Privacy policy
PRIVACY AND COOKIE POLICY
You have the right, among other things, to access your data, correct it, and request its deletion. You also have the right to object to the processing of your personal data or request the restriction of its processing.
Providing the required personal data by you is voluntary, but is a condition for us to provide certain services to you (e.g. maintaining an account, sending a newsletter) or for the performance of the contract. We do not make individual decisions for you based solely on automated processing (profiling) that would produce legal effects or significantly affect your situation in a similar way.
Our domain has an SSL certificate, thanks to which your data is encrypted.
Below you will find all the most important issues related to the processing of personal data on our website.
Who is the administrator of the website and personal data?
The administrator of the website and personal data is Ewa Bień, conducting business activity under the name Ewa Bień Ewa Bien, with its registered office at ul. Krakowska 290, 32-080 Zabierzów, Poland (which address is also the address for correspondence), entered into the Central Register and Information on Economic Activity, NIP: 6760105593, REGON 350125160.
Contact details: e-mail address: sklep@ewabien.com, phone no. +48 604 235 464.
What is the legal basis for processing personal data?
Personal data are collected and processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (GDPR). The processing of personal data is also regulated by the national act of 10 May 2018 on the protection of personal data (consolidated text: Journal of Laws of 2019, item 1781).
What data do we process?
Depending on the purpose and user preferences, we may process data such as: name and surname, address, e-mail address, telephone number, bank account number, IP address, and in the case of entrepreneurs also the tax identification number and business address. In addition, we may process other personal data sent to us in correspondence. For analytics purposes, we may also process data regarding the source of the Store, the operating system and web browser used to browse the Store, data regarding products viewed, time spent on the site, abandoned baskets, placed orders, activities in response to newsletter sending, user age range, gender, approximate location and interests (based on online activity).
The above data is transferred to us as a result of activities such as:
- Using the contact form,
- Using the chat built into the Store Website,
- Sending correspondence directly to our e-mail address,
- Providing us with data during a telephone conversation,
- Registering an account in the Store,
- Placing an order in the Store,
- Subscribing to the newsletter,
- Adding a product review (if such a possibility is provided)
- Collection of other data used for analytics by the Store software or tools listed in this Privacy Policy.
For what purposes do we process your data?
We process data to the extent necessary for the operation of our store and store it for the period permitted by law. We process data provided by users when using the store.
- Conclusion and performance of a contract - pursuant to Article 6 paragraph 1 letter b) of the GDPR, i.e. when processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject before concluding a contract.
- Establishing and maintaining an account - pursuant to Article 6 paragraph 1 letter b) of the GDPR, i.e. when processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject before concluding a contract.
- Ensuring contact with us via the contact form, e-mail, telephone conversation - pursuant to Article 6 paragraph 1 letter b) of the GDPR. b) GDPR, i.e. when processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject before entering into a contract.
- Adding opinions and verifying them - based on: art. 6 sec. 1 letter a GDPR - i.e. when the data subject has consented to the processing of their personal data for one or more specified purposes,
- Direct marketing based on: art. 6 sec. 1 letter a GDPR - i.e. when the data subject has consented to the processing of their personal data for one or more specified purposes or on the basis of art. 6 sec. 1 letter f) GDPR, i.e. when processing is necessary for the purposes resulting from the legitimate interests pursued by the controller or by a third party, except for situations in which the interests or fundamental rights and freedoms of the data subject, requiring the protection of personal data, override those interests, in particular when the data subject is a child.
- Sending the newsletter and managing loyalty programs - based on art. 6 sec. 1 letter a) GDPR, i.e. when the data subject has consented to the processing of their personal data for one or more specific purposes.
- Fulfillment of legal obligations, determination and pursuit of claims - on the basis of art. 6 sec. 1 letter c) GDPR, i.e. when processing is necessary to fulfill a legal obligation incumbent on the controller and on the basis of art. 6 sec. 1 letter f) GDPR, i.e. when processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party, except for situations in which the interests or fundamental rights and freedoms of the data subject, requiring protection of personal data, override those interests, in particular when the data subject is a child.
