Updated 15/05/2024
§ 1
1. This Privacy Policy sets out the principles of processing and protection of personal data provided by Users in connection with their use of the website operated by Ondudes Michał Mruk at ondudes.pl and ondudes.pl (hereinafter referred to as the "Website" or "Store"). The policy presented herein is intended to explain how we collect, use, and share data you may provide while using the Website. Please read this document in its entirety before using our store's services or providing any data.
2. Respecting the rights of each of our Users, and in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as GDPR), we undertake to maintain the security and confidentiality of personal data obtained when using the website and making purchases in the Store, and we ensure that we take all necessary measures for this purpose.
§ 2
The controller of personal data transferred via the ondudes.pl and ondudes.com websites is Michał Mruk, an entrepreneur running a sole proprietorship under the name Ondudes Michał Mruk, ul. Moliera 19, 60-461 Poznań, NIP: 7812082598, REGON: 540640000, e-mail: kontakt@ondudes.pl (hereinafter referred to as the "Controller").
§ 3
To ensure the security of data provided via the website, the Administrator has developed internal procedures and recommendations to prevent unauthorized access. The Administrator constantly monitors their implementation and verifies their compliance with applicable legal regulations, including the Personal Data Protection Act, the Electronic Services Provision Act, as well as implementing acts and acts of Community and national law.
§ 4
Personal Data are processed on the basis and to the extent specified in the consent expressed by the User and in cases where the provisions of law authorize the Administrator to process personal data on the basis of the provisions of law or for the purpose of implementing the agreement concluded between the parties.
§ 5
The Administrator obtains information about users and their behavior in the following way:
a) through information entered into forms (Registration Form, Order Form, newsletter subscription) voluntarily by the User.
b) by collecting “cookies”, as provided for in §12.
§ 6
The User may at any time unsubscribe from the Newsletter service by sending an e-mail with such a request to the following address: kontakt@ondudes.pl or clicking on the “unsubscribe” field visible in every e-mail sent as part of the Newsletter service.
§ 7
1. The Website collects information voluntarily provided by the User after he or she has read the Privacy Policy and the Regulations.
2. The data indicated as obligatory are necessary to perform the subject of the Agreement; the lack of consent to their processing prevents the Administrator from performing the Agreement.
§ 8
1. The User's personal data collected by the Administrator include:
a) name and surname
b) e-mail address;
c) address (street, house/apartment number, postal code, city, country);
d) contact telephone number;
e) payment card details (if card payment is used)
2. Personal data collected by the Administrator are data for the purpose of:
a) providing the User with interesting content related to the activities conducted by the Administrator and the industry represented by him in the form of links, articles and other materials - including messages containing commercial and marketing information - in the form of an e-mail message as part of the Newsletter service, with the prior consent of the User
b) fulfilling the order placed by the User, both in the subscription, pre-sale and regular sales systems
3. Personal data are processed to the extent necessary to perform the subject of the contract or to provide additional services to which the User has consented.
4. Using some of the Store's services may involve sharing the Customer's personal data with other entities. If, as a result, personal data is transferred to another entity, the processing of personal data will be subject to the privacy policy of that entity. The Store may share the collected data with the following entities: payment processors, courier companies, manufacturers of products offered by the Store for the purpose of processing Customer complaints, entities providing system support for the website and sales system, entities providing technological solutions for call center and mailing services, entities supporting the promotion of offers, and entities collaborating on marketing campaigns. Furthermore, the information provided by the Customer may be shared with relevant public authorities if required by applicable law.
§ 9
1. The Administrator will process the Users' personal data indicated in § 8 of the Privacy Policy for the following purposes:
a) Online shopping and user service:
The Administrator will use personal data to manage purchases made online on the website ondudes.pl and ondudes.com to process User orders and returns, and to send notifications about delivery status or in the event of any problems with product delivery. The Administrator will use the User's personal data to manage payments and to process complaints and warranty claims regarding products. The Administrator will also process data to measure User satisfaction with the sales process. The Administrator will process the User's personal data for online shopping purposes pursuant to Article 6(1)(b) of the GDPR, and for User service purposes pursuant to Article 6(1)(f) of the GDPR, i.e., the Administrator's legitimate interest.
b) Direct marketing
The Administrator may send Users, including to the e-mail addresses provided by them, commercial information about products and services provided by the Store, including in the form of internet broadcasts (webcasts) and newsletters, provided that the User consents thereto.
