In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) (OJ EU. L. 2016, No. 119, p. 1, as amended), (hereinafter: “RODO”) and the Law of May 10, 2018. On the protection of personal data (i.e., Journal of Laws of 2019, item 1781), (hereinafter referred to as the a.o.d.o.) we provide you with information on the processing of personal data.

1. Personal data controller

The administrator of your personal data is Anna Marciniszyn conducting business under the name “Nodi Studio Anna Marciniszyn”, ul. Wspólna 27a, 00-519 Warsaw, NIP: 6922527411, REGON: 389179345 (hereinafter referred to as “NodiStudio”, “Administrator” or “we”).

2. Point of contact for data protection

For matters related to the processing of personal data, as well as to exercise your rights in connection with the processing, contact NodiStudio in person at ul. Wspólna 27a, 00-519 Warsaw (corner premises), via e-mail address nodi.ceramics@gmail.com or by phone at +48 663 934 786.

3. Data processing
   
   

Customers:

• We process personal data for the purpose of entering into or performing a contract (Article 6(1)(b) of the RODO), and in certain cases for the purposes of legitimate interests (Article 6(1)(f) of the RODO) of establishing, investigating, defending against claims.
• The categories of personal data processed may include identification data, contact data, contact details, as well as other personal data provided to NodiStudio for the purpose of performing the services provided.
• The data will be stored for a period of min. 5 years from the end of the calendar year in which the deadline for payment of tax in connection with the agreement expired – however, the law may provide for a longer period of data storage, in particular for the establishment, investigation or defense against claims.
• A person whose data is processed has the right to access and rectify data, the right to restrict processing, the right to object to processing, the right to lodge a complaint with the President of the Office for Personal Data Protection.
• Provision of data, especially address data, is a contractual requirement, and refusal to provide such data may prevent the conclusion or execution of the contract.
  
  

Agents, representatives, contact persons

• We process personal data for the purpose of providing, exchanging information (Article 6(1)(f) RODO).
• Categories of personal data processed may include identification data, contact data, as well as other personal data provided to NodiStudio contained in documents, messages, etc. provided to us.
• The data will be stored for the period necessary to respond, exchange information – however, the law may provide for a longer retention period, in particular for the establishment, investigation or defense against claims.
• A person whose data is processed has the right to access and rectify data, the right to restrict processing, the right to object to processing, the right to lodge a complaint with the President of the Office for Personal Data Protection.
  
  

Visitors and those ordering through the website:

• For each call to NodiStudio’s website, the server automatically saves only the so-called “NodiStudio”. server logs, such as the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting ISP (access data), and documents the page call. The above data is analyzed only to ensure proper operation. This is due to our legitimate interest (Article 6(1)(f) of the RODO) in presenting the Products we sell and the services we provide.

• By placing an order in the Store, the Customer voluntarily consents to the storage and necessary processing by NodiStudio of his personal data provided in order form: name, surname, delivery address, e-mail address, telephone number.
• The Customer’s personal data are used for the purpose of concluding (electronically) and executing a contract for the sale of Products (under the terms and conditions indicated in the Terms and Conditions), including processing any complaints, and – with the Customer’s separate consent – for marketing purposes (information about loyalty programs or contests) or commercial purposes (presentation of the current offer of Products sold through the Store).

• The data will be stored for the period necessary to fulfill the contract – however, the law may provide for a longer retention period, in particular in the establishment, investigation or defense against claims.
• A person whose data is processed has the right to access and rectify data, the right to restrict processing, the right to object to processing, the right to lodge a complaint with the President of the Office for Personal Data Protection.
  
  

Suppliers:

• We process data for the purpose of entering into or executing a contract (Article 6(1)(b) of the RODO), and in specific cases for the purposes of legitimate interests (Article 6(1)(f) of the RODO) of establishing, investigating, defending against claims.
• Categories of personal data processed may include identification data, contact data, contact details.
• The data will be stored for a period of min. 5 years from the end of the calendar year in which the deadline for the payment of tax in connection with the agreement expired – however, the law may provide for a longer period of data storage, in particular for the establishment, investigation or defense against claims.
• A person whose data is processed has the right to access and rectify data, the right to restrict processing, the right to object to processing, the right to lodge a complaint with the President of the Office for Personal Data Protection.
• Provision of data is a contractual requirement, and refusal to provide it may prevent the conclusion or execution of the contract.

4. Rights

Rights of the person whose data is processed:

The right to access and obtain copies of personal data – pursuant to Art. 15 RODO every person is entitled to receive confirmation as to whether his or her personal data is being processed and, if this is the case, to obtain access to such data, including the right to obtain information m. in. About purposes of processing or recipients of personal data.