- Analytical and statistical activities - art. 6 sec. 1 letter f) f) GDPR, i.e. when processing is necessary for the purposes of legitimate interests pursued by the administrator or by a third party, except for situations in which the interests or fundamental rights and freedoms of the data subject, requiring protection of personal data, override those interests, in particular when the data subject is a child.
- We use tools such as Facebook Ads and Google Ads, within which we can direct advertisements to specific target groups based on interests, gender, age, profession. These tools are described in detail in the cookie policy.
Who do we transfer personal data to?
We transfer personal data to other entities only to the extent that the data subject has consented to the processing of data, to the extent that it is necessary for the performance of the contract or to the extent that results from legitimate interests pursued by the administrator. These are the store's cooperating entities: hosting provider, newsletter sending tool provider, CRM system and invoicing system provider, accounting office, courier and transport companies, IT company providing services for the Store, online payment operators, banks, marketing tool providers and other subcontractors, as well as entities to which we are obliged to transfer your data under applicable regulations. In the case of data concerning analytics and statistics, which do not constitute personal data, they may be transferred to companies that commonly provide services in the field of analytics, statistics and optimization, including the United States (e.g. companies: Google LLC, Meta Platforms Inc.).
Is data transferred to third countries or international organizations?
Part of the data processing operations may involve transferring it to third countries or international organizations in connection with the use of tools that store personal data on servers located in third countries, especially the USA.
However, it should be noted that the providers of these tools guarantee an adequate level of protection of personal data, in particular by joining the Privacy Shield program or using standard contractual clauses. This applies in particular to the services of Google Ireland Limited.
What exactly are your rights in connection with the processing of your personal data?
You have the right to:
- request access to your personal data,
- request rectification of your personal data,
- object to the processing of your personal data,
- request the deletion of your personal data,
- request the restriction of the processing of your personal data,
- request the transfer of your personal data,
- obtain information on automated decision-making, including profiling and the safeguards applied in connection with the transfer of such data outside the EU,
- obtain information on the purposes of processing, categories of processed personal data, recipients or categories of recipients of such data,
- obtain information on the rights under the GDPR, the right to lodge a complaint with PUODO, the planned period of data storage or the criteria for determining this period, the source of such data,
- obtain a copy of your personal data.
- If you wish to exercise any of the above-mentioned rights, please let us know. We will immediately provide you with all information on the actions taken in connection with your request.
- You can withdraw your consent to the processing of your personal data at any time. To do this, please contact us.
Cookie Policy
Cookies are commonly occurring short text information that allows you to identify the software you use, customize content to your needs and ensure that websites work correctly. They are saved on the device you are using and have a domain name, storage time and a specific value. Cookies used in our store are safe and are divided into session and persistent cookies. Session cookies are stored only until the end of the browser session. Persistent cookies are stored on the device until they are deleted. Using your web browser, you can change your cookie preferences at any time or delete them (persistent cookies).
The basis for using cookies
We use some cookies to the extent necessary for the proper provision of services electronically, while we use other cookies based on granted consent.
The consent granted results from the settings of the web browser, other software used to manage cookies or the settings of the cookie manager if it is made available on the website.
You can disable cookies, as well as their individual types. However, we reserve that in the event of disabling or limiting the use of cookies, you may lose access to some of the functionalities available on our website, for the functioning of which consent to the use of certain cookies is required.
Entities whose cookies we use:
Google tools - Google Analytics, Google Ads, Google Adsense, Google Tag Manager, as well as YouTube belonging to Google, provided by Google Ireland Limited (Registration Number: 368047 / VAT Number: IE6388047V), Gordon House, Barrow Street, Dublin 4, Ireland. We base our activities regarding the use of these tools on our legitimate interest in marketing using commonly used tools. From our perspective, the data collected in connection with the use of these tools is not personal data due to anonymization.
You can find more information about the tools in the Terms and Conditions and Google Privacy Policy.
Google Analytics
We use the Google Analytics tool for purposes related to analytics and statistics, which serve to improve the operation of our website.
The data collected in connection with the use of the tool is not personal data due to anonymization and includes the study of user traffic on the website (information about the operating system, browser, visited pages and subpages, time spent on the website and subpages, source of the transition to the website).
Google Ads
When you visit our website, cookies related to remarketing are left on your device, which collect information about the activity on our website. The information collected is used to display advertisements on the Google network that correspond to your activities and interests. If you have given your consent to Google, this data may also be further processed by this company, e.g. to create target groups.