The Administrator will process the User's personal data in the above scope on the basis of Article 6 paragraph 1 letter a) of the GDPR, i.e. on the basis of the User's consent.
c) User Account
The Administrator will use personal data to set up and maintain a User account and to provide services electronically via the website. ondudes.pl and ondudes.com
The Administrator will process the User's personal data in the above scope on the basis of Article 6 paragraph 1 letter a) of the GDPR, i.e. on the basis of the User's consent.
d) Competitions
The Administrator will process personal data when a User participates in a competition organized by the Administrator. Personal data will be used to enable the Administrator to contact participants regarding the competition, before and after the event, to identify participants and verify their age, to contact winners, and to arrange prize delivery and delivery.
The Administrator will process the User's personal data in the above scope on the basis of Article 6 paragraph 1 letter a) of the GDPR, i.e. on the basis of the User's consent.
e) Development, improvement and content related to browsing the store website content
The Administrator may process personal data to improve services, as well as to tailor advertisements, materials, or recommendations displayed on the Store's website to Users' preferences and interests. For this purpose, the Administrator may collect personal data provided by Users in connection with their use of a given service, along with other personal data concerning that User processed by the Administrator. The Administrator will not analyze User data at the individual level—all data used for these purposes will be anonymized. The Store may obtain other information resulting from the general principles of internet connections, such as IP address, number and source of visits to the Store's website, duration of the visit, content viewed, number and type of subpages accessed, referrals used, or the computer's IP address, which may be used by the Store for technical and statistical purposes. The Administrator does not combine the above information with Users' personal data and does not use it to identify Users, unless it is necessary for the proper provision of services by the Store. The Administrator uses the information referred to above solely for purposes related to market research and internet traffic on the Store's website, for statistical purposes, in particular to improve the quality of services provided by the Store. The Administrator will process the User's personal data in the above scope pursuant to Article 6(1)(f) of the GDPR, i.e., the Administrator's legitimate interest.
f) Fulfillment of legal obligations
The Administrator will use your personal data to comply with legal or court orders and other government regulations. Furthermore, it will use your personal data to collect and confirm financial data for the purpose of complying with accounting rules.
The Controller will process the User's personal data within the above scope on the basis of Article 6(1)(b) and (c) of the GDPR, i.e. for the purpose of performing the contract and fulfilling the Controller's legal obligations.
g) Prevention of crime and unlawful use of data
The Administrator will use Users' personal data to prevent losses, detect and prevent use of online services in a manner inconsistent with the principles and regulations, investigate such cases, and prevent losses and fraud by analyzing the behavior of Online Store Users. The Administrator will process personal data pursuant to Article 6(1)(f) of the GDPR, i.e., to prevent the misuse of our services, and based on legitimate interests.
h) Personal data processed on the basis of the consent expressed by the User.
The User consents to the processing of personal data by checking the appropriate box in the form during the registration process or another procedure aimed at enabling the use of the Store's services. Each User has the opportunity to choose whether and to what extent they want to use our services and share information about themselves. Please note that failure to provide certain data in certain cases may prevent you from using the services we offer. The User may withdraw their consent to the collection and processing of their personal data at any time. The Controller will process the User's personal data in this scope pursuant to Article 6(1)(a) of the GDPR.
2. The Administrator specifies the following periods for the processing of personal data:
a) Personal data processed for the purpose of concluding or performing a contract and fulfilling the Controller's legal obligation, i.e. pursuant to Article 6 paragraph 1 letters b) and c) of the GDPR, will be stored for the duration of the contract, and after its expiry for the period necessary to:
i. after-sales service for Users (e.g. handling complaints),
ii. securing or pursuing any legal claims to which the Administrator or the User is entitled (for a maximum period of 6 years from the date of completion of the contract),
iii. fulfilling the Controller's legal obligation (e.g. resulting from tax or accounting regulations),
iv. statistical and archiving;
b) Personal data processed on the basis of a legitimate interest, i.e. pursuant to Article 6(1)(f) of the GDPR, will be processed until the data subject objects, unless the Controller is able to find a lawful justification for this process that overrides the User's interest or rights, or because of legal claims.
c) Personal data processed on the basis of separate consent will be stored until its revocation.
d) For the purposes of accountability, i.e. to prove compliance with the provisions on the processing of personal data, the Controller will store data for the period in which the Controller is obliged to retain data or documents containing them in order to document the fulfillment of legal requirements and enable the control of their fulfillment by public authorities.
