PRIVACY AND COOKIES POLICY
ON THE WWW.VINPLY.COM WEBSITE
WHAT IS THE PRIVACY POLICY?
We would like to familiarise you with the details of how we process your personal data in order to give you full knowledge and comfort in using our website.
As we are in the internet business ourselves, we know how important it is to protect your personal data. Therefore, we make a special effort to protect your privacy and the information you provide to us.
We carefully select and use appropriate technical measures, in particular those of a programmatic and organisational nature, to ensure the protection of the personal data processed. Our website uses encrypted data transmission (SSL), which ensures the protection of data identifying you.
In our Privacy Policy you will find all the most important information concerning the processing of your personal data by us.
We ask you to read it and we promise it will not take more than a few minutes.
Who is the administrator of the website www.vinply.com?
The Administrator of the website www.vinply.com is ASMEDIO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (LTD.) with its registered office in Warsaw, Grzybowska 85/217, 00-844 Warsaw, registered by the District Court for the Capital City of Warsaw in Warsaw, XII Commercial Division of the National Court Register, KRS: 0000832025, NIP: 5272922934, REGON: 385695096, share capital: 5000,00 PLN (i.e.: us).
PERSONAL DATA
What legal act governs the processing of your personal data?
Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1), commonly referred to as GDPR. To the extent not regulated by the GDPR, the processing of personal data is governed by the Data Protection Act of 10 May 2018.
Who is the administrator of your personal data?
The administrator of your personal data is:
Asmedio sp z o.o.
Grzybowska 85/217, 00-844 Warsaw
e-mail: contact@vinply.com
You can contact the Data Administrator regarding your personal data via:
What data do we process and for what purposes?
On our website, we offer you a number of different services for which we process different personal data, based on different legal bases.
|
Objective |
Personal data |
Legal basis for processing |
Data storage time |
|
conclusion and performance of package services |
name, surname, correspondence address, e-mail address, bank account number, payment card number, location |
Article 6(1)(b) GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are party |
until the expiry of the limitation period for claims concerning the performance of the contract |
|
opening and maintaining an account, matching your preferences |
e-mail address, occupation, marital status, education, image, interests, information about addictions, skills, preferences, zodiac sign, height, weight, eye colour |
Article 6(1)(b) GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are party |
until the account is deleted |
|
contact form |
e-mail address |
Article 6(1)(f) GDPR i.e. processing for the purpose of pursuing our legitimate interest in maintaining continuity of communication and enabling contact with us in matters of business |
until you object to the processing of your personal data |
|
newsletter |
email address |
Article 6(1)(a) GDPR, i.e. processing on the basis of your consent to the processing of your personal data |
until the date on which you withdraw your consent to the processing of your personal data |
|
establishment, investigation, enforcement and defence of claims in proceedings before the courts and other state bodies
|
name, surname, residential address, Social Security Number /PESEL/, Taxpayer ID /NIP/, Business ID /REGON/, e-mail address, telephone no., IP no., bank account no., payment card no. |
Article 6(1)(f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest in the establishment, investigation and enforcement of claims and the defence of claims before the courts and other state bodies |
until the expiry of the limitation period for claims concerning the performance of the contract |
|
statistics, website traffic analysis
|
IP address, location, information stored in cookies |
Article 6(1)(f) GDPR, i.e. processing for the purpose of the Administrator's legitimate interest in improving the quality of the services provided, assessing the services provided and the needs of the market. |
until you object to the processing of your personal data |
|
direct marketing of our own services, including remarketing |
name, company, postal address, e-mail address, telephone number, IP address, information stored in cookies, location, order history |
Article 6(1)(f) GDPR, i.e. processing for the purposes of the Administrator's legitimate interest in direct marketing of its own services, including remarketing |
until you object to the processing of your personal data or establish that your data has become obsolete |
Voluntariness of personal data
The provision of the required personal data by you is voluntary, but is a condition for us to provide services to you (e.g. to open an account).
Recipients of personal data
Recipients of your personal data may be, in particular: IT service providers; entities providing analytical, marketing, legal, accounting services to the Administrator, operators of electronic payment systems, banks in the execution of payments.
Automated decision-making (including profiling)
We use tools by means of which we target personalised advertising to you. Based on your actions on the Website, in particular your choice of content viewed and the length of time you stay on the Website's pages, we adapt and display marketing content tailored to you. This profiling allows us to target marketing messages that are more desirable to you, which benefits both us and you by limiting marketing messages about goods and services that are not in your area of interest.
Will we transfer your personal data outside the EEA or to an international organisation?
In order to use Google's measurement and marketing tools, your personal data may be transferred to the United States, where Google LLC servers are located. Google LLC is on the list of entities participating in the Privacy Shield programme (link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
For the use of Facebook's measurement and marketing tools, your personal data may be transferred to the United States, where the servers of Facebook Inc. Facebook Inc. is listed as a participant in the Privacy Shield program (link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active)
Accordingly, the protection of your personal data is adequate in relation to the regulations applicable in the European Union, in accordance with Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 on the adequacy of the protection provided by the EU-US Privacy Shield (link: https://eur-lex.europa.eu/legal-content/PL/TXT/HTML/?uri=CELEX:32016D1250&from=EN).
