Breath Work Retreat

Privacy policy

PRIVACY POLICY

Protecting the privacy of Users is particularly important to us. Therefore, Users of the www.breathworkretreat.pl website (hereinafter referred to as the Online Store) are guaranteed the highest standards of privacy protection. Agnieszka Romańczuk-Szatkowska as a personal data administrator cares about the security of personal data provided by Users.

Considering the above, and in view of the requirements introduced by the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (General Data Protection Regulation)

(Dz.U.UE.L.2016.119.1 of 2016.05.04) (hereinafter referred to as RODO) in order for Agnieszka Romańczuk-Szatkowska to ensure the security of personal data, this Privacy Policy has been adopted.

This Privacy Policy sets forth the rules for the processing and protection of personal data provided by Users in connection with their use of the Online Store and other related websites, communications and services.

A User is any data subject who uses the Online Store and other related websites, communications and services. (hereinafter referred to as User).

The administrator of personal data collected in the Online Store is Agnieszka Romańczuk-Szatkowska, UL. Michała Wołodyjowekigeo 13/34/ 54-104 Wrocław, NIP 6151915025: (hereinafter referred to as Administrator).

To the extent necessary for the performance of the agreement concluded by the User with the Administrator, as well as to the extent necessary for the Administrator to take action at the request of the User and to the extent necessary for the fulfillment of the Administrator’s legal obligation – the processing of the User’s personal data takes place on the basis of a legal provision, i.e. Article 6(1)(b) and (c) of the RODO, without the need for the User’s consent to the processing of his/her personal data. In the remaining scope, the provision of personal data by the User is voluntary. However, to the extent that the User has consented to the processing of his/her personal data solely for marketing purposes, the User’s provision of his/her personal data is voluntary, but refusal to consent or withdrawal of consent will prevent the Administrator from informing the User about new offers and discounts.

USER CONSENT

Use of the Online Store by the User implies the User’s acceptance that the Administrator collects, uses and shares non-personal and personal data in accordance with this Privacy Policy. However, the User has control over the way his/her data is used and shared, as detailed in Section V of this Privacy Policy “User Rights”.

In the case of processing of personal data based on the User’s consent, the User has the right to withdraw the consent previously given at any time. The withdrawal of consent does not affect the lawfulness of processing that was performed on the basis of consent before its withdrawal. The Administrator shall inform the User about the possibility of withdrawing consent before the User gives his/her consent. In the event that there is a change to this Privacy Policy and the User continues to use the Online Store, this action shall be deemed to be the User’s consent to the current terms of the Privacy Policy.

PERSONAL DATA PROCESSED BY THE ADMINISTRATOR

Method of obtaining personal data Personal data obtained directly from the User The Administrator obtains personal data in two ways. The first way is to obtain personal data directly from the User, through: sending a message by the User, thanks to the contact form provided in the Online Store, creating a customer account in the Online Store by the User, placing an order for goods or services in the Online Store, contacting the User with the Administrator for technical assistance, filing a complaint or for any other purpose.

Personal data obtained from other sources The Administrator also obtains personal data from sources other than directly from the User, i.e.: by recording the User’s use of the Online Store through cookies and other technologies and receiving error reports or usage data from software running on the User’s device, from partners with whom the Administrator offers goods and services or conducts joint marketing activities.

Personal Data Processed by the Administrator The scope of personal data collected by the Administrator regarding Users may vary depending on the purpose of personal data processing. The Administrator collects, among others, the following personal and non-personal data: Login name, First and last name / company name / entrepreneur’s name or first and last names of entrepreneurs operating in the form of a civil partnership, Correspondence address, Telephone number, E-mail address, Tax ID, REGON, Computer IP, Payment data, if the User makes a purchase in the Online Store.

Information contained in cookies and similar technologies regarding the User’s interaction with the Administrator’s Online Store.

In addition, the Administrator collects data on the contents of the User’s files and messages when required to process an order placed, provide the User with customer account services, including collecting: the subject and content of an email message, text or other content of an instant message, audio and video recording of a video message, audio recording and transcription of a voice message received by the User or a text message dictated by the User.

The Administrator also collects information provided by the User, including reviews and ratings of goods and services and information provided for technical support. In addition, when contact is made, the Administrator collects the content of the message.

III. METHOD OF DATA PROCESSING – PURPOSES OF PERSONAL DATA PROCESSING BY

ADMINISTRATOR

The manner in which the Administrator processes personal data concerning the User depends on the extent of the User’s use of the Online Store. Orders, customer account (execution of the contract)

If the User decides to place an order for goods or services presented in the Online Store, the Administrator will process the User’s personal data to the extent necessary to conclude a sales contract or a contract for the provision of services and to ensure due performance of the contract concluded with the User.

If the User creates a customer account in the Online Store, the Administrator uses the User’s personal data for the proper performance of the contract for the provision of electronic services, including authentication and authorization of the User’s access to the customer account.

