Privacy Policy
1. General Provisions
1.1. Brazi Druse Jewelry Store, Aleksander Kościesza, at www.brazi.pl acts as the administrator in the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter referred to as "GDPR") on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, in relation to the personal data of Users who are natural persons.
2. Data Processing and its Scope
Data processing means activities and operations performed on Users' data, including storing or analyzing them for the purposes of the website's services.
2.1. Account Registration – creating an Account may require the User to provide the following data: name, surname, date of birth, correspondence address, e-mail address, phone number, gender, login, bank account number. According to the User's choice, they may also upload photos. In the case of registration via an external service, such as Facebook Connect, Log in with PayPal, the Administrator obtains data such as e-mail address and date of birth, used solely for registration/login purposes.
2.2. Transaction Conclusion – The Administrator, as part of the services provided by the Website, may process Users' personal data to enable the Buyer and Seller to conclude a Sales agreement, send messages, and communicate with other Users. The information contained in the descriptions of Goods and the content of mutual messages between the parties to the Sale do not originate from the Administrator, and the Administrator is not responsible for them.
2.3. Customer Service – The Administrator may process personal data of Users contacting the Website's customer service department. Data may be necessary for communication and may be supplemented with personal data from the User's Account.
2.4. Contact Form – The Website enables mutual contact between Users, in particular Users and Sellers, and may collect Users' personal data within this framework. The form is provided to enable communication regarding Sales on the Website, inquiries about offers, and activities aimed at concluding transactions on the Website. The Administrator may analyze and block messages that are inconsistent with the purpose of the form, especially if they are spam or contain prohibited content.
2.5. Data Processing via Website – when necessary to provide services to the User or constitutes a legitimate interest of the Administrator or third parties, the Administrator is authorized to process data such as: User's IP address, location, access time to the Website, URL of the previously visited page by the User (referer link), software and hardware parameters of the User, mobile device identification number, and other data related to devices and systems. The processing of the above information occurs when using the Website, the Website's applications, and third-party services.
2.6. Contests – The Administrator may process data for the purpose of conducting contests and selecting their winners.
3. Purpose of Data Processing
3.1. Users' personal data are processed by the Administrator to enable Users to use the Website, including in particular performing the following activities:
- creating and managing a User Account or Accounts,
- enabling full use of the Website, including making transactions,
- providing support for the User's Account and transactions, including resolving technical problems,
- adapting displayed content in the Website's properties or properties of third-party services based on User activity,
- monitoring the activity of all and specific Users, including keywords searched, Goods posted, and managing traffic on the Website,
- contacting Users, including for purposes related to service provision, User support, permitted marketing activities, through available communication channels, in particular e-mail and phone,
- conducting research and analysis of the Website, among others, concerning platform functionality, improving the operation of available services, or estimating the main interests and needs of visitors,
- ensuring the security of electronic services provided, including enforcing compliance with the Regulations and preventing fraud and abuse,
- fulfilling agreements concluded within the sales agreement with other Users on the Website,
- handling User complaints,
- matching advertisements according to previously viewed content,
- conducting direct marketing of the Administrator's own services or services or goods of third parties,
- handling User requests submitted in particular to customer service and through the contact form,
- organizing loyalty programs, contests, and promotional campaigns in which Users may participate,
- fulfilling obligations resulting from legal provisions, including tax or accounting regulations,
- providing payment services, commission payments from transactions on the Website, debt collection,
- conducting judicial, arbitration, and mediation proceedings, statistical, accounting, archiving, ensuring accountability.
4. Data Sharing
4.1. The Administrator, after obtaining prior consent from the User, may share Users' personal data with other websites run by the Administrator.
4.2. In the event of restructuring, sale/transfer of assets partially or entirely to a new owner, Users' personal data may be transferred to the new owner to ensure the continued provision of Website services.
4.3. The Administrator does not transfer personal data to third parties, except for: - the need to provide information about the User to public authorities, in the fight against fraud and abuse, proceedings related to law infringement, and combating violations of the Regulations.
- cooperating entities such as: analytical service providers, data storage providers, retargeting providers, affiliate networks, logistics operators. In such a case, these entities are not authorized to use the data on their own behalf, but solely for the needs of the Administrator and the Website.
