Privacy policy

Part I - General provisions

§ 1
Data controller

1. The Data Controller for your personal data is Us, i.e. the Concept101 sp. z o.o. company seated in Łódź in Poland. In the remainder of this Privacy Policy, we write about ourselves in the first person or refer to ourselves as the “Data Controller" or "We".
2. Our files are kept by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register (KRS). We are registered in the Register of Entrepreneurs of the National Court Register (KRS) under number 780307. Our NIP (tax identification number) is 725-228-83-81. Our share capital is PLN 10,000. Our files contain the most important information about us, such as financial statements and our company deed.
3. You can contact us:

• by mail: ul. Romanowska 55B lok. 32B, 91-174 Łódź,
• by e-mail to: hello@naoko-store.pl,
• by phone: +48 791 575 758.

 

§ 2

Terms used in the Privacy Policy

If you notice any of the following capitalized terms in the further part of our Privacy Policy, you should understand them as defined below:

1. "Store" – an online store, the home page of which is available at https://naoko-store.com,
2. "Policy" – means this document, i.e., the privacy policy, which you are now reading,
3. “GDPR" – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC. You can find the text of the GDPR here,
4. "Social media" – Facebook and other social networks where we have our profiles.

§ 3

Security of personal data

1. As the Data Controller, we process all personal data that you provide to the Store or that we collect about you during your use of the Store in accordance with the GDPR.
2. We use technical measures required by current data protection regulations to prevent unauthorized persons from obtaining and modifying personal data sent electronically, i.e., within our Store.
   
   
   

§ 4

Your rights regarding your personal data

1. We process your personal data, therefore:

• you have the right to access your personal data, 
• you can make corrections to them,
• you may request the deletion of your personal data where this is allowed by the GDPR,
• you have the right to restrict processing, to the extent specified in the GDPR.
• In Parts II - IV of the Policy, you can find information about additional rights. This is because in some situations, you will have additional possibilities.
• Do you want to exercise your rights or learn more about them? Contact us. You can find our contact data in § 1 sec. 3 of the Policy.

§ 5
Right to object

1. Once you have provided us with your personal data , or if we collect it ourselves, you may exercise your right to object. You have it in two situations where we process your personal data:

• for direct marketing purposes; you do not have to justify such objection;
• on the basis of our other legitimate interests; such objection requires being justified by your particular situation. Write us why we should not process your data.
• Do you want to exercise your right to object? Contact us. You can find our contact information in § 1 sec. 3 of the Policy.

§ 6
Complaint to a supervisory authority:

If you believe that we are processing your personal data unlawfully, you may file a complaint with a supervisory authority, in particular in the European Union country where you have your place of permanent residence, your place of work or where you believe the violation occurred. In Poland, such an authority is the President of the Office for Personal Data Protection.

§ 7
Questions regarding the Policy and place where it is published

1. If you have any questions about the Policy, let us know.
2. The Policy can be found at the naoko-store.com and at our headquarters.

 

Part II - information related to the processing of your personal data in individual forms and when contacting us

 

§ 8
Contact us by e-mail, mail or phone

 

If you use any of these option for contacting us, pay attention to the following:

a. Why do we need your data, i.e. for what purpose do we process it?
Responding to your message, conducting communication with you and resolving the issue you presented.

 

b. What rights do you have?
We have described them in § 4 and § 5 of the Policy.

c. Do you have to provide us with your information?
It is voluntary. However, without your contact information we may not be able to resolve the issue you have presented.

d. On what legal basis do we process your data?
Article 6 (1) point f) of GDPR, i.e., our legitimate interest.

e. What is our legitimate interest?
Resolving the issue you presented and responding your message.

f. Who will we share your data with?
Entities hosting (storing) our e-mail boxes,
Poczta Polska (Polish Post) or couriers if we respond to your message by mail.

g. How long will we process your data?
For the time it takes to resolve the issue you presented. Depending on its type, also for the time during which we might need to prove that we have solved it, i.e., until the prescription period of claims expires.

h. Will we transfer your personal data outside the European Economic Area?
No.

§ 9
Account registration in the Store

 

If you use these options in our Store, pay attention to the following matters:

a. Why do we need your data, i.e., for what purpose do we process it?