Communication (performance of the contract, legitimate purpose pursued by the Administrator) The Administrator uses the User’s personal data to communicate with the User in a personalized manner. This communication consists of sending emails, posting notifications on websites and other means within the framework of the Online Store operated and the customer account service provided, including text messages and push notifications.

The content communicated to the User relates to the goods and services offered, i.e. the availability of services and how to use them, the security of personal data, network updates, reminders, but also suggested offers by the Administrator.

Communication with the User also concerns the User’s service. Personal data is used to help the User, solve problems and respond to User complaints.

The Administrator also uses the User’s personal data to enable the User to comment on the Administrator’s activities, Online Store, services and goods.

Advertising (consent, legitimate purpose pursued by the Administrator)

The Administrator uses the User’s personal data for the purpose of offering tailored advertisements to the User, if the User has consented to such actions or if a business relationship between the Administrator and the User develops. These advertisements concern both the offers of

Administrator as well as those of entities cooperating with the Administrator.

Advertisements presented to the User are adjusted individually to each User (so-called “profiling”) by using: data provided directly by the User, data collected from the User’s use of the Online Store, information provided by third parties, data derived from advertising technologies such as cookies, beacons, pixels, ad tags and mobile identifiers.

The Administrator does not share the User’s personal data with third-party advertisers or advertising networks without the User’s consent. However, if the User clicks on an advertisement displayed to him, the advertiser will be informed.

Improvement of the Online Store (legitimate interest of the Administrator) The Administrator uses the User’s personal data in the field of analytical and statistical activities in order to continuously improve the Online Store, goods and services offered by the Administrator, provide better solutions, add new features and capabilities. Personal data concerning Users is also used by the Administrator in the field of market research, opinion polling and performing economic analysis in order to continuously improve the Online Store. Security (legitimate interest of the Administrator)

The Administrator uses User’s personal information to monitor, prevent, detect and combat fraud and abuse, to protect other Users from such abuse, and to ensure network and information security. In the event that there is a reasonable suspicion that a crime has been committed, the User’s personal data will be used to investigate the probable commission of a crime or other violation of this Privacy Policy by undesirable persons.

Investigation of claims (legitimate interest of the Administrator) In the event that the User decides to use the Online Store, in particular by creating a customer account, placing an order for goods or services through it, the Administrator may process the User’s personal data to the extent necessary for the investigation of potential claims on account of business activities, as well as the analysis of potential violations of the rules of use of the Online Store. Tax documentation (fulfillment of a statutory obligation) If the User places an order for goods or services through the Online Store, the Administrator will process the User’s personal data to the extent necessary to maintain tax documentation and settlements for orders processed.

SHARING OF PERSONAL DATA BY THE ADMINISTRATOR

User’s personal data is or may be shared with the following categories of recipients: entities providing certain services in the sales process, i.e. courier / postal service providers, payment institutions intermediating in making payments by Users for orders placed for goods or services; advertising or marketing service providers, in the case of realization of the purpose in the form of direct marketing of the Administrator’s own services; providers of legal and advisory services and supporting the Administrator in asserting due claims (in particular, law firms, debt collection companies); entities processing personal data on behalf of the Administrator, e.g. technical service providers operating the technical infrastructure needed to run the Online Store; entities authorized to obtain data under applicable law, e.g. courts or law enforcement agencies, when they make a request based on an appropriate legal basis.

USER RIGHTS

The User has the right to decide about his/her personal data by making choices regarding the disclosure of particular personal data, including the choice of privacy settings. However, in such a situation, the User must be aware that he/she will not be able to take full advantage of certain features of the Online Store or services offered by the Administrator. If the User wishes to exercise his/her rights as a personal data subject, he/she may contact the Administrator via e-mail sent to aga.droga.oddechu@gmail.com. Part of the User’s rights as a personal data subject may be exercised through the customer account in the Online Store. Right of access to data The User is entitled to obtain confirmation from the Administrator as to whether his/her personal data are being processed, and if this is the case, he/she is entitled to access information regarding the details of the processing of his/her data, including, in particular, information on what is the purpose of the processing and the categories of data processed.

The user also has the right to request a copy of the personal data being processed.

Right to rectification of data The user has the right to rectify those personal data that are untrue. He or she has the right to request the replacement, supplementation or deletion of errors, defects and misleading information in the entire dataset that concerns him or her. The subject of supplementation may not be personal data that are incorrect, i.e. the User may not demand that the existing data be replaced or supplemented with incorrect data. If the processed personal data is incomplete, the User may submit an additional statement to complete it. It is permissible to submit such a statement in any form, including by electronic means. Right to erasure of data (right to be forgotten).

The User has the right to request the deletion of his/her personal data if one of the following circumstances occurs:

1) User’s personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

2) The User has withdrawn the consent on which the processing is based and there is no other legal basis for the processing;

3) The User objects to the processing of personal data concerning him/her; the personal data were processed unlawfully;

4)Personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State to which the Administrator is subject;

5)the personal data was collected in connection with the offering of information society services. The right to be forgotten, you have the right to be forgotten only if you have exercised your right to erasure and only if the personal data concerning you has been made public by the Administrator.

