Privacy policy

Privacy Policy
https://nordictec-store.com

In our operations, we place great emphasis on implementing data protection principles in accordance with the GDPR, i.e., the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

The following information provides a clear and transparent explanation of how we process your personal data, how long we store it, and what rights you have in relation to data processing.

Who is the administrator of your personal data?

The administrator of your personal data in connection with browsing and using the Nordic-Sklep.pl online store is PUH LedNet Bartosz Orlicki, located in Poland, Szydłowiec (26-500) at ul. Jastrzębska 36A, registered in the Central Register and Information on Economic Activity under the tax identification number NIP: PL7991921264.

If you have any doubts regarding the processing of your data, please contact us at: lednet@vp.pl

Is providing data mandatory?

Providing us with your personal data in connection with using our online store and making purchases is entirely voluntary. However, providing data is a contractual requirement in relation to sales contracts concluded through the online store and contracts for the provision of electronic services under the store's terms and conditions. Therefore, refusing to provide data may prevent the conclusion and execution of these contracts and hinder the use of our online store.

How do we protect your data?

We use appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, loss, or destruction. However, it is important to be aware that no method of transmitting data over the Internet or storing it is completely risk-free. Therefore, we encourage caution when using the Internet and ask that you avoid actions that could compromise the effectiveness of our security measures.

For what purposes do we process your personal data?

We may process your personal data for the following purposes:
1) responding to inquiries directed to us by phone, email, or through the contact form available on our online store (data processing based on Article 6(1)(b) or (f) of the GDPR, as part of taking steps at the request of the data subject prior to entering into a contract, or in pursuit of our legitimate interests);
2) concluding and executing sales contracts and contracts for the provision of electronic services in accordance with the online store's terms and conditions, i.e., in connection with account registration and management, order placement, and posting reviews (data processing based on Article 6(1)(b) of the GDPR);
3) fulfilling our legal obligations, particularly in accounting and bookkeeping (data processing based on Article 6(1)(c) of the GDPR);
4) conducting direct marketing, including sending newsletters (data processing based on Article 6(1)(f) of the GDPR, i.e., in pursuit of our legitimate interests, as well as based on consent under the Act of 18 July 2002 on the provision of electronic services);
5) conducting analytical and marketing activities (data processing based on Article 6(1)(f) of the GDPR, i.e., in pursuit of our legitimate interests, as well as based on consent under the Act of 16 July 2004, Telecommunications Law);
6) ensuring the functionality and ease of use of the online store, as well as for statistical purposes related to improving work efficiency, service quality, and tailoring them to the audience (Article 6(1)(f) of the GDPR, i.e., in pursuit of our legitimate interests; details on the use of cookies can be found at the end of the Privacy Policy);
7) establishing, pursuing, and enforcing claims or defending against claims directed at us (Article 6(1)(f) of the GDPR, i.e., in pursuit of our legitimate interests).

How long will we store your data?

We will store your data for the period necessary to execute the concluded contracts and then until the mutual claims are time-barred.

In the cases mentioned above, where your data is processed based on legitimate interests, consent for data processing, or under the Act on the provision of electronic services and the Telecommunications Law, we will store the data for the period necessary to achieve these purposes or until you object to the processing or withdraw your consent, whichever occurs first.

Additionally, if we issue a personalized VAT invoice in connection with a sales contract, we will store your personal data for 5 years from the end of the calendar year (up to almost 6 years) in which the contract was executed, due to the requirements of accounting and tax regulations.

Who may have access to your data?

Your data may be accessed by entities supporting our operations, including our service providers - particularly the PrestaShop platform provider (PrestaShop SA, avenue de France, 75013 Paris, no. 497 916 635), subcontractors, as well as legal and tax offices, and in connection with the delivery of orders, logistics and courier companies.

Your personal data may be transferred to providers of tools used for analytical research, creating statistics, and tracking traffic on our website – more details can be found in the cookies information below.

Under the GDPR, your data may also be shared with other entities when:
• the obligation to transfer data arises from legal provisions;
• it is in our or a third party's legitimate interest,
• you consent to it.

In each case, we will strive to ensure that the scope of data disclosed to these entities is adequate and necessary to achieve the intended purposes.

Your personal data will generally be processed within the European Economic Area. However, considering the services provided by our subcontractors in the field of IT support, IT infrastructure, or marketing tools, we may commission specific tasks or activities to recognized subcontractors operating outside the European Economic Area. In the event of such a data transfer, the transfer will take place solely based on one of the GDPR transfer mechanisms, particularly the Data Privacy Framework or standard contractual clauses. You have the right to obtain information about the occurrence of transfers, the transfer mechanisms used, and the safeguards applied in this regard.

What rights do you have regarding data processing?

We want you to know that in connection with our processing of your personal data, you have the right to:

• access your data and receive a copy (Article 15 of the GDPR)
You have the right to obtain confirmation from us as to whether we are processing your personal data and to receive a copy of your personal data, as well as to access your personal data, obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of the data, the planned period of data storage or the criteria for determining this period, and your rights under the GDPR.

• rectify your data (Article 16 of the GDPR)
You have the right to request that we rectify any inaccurate data and complete any incomplete data.

