Privacy Policy of the Pilecki Institute Shop

https://www.sklepinstytutpileckiego.pl

(“the Shop”)

Dear User!

We care about your privacy and would like you to feel comfortable and safe while using our services. For this reason, we have decided to present the most important information about the rules of processing of your personal data and the cookie files which are utilized by our Shop. This information has been prepared in accordance with the provisions of the General Data Protection Regulation (GDPR).

PERSONAL DATA CONTROLLER

The WITOLD PILECKI INSTITUTE OF SOLIDARITY AND VALOR with its seat at 17 Foksal Street, 00-372 Warsaw, entered in the National Court Register, Register of Entrepreneurs, by the REGIONAL COURT FOR THE CAPITAL CITY OF WARSAW IN WARSAW, XII^TH ECONOMIC AFFAIRS DIVISION OF THE NATIONAL COURT REGISTER, under KRS number 0000713483, holder of NIP tax identification number 5252735962 and of REGON statistical identification number 36923654400000.

If you would like to contact us regarding our processing of your personal data, please write to the following e-mail address: sklep@instytutpileckiego.pl.

YOUR RIGHTS

You are entitled to request the following:

access to your personal data, and also a copy of your personal data (Article 15 of the GDPR, or – if applicable – Article 13, Subparagraph 1, Letter f of the GDPR),
the correction of your personal data (Article 16 of the GDPR),
the deletion of your personal data (Article 17 of the GDPR),
limitation of the processing of your personal data (Article 18 of the GDPR),
transferral of your personal data to a different personal data controller (Article 20 of the GDPR).

You are also entitled to:

lodge an objection against the processing of your personal data at any time:
- on the grounds of your particular circumstances – as regards the processing of your personal data based on the provisions of Article 6, Subparagraph 1, Letter f of the GDPR (i.e. pursuant to our legitimate interests) (Article 21, Subparagraph 1 of the GDPR);
- if your personal data are being processed for the purposes of direct marketing, insofar as their processing is connected with direct marketing (Article 21, Subparagraph 2 of the GDPR).

Feel free to contact us if you would like to exercise your rights. You may express your dissent to our usage of cookies (which we have discussed in greater detail below) in particular by applying specific settings in your browser.

Should you consider that your personal data are being processed contrary to the provisions of law, you may lodge an appeal with the President of the (Polish) Personal Data Protection Office.

PERSONAL DATA AND PRIVACY

Below you will find detailed information on the processing of your personal data depending on specific usage scenarios.

Placing an order with the Shop

For what purpose?
fulfilling your order
On what basis?
contract of sale (Article 6, Subparagraph 1, Letter b of the GDPR)	legal obligation concerning bookkeeping, whereby we are bound to process your personal data (Article 6, Subparagraph 1, Letter c of the GDPR)
For how long?
throughout the term of the above-mentioned contract	until expiry of the legal obligation concerning bookkeeping by which we are bound
furthermore, your personal data will be processed until expiry of the term provided for the pursuit of claims – by you yourself or by us (for more information on this topic, please see the last table in the present section)
What will happen if I do not provide my personal data?
you will be unable to place an order

Creating a buyer account at the Shop

For what purpose?

performance of a contract for the provision of a service consisting in the administration of a buyer account at the Shop

On what basis?

contract for the provision of services (Article 6, Subparagraph 1, Letter b of the GDPR)

For how long?

until such time as your buyer account is deleted by you or by us acting on your request

furthermore, your personal data will be processed until expiry of the term provided for the pursuit of claims – by you yourself or by us (for more information on this topic, please see the last table in the present section)

What will happen if I do not provide my personal data?

you will not be able to create a buyer account and use the associated functionalities, such as reviewing your order history or checking the status of your orders

Communication with us (for example, in order to ask questions)

For what purpose?
handling your inquiries or notifications
On what basis?
contract or actions undertaken at your request in order to conclude a contract (Article 6, Subparagraph 1, Letter b of the GDPR) – if your inquiry or notification concerns a contract to which we are or may become a party	our legitimate interests, consisting in the processing of your personal data for the purpose of communicating with you (Article 6, Subparagraph 1, Letter f of the GDPR) – if your inquiry or notification has no connection with a contract
For how long?
throughout the term of a contract which is binding upon us, or – if a contract is not concluded – until expiry of the term provided for the pursuit of claims – please see the last table in the present section*	until expiry of the term provided for the pursuit of claims – please see the last table in the present section – or until such time as we implement your objection to processing*
furthermore, your personal data will be processed until expiry of the term provided for the pursuit of claims – by you yourself or by us (for more information on this topic, please see the last table in the present section)
What will happen if I do not provide my personal data?
we will be unable to respond to your inquiries or notifications