1. For the purposes of performance of the contract for registering an account in the Store and individual contracts for the sale of products,
2. for marketing purposes consisting in matching content to your past activities in the Store; we may, among other things, present you with a list of products in the Store that may be of interest to you or encourage you to continue shopping that you have not completed,
3. for marketing purposes involving sending marketing information to you to the delivery address you specified by mail or courier.

 

b. What rights do you have?

We have described them in  § 4 and § 5 of the Policy. You may also exercise your right to transferring your personal data under the terms of the GDPR.

c. Do you have to provide us with your information?
It is voluntary. However, without providing them, you cannot create an account in the Store and conclude sales contracts through it.

d. On what legal basis do we process your data?
Article 6 (1) point. b) and f) of GDPR, i.e., performance of the contract we conclude with you, and our legitimate interest.

e. What is our legitimate interest?
Our legitimate interest is to conduct our marketing through:

 

• matching the content visible to you in the Store to your previous activities on our websites; among other things, we may present you with products that may be of interest to you or that you have already viewed in the Store in the past.
• attaching advertising materials, including information about promotions or our products, to packages sent to you or sending them by mail.

 

f. Who will we share your data with?

1. Providers of tools for:

• website traffic analytics,
• conducting marketing.
• Operators of payment methods available in the Store.
• Couriers and the Postal Service.
• Entities hosting (storing) the Store and personal data for us.
• Accounting offices or law firms.
• Entities engaged in conducting marketing activities regarding the Store and managing the platform on which the Store was implemented.

g. How long will we process your data?
For the duration of:

1. the contract for registering an account in the Store, the individual sales contracts and the time necessary to demonstrate that we have performed them correctly. This time corresponds to the duration of the claim prescription period;
2. carrying out the marketing activities described by us above, or until you object to further processing of your data for these purposes.

h. Will we transfer your personal data outside the European Economic Area?
No.

 

§ 10
Shopping in the Store without registering an account

If you use these options in our Store, pay attention to the following matters:
a. Why do we need your data, i.e. for what purpose do we process it?

1. For performance of the product sales contract,
2. for marketing purposes consisting in matching content to your past activities in the Store; we may, among other things, present you with a list of products in the Store that may be of interest to you or encourage you to continue shopping that you have not completed,
3. for marketing consisting in promoting us, our goods, and our services by sending marketing information to you via the e-mail you provided when you subscribed to the newsletter, analysing whether you read our newsletters and which content you read the most. Based on this, we may also tailor the newsletter content to your interests,
4. for marketing consisting in sending marketing information to you to the delivery address you specified, by mail or courier.

b. What rights do you have?
We have described them in § 4 and § 5 of the Policy. You may also exercise your right to transferring your personal data under the terms of the GDPR.

c. Do you have to provide us with your information?
It is voluntary. However, without providing them, you cannot conclude a sales contract through the Store. You will also not be able to subscribe to our newsletter or receive commercial information from us.

d. On what legal basis do we process your data?

1. Article 6 (1) point b) and f) of GDPR, i.e., performance of the contract we conclude with you, and our legitimate interest.
2. If you agree to receive marketing communications to your e-mail address, the legal basis will also be Article 10 of the Act on Provision of Electronic Services and Article 172 of the Telecommunications Law Act. Remember that you can always revoke your consent. If you want to do this, please contact us.

e. What is our legitimate interest?
Our legitimate interest is to conduct our marketing through:

• matching the content visible to you in the Store to your previous activities on our websites, among other things, we may present you with products that may be of interest to you or that you have already viewed in the Store in the past.
• attaching advertising materials, including information about promotions or our products, to packages sent to you or sending them by mail.

If you sign up for our newsletter, our legitimate interest will also be to improve our newsletter by analysing whether you read the content and which news items you are most interested in, and to tailor the content of our newsletter to your interests.

f. Who will we share your data with?