Right to restrict processing:

1) You have the right to restrict the processing of your personal data in the following cases:

2) The User questions the correctness of the personal data – for a period of time that allows the Administrator to check the correctness of the data;

3) The processing is unlawful, and the User objects to the deletion of the personal data, requesting instead the restriction of its use;

4) The Administrator no longer needs the User’s personal data for the purposes of processing, but the User needs them to establish, assert or defend claims;

5) The User has objected to the processing – until it is determined whether the legitimate grounds on the part of the Administrator override the grounds of the User’s objection. In the case of restriction of processing, the Administrator may process personal data, with the exception of storage, only: with the User’s consent, or to establish, assert or defend claims, or to protect the rights of another natural or legal person, or for compelling reasons of public interest of the Union or a Member State. Right to data portability The User has the right to receive in a structured, commonly used format the personal data concerning him or her that he or she has provided to the Administrator and has the right to send this data to another controller. The User also has the right to request that his/her personal data be sent by the Administrator directly to another administrator, if technically possible. Right to object The User has the right to object at any time, on grounds related to his/her particular situation, to the processing of his/her personal data: in the public interest, in the exercise of public authority entrusted to the Administrator, to the processing for direct marketing purposes including profiling insofar as it is related to such direct marketing, for a legitimate purpose of the Administrator.

The objection procedure and all communications are free of charge, and it is also possible to file an objection electronically. Right to file a complaint The user has the right to file a complaint with the Data Protection Authority, in particular in the member state of his/her habitual residence, his/her place of work or the place where the alleged violation was committed.

COOKIES AND OTHER TECHNOLOGIES USED BY THE ADMINISTRATOR

The Administrator uses cookies and other similar technologies in order to provide optimal service of the User’s visit to the Online Store, to enable faster and easier access to information and to offer the Users more and more improved functionalities of the Online Store, as well as for marketing and remarketing purposes (including necessary analytical activities and compiling into marketing profiles based on the User’s activity on particular subpages of the Online Store). Cookies (“cookies”) are code fragments that are text files corresponding to HTTP requests directed to the Administrator’s server. The Online Store also uses other available technologies that allow information to be stored in the browser in appropriate data stores (Session Storage, Local Storage), and also places in code fragments of analytical tools provided by other providers that allow cookies to be stored in the domains of these services.

Stored information or accessing it does not cause configuration changes in the User’s device and the software installed on it. The information contained in cookies and similar technologies is considered personal data only in conjunction with other personal data available about the User. If the User does not agree to the storing and receiving of information in cookies or similar technologies, he/she can change the rules regarding cookies through the settings of his/her Internet browser or the use of the so-called opt-out option on the website of the provider of the given technological solution. Detailed information regarding the technologies used by the Administrator is available in the Cookie Policy.

VII. OTHER IMPORTANT INFORMATION

Protection of personal data security The Administrator implements various measures to ensure the security of the User’s personal data. Secure use of the services offered is ensured by the systems and procedures in place to protect against access and disclosure of data to unauthorized persons. In addition, the systems and procedures used by the Administrator are regularly monitored to detect possible threats. Personal data obtained by the Administrator is stored in computer systems to which access is strictly limited. Storage of personal data The storage period for Users’ personal data may vary due to the fact that different purposes for processing such data may be specified for the personal data of different Users. The Administrator shall store personal data for such period as is necessary to achieve the specified purposes, i.e.: in the case of analytical and statistical purposes – for the period necessary to achieve the purposes related to the effective functioning and development of the Online Store;

In the case of execution of orders, provision of services to the User – for the duration of the contract and the period of limitation of claims; for the period required by law for the purpose of keeping tax records and settlements for contracts executed; in the case of processing personal data for marketing purposes – for the period of the existence of a business relationship with the User, unless the User previously objects to processing for these purposes; In each of the above cases, after the expiration of the necessary processing period, the data may be processed only to secure the assertion of claims or defense against them, and after that time only in the case and to the extent required by law.

Users’ personal data are stored in the Administrator’s database, where technical and organizational measures have been applied to ensure the protection of the processed data in accordance with the requirements set forth in applicable laws. Only the Administrator has access to the database. Changes to the Privacy Policy In order to update the information contained in this Privacy Policy and its compliance with applicable laws, this Privacy Policy may be amended. With a change in the content of the document, the update date, posted at the beginning of this Privacy Policy, will be changed. On the other hand, the User will be notified of any significant change through a notice posted on the website of the Online Store or directly. In order to inquire about how to protect personal data, the Administrator recommends Users to regularly read this Privacy Policy.

Contact Information

In case of any doubts related to data protection issues or to obtain information regarding this Privacy Policy, the User may contact the

Administrator via e-mail aga.droga.oddechu@gmail.com and by mail to the following address : Michała Wołodyjowekiego 13/34, 54-104 Wrocław.