Cookies are understood as IT data, in particular text files, stored in users’ end devices intended for the use of websites. These files allow to recognize the user’s device and properly display the website tailored to his individual preferences.
Cookies usually contain the name of the website they come from, the storage time on the end device and a unique number. Cookies are contained in the HTTP protocol, which is used for communication between the web server and the browser. It consists of: a key that specifies the name of the value, value and lifetime after which the browser should delete the cookie. Their functions are mostly standard for the settings provided by the browsers.
Cookies are used to adapt the content of websites to the user’s preferences and to increase the usability and personalization of the content of websites. The software used for browsing websites allows by default to place “cookies” on the end device. These settings can be changed in such a way as to block the automatic handling of “cookies” in the web browser settings or inform about their every transfer to the user’s device. Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings. Restricting the use of “cookies” may affect some of the functionalities available on the website.
1.2. Personal data of the user of the Online Store www.oiolab.co (“User”) are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L No. 119, p. 1) (“GDPR”).
1.3. Personal data means information about an identified or identifiable natural person. An identifiable natural person is a person who can be directly or indirectly identified, in particular on the basis of an identifier such as name and surname, identification number, location data, internet identifier or one or more specific factors determining the physical, physiological, genetic, psychological, the economic, cultural or social identity of a natural person.
1.4. The Processor takes special care to protect the interests of data subjects, and in particular ensures that the data collected by him are: - processed in accordance with the law, reliably and transparently for the data subject; - collected for specific, explicit and legitimate purposes and not further processed in a manner inconsistent with these purposes; - adequate, relevant and limited to what is necessary for the purposes for which they are processed; - correct and, if necessary, updated; - stored in a form which permits identification of the data subject for no longer than is necessary for the purposes for which the data are processed; - processed in a manner ensuring adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by appropriate technical or organizational measures.
1.5 Due to special care for the protection of Users’ personal data, the Processor protects not only visitors to the Online Store, but also Users who have provided the Processor with their personal data using other communication channels, i.e. a. https: // www. Website. facebook.com and any other websites marked or co-branded with Facebook (including subdomains, international versions, widgets and versions for mobile phones), the rules of which are based on the regulations made available in particular at https://www.facebook.com / legal / terms, provided respectively by Facebook Inc. or Facebook Ireland Limited, including using the Facebook Lead Ads function aimed at direct marketing of the Processor’s own products or services. The rules for the protection and use of personal data by Facebook are available, for example, on the website: https://www.facebook.com/policy.php. The Processor has no influence on the content of the legal regulations of Facebook, including those regarding personal data; b. applications that allow the Processor to run advertising campaigns on the Facebook Website.
1.7. Each time the purpose, scope and recipients of data processed by the Processor result from the User’s consent or legal provisions and are further specified as a result of actions taken by the User in the Online Store or other communication channels with the User (Online Store regulations, competition regulations, other documents regarding actions taken by the Processor). In this respect, the information obligations are properly carried out by the Processor.
1.8. The personal data entrusted by the User is processed to the extent necessary, including for the purposes of: a. concluding a contract for the provision of electronic services, shaping its content, changes and solutions, b. performing orders placed by the User for products in the assortment of the Online Store, including contact with the User necessary due to the execution of the order, c. considering the User’s complaints, d. the return of benefits in the event of withdrawal from the contract, e. statistical, f. aimed at promoting products available in the Online Store, g. contact and answers to questions asked by the User,
h. to provide free newsletters containing information about the content contained in the Online Store, i. conducting the competition, in particular selecting the winners of the competition and implementing prizes, j. presenting advertisements, offers or promotions (discounts) regarding products or services intended for all recipients, in particular for the purpose of implementing the contract for the provision of the Newsletter, k. evaluation and analysis of activity and information about the User, including as part of the automated processing of Personal Data (profiling), in order to present general advertisements, offers or promotions (discounts) regarding the Processor’s products or services, in a manner adapted to the interests of a given User (without significantly affecting its decisions), in particular for the purpose of implementing the contract for the provision of the Newsletter, as well as market and statistical analyzes, l. fulfillment of legal obligations resulting from regulations, e.g. tax and accounting, especially in the case of paid contracts, m. correspondence with Users, including replying to User’s messages.
Each time the purpose and scope of data processed by the Processor result from the User’s consent or legal provisions and are further specified as a result of actions taken by the User in the Online Store or as part of other communication channels with the User.
