GENERAL PROVISIONS

1.1. This privacy policy is for informational purposes only, which means that it does not constitute a source of obligations for Service Users or Customers of the Sorvella Online Store.

1.2. The controller of personal data collected via the Online Store is Glare Marketing Sp. z .oo with its registered office in Warsaw (registered office address: ul. Muszkieterów 15a/B, 02-273 Warsaw and address for service: al. Muszkieterów 15a/B, 02-273 Warsaw); entered into the Register of Entrepreneurs of the National Court Register under the KRS number 0000665980 ; registration court where the company documentation is kept: District Court for the capital city of Warsaw in Warsaw, 13th Commercial Division of the National Court Register; share capital: PLN 500 000; Tax Identification Number (NIP): 5223084781; National Business Registry Number (REGON): 36666138200000 ; e-mail address: support@sorvella.com – hereinafter referred to as the “Administrator” and being both the Online Store Service Provider and the Seller.


1.3. Personal data of the Service Recipient and the Customer are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as "GDPR") and the Act on the provision of electronic services of 18 July 2002 (Journal of Laws of 2002 No. 144, item 1204, as amended).


1.4. The Controller takes special care to protect the interests of data subjects, and in particular ensures that the data collected by it are processed in accordance with the law; collected for specified, lawful purposes and not subject to further processing incompatible with those purposes; substantively correct and adequate in relation to the purposes for which they are processed and stored in a form which allows identification of data subjects for no longer than is necessary to achieve the purpose of processing.


1.5. All words, phrases and acronyms appearing on this website and beginning with a capital letter (e.g. Seller, Online Store, Electronic Service) should be understood in accordance with their definitions contained in the Online Store Regulations available on the Online Store website.


PURPOSE AND SCOPE OF DATA COLLECTION AND DATA RECIPIENTS


2.1. Each time, the purpose, scope, and recipients of data processed by the Controller result from the actions undertaken by the Service User or Customer in the Online Store. For example, if the Customer chooses personal collection instead of courier delivery when placing an Order, their personal data will be processed for the purpose of concluding and fulfilling the Sales Agreement, but will no longer be shared with the carrier carrying out shipments on behalf of the Controller.


2.2. Personal data of Service Users or Customers are collected and processed by the Administrator for the purpose of:


2.2.1. providing the User Account service on the Sorvella website (Article 6 paragraph 1 letters (a) and (b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "GDPR"),


2.2.2. enabling the submission and execution of an order and the conclusion of a sales contract for products offered by Glare Marketing Sp. z o. o. via the online store operated at www.sorvella.pl (Article 6, paragraph 1, letter (b) of the GDPR)


2.2.3. marketing of the Controller's own products or services (Article 6(1)(f) of the GDPR).


2.3. Possible recipients of personal data of Online Store Customers: 2.3.1. In the case of a Customer who uses postal or courier delivery in the Online Store, the Administrator makes the collected personal data of the Customer available to the selected carrier or intermediary carrying out shipments on behalf of the Administrator. 2.3.2. In the case of a Customer who uses electronic payment or payment card payment in the Online Store, the Administrator makes the collected personal data of the Customer available to the selected entity handling such payments in the Online Store. 2.3.3. In the case of a Customer who has agreed to express an opinion on the concluded Sales Agreement, the Administrator makes the collected personal data of the Customer available to the selected entity handling the survey system for opinions on concluded Sales Agreements in the Online Store.


2.4. The Administrator may process the following personal data of Service Users or Customers using the Online Store: first name and last name; e-mail address; contact telephone number; delivery address (street, house number, apartment number, postal code, city, country), residential/business address/registered office address (if different from the delivery address). In the case of Service Users or Customers who are not consumers, the Administrator may additionally process the company name and tax identification number (NIP) of the Service User or Customer.


2.5. Providing the personal data referred to in the point above may be necessary to conclude and perform a Sales Agreement or an agreement for the provision of Electronic Services in the Online Store. In each case, the scope of data required to conclude the agreement is indicated in advance on the Online Store website and in the Online Store Terms and Conditions.


2.6. Personal data of Service Users or Customers will be stored for the period necessary to perform the contract, and after that period for the purposes and for the period and to the extent required by law or to secure any claims. The Administrator systematically assesses the suitability of the data, no less than every three years from the date of its entry.


COOKIES AND OPERATIONAL DATA


3.1. Cookies are small pieces of information in the form of text files, sent by the server and stored on the website of the Online Store visitor (e.g., on the hard drive of a computer, laptop, or smartphone's memory card – depending on the device the visitor uses to visit our Online Store). Detailed information about cookies, as well as the history of their creation, can be found here: http://pl.wikipedia.org/wiki/Ciasteczko. The Sorvella Online Store uses the following types of cookies:


3.1.1 "session" or "temporary" cookies, which are associated with the session and are stored on the user's device until the user leaves the website;


3.1.2. "persistent" cookies, which remain in the browser after the session ends (unless deleted by the user);


3.1.3. third-party cookies (third-party cookies), originating from advertising servers of entities cooperating with the website.


