Privacy policy

1. Data Controller and Definitions

1. The controller of personal data of Customers / Users of the Online Shop, also referred to as the Seller, is: Futro i Szkło s.c., phone: 535977714, VAT: 8992785237, REGON: 363849978.
2. The data controller can be contacted:
   1. by post at: Ostrowskiego 7/516, 53-238 Wrocław;
   2. by email at: halo@owcasklep.pl.
3. User — a natural person visiting the Online Shop or using the services described in this Privacy and Cookies Policy.
4. Customer — a natural person with full legal capacity, a consumer, a legal person, or an organisational unit without legal personality but with legal capacity under applicable law, who concludes a distance sale agreement with the Seller.
5. Online Shop — the online service operated by the Seller, available at https://owcasklep.pl and https://owca.shop, through which the Customer / User can obtain information about products and their availability, and purchase products or order services.
6. Newsletter — commercial information sent electronically by the Seller to the Customer / User; subscription is voluntary and requires the Customer's / User's consent.
7. Account — a set of data stored in the Online Shop and the Seller's IT system relating to a given Customer / User and their orders and agreements, through which the Customer / User can place orders and conclude agreements.
8. GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

2. Purposes, Legal Bases and Duration of Data Processing

1. For the performance of a distance sale agreement, the Seller processes:
   1. information about the User's device to ensure correct functioning of services: IP address, cookie data or similar technologies, session data, browser data, device data, activity data on the site;
   2. geolocation data, where the User has given consent — used to provide more tailored product and service offers;
   3. personal data: name, address, email address, phone number, VAT number, bank account number, or other data required to complete the purchase.
2. This information does not in itself identify Users, but in combination with other information may constitute personal data and is therefore subject to full protection under the GDPR.
3. Data is processed under Article 6(1)(b) GDPR for the performance of the service agreement, and under Article 6(1)(a) GDPR where consent has been given for the use of cookies or geolocation. Data is processed until the Customer / User ceases to use the Online Shop.
4. The controller undertakes to implement all measures required under Article 32 GDPR — appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

3. Marketing Activities

1. The Seller may publish marketing content about its products or services on the Online Shop. This is done under Article 6(1)(f) GDPR, based on the Seller's legitimate interest in publishing content related to its services and promotional activities, without infringing on the rights and freedoms of Customers / Users.

4. Recipients of User Data

1. The Seller discloses personal data only to processors acting under data processing agreements, for the purpose of providing services such as hosting, IT support, and marketing services.

5. Transfer of Personal Data to Third Countries

1. Personal data is not processed in third countries.

6. Rights of Data Subjects

1. Every data subject has the right to:
   1. Access (Article 15 GDPR) — to obtain confirmation of whether their personal data is being processed, and if so, to access that data and information about purposes, categories, recipients, retention periods, and available rights;
   2. A copy of data (Article 15(3) GDPR) — the first copy is free of charge; subsequent copies may be subject to a reasonable administrative fee;
   3. Rectification (Article 16 GDPR) — to request correction of inaccurate or incomplete data;
   4. Erasure (Article 17 GDPR) — to request deletion where there is no longer a legal basis for processing;
   5. Restriction of processing (Article 18 GDPR) — in circumstances including where the accuracy of data is contested, processing is unlawful, or an objection has been raised;
   6. Data portability (Article 20 GDPR) — to receive data in a structured, commonly used, machine-readable format and to transmit it to another controller, where processing is based on consent or contract and carried out by automated means;
   7. Objection (Article 21 GDPR) — to object to processing based on legitimate interests, including profiling, on grounds relating to a particular situation;
   8. Withdrawal of consent — at any time and without giving reasons; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
2. To exercise any of the above rights, please contact the data controller using the contact details provided in section 1, point 2.

7. Supervisory Authority

1. You have the right to lodge a complaint with the supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, Warsaw:
2. by post: ul. Stawki 2, 00-193 Warsaw;
3. via the electronic mailbox at: https://www.uodo.gov.pl/pl/p/kontakt;
4. Helpline: 606-950-000.

8. Data Protection Officer

1. You may also contact the Seller's data protection officer directly by email or in writing to the address given in section 1, point 2.

