Privacy policy
Privacy Policy 2.0 applies from March 21, 2024
§ 1. GENERAL INFORMATION
1. The Privacy Policy of the Online Store does not constitute a source of obligations for the Visitor (including Guest) and the Online Store Customer. It is of an informative nature and is not a contract or regulation.
2. All expressions and words written with a capital letter (e.g., Online Store, Customer, etc.) should be understood according to the content of the Online Store Regulations.
3. In the event of any discrepancies between this Privacy Policy and consents to the processing of personal data granted by an individual, the legal basis for determining the scope of the Administrator's actions are voluntarily given consents or legal provisions applicable in the given factual situation.
§ 2. PERSONAL DATA ADMINISTRATOR
1. The administrator of your personal data is: AMH Sp. z o.o. with its registered office in Warsaw at ul. Zajęcza 15, 00-351 Warsaw, registered in the District Court for the capital city of Warsaw in Warsaw, XII Economic Department of the National Court Register under the KRS number: 0001032030, NIP: 5252953630, REGON: 52511993800000, BDO:000626043, share capital: PLN 5000 (hereinafter: Administrator).
2. For all matters related to the protection of personal data, we encourage you to contact us at the above address or via email: kontakt@i-cc.pl
3. You can also send a request to the indicated address for information about what personal data concerning you we have and for what purposes we process it.
4. The Administrator informs that correspondence is stored for statistical purposes and to improve the RODO assistance system, as well as in the scope of complaint settlements and decisions based on submitted interventions in the indicated Customer Account. Addresses and data collected in this way will not be used for any communication other than the execution of the request, in particular, they will not be used for marketing purposes and will not be transferred to third parties.
5. If you have given additional consent to the use of cookies by us, data administrators obtained based on your Internet activity may also be our trusted partners.
§ 3. DATA ACQUISITION AND PURPOSE OF PROCESSING
1. We process personal data in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, (hereinafter: GDPR) and other currently applicable legal provisions concerning the processing of specific data.
2. In accordance with the content of the above legal acts, personal data is considered to be information about an identified or identifiable natural person. An identifiable natural person is one who can be directly or indirectly identified, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
3. We assure you that the data obtained from you is confidential, secure, and processed only when necessary. We process data in accordance with the law, in a fair and transparent manner for the person to whom the data relates. We process only such data and only of such content that is necessary due to a legally justified purpose, i.e., the reason for processing. Personal data is collected with due diligence and adequately protected against unauthorized access. We apply appropriate security measures and the state of technical knowledge to protect personal data against accidental loss and unauthorized access, use, alteration, or disclosure. Personal data is stored in a way that allows the identification of the person to whom it relates for no longer than is necessary for the purposes for which it is processed.
§ 4. ADMINISTRATOR OBTAINS INFORMATION ABOUT PERSONAL DATA IN THE FOLLOWING WAY:
- by making a purchase in the Store (online store) by the Customer;
- by registering a Customer Account;
- by voluntary subscription to the newsletter service;
- by voluntarily provided information in an email message, in a contact form, or chat;
- by submitting a complaint, application, inquiry, or other letter;
- by voluntarily provided information in an email message sent in connection with the desire to establish cooperation;
- by posting a product review;
- through cookies, pixels, or similar internet technologies.
5. We inform that the purpose and scope of data processed by the Administrator result from the consent of the Visitor to the Website or the Customer or legal provisions and, in selected cases, are specified as a result of actions taken by these persons in the Online Store or within other communication channels.
6. Providing personal data by the Visitor or Customer of the Online Store is voluntary but necessary in order to use certain functionalities of the Online Store (e.g., placing an Order by the Customer and its settlement, registering a Customer Account, or using contact forms).
7. The scope of required data for concluding the relevant agreement is indicated in advance in the Online Store (we mark the data whose provision is necessary to conclude the agreement/use a specific functionality), within other communication channels with the Visitor or Customer, or in the Regulations. The consequence of not providing personal data may be the inability to effectively use the functionalities of the Website, e.g., the inability to place an order.