§ 10
1. The User, as the person whose data is subject to processing, has the right to:
a) transparent communication and information about the data shared,
b) access to the data provided, including the right to view and amend them,
c) deletion of data,
d) restrictions on data processing,
e) data transfer,
f) objection to the processing of his data.
2. The User, as the person whose data is being processed, has the right to obtain a copy of the data concerning them from the Controller. This information can be provided electronically to the following email address: kontakt@ondudes.pl.
3. The User, as the person whose data is subject to processing, has the right to information on:
a) processing purposes,
b) categories of personal data,
c) recipients or categories of recipients to whom the data was made available
d) planned data storage period,
e) lodge a complaint with the supervisory authority.
§ 11
1. The Store makes every effort to secure Customers' personal data and protect it from third-party access. We use all necessary server, connection, and website security measures to protect Customers' data, in particular SSL encryption. All connections related to electronic payments, if selected, will be made via a secure, encrypted connection. Please be advised that the measures taken by the Store may prove insufficient if Customers themselves do not adhere to security rules. In particular, each Customer should keep their login and password for their account on the Store's website confidential and not share them with third parties. Please be advised that the Store will not ask Customers to provide these details, except when logging in. To prevent unauthorized access to your account, please log out after using the website.
2. The Controller stores collected personal data within the European Economic Area ("EEA"), but it may also be transferred to a country outside of this area and processed there. Each transfer of personal data is carried out in accordance with applicable law. If data is transferred outside the EEA, the Controller uses standard contractual clauses and appropriate safeguards in relation to countries for which the European Commission has not determined an adequate level of data protection.
§ 12
1. The only information collected automatically by the website ondudes.pl and ondudes.com This information is contained in cookies. These are small text files sent by a web server and stored by the computer's browser software.
2. When the browser reconnects to the website, the website recognizes the type of device the user is connecting from. The information collected includes the IP address, browser type, language, operating system type, internet service provider, time and date information, and location.
3. The Website uses session cookies, which are deleted after closing the browser window, as well as persistent cookies, which are saved for a specified period of time on the devices through which you use the Website.
4. The collected data, indicated in paragraphs 2 and 3, are used to monitor and verify how users use the website, to improve its operation by ensuring more efficient and seamless navigation. Cookies are used to ensure the highest standard of service convenience, and the collected data is used only internally by the event organizers to optimize operations.
5. If the User visits the website without completing forms, statistical data is collected, such as the pages and subpages visited and the amount of time spent on each, the date and time of the visit, the operating system and web browser used, and the location. The legal basis is the Administrator's legitimate interest in improving the structure of the website and services.
6. In the above case, unless an alternative to the default cookie settings has been set on the website, the data may be processed for marketing purposes. This includes activity data – search history, website clicks, etc. The Administrator does not profile the data, and the legal basis for processing this data is the Administrator's legitimate interest in marketing the website and services.
7. The entity that places cookies on the User's end device is the Administrator indicated in § 2.
8. Cookies are used for the following purposes:
a) more accurately adapt the content of the website to the User's preferences,
b) improving the use of the website by taking into account the individual needs and habits of the User,
c) creating statistics based on which the Administrator examines website traffic and analyzes how the User uses the website.
9. You can change your cookie settings at any time in your web browser settings.
10. The Administrator informs that restrictions on the use of cookies may affect some functionalities available on the website and on websites to which it may redirect.
§ 13
The Administrator reserves the right to make changes to the website's Privacy Policy ondudes.pl and ondudes.com, due to the need to adapt to the development of internet technology, changes in personal data protection law, and the development of the website itself. The Administrator is obligated to inform Users of any changes in a visible and understandable manner.
§ 14
On the website ondudes.pl and ondudes.com may contain links to other websites. These websites operate independently of the Administrator's website and are not supervised by it in any way. These websites may have their own privacy policies and terms and conditions, which users should review on their own.
§ 15
1. In matters not covered by this Privacy Policy, the relevant provisions of Polish and European law shall apply.
2. The Customer may contact the Data Controller at any time to obtain information on whether and how the Controller uses or intends to use his/her Personal Data and information obtained using Cookies.