What rights do you have in relation to our processing of your personal data?
Under the GDPR you have the right to:
- request access to your personal data
- request rectification of your personal data
- request erasure of your personal data
- request restriction of processing of your personal data
- object to processing of your personal data
- request portability of your personal data
If you submit any of the above-mentioned requests to us, we will inform you without undue delay - and in any case within one month of receiving your request - about the action taken in relation to your request.
If necessary, we may extend the one-month period by a further two months due to the complexity of the request or the number of requests.
In any case, we will inform you of the extension within one month of receipt of the request and provide you with the reasons for the delay.
Right of access to personal data (Article 15 GDPR)
You have the right to be informed whether we process your personal data.
If we process your personal data you have the right to:
- access your personal data,
- obtain information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of such data, the intended period of storage of your data or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with the President of the Office for Personal Data Protection, the source of such data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;
- obtain a copy of your personal data.
If you wish to request access to your personal data please submit your request to: contact@vinply.com.
Right to rectification of personal data (Article 16 GDPR)
If your personal data is incorrect you have the right to request that we rectify your personal data without delay. You also have the right to request that we complete your personal data.
If you wish to request the rectification or completion of your personal data, please submit your request to: contact@vinply.com.
The right to erasure of personal data, the so-called "right to be forgotten" (Article 17 GDPR)
You have the right to request the erasure of your personal data when:
- your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- you have withdrawn specific consent, to the extent that personal data were processed based on your consent;
- your personal data were processed unlawfully;
- you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of your personal data is related to direct marketing;
- you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by us or a third party.
Despite your request for erasure, we may continue to process your personal data for the purpose of establishing, asserting or defending claims of which you will be informed.
If you wish to request deletion of your personal data, please submit your request to: contact@vinply.com.
Right to request restriction of processing of your personal data (Article 18 GDPR)
You have the right to request the restriction of the processing of your personal data when:
- you question the correctness of your personal data - in this case we will restrict the processing of your personal data for a period of time allowing you to check the correctness of the data;
- the processing of your data is unlawful and instead of erasing your personal data you request the restriction of the processing of your personal data;
- your personal data is no longer necessary for the purposes of the processing, but it is necessary for the establishment, investigation or defence of your claims;
- you have objected to the processing of your personal data - until we determine whether our legitimate interests override the grounds indicated in your objection.
If you wish to request the restriction of the processing of your personal data, please submit your request to: contact@vinply.com.
Right to object to the processing of your personal data (Article 21 GDPR)
You have the right to object at any time to the processing of your personal data, including profiling, in relation to:
- processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Personal Data Controller or a third party;
- processing for the purposes of direct marketing.
If you wish to vote against the processing of your personal data, please submit your request to: contact@vinply.com.
Right to request portability of your personal data (Article 20 GDPR)
You have the right to receive your personal data from us in a structured, commonly used machine-readable format and to send it to another controller.
By default, we will share your personal data with you in CSV format. If you prefer to have your data made available to you in another format please indicate your preferred format in your request. Where possible, we will endeavour to provide you with the data in your preferred format.
You may also request that we transfer your personal data directly to another controller (if technically possible).
If you wish to request a transfer of your personal data please submit your request to contact@vinply.com.
Can you withdraw your consent to the processing of personal data?
You may withdraw the consent you have given us to process your personal data at any time.
The withdrawal of your consent to process your personal data does not affect the lawfulness of the processing carried out by us on the basis of your consent before its withdrawal.
If you wish to withdraw your consent to the processing of your personal data please submit your request to: contact@vinply.com.
If you wish to withdraw your consent to the processing of your personal data for the purpose of providing the "Newsletter" service, you can unsubscribe from it.
Complaint to the supervisory authority
If you believe that the processing of your personal data breaches data protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged breach occurred.
In Poland, the supervisory authority under the GDPR is the President of the Office for Personal Data Protection, which replaced the GIODO as of 25 May 2018.
You can find more information here.
„COOKIES”
GENERAL INFORMATION
When browsing through the websites of the Website, "cookies", hereinafter referred to as "Cookies", are used, i.e. small text information which are stored in your terminal equipment in connection with using the Website. Their use is aimed at the proper functioning of the websites of the Website.
These files allow us to identify the software used by you and adapt the Website individually to your needs.
Cookies usually contain the name of the domain they come from, the time they are stored on your device and the value assigned to them.
SAFETY
The cookies we use are safe for your device. In particular, it is not possible for viruses or other unwanted software or malware to enter your device via cookies.
TYPES OF "COOKIES"
We use two types of cookies:
OBJECTIVES
We also use third-party cookies for the following purposes:
Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to your preferences. For this purpose, information may be stored on how you navigate the web or when you use the website.
To view and edit the information about your preferences collected by the Google advertising network, you can use the tool provided under the link https://www.google.com/ads/preferences/.
By means of the settings of your browser or through the configuration of the service, you can independently and at any time change your settings regarding Cookies, specifying the conditions under which Cookies are stored and accessed by your device. You can change these settings so as to block the automatic handling of Cookies in your web browser settings or inform about their placement on your device each time. Detailed information on the possibility and methods of using Cookies is available in the settings of your software (web browser).
ATTACHMENTS