to possibly establish and pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the protection of his rights;

4. for the Administrator's marketing purposes - the legal basis for processing is the consent of the person to the processing of their personal data (Article 6 (1) (a) of the GDPR).

1. If the User places any personal data of other people in the Store (including their name, address, telephone number or e-mail address), they may do so provided that their consent is obtained.

​

1. PLACING AN ORDER  

2. Placing an order for the purchase of goods by the Store's Customer involves the processing of his personal data. Providing the required personal data is necessary in order to accept and service the order, and failure to do so results in the lack of its implementation.

3. Personal data is processed:

   1. in order to fulfill the order placed - the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR);

   2. in order to fulfill the statutory obligations incumbent on the Administrator, resulting in particular from tax and accounting regulations - the legal basis for processing is the legal obligation (Article 6 (1) (c) of the GDPR);

   3. for analytical and statistical purposes - the legal basis for processing is the Administrator's legitimate interest (Article 6 (1) (f) of the GDPR) consisting in conducting analyzes of Customers' activity in the Store, as well as their purchasing preferences in order to improve the functionalities used;

   4. in order to possibly establish and pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the protection of his rights.

​

1. PERIOD OF PROCESSING OF PERSONAL DATA

1. The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, the data is processed for the duration of the service or the performance of the order, until the consent is withdrawn or an effective objection to data processing is raised in cases where the legal basis for data processing is the Administrator's legitimate interest.

2. The period of data processing may be extended if the processing is necessary to establish and assert any claims or defend against them, and after that time only if and to the extent that it will be required by law. After the expiry of the processing period, the data is irreversibly deleted or anonymized.

​

1. USER PERMISSIONS

1. The right to information about the processing of personal data - on this basis, the person submitting such a request, the Administrator provides information about the processing of personal data, including in particular about the purposes and legal grounds for processing, the scope of data held, entities to whom personal data are disclosed and the planned date of their removal ;

2. The right to obtain a copy of the data - on this basis, the Administrator provides a copy of the processed data relating to the person making the request;

3. The right to rectify - on this basis, the Administrator removes any inconsistencies or errors regarding the personal data being processed, and supplements or updates them if they are incomplete or have changed;

4. The right to delete data - on this basis, you can request the deletion of data, the processing of which is no longer necessary to achieve any of the purposes for which they were collected;

5. The right to limit processing - on this basis, the Administrator ceases to perform operations on personal data, with the exception of operations to which the data subject has consented and their storage, in accordance with the adopted retention rules, or until the reasons for limiting data processing (eg. a decision of the supervisory authority will be issued, allowing for further data processing);

6. The right to transfer data - on this basis, to the extent that the data is processed in connection with the concluded contract or consent, the Administrator issues data provided by the data subject in a format that allows them to be read by a computer. It is also possible to request that this data be sent to another entity - provided, however, that there are technical possibilities in this regard, both on the part of the Administrator and that other entity;

7. The right to object to the processing of data for marketing purposes - the data subject may at any time object to the processing of personal data for marketing purposes, without the need to justify such objection;

8. The right to object to other purposes of data processing - the data subject may at any time object to the processing of personal data on the basis of the Administrator's legitimate interest (e.g. for analytical or statistical purposes or for reasons related to the protection of property).

9. The right to withdraw consent - if the data is processed on the basis of consent, the data subject has the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before the consent was withdrawn;

10. The right to lodge a complaint - if it is found that the processing of personal data violates the provisions of the GDPR or other provisions on the protection of personal data, the data subject may submit a complaint to the supervisory body, i.e. the President of the Office for Personal Data Protection.