The right to rectify data – based on Art. 16 RODO, a person whose personal data is processed is entitled to request rectification of his or her personal data due to inaccuracy or incompleteness.

The right to erasure, including the “right to be forgotten ” – in accordance with Art. 17 RODO in specified cases, the person whose personal data is processed has the right to request erasure of his/her personal data. If personal information has been made public, we will take reasonable measures to inform other administrators processing the above. data on request presented.

The right to restrict processing – in accordance with Art. 18 RODO, a person whose personal data is processed may request restriction of the processing of personal data if he or she disputes the correctness of the data, if the processing is unlawful, the Controller no longer needs the data for the purposes of the processing, or if the person has objected to the processing.

The right to data portability – based on Art. 20 RODO, you may request the transfer of personal data saved in a standard machine-readable file format. If your goal is to transfer them to another administrator, we will send the file containing your personal data directly to them.

The right to object to processing – in accordance with Art. 21 RODO, you may request us to stop processing your personal data by filing an objection. It will be justified if you demonstrate that our lawful activities violate your interests, rights or freedoms.

The right to withdraw consent at any time – in situations where we have asked you for your consent, you may withdraw that consent at any time. If we do not have a separate basis for processing, we will stop using personal data for the purpose for which consent was given.

The right to lodge a complaint with a supervisory authority – if you believe that your rights have been violated by our data processing activities, you may file a complaint with the President of the Office for Personal Data Protection.

The rights listed above may be limited in certain situations, such as when we can demonstrate that we are legally obligated to process your data. If you wish to exercise your due rights, all you need to do is send the appropriate request using contact information indicated in Section 1. or in point 2.

5. Sources of personal data

The personal information we process is information that you have provided to us on your own, from of your own free will. In some occasional cases, we may process personal data that we are able to infer against you based on other information you provide to us. The administrator may also obtain personal data from publicly available sources, public records and third parties in connection with the services provided, for the purpose of providing them.

6. Recipients of personal data

Recipients of your personal data may be providers of accounting, IT, payment, auditing, consulting and courier services. The designated entities may be separate controllers of your personal data, or processors of personal data. If we outsource to another entity an operation the essence of which is the processing of personal data this will take place in accordance with Art. 28 and Art. 32 RODO, that is, under the entrustment of personal data for processing. Your data may also be disclosed to public authorities (administrative authorities, judicial authorities), however, in accordance with Art. 4(9) of the RODO, however, public bodies that may receive personal data in the context of a specific proceeding in accordance with European Union law or the law of a Member State are not considered recipients of personal data.

7. International transfer of personal data

As a rule, your personal data will not be transferred to countries outside the European Economic Area (EEA), where the law may not provide the same level of protection for your data.

However, if as part of the processing your personal data will be transferred to recipients in third countries (outside the EEA), such as the United States, such transfers may take place on the basis of:

• A decision finding an adequate level of protection (Article 45 of the RODO),
• subject to appropriate safeguards, including standard data protection clauses, an approved code of conduct or an approved certification mechanism (Article 46 RODO),
• using binding corporate rules (Article 47 of the RODO),
• after taking into account relevant exceptions in specific situations (Article 49 of the RODO).
  
  

8. Cookies

Our website uses “cookies” also commonly referred to as “cookies”. “Cookies” are information stored on your end device (desktop computer, laptop, tablet, smartphone) via your web browser. They are important because they allow the server on which our website is embedded to read the information when connected to a particular computer. In principle, this information does not constitute personal data, but it may be used to provide certain functions, such as:

• to recognize the device and display the website accordingly,
• Verify the authenticity of the browser session,
• Personalization of the interface, such as the language or region of your choice,
• To customize the content of the website according to users’ preferences,
• content recommendation, font size, etc.
  
  

Cookies are encrypted in a way that prevents unauthorized access. Web browsers allow “cookies” to be placed on end devices by default – appropriate browser settings allowing the use of “cookies” are treated as consent to data processing (Article 173 of the Act of July 16, 2004. Telecommunications Law in conjunction with Article 6(1)(a) of the RODO). People browsing our website can make the appropriate configuration of their browser to block the automatic acceptance of “cookies” or obtain information about the transmission of such a file to their device. For more information about cookie handling and possible configurations, please refer to your browser settings. The level of restrictions on the use of cookies may affect the availability and functionality offered by our website, including the possibility of blocking its full operation.

In addition to the above-mentioned purposes related to the configuration and correct display of our website, we use “cookies” to monitor users’ activities on the site (inputs, ways of navigating the website) using tools provided by Google LLC (Google Analytics). You can find more information about the “cookies” used by Google LLC services here: https://policies.google.com/?hl=pl.

9. Final provisions

We reserve the right to make changes to this privacy policy, which may be due to the need to adapt to changes in regulations, updates to privacy standards.