4.4. The Administrator may share anonymized data with third parties, which do not identify specific Users, but serve to improve the purpose of data processing, which is to adapt the content displayed on the website, match advertisements, and reach Users outside the website.
4.5 The Seller, after obtaining the Buyer's data from the Administrator, is obliged to fulfill all obligations arising from this regulation and other legal provisions towards the Buyer, including ensuring the exercise of their rights under the Regulation.
5. User Rights
5.1. Every User has the right to:
- access their personal data
– The User may request the Administrator to provide a catalog of processed personal data concerning them,
- object to data profiling
– The User may request the Administrator to disable profiling (personalization) of the Website's offer and related marketing activities,
- rectification, erasure or restriction of processing, data portability, lodging a complaint with a supervisory authority, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. In the event of exercising the right to access their personal data, rectify them, erase them, restrict processing, object to their processing, request data portability or not to be subject to a decision based solely on automated data processing
- without undue delay, no later than within one month of receiving the request, information on the actions taken in response to the User's request will be provided.
The realization of a data portability request is free of charge, however, in accordance with the provisions of the GDPR, the Administrator may charge a reasonable fee for providing the data subject or refuse to fulfill the right in the event of: - a request for another copy of the personal data subject to processing, - an evidently unfounded request, - an excessive request, in particular due to its continuous nature. The amount of the charged fee mentioned above will be determined individually, will be reasonable, and its amount will take into account the administrative costs of providing information, conducting communication, or taking the requested actions that the Administrator had to incur.
5.2. Providing data by the User is a contractual requirement. In the event of not providing the required personal data by the User, selected functionalities of the Website may be unavailable to the User (e.g., ability to register, place orders, contact other Users).
5.3. The User may contact the person supervising the processing of personal data by the Administrator electronically at the e-mail address: brazi@brazi.pl
6. Data Security.
6.1. The data administrator ensures the security of the provided data. These data are particularly protected and secured against unauthorized access. Communication between the Website and Users is secured by an SSL encryption protocol on pages containing personal data.
7. Other
7.1 The Administrator undertakes to store the entrusted personal data of Users until they withdraw their consent or object. After withdrawal of consent, for a period corresponding to the limitation period for claims that the data administrator may raise and that may be raised against the data administrator.
COOKIES Policy
- The Store does not automatically collect any information, except for information contained in cookies.
- Cookies (so-called "cookies") are IT data, in particular text files, which are stored on the end device of the Store's User and are intended for using the Store's websites. Cookies usually contain the name of the website from which they originate, their storage time on the end device, and a unique number.
- The entity placing cookies on the end device of the Store's User and accessing them is the Store's operator.
- Cookies are used for:
- adapting the content of the Store's websites to the User's preferences and optimizing the use of websites; in particular, these files allow recognition of the Store User's device and appropriate display of the website, tailored to their individual needs;
- creating statistics that help understand how Store Users use websites, which allows improving their structure and content;
- Within the Store, two basic types of cookies are used: "session cookies" and "persistent cookies". "Session cookies" are temporary files that are stored on the User's end device until they leave the website or turn off the software (web browser). "Persistent cookies" are stored on the User's end device for the time specified in the cookie parameters or until they are deleted by the User.
- The following types of cookies are used within the Store:
- "essential" cookies, enabling the use of services available within the Store, e.g., authentication cookies used for services requiring authentication within the Store;
- cookies used to ensure security, for example, used to detect abuses in the field of authentication within the Store;
- "performance" cookies, enabling the collection of information on how the Store's websites are used;
- "functional" cookies, enabling "remembering" the User's selected settings and personalization of the User interface, e.g., in terms of the selected language or region from which the User comes, font size, website appearance, etc.;
- "advertising" cookies, enabling the delivery of advertising content more tailored to the User's interests.
- In many cases, software used for browsing websites (web browser) by default allows storing cookies on the User's end device. Store Users can change their cookie settings at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the web browser settings or inform about their every placement in the Store User's device. Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings.
- The Store Operator informs that restrictions on the use of cookies may affect some functionalities available on the Store's websites.
- Cookies placed on the Store User's end device and used may also be by advertisers and partners cooperating with the Store operator.
- More information about cookies is available at www.wszystkoociasteczkach.pl or in the "Help" section of the web browser menu.