Privacy policy of the store "Silver Mint"
This Privacy Policy (hereinafter: "Policy") contains information about the processing of your personal data in connection with the use of the "Silver Mint" online store, operating at the Internet address www.srebrnamennica.pl (hereinafter: "Store").
Any capitalized terms not otherwise defined in the Policy have the meaning given to them in:
Rules and Regulations of the Store, available at: www.srebrnamennica.pl/regulamin and
Personal Data Administrator
The administrator of your personal data is SGP Metal Trade spółka z ograniczoną odpowiedzialnością spółka komandytowa with its registered office in Kraków (registered office address: ul. Pasteura 6a/5, 31-221 Kraków) entered in the register of entrepreneurs of the National Court Register by the District Court in Kraków, XI Economic Department of the National Court Register under KRS number: 0001068230, having NIP: 9452282088, REGON number: 526911409, entered on November 28, 2023. to the register of cantor activities under number 20209 in the limited scope (purchase and sale of foreign exchange gold and foreign exchange platinum and intermediation in their purchase and sale) (hereinafter: "Administrator").
Contact with the Administrator
In all matters related to the processing of personal data, you can contact the Administrator by e-mail, at: kontakt@srebrnamennica.pl.
Data protection measures
The Administrator employs modern organizational and technical safeguards to ensure the best possible protection of your personal data and ensures that it is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) (hereinafter: "RODO"), the Act of May 10, 2018 on the protection of personal data and other data protection regulations.
Information about the personal data processed
The use of the Store requires the processing of your personal data. Below you will find detailed information about the purposes and legal grounds for processing, as well as the period of processing and the obligation or voluntariness of providing it.
|
Purpose of processing |
|
Processed personal data |
|
Legal basis |
|
Conclusion and performance of the Agreement for the provision of the Account Service |
12)3
|
) first and last name |
|
|
e-mail address |
|
|
) residential/business address (street, |
house number, premises number, city, postal code, country) |
|
Art. |
|
6(1)(b) RODO (processing is necessary for the performance of the Agreement for the provision of Account Services concluded with the data subject or to take steps to conclude it) |
|
Provision of the above. personal data is a condition for the conclusion and performance of the Agreement for the provision of Account Services (their provision is voluntary, but the consequence of their failure will be the inability to conclude and perform the aforementioned agreement, including the creation of an Account). The Administrator will process the aforementioned personal data until the statute of limitations for claims arising from the Agreement for the provision of Account Services . |
P
|
urpose of processing |
|
Processed personal data |
|
Legal basis |
|
Conclusion and performance of the Sales Agreement |
12)3number
|
) name and surname |
|
e-mail address |
| )
telephone |
4) address of56
|
residence/business (street, house number, premises number, |
city, postal code, country) |
) delivery address (if different from residence/business address) |
) optional - company and TIN (if the Buyer is an Entrepreneur or Entrepreneur on the rights of a Consumer) |
|
Art. |
|
6(1)(b) RODO (processing is necessary for the performance of the Sales Agreement concluded with the data subject or to take steps to conclude it) |
|
Providing the above. personal data is a condition for the conclusion and performance of the Sales Agreement (their provision is voluntary, but the consequence of their failure will be the inability to conclude and perform the above-mentioned agreements). The Administrator will process the above-mentioned personal data until the statute of limitations for claims arising from the Sales Agreement. |
P
|
urpose of processing |
|
Processed personal data |
|
Legal basis |
|
Conclusion and execution of the Newsletter Delivery Agreement |
|
e-mail address |
.
