Privacy Policy of the Dualrealm Chronicles online store

Privacy policy of the online store available at kopijer.pl

1.  SUBJECT OF THE PRIVACY POLICY

This privacy policy (hereinafter referred to as the "Privacy Policy") sets out the principles and purposes of the Administrator's processing of Personal Data and User Cookies, and the Administrator collects Users' Personal Data and Cookies in connection with and while Users use the Store.

2.  DEFINITIONS

Subject to the following sentence, all terms used in the Privacy Policy with a capital letter have the meaning specified in the regulations of the online store available via the Store, available at kopijer.pl. Moreover, for the purposes of the Privacy Policy, the following meanings of the terms indicated below (also when used in the plural):

2.1. "Administrator" means the Seller.

2.2. "Cookies" mean small text files installed on the User's device that collect information that facilitates the User's use of the Store.

2.3. "Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, the economic, cultural or social identity of the individual.

2.4. "GDPR" marked by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of legal persons with regard to the use of personal data and on free access to such data and the use of such data by 95/46/EC .

2.5. “User” means a person accessing the Store or one or more of the services or features of the Basic Store in the Privacy Policy.

 

3. PURPOSES AND BASIS OF PERSONAL DATA PROCESSING

3.1. As a result of using the Store by a user who does not have an account, did not consent to receiving e-mails from the Administrator about events, offers or content, including commercial information, and orders were not delivered without receiving an account - The administrator contains detailed data about this user: IP address, cookie identifiers. The data referred to in the event may be sent by the Administrator:

3.1.1. in order to provide services electronically via the store, including providing user Content. In such a case, the use of personal data is necessary to implement the Regulations (Article 6(1)(b) of the GDPR);

3.1.2. in the analytical and statistical areas of the Administrator. Due to the fact that personal data are necessary for the legitimate interests of the Administrator (Article 6(1)(f) of the GDPR), consisting in analyzing user activity in the store in order to use public services in the store or service functions ;

3.1.3. for the purpose of applying, investigating or limiting compliance with the Regulations. Therefore, personal data are necessary for the legitimate interests covered by the Administrator (Article 6(1)(f) of the GDPR), including the determination, application or reservations in question.

3.2. In connection with the creation of an Account by the User, the Administrator processes the following data regarding this User: name and surname, Login and Password. Providing the data referred to in the previous sentence is voluntary, but necessary for the User to create and have an Account. Additionally, the Administrator processes the following data regarding this User: IP address, cookie identifiers. The data in question may be processed by the Administrator:

3.2.1. in order to provide services electronically via the Store, including providing the User with Content. In such a case, the processing of Personal Data is necessary to perform the Service Provision Agreement (Article 6(1)(b) of the GDPR);

3.2.2. in order to process Sales Agreements concluded by the User. In such a case, the processing of Personal Data is necessary for the performance of the contracts in question (Article 6(1)(b) of the GDPR);

3.2.3. for analytical and statistical purposes of the Administrator. In such a case, the processing of Personal Data is necessary for the purposes of the legitimate interests pursued by the Administrator (Article 6(1)(f) of the GDPR), consisting in analyzing Users' activity in the Store in order to modify the functions or services available in the Store;

3.2.4. in order to handle complaints related to the implementation of the Service Provision Agreement or Sales Agreement. In such a case, the processing of Personal Data is necessary to perform the Service Provision Agreement or the Sales Agreement (Article 6(1)(b) of the GDPR);

3.2.5. in order to establish, pursue or defend claims related to the implementation of the Service Provision Agreement or Sales Agreement. In such a case, the processing of Personal Data is necessary for the purposes of the legitimate interests pursued by the Administrator (Article 6(1)(f) of the GDPR), consisting in determining, pursuing or defending the claims in question.

3.3. In connection with the User placing an Order and concluding and implementing the Sales Agreement - regardless of whether the User has an Account or does not have an Account - the Administrator processes the following data regarding this User:

3.3.1. data necessary to place an Order and conclude and implement the Sales Agreement: name and surname, e-mail address, telephone number, billing postal address and delivery postal address. Providing the data referred to in the previous sentence is voluntary, but necessary to place an Order and conclude and implement the Sales Agreement;

3.3.2. additional data that may facilitate the implementation of the Sales Agreement: company name for the billing postal address and company name for the delivery postal address. Providing the data referred to in the previous sentence is voluntary and optional - it does not affect the possibility of placing an Order or concluding or implementing a Sales Agreement.