• erase your data (the right to be forgotten, Article 17 of the GDPR)
If you believe there is no basis for us to process your personal data, you can request its erasure. This right applies in particular if:
1) the personal data is no longer necessary for the purposes for which it was processed;
2) you have withdrawn your consent to the processing of the data,
3) you have successfully objected to the processing of the data,
4) the data is being processed unlawfully.

We note that the request for erasure of personal data is not absolute, and even after its execution, we may retain certain personal data to the extent necessary for the purposes of establishing, pursuing, or defending claims, as we have a legitimate interest in doing so.

• restrict the processing of your data (Article 18 of the GDPR)
You can request that we restrict the processing of your personal data to storage only or to actions agreed with you if you believe we have incorrect data about you or are processing it without a basis, or if you do not want us to delete it because you need it to establish, pursue, or defend claims, or during the period of resolving the validity of an objection to data processing.

• data portability (Article 20 of the GDPR)
You have the right to receive from us in a structured, commonly used, and machine-readable format the personal data concerning you that you have provided to us based on your consent or in connection with the execution of a contract. If technically feasible, you can request that we transmit your personal data directly to another entity.

• object to the processing of your data (Article 21 of the GDPR)
You have the right to object to the processing of your data for reasons related to your particular situation if we process your data based on legitimate interests, including profiling. As a result of the objection, we will no longer process this data, unless there are grounds for establishing, pursuing, or defending claims or other legally justified grounds for processing that override your interests and rights.

• lodge a complaint with a supervisory authority (Article 77 of the GDPR)
If you believe that we are processing your data unlawfully, you can lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office, located at ul. Stawki 2, 00-193 Warsaw.

• withdraw consent to data processing (Article 7 of the GDPR)
If you have given us consent to process your personal data, you can withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Cookies

To ensure the functionality of our online store, we automatically collect information contained in cookies. Cookies are small text files that are stored on the device you use when accessing our online store.

We use the following types of cookies:

• Session cookies: used during the browser session and then permanently deleted from the device's memory.

• Persistent cookies: stored on your device until they expire or are deleted (you can delete persistent cookies or adjust their storage time through your browser settings).

We use our own cookies for:
• ensuring the basic functionality of our website, including adapting the site to the device you are using and maintaining your session during your use of the site (necessary cookies),
• providing the best possible functionality of the site and adapting it to your needs and preferences, including remembering your privacy preferences or automatically filling out forms (functional cookies), and
• conducting anonymous statistics and internal analyses that help us understand how users use the portal, enabling us to improve its structure and content (analytical cookies).

We also use session cookies provided by PrestaShop (PrestaShop SA, avenue de France 198, 75013 Paris) to ensure the proper functioning of our store and maintain your session.

Additionally, we use analytical and marketing cookies, i.e., cookies that allow us to deliver offers, messages, and advertising content more tailored to users' interests based on profiling, provided by external suppliers:  
• Google Analytics - a tool operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to analyze how users use the website, create statistics, and reports on the website's performance. The collected data is not used by Google to identify users or combined with other data to enable identification. Detailed information on the scope and rules of data processing in connection with the use of Google Analytics, as well as information on managing the information shared with Google during your use of our website, can be found here – Google Privacy Policy.

• Google Tag Manager (Tag Manager) – a tool operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), used to manage tags, which are small pieces of code that provide us with additional analytical information about user behavior on our website, allowing us to improve the functionality and structure of our site. Data used by Google Tag Manager is processed in accordance with the Google Privacy Policy.

• Google Ads – a tool operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) used to personalize ads and market our products. If you visit our website, a remarketing cookie is left on your device, which allows us to display ads for our products on other websites. We do not have access to any data that would allow us to identify you in connection with the use of Google Ads. You can manage personalized ad settings directly on Google: https://adssettings.google.com/. More details on data processing in connection with Google Ads can be found in the Google Privacy Policy

You can also change your browser settings to manage the use of cookies at any time. However, please note that restricting the use of cookies may affect the functionality of the Service. Instructions for changing settings are available at:
• Chrome
• Firefox
• Internet Explorer
• Edge
• Opera
• Safari

If you use a different browser, information on how to manage cookies and modify their settings can be found in the browser settings. More information about cookies is available in the "help" section of your browser's menu.

Server logs

We inform you that using our online store involves sending requests to the server on which our store is hosted. Each request sent to the server (each interaction with our website) is recorded in server logs. These logs include, among other things, the user's IP address, the date and time of the request, information about the browser and operating system you are using.

Logs are recorded and stored on the server. Data recorded in server logs is not associated with specific individuals using the Site and is not used by us to identify you. Server logs are solely auxiliary material used for administering the Site, and their content is not disclosed to anyone except those authorized to administer the server.

Changes to the Privacy Policy

Our operations will gradually evolve over time, as will the technologies, standards, and requirements related to conducting business online. As a result, we will likely regularly update our policy to reflect such circumstances and requirements. A new version of this Policy will be published on our online store and will take effect from the date of its announcement. If you have registered in the online store, information about the update will also be sent to the email address used during registration.