|
Art. 6 para. 1 lit |
|
b RODO (processing is necessary for the performance of the Newsletter Delivery Agreement concluded with the data subject or for taking steps to conclude it) and art . |
|
6(1)(f) RODO (processing is necessary for the purpose of realization of the legitimate interest of the Administrator, in this case to inform about news and promotions available in the Store) |
|
Provision of the above personal data is voluntary, but necessary in order to receive the Newsletter (the consequence of not providing them will be the inability to receive the Newsletter). The Administrator will process the above .personal data until an effective objection is raised or the purpose of the processing is achieved, or until the statute of limitations for claims arising from the Newsletter Delivery Agreement (whichever comes first). |
P
|
urpose of Processing |
|
Personal Data Processed |
|
Legal Basis |
To
|
carry out the complaint procedure |
12
|
) name |
|
) email address |
(1)- realization of the
|
Article 6 |
|
lit. c RODO (processing is necessary for the fulfillment of a legal obligation incumbent on the Administrator, in this case obligations: - torespond to a complaint - Art . |
|
7a of the Consumer Rights Act; |
|
Customer's rights resulting from the provisions on the Administrator's liability in case of non-compliance of the Goods with the Sales Agreement) |
rights).
|
Provision of the aforementioned personal data is a condition for receiving a response to a complaint or realization of the Buyer's rights resulting from the provisions on the Administrator's liability in case of non-compliance of the Goods with the Sales Agreement (provision of such data is voluntary, but the consequence of failing to provide such data will be the inability to receive a response to a complaint and realization of the aforementioned |
||
|
The Administrator will process the above personal data for the duration of the complaint procedure, and in the case of exercising the above Buyer's rights - until they expire. |
P
|
urpose of processing |
|
Processed personal data |
|
Legal basis |
|
To carry out verification proceedings and to process appeals against decisions on dealing with unacceptable content |
1
|
) name/name, 2) contact information, including email address |
-to provide-to handle
|
Art. |
|
6(1)(c) RODO (processing is necessary for the fulfillment of a legal obligation incumbent on the Administrator, in this case the obligations: |
|
a mechanism for reporting unacceptable content (Article 16 of Regulation 2022/2065 on the Digital Single Market for Digital Services and amending Directive 2000/31/EC (Digital Services Act) (hereinafter: "DSA"), |
|
complaints (Article 20 DSA). |
.
|
Provision of the above |
||
| Providing the above-mentioned
personal data is a condition for receiving a response to the request or exercising the User's rights under the provisions of the DSA (providing such data is voluntary, but the consequence of their failure will be the inability to receive a response to the request and to exercisethe above-mentioned rights ). The Administrator will process the above-mentioned personal data for the duration of the complaint procedure, and in the case of exercising the above-mentioned rights of the User - until they expire. |
P
|
urpose of processing |
|
Personal data processed |
|
Legal basis |
|
Sending email notifications |
|
email address |
.
|
Art. 6 para. 1 lit |
|
f RODO (processing is necessary for the purpose of realization of the legitimate interest of the Administrator, in this case to inform Customers about activities undertaken in connection with the execution of Agreements concluded with Customers) |
|
Provision of the above. personal data is voluntary, but necessary in order to receive information on activities related to the execution of Agreements concluded with Customers (the consequence of their failure will be the inability to receive the above. information). The Administrator will process the aforementioned personal data until an effective objection is raised or the purpose of the processing is achieved (whichever comes first) . |
P
|
urpose of processing |
|
Personal data processed |
|
Legal basis |
|
Handling of inquiries submitted by Customers |
12)3)Administrator
|
) first name |
|
e-mail address |
|
other data contained in the message to the |
|
Art. |
|
6(1)(f) RODO (processing is necessary for the purpose of realizing the legitimate interest of the Administrator, in this case to respond to the received inquiry) |
|
Providing the above personal data is voluntary, but necessary in order to receive a response to the inquiry (the consequence of not providing it will be the inability to receive a response). The Administrator will process the aforementioned personal data until you successfully object or the purpose of the processing is achieved (whichever comes first). |
P
|
urpose of processing |
|
Processed personal data |
|
Legal basis |
|
Provision of Opinions on Goods |
12Opinion
|
) name |
|
) optionally - other data contained in the |
|
Art. |
|
6(1)(f) RODO (processing is necessary for the Administrator's legitimate interests, in this case to provide Opinions for informational and promotional purposes) |
|
Provision of the above personal data is voluntary, but necessary in order to add an Opinion (the consequence of failure to provide such data will be the inability to add an Opinion). The Administrator will process the aforementioned personal data until an effective objection is raised or the purpose of the processing is achieved (whichever comes first). |
P
|
urpose of Processing |
|
Personal Data Processed |
|
Legal Basis |
chandise
|
Informing Customers of the availability of previously unavailable Mer |
|
email address |
.
