Shopping Cart
1. General Information
This policy applies to the Website operating at the URL: www.candlove.pl
The operator of the website and the Personal Data Administrator is:
Przedsiębiorstwo Wielobranżowe "Adam"
ul. Słoneczna 9A, 66-003 Droszków
Operator's contact email address: kontakt@candlove.pl
The Operator is the Administrator of your personal data regarding data provided voluntarily on the Website.
The Website uses personal data for the following purposes:
- Newsletter management,
- Comment system management,
- Handling inquiries via forms,
- Preparation, packaging, and shipping of goods.
The Website gathers information about users and their behavior in the following ways:
Through data voluntarily entered in forms, which are entered into the Operator's systems.
By saving cookies on users' end devices.
2. Selected Data Protection Methods Used by the Operator
Login and personal data entry points are protected by transmission layer security (SSL certificate). This ensures that personal and login data entered on the site are encrypted on the user's computer and can only be read on the destination server.
3. Hosting
The Website is hosted (technically maintained) on the servers of the operator: hostovita.pl
4. Your Rights and Additional Information on Data Usage
In certain situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to fulfill the contract with you or to fulfill the Administrator's obligations. This applies to the following categories of recipients:
- Couriers,
- Postal operators,
- Payment operators,
- Comment system operators,
- Authorized employees and associates who use the data to fulfill the purpose of the website.
Your personal data processed by the Administrator will not be kept longer than necessary to fulfill the related activities specified by separate regulations (e.g., accounting). For marketing data, the data will not be processed for more than 3 years.
Information on the processing of personal data and its uses:
a) Placing orders in the store, for the purpose of fulfilling the sales contract, based on Article 6(1)(b) of the GDPR (performance of the sales contract),
b) Personal data is processed after obtaining separate consent, based on Article 6(1)(a) of the GDPR.
You have the right to request from the Administrator:
- Access to your personal data,
- Rectification of your personal data,
- Deletion of your personal data,
- Restriction of processing of your personal data,
- Data portability.
You have the right to object to the processing specified in point 3.3 c) regarding the processing of personal data for the purpose of pursuing the legitimate interests of the Administrator, including profiling. However, the right to object cannot be exercised if there are compelling legitimate grounds for processing that override your interests, rights, and freedoms, especially for establishing, pursuing, or defending claims.
You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, regarding the Administrator's actions.
Providing personal data is voluntary but necessary to use the Website.
Automated decision-making, including profiling, may be used for providing services under the contract and for direct marketing by the Administrator.
Personal data is not transferred to third countries within the meaning of personal data protection regulations. This means that we do not send it outside the European Union.
5. Information in Forms
The Website collects information provided voluntarily by the user, including personal data, if provided.
The Website may record connection parameter information (time stamp, IP address).
In some cases, the Website may record information to facilitate linking form data with the email address of the user filling out the form. In such cases, the user's email address appears within the URL of the form page.
Data provided in the form is processed for the purpose resulting from the function of the specific form, e.g., for processing service requests, commercial contact, service registration, etc. The context and description of each form clearly indicate its purpose.
6. Administrator Logs
Information about user behavior on the website may be logged. These data are used for website administration purposes.
7. Significant Marketing Techniques
The Operator uses statistical analysis of website traffic via Google Analytics (Google Inc., based in the USA). The Operator does not provide personal data to the service operator, only anonymized information. The service is based on the use of cookies on the user's end device. Regarding user preferences collected by the Google advertising network, the user can view and edit information from cookies using the tool: https://www.google.com/ads/preferences/
8. Information About Cookies
The Website uses cookies.
Cookies are IT data, especially text files, stored on the Website User's end device and intended for use with the Website's web pages. Cookies typically contain the name of the website they come from, the storage time on the end device, and a unique number.
The entity placing cookies on the Website User's end device and accessing them is the Website operator.
Cookies are used for the following purposes:
- Maintaining the Website User's session (after logging in), so the user does not have to re-enter their login and password on each subpage.
- For the purposes specified above in the "Significant Marketing Techniques" section.
The Website uses two main types of cookies: "session" cookies and "persistent" cookies. "Session" cookies are temporary files stored on the User's end device until logging out, leaving the website, or closing the web browser. "Persistent" cookies are stored on the User's end device for the time specified in the cookie parameters or until deleted by the User.
Web browsing software (web browser) usually allows cookies to be stored on the User's end device by default. Website Users can change these settings. The web browser allows the deletion of cookies. Automatic blocking of cookies is also possible. Detailed information on this topic can be found in the browser's help or documentation.
Restrictions on the use of cookies may affect some functionalities available on the Website.
Cookies placed on the Website User's end device may also be used by entities cooperating with the Website operator, especially companies: Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).
9. Cookie Management - How to Express and Withdraw Consent in Practice?
If the user does not want to receive cookies, they can change the browser settings. Please note that disabling cookies necessary for authentication, security, and user preference maintenance may hinder or, in extreme cases, prevent the use of the website.
To manage cookie settings, select the web browser you are using from the list below and follow the instructions:
Mobile devices:
10. GDPR
Personal data collected by the Administrator through the website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR.