3.3.3. Additionally, the Administrator processes the following data regarding this User: IP address, cookie identifiers.

The data in question may be processed by the Administrator:

3.3.4. for the purposes indicated in point 3.2.2 – 3.2.5 Privacy Policy;

3.3.5. in order to fulfill the legal obligations incumbent on the Administrator in connection with the conclusion and implementation of the Sales Agreement, including in particular obligations arising from tax and accounting regulations. In such a case, the processing of Personal Data is necessary to fulfill the legal obligations imposed on the Administrator (Article 6(1)(c) of the GDPR).

 

3.4. In connection with the User's consent to receive e-mail notifications from the Administrator about interesting events, offers or content, in particular containing commercial information (so-called newsletter) - regardless of whether the User has an Account or does not have Accounts – the Administrator processes the following data regarding this User: e-mail address and, if the e-mail address contains these data, name and surname. Providing the data referred to in the previous sentence is voluntary, but necessary to receive the newsletter from the Administrator. Additionally, the Administrator processes the following data regarding this User: IP address, cookie identifiers. The data in question may be processed by the Administrator:

3.4.1. for the purpose of servicing, including sending a newsletter to the User. In such a case, the processing of Personal Data is based on the User's consent (Article 6(1)(a) of the GDPR);

3.4.2. for analytical and statistical purposes of the Administrator. In such a case, the processing of Personal Data is necessary for the purposes of the legitimate interests pursued by the Administrator (Article 6(1)(f) of the GDPR), consisting in analyzing Users' activity in the Store in order to modify the functions or services available in the Store;

3.4.3. in order to handle complaints related to the implementation of the Regulations / Service Agreement regarding the newsletter. In such a case, the processing of Personal Data is necessary to execute the Regulations/Service Provision Agreement (Article 6(1)(b) of the GDPR);

3.4.4. in order to establish, pursue or defend claims related to the implementation of the Regulations / Service Agreement regarding the newsletter. In such a case, the processing of Personal Data is necessary for the purposes of the legitimate interests pursued by the Administrator (Article 6(1)(f) of the GDPR), consisting in determining, pursuing or defending the claims in question.

 

3.5. In connection with the User sending an inquiry to the Administrator via e-mail or the contact form provided in the Store - regardless of whether the User has an Account or does not have an Account - the Administrator processes the following data regarding this User:

 

3.5.1. data necessary to handle the inquiry: name and surname and e-mail address. Providing the data referred to in the previous sentence is voluntary, but necessary to handle the inquiry;

3.5.2. additional data that may facilitate the handling of the inquiry: telephone number. Providing the data referred to in the previous sentence is voluntary and optional - it does not affect the ability to handle the inquiry.

Additionally, the Administrator processes the following data regarding this User: IP address, cookie identifiers.

3.6. In connection with the User sending an inquiry to the Administrator via traditional mail - regardless of whether the User has an Account or the User does not have an Account - the Administrator processes the following data regarding this User:

3.6.1. data necessary to handle the inquiry: name and details of the return contact channel to which the Administrator is to send a response to the inquiry (e-mail address or name and address of traditional mail). Providing the data referred to in the previous sentence is voluntary, but necessary to handle the inquiry;

3.6.2. additional data that may facilitate the processing of the query. Providing the data referred to in the previous sentence is voluntary and optional - it does not affect the ability to handle the inquiry.

The data in question may be processed by the Administrator:

3.6.3. to handle your query. In such a case, the processing of Personal Data is based on the User's consent (Article 6(1)(a) of the GDPR);

3.6.4. for analytical and statistical purposes of the Administrator. In such a case, the processing of Personal Data is necessary for the purposes of the legitimate interests pursued by the Administrator (Article 6(1)(f) of the GDPR), consisting in analyzing Users' activity in the Store in order to modify the functions or services available in the Store;

3.6.5. in order to handle complaints related to the implementation of the Regulations / Service Provision Agreement regarding the inquiry. In such a case, the processing of Personal Data is necessary to execute the Regulations/Service Provision Agreement (Article 6(1)(b) of the GDPR);

3.6.6. in order to establish, pursue or defend claims related to the implementation of the Regulations / Service Provision Agreement in the scope of the inquiry. In such a case, the processing of Personal Data is necessary for the purposes of the legitimate interests pursued by the Administrator (Article 6(1)(f) of the GDPR), consisting in determining, pursuing or defending the claims in question.