|
Art. 6 para. 1 lit |
|
f RODO (processing is necessary for the purpose of realization of the Administrator's legitimate interest, in this case informing Customers about the availability of previously unavailable Goods) |
|
Provision of the above personal data is voluntary, but necessary in order to receive notification about the availability of previously unavailable Goods (the consequence of not providing them will be the inability to receive the above notification). The Administrator will process the aforementioned personal data until an effective objection is raised or the purpose of the processing is achieved (whichever comes first). |
P
|
urpose of processing |
|
Processed personal data |
|
Legal basis |
Fulfillment of
|
tax obligations (e.g., issuance of a VAT invoice, maintenance of accounting records) |
1)23IN
|
name/company |
| )
address of residence/site |
|
) T |
.
|
Art |
|
6(1)(c) RODO (processing is necessary for the fulfillment of a legal obligation incumbent on the Administrator, in this case obligations under tax law) |
obligations).
|
Provision of the above personal data is voluntary, but necessary in order for the Administrator to fulfill its tax obligations (the consequence of failure to do so will be the Administrator's inability to fulfill the above-mentioned |
||
|
obligations). The Administrator will process the above personal data for a period of 5 years from the end of the year in which the deadline for payment of tax for the previous year expired . |
P
|
urpose of processing |
|
Personal data processed |
|
Legal basis |
|
Fulfillment of data protection obligations |
12)
|
) first and last name |
|
) contact data provided by you (e-mail address; mailing address; telephone number |
.
|
Article 6 (1) lit |
|
c RODO (processing is necessary for the fulfillment of a legal obligation incumbent on the Administrator, in this case obligations arising from data protection regulations) |
|
Provision of the above personal data is voluntary, but necessary in order for the Administrator to properly perform its obligations arising from data protection regulations, including, but not limited to, exercising the rights granted to you by the RODO (the consequence of not providing the above. data will be the inability to properly exercise the aforementioned rights). The Administrator will process the aforementioned personal data until the expiration of the statute of limitations for claims for violation of data protection laws. |
P
|
urpose of processing |
|
Personal data processed |
|
Legal basis |
|
Determination, |
investigation or defense against claims |
123) address of4)5) TIN
|
) name/company |
) e-mail address |
residence/site |
PESEL number |
|
Art. |
|
6(1)(f) RODO (processing is necessary for the purpose of realization of the Administrator's legitimate interests, including in the case of establishing, investigating or defending against claims that may arise in connection with the performance of the Agreements concluded with the Administrator) |
|
Providing the above. personal data is voluntary, but necessary in order to establish, investigate or defend against claims that may arise in connection with the performance of the Agreements concluded with the Administrator (the consequence of failing to provide the above data will be the Administrator's inability to undertake the above. actions) Administrator will process the above personal data until the expiration of the statute of limitations for claims that may arise in connection with the performance of the Agreements concluded with the Administrator. |
P
|
urpose of processing |
|
Personal data processed |
|
Legal basis |
|
Analysis of your activity in the Store |
12)3)456)78
|
) date and time of your visit |
|||||
|
IP number of your device |
|||||
|
type of operating system of your device |
|||||
|
) |
approximate location |
) type of Internet browser |
time spent in the Store |
) viewed Goods |
)
visited sub-pages and other actions taken within theShop |
|
art. |
|
6(1)(f) RODO (processing is necessary for the purpose of the Administrator's legitimate interest, in this case to obtain information about your activity in the Store) |
information).