8. Your personal data is obtained by the Administrator for the following purpose:
| Purpose of processing | Legal basis | Legitimate purpose, if any |
| Conducting statistics. | Art. 6 (1) lit. f GDPR. | Having information about the statistics of our activities, which allows us to improve our business activities. |
| Conducting own marketing activities of products and services without using electronic communication means. | Art. 6 (1) lit. f GDPR. | Conducting marketing activities promoting conducted business activities. |
| Conducting own marketing activities of products and services using electronic communication means, including profiling. | Art. 6 (1) lit. f GDPR, with these activities being based on other applicable regulations, in particular the Telecommunications Law and the Act on Provision of Services by Electronic Means, conducted only on the basis of obtained consents (Art. 6 (1) lit. a GDPR). | Conducting marketing activities promoting conducted activities using email addresses. Presenting advertisements, adjusting discounts, and promotions. |
| Posting opinions in the Online Store. | Art. 6 (1) lit. a GDPR. | Product satisfaction research. |
| Handling inquiries submitted using the contact form, chat, email messages, complaints, other applications. | Art. 6 (1) lit. a GDPR; Art. 6 (1) lit. f GDPR; concerning submitted complaints or notifications, the basis is Art. 6 (1) lit. c GDPR. | Providing responses to inquiries and requests submitted using the contact form or in another form, including storing critical applications and provided responses to maintain accountability. Handling applications, responding to consumer complaints. Pursuing claims, including from third parties, defending against them. |
| Customer Account service. | Art. 6 (1) lit. b GDPR. | Concluding and performing the Service Provision Agreement (Account) or taking action at the request of a future Customer before its conclusion. |
| Concluding and performing Sales Agreement. | Art. 6 (1) lit. b GDPR. | Concluding and performing the Sales Agreement or taking action at the request of a future Customer before its conclusion. |
| Archiving sales documents. | Art. 6 (1) lit. c GDPR. | Fulfilling legal obligations resulting from regulations, e.g., tax and accounting, especially in the case of paid agreements. |
| Lorem Ipsum | Lorem Ipsum | Lorem Ipsum |
9. In the case of an adult Customer or an adult Visitor to the Website, with their additional consent, Personal Data may also be processed for the purpose of presenting, creating, granting, and implementing advertisements, offers, or promotions (discounts) concerning products or services of the Administrator and its partners, highly tailored to their preferences (profiling), as a result of automated decision-making, which may have legal effects on them or similarly significantly affect them, e.g., by offering a short-term discount on a specific product exclusively to such a person, which they recently viewed in our Online Store (option not available to persons who are not adults or are adults but have not consented to such actions)
10. Newsletter.
If you wish to subscribe to our newsletter, you must provide us with your email address through the newsletter registration form. Providing data is voluntary but necessary to use the newsletter service. Newsletter subscription is also possible when placing an order. The data provided to us when subscribing to the newsletter is used to send you a newsletter informing you about the company's activities, current collection, promotions, and discounts. The legal basis for processing in this situation is your voluntary consent given when subscribing to the newsletter. Your data will be processed for the purpose of sending the newsletter periodically, and the basis for processing is art. 6(1)(a) GDPR, i.e., your consent resulting from the desire to receive the service. The data will be processed for the duration of the newsletter unless you unsubscribe, which will result in the permanent deletion of your data from the database. Additionally, you can correct your data stored in the newsletter database at any time, as well as request their deletion, opting out of receiving the newsletter. You also have the right to data portability, as provided for in art. 20 GDPR. The newsletter database is appropriately secured by the Administrator. The newsletter as a database is operated by an external entity. The emails sent contain links to hidden images (so-called tracking pixels). In addition to its primary function, which is counting email opens, it optionally serves to identify the Customer and conduct marketing activities.
11. Email contact, contact form, chat.
By contacting us via email and contact form, you provide us with your email address as the sender's address. Additionally, you may also include other personal data in the message content. Providing data is voluntary but necessary to contact us. Your data is processed in this case for the purpose of contacting you, and the legal basis for processing is art. 6(1)(a) GDPR, i.e., your consent resulting from the desire to contact us. The legal basis for processing after the contact has ended is a legitimate interest in archiving correspondence for internal purposes (art. 6(1)(c) GDPR). The content of the correspondence may be archived, and we cannot clearly specify when it will be deleted, but it will be no later than 5 years. You have the right to demand the presentation of the correspondence history you conducted with us (if it was archived), as well as demand its deletion, unless its archiving is justified by our overriding interests.
12. Opinions.
To add your opinion about a product entry, you must fill out the form sent to the email address provided when placing the Order. Your data is processed in this case to enable the publication of Opinions, and the legal basis for processing is art. 6(1)(a) GDPR, i.e., your consent resulting from the desire to post your entry on our website. The data will be processed for the duration of the opinion on the website, unless you request the deletion of the opinion, which will result in the deletion of your data associated with the opinion from the database. You can correct your data in the opinion at any time, as well as request their deletion. You also have the right to data portability, as provided for in art. 20 GDPR.