1. Providers of tools for:

• website traffic analytics,
• conducting marketing,
• dispatching newsletters.
• Operators of payment methods available in the Store.
• Couriers, Postal Service, and services intended for ordering courier services and generating labels for couriers.
• Entities hosting (storing) the Store and personal data for us.
• Accounting offices or law firms.
• Entities engaged in conducting marketing activities regarding the Store and managing the platform on which the Store was implemented.

g. How long will we process your data?
For the duration of:

1. period necessary for the performance of the sales contract and demonstrating that we have performed it properly. This time corresponds to the duration of the claim prescription period;
2. conducting marketing activities, or until you object to further data processing for the purposes of improving the newsletter or marketing activities indicated in a.2) and a.4), or until you revoke your consent to sending messages to your e-mail address for marketing purposes. Your revocation of consent does not affect the lawfulness of processing that took place prior to the withdrawal of consent.

h.Will we transfer your personal data outside the European Economic Area?
No.

 
§ 11
Signing up for the newsletter

 

If you use these options in our Store, pay attention to the following matters:
a.Why do we need your data, i.e., for what purpose do we process it?
Sending marketing information to you via e-mail to the address you provide and analysing whether you read our newsletters and which content you read the most. Based on this, we may also tailor newsletter content to your interests.

b. What rights do you have?
We have described them in § 4 and § 5 of the Policy. You may also exercise your right to transferring your personal data under the terms of the GDPR.

 

c. Do you have to provide us with your information?
It is voluntary. However, without providing them, you will not be able to subscribe to our newsletter and receive commercial information from us.


d. On what legal basis do we process your data?

1. Article 6 (1) point f) of GDPR, i.e., our legitimate interest.
2. Article 10 of the Act on Provision of Electronic Services and Article 172 of the Telecommunications Law Act. Remember that you can always revoke your consent. If you want to do this, please contact us.

e. What is our legitimate interest?
Improving our newsletter by analysing whether you read the content and which news items you are most interested in, and tailoring the content of our newsletter to your interests.

f. Who will we share your data with?

1. Providers of newsletter mailing tools.
2. Entities hosting (storing) the Store and personal data for us.
3. Entities engaged in conducting marketing activities regarding the Store.

g. How long will we process your data?
For the duration of our marketing activities, or until you object to further processing of data for marketing purposes, or until you revoke your consent to sending messages to your e-mail address. Your revocation of consent does not affect the lawfulness of processing that took place prior to the withdrawal of consent.

h. Will we transfer your personal data outside the European Economic Area?
No.

 

Part III - our Social media profiles

 § 12
Use of our Social media profiles

 

If you use our profile, pay attention to the following matters:
a. Why do we need your data, i.e., for what purpose do we process it?

1. to respond to private messages you send to us,
2. to have a discussion with you within the comments under individual posts,
3. to share our posts with you as a follower of our profile,
4. for marketing consisting in providing information about our services and ourselves through posts we publish on our profile, including sponsored posts that are displayed to a wider range of Social media users,
5. for statistical purposes, consisting of Social media entities, such as Meta Platforms Ireland Ltd., presenting us with data about the display of our posts, their reach, number of interactions, demographics of users following us; the data presented to us by Social media entities is statistical data, but it is created on the basis of this company’s observations of your behaviour on our profile.

b. What rights do you have?
We have described them in § 4 and § 5 of the Policy.

c. Do you have to provide us with your information?
It is voluntary. However, due to the rules applied by Social media, we will see your name, last name (or nickname) and photo if you write to us or comment on our post.

d. On what legal basis do we process your data?
Article 6 (1) point f) of GDPR, i.e., our legitimate interest.

e. What is our legitimate interest?
Responding to your messages and comments, providing you with posts, informing you about our services and ourselves through them, analysing statistical data related to our profile.

f. Who will we share your data with?
Social media entities such as, in particular, Meta Platforms Ireland Ltd.

g. How long will we process your data?
For the duration of:

1. period required to resolve the issue you presented. Depending on its type, also for the time during which we might need to prove that we have solved it, i.e., until the prescription period of claims expires.
2. time during which you keep following our profile. Remember that you can always delete your comments under our posts, stop following us, or opt out of having a Social media account.

h. Will we transfer your personal data outside the European Economic Area?
There may be situations where your personal data processed within the framework of Social media will be transferred to the United States under standard contractual clauses.

Part IV - information about cookies and processing of personal data related to them

§ 13
Entering the Store's website

Entering the Store’s website involves our processing of information contained in cookies. This takes place under the principles described below.

