The data will be processed until you have given your consent. You have the right to request from the administrator access to your personal data, rectification, deletion, or restriction of processing, the right to data portability, and the right to lodge a complaint to the supervisory authority - GIODO. The above rights also apply to the proper processing of data by the administrator and do not affect the legality of the processing carried out on the basis of my consent before its withdrawal.
1 Administrator of personal data
The administrator of the personal data is:
KR Kacper Rój
Wolowice 404
32-070 Czernichów
NIP: 9442163181
2 What personal information is collected and processed by the company KR
Data needed to fulfill the contract described in the regulations, i.e. the sale of goods electronically. Making a purchase in our online store requires filling out a form, in which you need to provide information that allows you to be contacted (e.g., email address and phone number) and a mailing address to complete the order. In case the buyer is an entrepreneur also the company data (name and NIP) allowing to issue a VAT invoice.
Email address in the case of newsletter subscribers.
The information contained in the system logs (e.g. IP address), resulting from the general principles of connections made on the Internet, is used by KR to collect general, statistical demographic information (e.g. about the region from which the connection is made).
Demographic data (e.g. age, gender) may also be compiled with selected usage data (e.g. stored in cookies) and used to research user preferences and improve the quality of our services, in which case the compiled data is stripped of any identifying markings (anonymization).
3 Legal basis for processing
Your consent given on our website (Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016. - "RODO")
Sales contract and contract for the provision of services (Article 6(1)(b) RODO)
A legal obligation owed to us, e.g. related to accounting (Article 6(1)(c) RODO)
Legitimate interest, in order to establish, assert or defend claims (Article 6(1)(f) RODO)
4 How is the data protected?
The form filled out by the user in the course of placing an order or registration, as well as the very process of authorization (logging in) to our resources is carried out using the secure SSL protocol, which significantly increases the protection of data transmission over the Internet. The information is stored and processed by KR company with appropriate security measures that meet the requirements of Polish law.
(5) Is the personal information provided shared with other entities?
we share the data necessary for the execution of orders (mailing address) with external entities such as courier companies (Poczta Polska, Inpost),
accounting office through its IT system in order to fulfill tax obligations (issuing invoices, sending JPK files),
the hosting company on whose server our service is located
6 What are your rights related to the processing of personal data?
You are entitled to the following rights in connection with our processing of your personal data:
The right to access your data, including obtaining a copy of your data,
The right to request rectification of your data,
The right to have your data erased (in certain situations),
The right to lodge a complaint with a supervisory authority dealing with personal data protection,
The right to restrict data processing.
7 How your rights will be exercised
KR company (chronlakier.pl) allows each user to view, modify and delete personal data held about the user through a form available after logging into the online store. In addition, in any case, the user may contact the data controller at the following email address: chronlakier@gmail.com or, in case the user considers such a solution insufficient, he may also write to: KR Kacper Rój, Wolowice 404, 32-070 Czernichów.
We reserve the right to process your data after the termination of the Agreement or the withdrawal of consent only to the extent for the purpose of pursuing possible claims before a court of law or if national or EU regulations or international law oblige us to retain the data.
The Data Controller has the right to share your personal data and other data with entities authorized under applicable law (e.g. law enforcement agencies).