13. Customer Account.
By creating a Customer Account on our Website, you provide us with your email address. It is voluntary but necessary to effectively register the Customer Account. Then, in the Customer Panel, you can also provide your name, surname, displayed username, and address details. Your data is processed in this case for the purpose of managing the Customer Account, and the legal basis for processing is art. 6(1)(a) GDPR, i.e., your consent resulting from the desire to create it. The data will be processed for the duration of holding the Customer Account, unless you request its deletion, which will result in the deletion of your data from the database. You can correct your data associated with the Customer Account at any time, as well as request their deletion. You also have the right to data portability, as provided for in art. 20 GDPR.
§ 4 CATEGORIES OF PERSONAL DATA
1. The personal data administrator may process the following categories of personal data:
- personal data provided in the registration form for the Customer Account, when placing Orders in the Online Store, in particular: email address, name and surname, telephone number;
- personal data supplemented by the user when using the Customer Account, in particular: name and surname; email address; address [street, house number, apartment number, postal code, city, country, and in the case of non-consumer Customers additionally the company name and tax identification number [NIP];
- personal data necessary to place an order, in particular: name and surname; email address; contact phone number; address [street, house number, apartment number, postal code, city, country], and in the case of non-consumer Customers additionally the company name and tax identification number [NIP];
- personal data provided to use the newsletter, provided when using the contact form, chat, posting opinions, or sent via email; or provided when filing complaints, claims, or requests, in particular: name and surname; email address; contact phone number; address [street, house number, apartment number, postal code, city, country], bank account number;
- personal data provided to participate in contests/promotional actions: name and surname; email address; contact phone number; address [street, house number, apartment number, postal code, city, country];
- other data, in particular obtained based on the Customer's activity on the Internet, including obtained through the Online Store or other customer communication channels, using cookies and similar technologies.
§ 5 RECIPIENTS OF PERSONAL DATA
1. Your personal data may be processed by our partners and subcontractors, i.e., entities whose services we use in data processing and providing services on your behalf. To our knowledge, all entities to which we entrust the processing of personal data guarantee the use of appropriate measures for the protection and security of personal data required by law.
2. The Administrator may transfer your personal data to:
- state authorities or other entities authorized under the law to perform our obligations;
- In the processing of personal data to a limited extent, partners of the Administrator may be involved, especially those who technically assist in efficiently operating the Online Store (e.g., assist us in sending email messages, and b) in advertising activities – also in marketing campaigns), hosting service providers or ICT service providers, carriers or intermediaries carrying out Order shipments, entities handling electronic payments or payments by payment card in the Online Store, companies servicing software, supporting the Administrator in marketing campaigns, as well as legal and accounting service providers, and external accounting;
- we may also provide fully anonymized data (those that cannot identify you) to the entities we cooperate with.
3. In the context of marketing activities, the Administrator uses the services of third parties who use cookies, pixels, or marketing functions similar to cookies in the Online Store. The catalog of these entities has been specifically indicated in § 8 of this Policy.
§ 6 ARCHIVING OF PERSONAL DATA
1. The Administrator will only store your personal data for as long as is necessary for the purposes set out in this Privacy Policy and/or to comply with legal and regulatory requirements. After this period, the Administrator will safely delete your personal data.
2. We store data for the periods indicated below:
| Data related to the sales process. | 8 years |
|---|---|
| Data for marketing purposes. | In the case of processing data based on consent – until its withdrawal. In the case of processing data based on a legitimate interest – until an objection is raised. |
| Data provided using the contact form, email. | For a period of 3 years for accountability purposes. |
| Data contained in opinions. | In the case of processing data based on consent – until its withdrawal. In the case of processing data based on a legitimate interest – until an objection is raised. |
| Personal data related to cookies and similar functions. | Until the deletion of these files using the website/browser/device settings (however, deleting files is not always the same as deleting Personal Data obtained through these files – in this case, personal data will be deleted until an objection is raised). |
| Data provided during complaint proceedings and other procedures related to Customer claims. | 6 years. |
| Other category of data (except for data from cookies, more in our Cookies Policy). | 5 years. |
3. In each case, personal data will also be stored when legal regulations (e.g., accounting or tax) require the Administrator to process them; personal data will be stored longer in case the Client has any claims against the Administrator, for the purpose of pursuing claims by the Administrator, or for the purpose of pursuing or defending against claims by third parties, for the period of their limitation determined by law, in particular the Civil Code.
4. Depending on the scope of personal data and the purposes of their processing, they may be stored for different periods. In each case, the longer term of storing personal data shall prevail.
§ 7 RIGHTS, ACCESS, AND UPDATING OF PERSONAL DATA, COMPLAINTS
According to Art. 15 of the GDPR, you have the right to obtain information from the Data Controller whether your personal data is being processed.