1.9. The Processor may process, in particular, the following personal data of Users using the Online Store: - personal data provided in the form when registering an Account, placing Orders in the Online Store (in particular: name and surname; e-mail address; contact telephone number; address (street, number house number, apartment number, zip code, city, country), address of residence / business / seat (if different from the delivery address), bank account number, and in the case of Users who are not consumers, additionally, the company name and tax identification number (NIP) and other data collected when using the Online Store; - personal data provided in order to use the Newsletter, provided when using the contact form, or provided when submitting a complaint; - other data, in particular obtained based on the User’s activity on the Internet, including those obtained via the Online Store or other communication channels with the User, using cookies and similar technologies.
1.10. By selecting the option before placing the order or on the main page of the Online Store, “SUBSCRIBE TO OUR NEWSLETTER”. The User’s personal data will be processed by the Online Store also in order to provide marketing information about the Online Store, products and offer in the form of free newsletters. Providing personal data for the purpose of communication via the newsletter is voluntary.
1.11. For other (other) purposes, the User’s personal data may be processed on the basis of voluntarily expressed consents and applicable law.
1.12. Possible recipients of Users’ personal data:
- in the case of a User who uses the Online Store with the method of delivery by post or courier, the Processor provides the collected Personal Data of the User to the selected carrier or intermediary performing the shipment at the request of the Processor,
- in the case of a User who uses the Online Store with the method of electronic payments or with a payment card, the Processor provides the collected Personal Data of the User to the selected entity servicing the above payments in the Online Store.
2. DATA COLLECTED FROM USERS, INCLUDING PERSONAL DATA, THE WAY OF USING THE DATA, USER RIGHTS
2.1. The Processor may process the personal data of Users using the Online Store, fully taking into account the applicable provisions of law.
2.2. Providing personal data by the User is voluntary, but necessary for the conclusion and performance of the sales agreement, as well as its settlement. Each time, the scope of the data required to conclude a relevant contract is indicated previously in the Online Store, as part of other communication channels with the User or in the Terms and Conditions.
2.3. The basis for the processing of the User’s personal data is primarily the need to perform the contract to which the User is a party or the need to take action at the User’s request before its conclusion (Article 6 (1) (b) of the GDPR). This mainly applies to personal data provided in the form when registering an Account, placing Orders and concluding a Sales Agreement, as well as when subscribing to the Newsletter.
2.4. In the case of personal data provided in connection with the User’s complaint, the legal basis for their processing is the necessity to perform the Sales Agreement of the advertised goods. In the case of data processing operations for marketing purposes, the basis for such processing is the fulfillment of the objectives resulting from the legitimate interests pursued by the Processor (Article 6 (1) (f) of the GDPR).
2.5. In the event that the Processor presents, creates, grants and implements advertisements, offers or promotions dedicated to a given User, which are based solely on automated processing, including profiling, as much as possible adapted to preferences, which may significantly influence consumer decisions, the basis is the consent voluntarily expressed by the User (Article 6 (1) (a), Article 22 (2) (c) of the GDPR).
2.6. For purposes other than those specified above, the User’s Personal Data may be processed on the basis of:
- applicable law - when processing is necessary to fulfill the legal obligation incumbent on the Processor, e.g. when on the basis of tax or accounting regulations, (Article 6 (1) (c) of the GDPR);
- necessity for purposes other than those listed above, resulting from legitimate interests pursued by the Processor or by a third party, in particular to establish, investigate or defend claims, correspond with Users, also via contact forms (including replies to Users’ messages), market and statistical analyzes (Article 6 (1) (f) of the GDPR).
2.7. In order to place an order, the User may complete the order form once, without prior registration and login, by filling it in, providing the name, surname, delivery address, e-mail address, telephone number. If the User expects an invoice to be issued, he / she also provides the company name, address and tax identification number. The above-mentioned data is processed only for the time necessary to perform the order and is not made available by the Processor to third parties, except for persons whose participation is necessary to perform the order, i.e. the carrier, or persons keeping the Processor’s accounting and tax settlements.
2.8. In order to place an order, the User may also register in the Online Store by clicking the “Register” option available after adding products to the basket or by clicking the “Pay” option and moving to the basket. To set up an account, it will be necessary to provide the address, delivery address, e-mail, telephone number, and if you want to receive an invoice, also the company name, company address and tax identification number, as well as login and password. The login does not have to contain the User’s first or last name. The data provided by the User will be stored by the Online Store and after logging in, their provision will not be needed when placing another order. The data will be processed for the time necessary, in any case not longer than until the User objects to it.
2.9. The Online Store enables contact via e-mail. By contacting one of the above-mentioned ways, the User provides the electronic address. These data are used only for contact purposes, i.e. answering a question asked by the User.
2.10. The online store allows you to subscribe to the Newsletter by clicking on the “Subscribe to the newsletter” option. By subscribing to the Newsletter, the User provides the e-mail address. The above data is used only to provide the User with the Newsletter.