 

3.7. With respect to Users visiting the Administrator's profiles run on social media (Facebook, Instragram), the Administrator processes the data of these Users only in connection with maintaining a given profile, including to inform Users about the Administrator's activity and to promote various types of events, services and products, as well as in order to communicate with Users via functionalities available on social media. In such a case, the processing of Personal Data is necessary for the purposes of the legitimate interests pursued by the Administrator (Article 6(1)(f) of the GDPR), consisting in promoting one's own brand and building and maintaining a community related to the brand.

 

4.  USE OF COOKIES

The Administrator uses Cookies primarily to provide services to the User in accordance with the Regulations / Service Provision Agreement and to improve the quality of these services. Therefore, the Administrator or third parties who provide analytical and statistical services to the Administrator store information or gain access to information already stored on the User's end device (computer, tablet, smartphone, etc.), such as:

 

4.1. Cookies with data entered by the User (session identifier) ​​for the duration of the session (user input cookies);

4.2. authentication cookies, authentication of services for the duration of the session (Authentication Cookies);

4.3. Cookies ensuring security, e.g. licensed, authentication abuse (user centric security cookies);

4.4. Cookies used to personalize the user for the duration of the transmission or slightly longer (user interface customization cookies);

4.5. Cookies stored to remember the contents of the shopping cart for the duration of the session (shopping cart cookies);

4.6. Google Analytics monitoring cookies for monitoring traffic in the Store, i.e. data analytics (these are files controlled by Google in order to analyze how the user uses the Store, to create statistics and monitor the use of the Store). Google does not use the collected data for user exit or combine this information to enable access. Detailed information about the scope and principles of data collection in connection with these services can be found at the link: https://policies.google.com/technologies/partner-sites?hl=pl.

4.7. Cookies for monitoring traffic in the Store and targeting ads on Facebook, the so-called Facebook Pixel (these are files controlled by the Facebook Group in order to analyze how the User uses the Store, create statistics and threats related to the use of the Store and to target ads on Facebook for the User). The information collected as part of Facebook Pixel is anonymous, i.e. it is not integrated with your device, Facebook may be equipped with this information with other devices about you collected as part of your use of the Facebook service and specific to electrical devices, including marketing ones. Detailed information about the scope and principles of data collection in connection with these services can be found at the following link: https://www.facebook.com/privacy/explanation.

5. PERSONAL DATA PROCESSING PERIOD

5.1. The period of processing Personal Data by the Administrator depends on the type of service provided and the purpose of processing. As a rule, Personal Data is processed for the duration of the provision of the service or implementation of the Sales Agreement, until the consent is withdrawn or an effective objection to the processing of Personal Data is raised in cases where the legal basis for data processing is the legitimate interest of the Administrator.

5.2. The period of Personal Data processing may be extended if the processing is necessary to establish, pursue or defend any claims, and after that time only if and to the extent required by law. After the processing period, Personal Data is irreversibly deleted or anonymized.

 

6. USER RIGHTS IN RELATION TO THE PROCESSING OF PERSONAL DATA

6.1. In connection with the processing of Personal Data, the User is entitled to:

6.1.1. the right to information about the processing of Personal Data - in the exercise of this right, the Administrator provides the User with information about the processing of Personal Data concerning him, including the purposes and legal basis for processing, the scope of Personal Data held, entities to which Personal Data are disclosed, and the planned date of their deletion ;

6.1.2. the right to obtain a copy of Personal Data - in exercising this right, the Administrator provides the User with a copy of the Personal Data processed regarding him;

6.1.3. the right to rectify Personal Data - in exercising this right, the Administrator removes any possible inconsistencies or errors regarding the Personal Data being processed regarding the User, and supplements or updates them if they are incomplete or have changed;

6.1.4. the right to delete Personal Data - in exercising this right, the Administrator deletes Personal Data relating to the User, the processing of which is no longer necessary to achieve any of the purposes for which they were collected;