If the Administrator processes your personal data, then you have the right to:
- access your personal data;
- obtain information about the purposes of processing, categories of processed personal data, recipients or categories of recipients of this data, planned period of storing your data or criteria for determining this period, your rights under the GDPR, the right to lodge a complaint with the supervisory authority, the source of this data, automated decision-making, including profiling, and security measures applied in connection with the transfer of this data outside the European Union;
- obtain a copy of your personal data.
In addition, you may request the correction of personal data (Art. 16 of the GDPR), deletion of personal data (Art. 17 of the GDPR), object to the processing of personal data (Art. 21 of the GDPR), and, if technically feasible, request the transfer of provided personal data to another organization (Art. 20 of the GDPR).
With regard to the right to be forgotten, the Administrator will update or delete your data unless there is a legal obligation to keep them for the purposes of conducting business or maintaining compliance with the law. In some cases, you have the right to request a restriction on the processing of personal data (Art. 18 of the GDPR). You can also contact the Administrator if you have any objections to the way personal data is collected, stored, or used.
The Administrator endeavors to promptly consider all requests regarding the above operations on your personal data, but no later than 30 days from the receipt of the request. Due to the complex nature of the request, the Administrator may consider your requests within a period exceeding 30 days, of which the User will be informed in advance.
The Administrator aims to ultimately resolve complaints, but if you remain dissatisfied with the response received, you may lodge a complaint with the supervisory authority responsible for the protection of personal data, the local data protection authority. In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office.
§ 8. PROCESSING OF PERSONAL DATA IN AN AUTOMATED MANNER, COOKIE POLICY
1. Our Website, like almost all other websites, uses cookies. The cookie policy applies to both Customers of the Online Store and Visitors to the Online Store, i.e., users who browse the Store's content but do not make purchases.
2. The cookie policy is a document that is an integral part of this Privacy Policy. The content of the Cookie Policy is available here.
3. The Website also uses functionalities similar to cookies. Therefore, individual provisions of the cookie policy should also be appropriately applied to these technologies.
4. Selected cookies process your personal data. Processing of personal data from cookies or similar technologies on our Website is carried out for the purpose of ensuring the functioning of the Website, adapting the Website to the preferences of Visitors and Customers, or analytical purposes. Processing is based on our legitimate interest. The legal basis for processing personal data for advertising purposes will be your additional consent, expressed by making a choice and checking the checkbox during the process of giving consent to cookies.
5. When a Visitor uses the Online Store, cookies enabling the identification of their browser or device are used - cookies collect various information, which generally does not constitute personal data. However, some information, depending on its content and use, may be associated with a specific person - assigning certain behaviors to a specific Visitor or Customer, e.g., by linking them to data provided during registration of an Account in the Online Store or a specific email address - and thereby be considered as personal data.
6. Regarding information collected by cookies that may be associated with a specific person, the provisions of the Online Store's Privacy Policy relating to personal data apply, in particular those concerning the rights of the data subject.
7. The Website uses profiling. Thanks to cookies used in the Online Store, the Administrator can familiarize themselves with the preferences of Visitors/Customers - e.g., by analyzing how often they visit the Online Store and whether and what products they buy. Analysis of online behavior helps better understand the habits and expectations of Customers and Visitors and adapt to their needs and interests. Thanks to this technology, it is possible to present Visitors with ads tailored to their needs and interests and to prepare better promotions and surprises for adult Visitors who have agreed to this.
§ 9. CHANGES TO THE PRIVACY POLICY
1. These Privacy Policy 2.0 rules are effective as of 11.03.2024.
2. The Administrator declares that they have the right to make changes to this document for valid reasons, including:
- changes in applicable regulations, in particular regarding the GDPR, telecommunications law, services provided electronically, or regulations governing consumer rights, affecting the rights and obligations of the Administrator or the rights and obligations of the data subject;
- development of functionalities or electronic services due to the progress of internet technology, including the implementation of new IT, technological, or technical solutions on the Website, affecting the scope of this Privacy Policy.
3. The Administrator undertakes to inform Users about any changes with appropriate advance notice, allowing them to familiarize themselves with the content of the amended document, e.g., by posting the unified text of the Privacy Policy on the main page of the Website.
4. In the case of users using the newsletter function, if the Administrator makes significant changes to the content of the Privacy Policy, they will inform Users by email. In the event of any objections to the change in the Policy, the User has the right to stop using the newsletter by sending a request to unsubscribe from the newsletter or by requesting the deletion of their personal data.
Previous Privacy Policy:
Privacy Policy 1.0 effective until 20.03.2024.