* depending on which shall be applicable in a given case and which shall be the earliest to occur

Browser settings or other, similar actions allowing us to conduct analytics

For what purpose?

analyzing your usage and navigation of the Shop’s website in order to adapt the website to the needs and behavior of Users (for more on this topic, see the “Analytics” and “Cookies” sections of the Privacy Policy)

On what basis?

our legitimate interests consisting in the processing of personal data for the above-mentioned purpose (Article 6, Subparagraph 1, Letter f of the GDPR)

For how long?

until the cookies used for the purpose of analytics expire or are deleted by you*

What will happen if I do not provide my personal data?

we will ignore your preferences concerning usage of the Shop when working on its development

* depending on which shall be applicable in a given case and which shall be the earliest to occur

Your consent to receiving marketing content from us (for example, information about special offers)

For what purpose?

sending marketing information, and specifically special offers

On what basis?

Your consent to our marketing activities (Article 6, Subparagraph 1, Letter a of the GDPR)

For how long?

until you withdraw your consent – please keep in mind that you may withdraw your consent at any time. The processing of personal data performed until your withdrawal of consent shall remain valid and legal.

What will happen if I do not provide my personal data?

you will not receive our marketing materials, including information about our special offers

Actions or inactions that may result in claims concerning the Shop or our services

For what purpose?

determining the existence of, pursuing, or defending claims concerning the contract concluded or services provided

On what basis?

our legitimate interests consisting in the processing of personal data for the above-mentioned purpose (Article 6, Subparagraph 1, Letter f of the GDPR)

For how long?

until expiry of the limitation period for claims or until such time as we implement your objection to processing*

What will happen if I do not provide my personal data?

it will be impossible to determine the existence of, pursue, or defend claims

* depending on which shall be applicable in a given case and which shall be the earliest to occur

ANALYTICS

Our Shop conducts analytics in order to improve intuitiveness of usage and accessibility – but only if individual Users consent to such actions. As part of analytics, we take into consideration how you navigate the Shop’s website – for example, how much time you spend on individual subpages or where in the Shop you usually click. This allows us to adapt the layout and appearance of the Shop, and adjust its contents to your needs.

DATA SECURITY

When processing your personal data, we use organizational and technical means – among others SSL certificate encryption – required under the pertinent provisions of law.

COOKIE FILES

Like the majority of websites, our Shop uses cookie files, or cookies. These files:

are placed in the memory of your device (PC, smartphone, etc.);
do not alter your device settings.

Our Shop uses cookies for the following purposes:

remembering your sessions
statistics
marketing
offering Shop functionalities

You can use your browser’s help file to learn how to manage cookies, and how to turn them off in your browser. In order to get more information on the topic, press the F1 button while in your browser. You can also find relevant hints on the following subpages, depending on your choice of browser:

Below we have included information about the functions for which our cookies are processed and their expiration dates.

cookie file name	validity period of cookie file	cookie file function
Shop5	session duration	Session.
cookie_read	2 years	Information about cookies.
Shoper5_lp-pl_PL	1 year	Recently viewed products.
basket	session duration	Repeating cart (basket) content.
ic	session duration	Functionality enabling the quicker presentation of website content.

Using the relevant options of your browser, you can at any time:

delete cookie files,
block future usage of cookie files.

In such an event we will no longer process cookies.

For more information on cookies, see Wikipedia.

EXTRANEOUS SERVICES/RECIPIENTS OF DATA

We use the services of external entities to help support our operations. We entrust them with the processing of your personal data – these entities process personal data solely upon our documented instruction.

Below we have included a list of recipients of your personal data:

ACTION	RECIPIENTS OF DATA	TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION
each activity connected with the Shop	operator of the internet business platform	does not occur
placing an order with the Shop	payment supplier	does not occur
	entity responsible for the delivery of goods – unless you have chosen to pick up the goods in person	does not occur
	supplier of software used for business operations (bookkeeping software, for example)	does not occur
signing up to the newsletter or providing consent to the sending of marketing notifications	entity handling the dispatch of newsletters or marketing notifications	does not occur

And also:

competent public bodies, insofar as we are obligated to provide them with access to personal data.