§ 14
What are cookies and why we use them

 

1. The Store uses cookies, which are small text information stored on your terminal device (e.g. computer, tablet, smartphone). Cookies can be read by the Store.
2. We store cookies on your computer, phone or tablet and then access the information in them for the following purposes:

• to ensure the proper functioning of the service, including maintaining your session,
• for marketing purposes consisting in matching content to your past activities in the Store; we may, among other things, present you with a list of products in the Store that may be of interest to you or encourage you to continue shopping that you have not completed,
• for conducting marketing by displaying advertisements of our products to you on other websites, including social networks, matching the products you have viewed in the Store,
• for statistics, in particular to allow us to analyse how you use the Store.
• we carry out processing of your data under our legitimate interest, i.e., Article 6 (1) point f) of GDPR;

• our legitimate interest is to conduct marketing of our products that you have viewed in our Store and to match the advertisements displayed to you with your previous activities in the Store, as well as to collect statistical data about your use of our Store to optimize its performance, including the layout of the content displayed to you and other users;
• we have outlined your rights related to this processing in § 4 and § 5 of the Policy;
• remember that you can contact us at any time and object to the processing of your personal data for marketing purposes. This objection you do not need to justify;
• we will transfer your personal data to advertising network operators, including social networks;
• we will store them for the time we conduct these marketing activities or until you object to further processing for marketing purposes;
• there may be situations where your personal data processed for marketing and statistical purposes will be transferred to the United States under standard contractual clauses.
• the provision of this personal data is voluntary, and failure to provide it, e.g. through the use of appropriate blocking software, does not entail any negative consequences; you will not then see advertisements for our products tailored to your activities in the Store, including the articles viewed.
• In the cases described in the provision of sec. 2(a) above, cookies are used under Article 173 sec. 3 of the Telecommunications Law Act.

§ 15
Types of cookies

 

There are several types of cookies used in the Store:

• session cookies, which remain in your browser's memory until you turn it off,
• persistent cookies, which remain in your browser's memory until you delete them,
• external cookies, coming from our Store's analytics tool providers.

§ 16
How to delete cookies

 

1. You can configure your web browser to prevent cookies from being stored on your computer, phone or tablet.
2. You can delete cookies after we save them. For this purpose, you can use: the relevant functions of your web browser, programs intended for this purpose or the relevant tools available within your operating system.
3. At these links you will find information on how to delete cookies in the most popular web browsers:

• Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox ,
• Opera: https://help.opera.com/en/latest/web-preferences/ ,
• Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
• Chrome: https://support.google.com/accounts/answer/32050?hl=en&co=GENIE.Platform%3DDesktop
• Safari: https://support.apple.com/en-us/HT201265

§ 17
How to block cookies

 

1. You can configure your web browser to prevent cookies from being stored on your computer, phone or tablet. You can also use appropriate browser extensions or programs for this purpose.
2. You can find information on how to block cookies in the most popular web browsers at these links:

• Firefox: https://support.mozilla.org/en-US/kb/block-websites-storing-cookies-site-data-firefox
• Opera: https://help.opera.com/en/latest/web-preferences/
• Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
• Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DAndroid&hl=pl
• Safari: https://support.apple.com/en-us/HT201265

§ 18
The effect of changing your browser settings on your use of the Store

Changing the configuration of your web browser to one that prevents or restricts the storage of necessary cookies may result in restrictions on the functions of the Store. Deleting this group of cookies in the course of providing the service can lead to similar consequences. This means that some of our services will not be available without cookies, for example, you will not be able to log in to the Store.

§ 19
External cookies

1. Cookies placed on your computer, phone or tablet may come from other service providers. You can remove them yourself from your device. How to do this is indicated in § 16. These files are stored on your device for different durations, depending on the file in question.
2. We use the services of:

• Google Analytics and Google Tag Manager, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). These services help us analyse the traffic at the Store. Based on them, we obtain statistics and analytical data showing how you and other users use the Store. You can block the operation of Google Analytics. To do so, install this browser add-on provided by Google Inc., available here: https://tools.google.com/dlpage/gaoptout?hl=en .
• There may be situations where your personal data processed by the above entities will be transferred to the United States under standard contractual clauses.