|
Providing the above personal data is voluntary, but necessary in order for the Administrator to obtain information about your activity in the Store (the consequence of not providing it will be the Administrator's inability to obtain the above |
||
|
information). The Administrator will process the above personal data until you successfully raise an objection or the purpose of the processing is achieved . |
P
|
urpose of processing |
|
Processed personal data |
|
Legal basis |
|
Administration of the Store |
12)3)4) information
|
) IP address |
|
date and time of the server |
|
information about the Internet browser |
|
about the operating system The above data are recorded automatically in the so-called. |
|
server logs, each time the Store is used (administering it without the use of server logs and automatic recording would not be possible). |
|
art |
. |
6(1)(f) RODO (processing is necessary for the purpose of realization of the Administrator's legitimate interest, in this case to ensure proper operation of the Store) |
|
Providing the above. personal data is voluntary, but necessary in order to ensure the proper operation of the Store (the consequence of not providing it will be the inability to ensure the proper operation of the Store). The Administrator will process the above personal data until an objection is successfully raised or the purpose of the processing is achieved . |
Profiling
In order to create your profile for marketing purposes and to direct marketing to you tailored to your preferences, the Administrator will process your personal data by automated means, including profiling - however, this will not have any legal effect on you or similarly significantly affect you.
The scope of the personal data profiled corresponds to the scope indicated above with regard to the analysis of your activity in the Store and the data you save in your Account.
The legal basis for the processing of personal data for the above purpose is Article 6(1)(f) of the RODO, according to which the Administrator may process personal data in order to pursue its legitimate interests, in this case to conduct marketing activities tailored to the preferences of the recipients. Provision of the aforementioned personal data is voluntary, but necessary for the realization of the aforementioned purpose (the consequence of failing to provide such data will be the Administrator's inability to conduct marketing activities tailored to the recipients' preferences).
The Administrator will process personal data for the purpose of profiling until an effective objection is raised or the purpose of the processing is achieved.
Recipients of personal data
Recipients of personal data will be the following external entities cooperating with the Administrator:
(a) hosting company;
b) logistics operator and courier companies;
(c) online payment system providers;
(d) newsletter service provider;
e) companies providing tools for analyzing activity in the Store and direct marketing targeting to individuals using it (including Google Analytics);
(f)company providing accounting services.
In addition, personal data may also be transferred to public or private entities, if such an obligation arises from generally applicable laws, a final court judgment or a valid administrative decision.
Transfer of personal data to a third country
In connection with the Administrator's use of services provided by Google LLC, your personal data may be transferred to the following third countries: United Kingdom, Canada, USA, Chile, Brazil, Israel, Saudi Arabia, Qatar, India, China, South Korea, Japan, Singapore, Taiwan (Republic of China), Indonesia and Australia. The basis for the transfer of data to the aforementioned third countries is:
- in the case of the United Kingdom, Canada, Israel, Japan and South Korea, decisions of the European Commission finding an adequate level of protection for personal data in each of the aforementioned third countries;
- in the case of the U.S. - Commission Implementing Decision (EU) 2023/1795 of July 10, 2023, pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, finding an adequate level of personal data protection provided under the EU-U.S. data protection framework;
- for Chile, Brazil, Saudi Arabia, Qatar, India, China, Singapore, Taiwan (Republic of China), Indonesia, and Australia, contractual clauses providing an adequate level of protection, in accordance with the standard contractual clauses set forth in Commission Implementing Decision (EU) 2021/914 of June 4, 2021 on standard contractual clauses for the transfer of personal data to third countries under Regulation (EU) 2016/679 of the European Parliament and of the Council.
You may obtain from the Administrator a copy of the data transferred to a third country.
