Privacy Policy

As the owner of the Online Store and the Data Controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation — hereinafter GDPR), I hereby present the privacy policy applicable in the Online Store.

At the same time, pursuant to Art. 13 of the GDPR, I fulfil the information obligation.

The Controller of personal data of Customers using the Online Store under the terms set out in this Policy and the Terms of the Online Store is Aleksandra Kasprowiak operating under the business name TRIPLÉS OFFICIAL Aleksandra Kasprowiak, ul. Przasnyska 9/121, 01-756 Warsaw. NIP: 5253001452, REGON: 528478431, registered in the Central Register of Economic Activity, e-mail: contact@triples.pl (hereinafter also referred to as the "Controller").

As the Controller of personal data, the Seller ensures the security of the data provided, in particular against access by unauthorised persons, in accordance with the GDPR.

The Controller ensures that all Customers may exercise the rights arising from the GDPR, in particular the right to access their own data, the right to request data updates and deletion, the right to withdraw consent to data processing, and the right to object.

Data provided by Customers while using the Online Store may be used by the Controller for the following purposes: (1) fulfilment of Orders and Sales Agreements, including transfer to delivery providers and payment processors, (2) provision of Electronic Services, (3) sales and customer records, (4) contacts related to current and future Orders, including commercial offers and Newsletters, (5) statistical analysis of the Store's website, (6) marketing campaigns via e-mail, SMS, social media, (7) tax purposes.

The Controller processes personal data such as: first and last name / company name, address, e-mail address, phone number, NIP, in accordance with the Act of 18 July 2002 on the provision of electronic services and the GDPR.

Providing personal data when creating an Account or placing an Order is voluntary. However, concluding and performing a Sales Agreement is not possible without providing personal data.

To use the Online Store, the following is required: (1) creating an Account or using the Order Form, (2) placing an Order, (3) consenting to data processing by the Controller, and (4) accepting the Terms of the Online Store.

Personal data may be transferred to: (1) delivery providers, (2) payment processors, (3) mailing, newsletter and marketing service providers, (4) government authorities (including tax offices) and competent authorities (e.g. police) in fulfilment of legal obligations.

Personal data will be stored for the period necessary to fulfil all obligations imposed by law, in particular for settling Sales Agreements.

A person who has consented to the processing of their personal data has the right to withdraw that consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

The Controller may process the following data characterising the Customer's use of Electronic Services (operational data): (1) identifiers of the Customer, (2) identifiers of the telecommunications network termination or IT system used, (3) information about the start, end and scope of each use of Electronic Services, (4) information about the Customer's use of Electronic Services.

In connection with the processing of personal data, the Customer has the following rights: (1) the right of access, (2) rectification, (3) erasure, (4) restriction of processing, (5) data portability, (6) the right to object (where processing is based on legitimate interests), (7) the right to withdraw consent at any time — under the terms specified in the GDPR.

The Customer may also consent to receiving Newsletters by e-mail. Consent may be withdrawn at any time by unchecking the relevant option in the Account or by sending an e-mail to contact@triples.pl.

Customers may review, correct and change their data after logging in to their Account or by e-mailing contact@triples.pl.

The Controller will not share Customer data in any way other than as required by the purpose of the Online Store and the scope of consent given, without a legal basis requiring such action.

Exercising the right to delete one's data is equivalent to deregistration, Account deletion and termination of the Electronic Services agreement.

Upon withdrawal of consent, the Controller will permanently and irreversibly delete the Customer's data. However, the Controller reserves the right to retain data such as login time and IP address after Account deletion for the needs of the Police and prosecutor's office, and data necessary for settling Orders or Sales Agreements.

Any person whose data is processed may file a complaint with the supervisory authority: the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw, e-mail: kancelaria@giodo.gov.pl).

System log information may contain other data. The Controller uses it solely for technical purposes and for collecting general statistical information. Such data may be made available to authorised entities under applicable law.

The Controller may use cookies — text files stored on the Customer's computer, identifying them in a manner necessary to enable certain operations. Cookies are used, among other things, to remember data necessary for Customer login. Cookies require browser acceptance and must not be deleted from the disk.

In order to minimise the risks associated with unauthorised access to personal data collections, I make efforts to ensure an appropriate level of privacy protection and data security. The tools I use have been selected to ensure proper protection of personal data processing in accordance with legal requirements.

The Controller declares that the Customer's personal data will not be used for marketing purposes without the Customer's express consent. In particular, no bulletins, newsletters or other commercial information will be sent without prior consent.

Customer personal data may be used by the Controller for marketing purposes, in particular for sending newsletters by electronic means, only after the Customer has consented to such processing.

All advertising content related to the Seller's activities may be sent to the Customer only with their consent, in accordance with Art. 10 of the Act of 18 July 2002 on the provision of electronic services.

For personal data processed by the Controller for purposes other than those necessary for the provision of services, the Customer may request that the Controller cease processing their personal data. Such a request is fulfilled by the Controller immediately.

The Customer may withdraw consent to receive commercial information by sending an e-mail to: contact@triples.pl.

Termination of the agreement or withdrawal of consent for data processing by the Customer is voluntary and may be done at any time by sending an e-mail to: contact@triples.pl.

Termination of the Electronic Services agreement or withdrawal of consent for data processing results in Account deletion.

All questions and concerns regarding the Terms of the Online Store, the Privacy Policy and the use of the Online Store should be directed to: contact@triples.pl.