If you do not wish to receive personalized ads, you can define your settings on the myadcenter.google.com website.
Google AdSense
Our website may display personalized ads within the AdSense network. Cookies are used to display ads based on visits and activity on our website or on other websites.
Google Tag Manager
This tool allows you to analyze traffic and user activity using tags. This allows you to collect information about the effectiveness of ads, which helps to optimize our website and offer.
YouTube
We use YouTube widgets on our website, which allow you to embed recordings posted on YouTube. YouTube obtains cookies containing information about played videos - in order to ensure the correct and safe provision of services, as well as to improve them and for the purposes of personalizing advertising.
Google Merchant Center
This tool allows you to analyze user behavior and allows you to collect information about users' interactions with product ads, which allows you to better understand the effectiveness and measure the effectiveness of advertising campaigns and to adapt ads to user preferences and behavior.
Hotjar
We use an analytical tool provided by Hotjar Limited.
Hotjar is a code placed on the website that allows you to create click maps and analyze the engagement of people using the online store's website.
You can find more information in the Terms and Conditions and Privacy Policy of Hotjar Ltd.
Meta Pixel
We use marketing tools available within Facebook and provided by Meta Platforms Ireland Limited.
The Meta Pixel is a short code placed on the website that allows you to measure the effectiveness of ads based on the analysis of actions taken by users on the website and to personalize ads. The purpose of the code is to display ads to the right audience, increase sales and measure the results of ads.
The Meta Pixel uses cookies that record actions on the website - for example, traffic on the website, visiting specific subpages, adding products to the basket or making purchases. Analysis of these actions, to optimize the operation of the website and our offer.
You can find more information in the Privacy Policy of Meta.
Social media
If we place a plugin for a given social media platform (Facebook, Instagram, X/Twitter) on our website, the administrator of the given website receives information about your visit to our website using your user ID. The administrator of the given platform collects information about the browser used, the date and time of the page you visit. The administrators of the given platform use this information to provide the full functionality of the plugins and to improve their services, as well as to personalize ads.
You can find more information in the Privacy Policy of Meta and in the Privacy Policy of X (formerly Twitter).
Pinterest Ads
Pinterest Ads is a tool used to conduct advertising campaigns on the Pinterest platform, using personalized content and ads.
You can find more information about this tool in the Privacy Policy of Pinterest.
TikTok Pixel
Using TikTok Pixel, we create marketing campaigns on TikTok and track their progress. The tool allows you to generate reports and display ads to the maximum number of people from the target group at a frequency adjusted by the company and increase awareness of the product.
More information about this tool can be found in the TikTok Privacy Policy.
Integration with Trusted Shops Trustbadge
In order to present the Trusted Shops Quality Mark, as well as collected customer reviews and the range of Trusted Shops products available to buyers after placing an order, the Trusted Shops Trustbadge is integrated into our website.
The above serves to protect our legitimate interest in optimally presenting our offer on the market. The Trustbadge and the services advertised in this way are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When using the Trustbadge, the server automatically stores so-called server logs, which contain, for example, your IP address, date and time of the request, the amount of data transferred and the requesting Internet service provider (access data) and documents the request for the Trustbadge. The access data indicated above is not analyzed and is automatically overwritten within seven days of the end of your visit to the website.
Other personal data is only transferred to Trusted Shops if, after placing an order in the shop, you decide to use Trusted Shops products or have already registered to use them. In such cases, the agreement concluded by you with Trusted Shops applies.
Server logs
Visiting and using the website involves sending queries to the server, which are saved in so-called server logs. They contain, among other things, information about the user's IP address, date and time of the query, browser and operating system.
Server logs are saved and stored on the server. However, they are not associated with specific persons using the website and are not intended for identification - they are only used to administer the website, and their content is not disclosed to unauthorized persons.
Need help?
Frequently Asked Questions
contact
You can contact Customer Service in several ways, choosing the one most comfortable for you:
- Via the built-in contact form on the website: Contact Form
- By email: sklep@ewabien.com
- By phone: +48 604 235 464 during working hours: 8:00 AM - 3:00 PM from Monday to Friday.
ORDERS
Write a clear and concise answer to guide your customers.