3.2. The Administrator may process data contained in Cookies when visitors use the Online Store website for the following purposes:


3.2.1. identifying Service Users as logged in to the Online Store and showing that they are logged in;


3.2.2. remembering Products added to the cart for the purpose of placing an Order; 3.2.3. remembering data from completed Order Forms, surveys or login details to the Online Store;


3.2.4. adapting the content of the Online Store website to the individual preferences of the Service Recipient (e.g. regarding colors, font size, page layout) and optimizing the use of the Online Store websites;


3.2.5. keeping anonymous statistics showing how the Online Store website is used.


3.3. By default, most web browsers accept cookies by default. Everyone can specify the terms of use of cookies through their own web browser settings. This means, for example, that you can partially restrict (e.g., temporarily) or completely disable the ability to save cookies. However, this may affect some of the Online Store's functionalities (for example, it may be impossible to complete the ordering process via the Order Form due to Products not being saved in the shopping cart during subsequent steps of the ordering process).


3.4. Your browser's cookie settings are important for consenting to the use of cookies by our Online Store. In accordance with the regulations, such consent can also be expressed through your browser settings. If you do not consent, you must change your browser's cookie settings accordingly.


3.5. Detailed information on changing cookie settings and deleting them yourself in the most popular web browsers is available in the help section of your web browser and on the following websites (just click on the appropriate link):

  • in Chrome
  • in Firefox
  • in Internet Explorer
  • in the Opera browser
  • in Safari browser
  • in the Microsoft Edge browser

3.6. The Administrator also processes anonymized operational data related to the use of the Online Store (IP address, domain) to generate statistics that assist in the administration of the Online Store. This data is aggregated and anonymous, meaning it does not contain any features that identify visitors to the Online Store. This data is not disclosed to third parties.


BASIS FOR DATA PROCESSING


4.1. Providing personal data by the Service User or Customer is voluntary, however, failure to provide the personal data indicated on the Online Store website and in the Online Store Regulations necessary for the conclusion and implementation of the Sales Agreement or the agreement for the provision of Electronic Services results in the inability to conclude such agreement.


4.2. The legal basis for the processing of personal data of the Service User or Customer is: 4.2.1. in the case of providing the User Account service on the Sorvella website – performance of the agreement for the provision of User Account services (in the scope of the Service User's registration and basic user account management) and the Service User's consent (in the case of providing additional data in the "Account Settings" section),


4.2.2. in the case of making a purchase via the Online Store – conclusion and performance of the sales contract concluded via the Sorvella website, 4.2.3. in the case of marketing of own products – the legitimate interest of the Administrator in the form of promoting own services and products and the consent of the Service User (in the scope of sending commercial information electronically, the so-called Newsletter, to the provided e-mail address).


4.3. In the case of data processing for the purpose of the Customer expressing an opinion on the concluded Sales Agreement, the basis for such processing is the consent of the Service Recipient or the Customer.


THE RIGHT TO CONTROL, ACCESS AND CORRECT YOUR DATA


5.1. The Service Recipient or Customer has the right to request access to the content of their personal data, to rectify it and to object to its processing.


5.2. In circumstances specified by generally applicable law, the Service Recipient or Customer has the right to request:


5.2.1. deletion of data concerning him/her, in particular if the personal data being processed are no longer necessary to achieve the purpose for which they were collected, the consent on the basis of which they were processed has been withdrawn, an objection has been raised against their processing or the processing is unlawful;

5.2.2. request restriction of data processing, in particular if the personal data being processed are incomplete, outdated, untrue or are being processed in violation of the law or are no longer necessary to achieve the purpose for which they were collected;


5.2.3. transfer your personal data, in particular if the data processing takes place on the basis of consent or is undertaken in connection with the performance of a contract to which the Service Recipient or Customer is a party.


5.3. If the processing of the Service User's or Customer's personal data is based on their consent, they have the right to withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.


5.4. The Service Recipient or Customer also has the right to lodge a complaint with a supervisory authority if they believe that the processing of their data violates the provisions of the GDPR. A complaint should be lodged with the supervisory authority, which until May 25, 2018, is the Inspector General for Personal Data Protection, and after that date, the President of the Office for Personal Data Protection.


5.5. In order to exercise the rights referred to above, you may contact the Administrator by sending an appropriate message in writing or by e-mail to the Administrator's address indicated at the beginning of this Privacy Policy.


FINAL PROVISIONS


6.1. The Online Store may contain links to other websites. The Administrator encourages users to review the privacy policies posted on other websites after visiting them. This privacy policy applies only to this Online Store.


6.2. The Administrator applies technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of data being protected, and in particular protects data against unauthorized disclosure, removal by an unauthorized person, processing in violation of applicable regulations, and alteration, loss, damage or destruction.


6.3. The Administrator shall provide the following technical measures to prevent unauthorized persons from obtaining and modifying personal data sent electronically: 6.3.1. Securing the data set against unauthorized access.


6.3.2. Access to the Account is only possible after providing an individual login and password.


6.3.3. SSL Certificate.