Entitlements
In connection with the processing of your personal data, you have the following rights:
1) the right to be informed which personal data concerning you are processed by the Administrator and to receive a copy of such data (the so-called right of access). The issuance of the first copy of data is free of charge, for subsequent copies the Administrator may charge a fee;
2) if the processed data becomes outdated or incomplete (or otherwise incorrect) you have the right to request rectification;
3) in certain situations you may request the Administrator to delete your personal data, such as when:
(a) the data is no longer needed by the Administrator for the purposes communicated to it;
b) you have effectively withdrawn your consent to data processing - unless the Administrator has the right to process the data on another legal basis;
(c) the processing is unlawful;
d) the need to delete the data is due to a legal obligation of the Administrator;
4) in case your personal data is processed by the Administrator on the basis of your consent to processing or for the purpose of performing the Agreement concluded with it, you have the right to transfer your data to another administrator;
5) where personal data is processed by the Administrator on the basis of the processing consent you have given, you have the right to withdraw this consent at any time (withdrawal of consent does not affect the legality of processing that was performed on the basis of consent before its withdrawal);
6) if you consider that the processed personal data is incorrect, its processing is unlawful, or the Administrator no longer needs certain data, you may request that for a certain necessary period of time (e.g., to verify the correctness of the data or to assert claims) the Administrator not perform any operations on the data, but only store it;
7) You have the right to object to the processing of personal data based on the legitimate interests of the Administrator. If you successfully raise an objection, the Administrator will stop processing your personal data for the aforementioned purpose;
8) you have the right to lodge a complaint with the President of the Office for Personal Data Protection if you consider that the processing of personal data violates the provisions of the RODO.
Cookies
(1) The Administrator informs that the Store uses "cookies" (cookies), installed on your terminal device. These are small text files that can be read by the Administrator's system, as well as by systems belonging to other entities whose services are used by the Administrator (e.g. Facebook, Google).
(2) The Administrator uses cookies for the following purposes:
a) ensuring proper operation of the Store - thanks to cookies, it is possible for the Store to operate smoothly, use its functions and move conveniently between individual sub-pages;
b) increasing the comfort of browsing the Store - thanks to cookie files, it is possible to detect errors on some subpages and their constant improvement;
c) creating statistics- cookies are used to analyze how users use the Store. Thanks to this it is possible to constantly improve the Store and adjust its operation to the preferences of users;
d) conducting marketing activities - thanks to cookies, the Administrator can direct advertising to users tailored to their preferences.
(3) The Administrator may place both permanent and temporary (session) files on your device. Session files are usually deleted when you close your browser, while closing your browser does not delete permanent files.
(4) Information about the cookies used by the Administrator is displayed in the panel at the bottom of the Store's website. Depending on your decision, you can enable or disable cookies of each category (except for essential cookies) and change these settings at any time.[C1].
5 Data collected through cookies do not allow the Administrator to identify you.
6. the Administrator uses the following cookies or tools that use them:
|
TOOL |
|
PROVIDER |
OLLECTED
|
FUNCTIONS AND SCOPE OF DATA C |
PERIOD
|
OF OPERATION |
|
Necessary cookies |
|
Administrator |
the Store website
|
The operation of these files is necessary for the proper functioning of the Store website, Therefore, you cannot disable them. Thanks to these files (which collect, among other things, your device's IP number), it is possible, among other things, to |
|
informing you about the cookies operating on |
|
Most of the necessary cookies are of a session nature, however some remain on your terminal device for a period of 6 months or until they are deleted; |
|
Google Analytics |
|
|
to.g.
|
This tool allows |
|
you |
|
collect statistical data about the use of the Store by customers, e |
|
Among others, about the number of visits, duration of visits, search engine used, location. |
|
The collected data helps to improve the Store and make it more customer-friendly. |
|
up to 2 years or until their deletion (whichever comes first) |
|
Facebook Pixel |
|
|
.
|
This tool allows us to determine that you have visited the Store also to target you with ads displayed on Facebook and Instagram social networks and to measure their effectiveness |
U
|
p to 3 months or until they are deleted (whichever comes first) |
7 Through most commonly used browsers, you can check whether cookies have been installed on your end device, as well as delete installed cookies and block the Store from installing them in the future. However, disabling or restricting cookies may cause quite serious difficulties in using the Store, e.g. in the form of the need to log on to each subpage, longer loading time of the Store's website, limitations in the use of certain functionalities.
Final provisions
To the extent not regulated by the Policy, the generally applicable data protection regulations shall apply.
The Policy is effective as of 09.11.2023.