2.11. The User has the right to inspect the data processed by the Processor at any time, the right to request their change, and also to delete them. Each User has the right at any time to: - lodge a complaint with the President of the Office for Personal Data Protection; - transfer of personal data that has been provided to the Processor and which are processed in an automated manner, and the processing takes place on the basis of consent or on the basis of a contract, e.g. to another processor; - access to personal data (including e.g. receiving information which personal data is processed); - requests for rectification and limitation of processing (e.g. if personal data is incorrect) or deletion of personal data (e.g. if they were processed unlawfully); - withdrawal of any consent given to the Processor at any time, however the withdrawal of consent does not affect the processing carried out by the Processor in accordance with the law before its withdrawal; - object to the processing of personal data, carried out in order to implement the legitimate interests of the Processor or a third party, including in particular processing for marketing purposes, including profiling (if there are no other valid, legitimate grounds for processing overriding the interests of the User).
2.12. The User may request the Processor to delete the User’s account. For this purpose, please send a message to the following e-mail address: firstname.lastname@example.org.
2.13. The User may unsubscribe from the Newsletter at any time. The User can do it by himself by unsubscribing from the Newsletter. The option to unsubscribe from the Newsletter is visible each time, in each newsletter, at the bottom of the Newsletter. The User may also unsubscribe from the Newsletter by sending a message to the e-mail address: email@example.com.
3. COMMERCIAL INFORMATION
3.1. The Processor has the technical ability to communicate with the User remotely (e.g. e-mail).
3.2. Commercial information related to commercial activities conducted by the Processor or entities cooperating may only be sent in accordance with the will expressed by the User.
4. “COOKIES” FILES AND THEIR USE
4.1. When using the Online Store, small files, in particular text files, which contain information enabling the collection of statistical data, are saved on the User’s end device. It stores information that the Online Store may need to adapt to the ways in which the User uses it and to collect statistical data about the Online Store, e.g. about which websites have been visited, what elements are downloaded, and data about the domain name of the Internet service provider or the country of origin of the visitor, while generally not collecting any information that would allow the identification of the User; this information may sometimes be personal data, i.e. data that allows assigning certain behaviors to a specific User.
4.2. During the User’s visit to the Online Store, data on the visit may be automatically collected, in the form of the domain name of the website from which the User was forwarded to the Online Store website, browser type, operating system type, IP address, User ID, other information transmitted via the http protocol. In addition, the Processor may process operational data or information about the location of the device by means of which access to the Online Store is made.
4.3. The files used by the Online Store are in no way harmful to the User or the device and do not interfere with its software or settings.
4.4. The Online Store uses two types of cookies: session cookies and persistent cookies. Session cookies are temporary files that are stored on the User’s end device until logging out, leaving the website or turning off the software (web browser). Persistent cookies are stored on the User’s end device for the time specified in the cookie file parameters or until they are deleted by the User.
4.5. Cookies used in the Online Store are primarily used to adapt its content to the User’s preferences and to increase the usability and personalization of the content of websites.
4.6. Cookies used in the Online Store:
- necessary cookies, enabling the use of services available as part of the Online Store, e.g. authentication cookies used for services that require authentication on the Website;
- cookies used to ensure security, e.g. used to detect fraud in the field of authentication within the Online Store;
- “performance” cookies, enabling the collection of information on the use of the websites of the Online Store;
- “functional” cookies, enabling “remembering” the settings selected by the User and personalizing the User’s interface, e.g. in terms of the selected language or region of the User, font size, website appearance, etc.;
- “advertising” cookies, enabling the delivery of advertising content to Users more tailored to their interests.
4.7. As a rule, browsers in their default settings have the option to save cookies selected.
4.8. If the User does not agree to saving files on the end device, the User should change the settings of the web browser. For example, in Internet Explorer, cookies can be modified from the level: Tools -> Internet options -> Privacy; in Mozilla Firefox: Tools -> Options -> Privacy; while in Google Chrome: Settings -> Show advanced settings -> Privacy -> Content settings -> Cookies. Access paths may differ depending on the version of the browser used.
4.9. The ways of preventing cookies from being saved: a. not saving cookies on the end device; b. informing the User each time that a given cookie is saved on the device; c. deleting files after using the Online Store.
4.10. To use the option appropriate for the User, please read the information on managing cookies, which can be found most often in the “Settings” of the browser or in the “Help” tab. Each time the User may also contact the Online Store by sending an e-mail to office @ oiolab.co.
4.11. However, you should be aware that in the event that files are necessary for the operation of the Online Store, limiting their use may hinder the use of the Online Store.
4.12. The settings of the User’s device browser that allow saving cookies and expressing consent by clicking "I agree" in the window that appears after entering the home page of the Online Store, means that the User agrees that these files are saved on the end device.
