Privacy policy

1. The controller of the Customer's personal data is PAPAVER Łukasz Marcinkowski with its registered office at Wysoczka 2, 64-320 Buk, NIP: 7772814433, REGON 360471835.

2. Providing personal data by the Customer is voluntary. The basis for the processing of personal data provided for the purpose of setting up an Account and delivering electronic marketing information in the form of a Newsletter service is the consent of the Customer.

3. The processing of personal data is necessary to conclude and perform the Sales Agreement.

4. Customer data will be processed for the purpose of:

a) conclusion and performance of the Sales Agreements pursuant to Article 6(1)(b) of the GDPR for the duration of the Agreement and until the expiry of the time limits for the assertion of claims;

b) processing of complaints pursuant to Article 6(1)(c) of the GDPR for 1 year after the expiry of the warranty or settlement of the complaint;

c) asserting claims related to the concluded Sales Agreement pursuant to Article 6(1)(f) of the GDPR, where the legitimate purpose is to recover amounts due, until final conclusion of legal proceedings including enforcement proceedings;

d) archiving billing documents pursuant to Article 6(1)(c) of the GDPR until the expiry of the statute of limitations for the tax liability;

e) providing the Newsletter service referred to in §11 of the Regulations.

2. Customer data may be transferred to the following recipients:

a) postal or courier companies;

b) entities enabling the Florist to perform remote payment operations;

c) banks where settlement is required;

d) state authorities or other entities authorised by law;

e) entities supporting the Florist in its activities and acting on behalf of the Florist, in particular providers of external systems supporting the Florist’s operations.

6. Customers have the right to access their data and to rectify, erase or restrict processing of the data, the right to data portability, the right to object and the right to withdraw their consent at any time without affecting the lawfulness of data processing, which was carried out on the basis of such a consent before its withdrawal (provided that the processing is carried out based on their consent) and the right to lodge a complaint to the supervisory authority, i.e. the President of the Office for Personal Data Protection. Providing the data is necessary to conclude contracts, effect settlements related to the conducted activity, respond to requests and evaluate complaints and claims. In all other circumstances, providing data is voluntary.

7. Customers have the right to withdraw, at any time, their consent to the processing of personal data which are processed on the basis of previously expressed consent. Withdrawal of consent will not affect the lawfulness of processing that was carried out on the basis of the consent given before its withdrawal.