6.1.5. the right to limit the processing of Personal Data - in the exercise of this right, the Administrator ceases to perform operations on Personal Data relating to the User, with the exception of operations to which the User has consented, and to store them, in accordance with the adopted retention principles, or until the reasons for limiting the processing of Personal Data cease to exist regarding the User (e.g. a decision of the supervisory authority will be issued authorizing further processing of the data in question);

 

6.1.6. the right to transfer Personal Data - in exercise of this right, the Administrator, to the extent that Personal Data concerning the User is processed in connection with a concluded contract or consent, issues Personal Data provided by the User in a format that allows them to be read by a computer. It is also possible to request that this data be sent to another entity - provided, however, that there are technical possibilities in this respect on the part of both the Administrator and the other entity;

6.1.7. the right to object to the processing of Personal Data for marketing purposes - in exercising this right, the Administrator ceases to process Personal Data relating to the User for marketing purposes. The User's exercise of this right to object does not require justification;

6.1.8. the right to object to the processing of Personal Data for other purposes - in the exercise of this right, the Administrator ceases to process Personal Data relating to the User processed on the basis of the legitimate interest of the Administrator. The User's exercise of this right to object requires justification and is subject to the Administrator's assessment;

6.1.9. the right to withdraw consent to the processing of Personal Data - in exercising this right, the Administrator will stop processing Personal Data concerning the User processed on the basis of his consent, which, however, does not affect the lawfulness of the processing carried out before the withdrawal of this consent;

6.1.10. the right to lodge a complaint with the supervisory authority - if the User considers that the processing of Personal Data violates the provisions of the GDPR or other provisions on the protection of personal data, the User may submit a complaint to the President of the Personal Data Protection Office.

6.2. Application regarding the exercise of any of the rights referred to in point 6.1.1 – 6.1.9 of the Privacy Policy, you can submit:

6.2.1. in writing - at the following address: Paweł Kopijer, ul. Wincentego Styczyńskiego 3m1, 44-100 Gliwice;

6.2.2. via e-mail – at: pawel@kopijer.pl

6.3. The application referred to in point 6.2 of the Privacy Policy should, if possible, precisely define the scope and subject of the User's request, in particular it should specify which of the rights referred to in point 6.1.1 - 6.1.9 of the Privacy Policy, the User wants to use.

6.4. If the Administrator is unable to determine the content of the request or identify the User based on the content of the request referred to in point. 6.2 of the Privacy Policy, will ask the applicant for additional information.

6.5. The Administrator responds to the request referred to in point. 6.2 of the Privacy Policy, within one month from the date of its receipt. If it is necessary to extend the deadline indicated in the previous sentence, the Administrator will inform the applicant about the reasons for such extension.

6.6. The Administrator responds to the request referred to in point. 6.2 of the Privacy Policy, via the contact channel through which the application was received; in the case of an application received via traditional mail, the Administrator will respond via e-mail to the User's request.

 

7. RECIPIENTS OF PERSONAL DATA

7.1. In connection with the implementation of the Regulations / Service Provision Agreement or Sales Agreement, personal data will be disclosed to external entities, including in particular suppliers responsible for operating IT systems, entities such as banks and payment operators, entities providing accounting or legal services, couriers (in connection with with the implementation of the Sales Agreement).

7.2. The Administrator reserves the right to disclose selected information about the User to competent authorities or third parties who request such information, based on an appropriate legal basis and in accordance with the provisions of applicable law.

 

8. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

With regard to the transfer of Personal Data to third countries (i.e. outside the European Economic Area), the Administrator informs that - in connection with his use of Google Analytics and Facebook Pixel services - Personal Data may be transferred to the USA. At the same time, the Administrator informs that both Google and Facebook, as participants in the Privacy Shield program approved by the decision of the European Commission, ensure an adequate level of protection within the meaning of Art. 45 GDPR.

 

9. CONTACT THE ADMINISTRATOR

Contact with the Administrator is possible:

9.1. in writing - at the following address: Paweł Kopijer, ul. Wincentego Styczyńskiego 3m1, 44-100 Gliwice;

9.2. via e-mail – at: pawel@kopijer.pl.

 

 10. CHANGE TO THE PRIVACY POLICY

The Administrator constantly verifies and, if necessary, updates the Privacy Policy.