Privacy policy

GENERAL PROVISIONS

The administrator of personal data collected via the store www.paletteofsenses.com is NAIO Alicja Izabela Owczarek, with its registered office at Dmosin Drugi 89B, 95-061 Dmosin, Poland, registered in the Central Register and Information on Business Activity. NIP: 8331406349, REGON: 522878951, e-mail: contact@paletteofsenses.com, hereinafter referred to as the "Administrator" and also the Service Provider.
All words or expressions written in capital letters in this Privacy Policy should be understood according to their definition in the Terms and Conditions of the store www.paletteofsenses.com.

§2 PURPOSE AND SCOPE OF DATA COLLECTION

Personal data will be processed for the purpose of processing purchases in our online store, direct marketing concerning products and services sold in our store, conducted electronically. Data for these purposes will be processed based on Article 6(1)(b), (c), and (f) of the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016, on the protection of individuals with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (GDPR).
With the separate consent of the data subject, under Article 6(1)(a) of the GDPR, data may also be processed for sending commercial information electronically or making telephone calls for direct marketing purposes – in accordance with Article 10(2) of the Act of July 18, 2002, on the provision of electronic services, or Article 172(1) of the Act of July 16, 2004, Telecommunications Law, including those made as a result of profiling, if the user has given the appropriate consent.
In case of the necessity to deliver an order, personal data will be shared with logistic companies, postal operators, or carriers solely for the purpose of order delivery.
Personal data processed for the purposes of fulfilling purchases will be processed for the period necessary to complete the purchase and order, after which data subject to archiving will be stored for the period appropriate for the statute of limitations for claims, i.e., 10 years. Personal data processed for marketing purposes under the consent statement will be processed until the consent is withdrawn.
If it is found that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the General Inspector of Personal Data Protection (after May 25, 2018 – the President of the Personal Data Protection Office).
Providing personal data is voluntary, but providing the specified personal data is a condition for placing an order, and failure to provide it will result in the inability to order products from the store.
Personal data will also be processed in an automated manner in the form of profiling, if the user has consented to this based on Article 6(1)(a) GDPR. The consequence of profiling will be assigning a profile to a person for the purpose of making decisions related to them or analyzing or predicting their preferences, behaviors, and attitudes.
The Administrator makes every effort to protect the interests of individuals whose data is processed, and in particular ensures that the collected data is:

  • processed lawfully,
  • collected for specified, legitimate purposes and not subject to further processing incompatible with those purposes,
  • accurate and adequate in relation to the purposes for which they are processed, and stored in a form allowing identification of the data subjects, for no longer than is necessary to achieve the processing purpose.

§3 RIGHT TO CONTROL, ACCESS, AND CORRECT OWN DATA

The person to whom the data pertains has the right to access their personal data, and the right to rectify, delete, restrict processing, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, a relevant email can be sent to: contact@paletteofsenses.com

§4 COOKIES

The Service Provider’s store uses "cookies". If the User does not change the browser settings, it is considered as giving consent for their use.
The installation of "cookies" is necessary for the proper provision of services in the Store. The "cookies" contain information necessary for the correct functioning of the Store, particularly for those requiring authorization.
The Store uses three types of "cookies": "session", "persistent", and "analytical".
"Session cookies" are temporary files stored on the User's device until they log out (leave the store).
"Persistent cookies" are stored on the User's device for a specified time according to the cookie parameters or until the User deletes them.
"Analytical cookies" help better understand how Users interact with the Store’s content and organize its layout better. Analytical cookies collect information about how the Store is used by the User, the type of page from which the User was redirected, the number of visits, and the duration of the visit on the Store’s page. These cookies do not record specific personal data of the User but serve to develop statistics about the usage of the Store.
The User has the right to decide on the access of "cookies" to their computer through prior selection in the browser settings. Detailed information on the possibility and methods of handling "cookies" are available in the software settings (web browser).

§5 FINAL PROVISIONS

The Administrator implements technical and organizational measures ensuring the protection of personal data appropriate to the risks and categories of data subject to protection, particularly securing the data against unauthorized access, unauthorized removal, unlawful processing, as well as change, loss, damage, or destruction.
The Service Provider provides appropriate technical measures to prevent unauthorized access and modification of personal data transmitted electronically.
In matters not regulated by this Privacy Policy, the provisions of the Terms and Conditions of the store www.paletteofsenses.com, the provisions of Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, on the protection of individuals regarding the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (GDPR), as well as other relevant provisions of Polish law, shall apply.


The provisions of this Privacy Policy come into effect on December 4, 2024.