4.14. The User may prevent the storage of Cookies by appropriate settings in the browser, however, this may affect the efficient use of all functions of the Online Store. The user can also prevent the collection of website usage data and the transmission of this data to Google by downloading and installing the https://tools.google.com/dlpage/gaoptout?hl=pl plugin.
4.15. A plug-in for Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA is integrated on the website. The Facebook plugin can be recognized by the F icon at the bottom and top of the website – i.e. the shortened Facebook logo and the “Like” button after redirecting to the Oio Lab fan page on Facebook. You can see an overview of Facebook plugins here: http://developers.facebook.com/docs/plugins/. When visiting the Website, the plugin will create a direct connection between the User’s browser and the Facebook server. Thus, Facebook will receive information that the User has visited the Online Store with his IP address. After clicking on the “Like” button, while logged in to the Facebook account, the User is able to link the Online Store on the User’s Facebook profile. In this way, Facebook can assign visits to the Online Store to the User’s account. More information can be found in the data protection declaration of Facebook http://pl-pl.facebook.com/policy.php. If the User does not want Facebook to assign visits to the Online Store to the User’s Facebook account, we suggest logging out of the User’s Facebook account.
4.16. Detailed information on managing cookies on a mobile phone or other mobile device can be found in the user manual / user manual of a given phone or mobile device.
5.1. The Processor uses technical and organizational measures to ensure protection of the processed personal data appropriate to the threats and categories of data protected, and in particular, protects the data against unauthorized disclosure, removal by an unauthorized person, processing in violation of applicable laws and change, loss, damage or destruction.
5.2. The User’s personal data is stored in a database to which technical and organizational measures have been applied to ensure the protection of the processed data in accordance with the requirements set out in the provisions of law on the protection of personal data.
5.3. Only persons authorized by the Processor have access to the database.
5.4. If the User has chosen to set up a User account, for security reasons, we recommend that you set a password and login that provides the appropriate level of difficulty. In particular, we recommend using a password consisting of a sequence of characters and numbers and different letters. The password should be at least eight characters long. The user using the Online Store using a third party end device should log out of the account and delete the browsing history.
5.5 The Processor, taking into account the state of technical knowledge, the cost of implementation and the nature, scope, context and purposes of processing as well as the risk of violating the rights or freedoms of natural persons with different probability and severity of the threat, applies appropriate technical and organizational measures ensuring protection of personal data processed, appropriate to the threats and categories. protected data, in particular, protects the data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of applicable laws and change, loss, damage or destruction. Providing information on the technical and organizational measures used to ensure the protection of processing to the outside world may weaken their effectiveness and therefore jeopardize the proper protection of personal data.
5.6. The Processor provides, for example, the following technical measures to prevent the acquisition and modification of personal data sent electronically by unauthorized persons:
- Securing the data set against unauthorized access;
- SSL certificate on the website of the Online Store where personal data is provided;
- Encryption of data used to authorize a person using the functionality of the Online Store;
- Access to the Account only after providing an individual login and password.
- increase the standards of data protection provided by the User.
7. CONTACTING THE PROCESSOR AND REPORTING IRREGULARITIES
7.1. The User may at any time contact the Processor directly by sending an appropriate message in writing or by e-mail to the Processor’s address at firstname.lastname@example.org, or by telephone at 515169444 or via the Facebook Website.
7.2. The Processors stores correspondence with the User for statistical purposes and for the best and fastest response to emerging inquiries. Addresses and data collected in this way will not be used to communicate with the User for any purpose other than the implementation of the application.
7.3. Please report any irregularities, comments or requests regarding the Policy via e-mail to the e-mail address indicated above. We assure you that each application will be considered by us and we will reply to the e-mail address provided in the application.
8. FINAL PROVISIONS
8.1. In the event of doubts or contradictions between the Policy and the consents granted by the User, regardless of the provisions of the Policy, the basis for undertaking and defining the scope of our activities is always the consent given by the User voluntarily or resulting from the provisions of law. However, this document is of a general nature, only informative (it is not a contract or regulations). The Processor may change the Policy in the future, among others for the following important reasons: a. changes in applicable regulations, in particular in the field of personal data protection, telecommunications law, services provided electronically and regulating consumer rights, affecting the rights and obligations of the Processor or the rights and obligations of the data subject; b. development of functionalities or electronic services dictated by the progress of internet technology, including the use / implementation of new technological or technical solutions, affecting the scope of the Policy. The Processor will each time place information about amendments to the Policy as part of the Online Store website. With each amendment, a new version of the Policy will be published with a new date.
8.2. This version of the Policy is effective from 1st November 2020.