Please read the detailed information on personal data processing consistent with the GDPR regulation

Information on personal data processing.

1. The Administrator of personal data of the Website's Users is Weronika Bogumił, entrepreneur running business activities under the name ExArte Weronika Bogumił, address: ul. Puławska 34, 05-500 Piaseczno.

2. Each User of the Site shall have the right to access his or her data, correct it or request to have it removed. Starting on 25.05.2018, the User shall also have the right to:

– restrict his or her personal data processing,

– submit an objection to have it processed,

– transfer his or her data.

3. If data is processed inconsistently with the legal requirements, the User shall be entitled to file a complaint to the regulatory authority, i.e. the General Inspector of Personal Data Protection (address: General Inspector of Personal Data Protection, ul. Stawki 2, 00-193 Warszawa).

4. Data is processed only for the purposes of executing the contract concluded with the User, which includes executing the order, organizing the shipment and examining the complaints. 

5. Giving data is voluntary but at the same time it is necessary to execute the order submitted through the Site: making online purchase and receipt of goods. Without specifying personal details, provision of these services will not be possible.

6. The legal basis for personal data processing is Article 6 (1) b and Article 6 (1) f of the Regulation of the European Parliament and the Council (EU) 2016/679 of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, as well as repealing Directive 95/46/EC.

7. The recipients of any entrusted personal data include: entities providing hosting of the Site, entities involved in information safety of the Site, national authorities authorized on the basis of separate regulations, accounting offices for the purposes of financial settlements, payment operators.

8. Personal data shall be processed for the time necessary to demonstrate the correctness of performed obligations by the Administrator for the User. This time constitutes the time necessary for the execution of the concluded contract with the User and the time in which it will be possible to make claims in connection to the execution of the contract.   It shall take at maximum 3.5 years following the date of making the transaction.

At the same time, data is kept for a period required by public authorities to document transactions and enable tax inspection. 

9. The User shall be entitled to two kinds of rights of objection against personal data processing:

• on the basis of legally justified interests – objection may be submitted for reasons related to a particular situation; 
• for the purposes of direct marketing – objection may be submitted in each case. 

10. Personal data of the User is processed neither in an automatic manner nor is it profiled. It is also not forwarded to a third state or an international organization.