9. Changes to the Privacy Policy

1. This Privacy and Cookies Policy may be updated as necessary to ensure that Customers / Users receive accurate and up-to-date information.

10. Cookies

1. The Online Shop collects information about Customers and Users and their behaviour in the following ways:
   1. through information voluntarily submitted in forms;
   2. through cookies stored on end devices;
   3. through server logs collected by the hosting provider (required for correct functioning of the service).
2. Cookies are data files, in particular text files, stored on the Customer's / User's device and intended for use with the Online Shop. Cookies typically contain the name of the website they originate from, the duration of storage, and a unique identifier.
3. The Online Shop uses cookies only with the prior consent of the Customer / User. Consent is given by clicking "Accept" when the cookie notice is displayed, or by closing that notice.
4. If you do not wish to accept cookies, you may select "Decline" in the cookie notice, or change your browser settings (this may affect the correct functioning of the Online Shop).
5. To manage cookie settings, select your browser or system from the following list and follow the instructions: Internet Explorer, Chrome, Safari, Firefox, Opera, Android, Safari (iOS), Windows Phone.
6. The legal basis for processing personal data from cookies is the Seller's legitimate interests in providing high-quality and secure services.
7. The Online Shop uses two main types of cookies: session cookies (temporary, deleted when the browser is closed) and persistent cookies (stored for a specified period or until deleted by the user).
8. Cookies are used for the following purposes:
   1. generating statistics to understand how users interact with the site, enabling improvements to its structure and content;
   2. maintaining the Customer's / User's session after login, so they do not need to re-enter their credentials on each page;
   3. building a Customer / User profile to display product recommendations and targeted advertising, in particular via Google's advertising network.
9. Browser software typically allows cookies to be stored by default. You can change these settings at any time, including blocking or deleting cookies.
10. Restricting the use of cookies may affect some features of the Online Shop.
11. Cookies may also be placed by advertisers and partners who cooperate with the Online Shop.
12. Cookies may be used by the Google network to display ads tailored to your use of the Online Shop. For more information: https://policies.google.com/technologies/partner-sites.
13. We recommend that you read the privacy policies of these companies to understand how cookies are used in their analytics services: Google Analytics Privacy Policy.
14. You can view and edit information derived from Google advertising cookies using the tool at: https://www.google.com/ads/preferences/.
15. The Online Shop may include third-party plugins that transmit Customer / User data to providers such as: Google Maps, Meta (Facebook), Google Ads, PayPal, Google reCAPTCHA, and others.
16. For the performance of a distance sale agreement, the Seller may share Customer / User data with courier companies. Current delivery options are listed in the footer of the Online Shop.
17. For the performance of a distance sale agreement, the Seller may share Customer / User data with online payment systems. Current payment options are listed in the footer of the Online Shop.
18. Further information on Google's privacy and terms can be found at Google Privacy & Terms.

11. Newsletter

1. You may consent to receive commercial communications electronically by selecting the relevant option in the registration form or at a later stage in your Account settings. If you give this consent, you will receive the Owca newsletter and other commercial communications from the Seller at the email address you provided.
2. You may unsubscribe from the newsletter at any time by unchecking the relevant box in your Account, clicking the unsubscribe link in any newsletter, or by contacting customer service.

12. Account

1. Customers / Users may not post or transmit unlawful content to the Online Shop.
2. Access to your Account is granted upon registration.
3. During registration, you provide your account type, name, company name, VAT number, billing details, delivery address, email address, and password. You confirm that the information provided is accurate. Registration requires you to read and accept the Terms and Conditions.
4. Upon granting access to the Account, an agreement for the provision of electronic services relating to the Account is concluded for an indefinite period. Consumers may withdraw from this agreement under the terms set out in the Terms and Conditions.
5. Registering an Account on one version of the Online Shop also grants access to other versions of the Online Shop.
6. You may terminate the Account service agreement at any time with immediate effect by informing the Seller by email or in writing to the address given in section 1, point 2.
7. The Seller may terminate the Account service agreement in the event of: discontinuation or transfer of the Online Shop service, breach of law or the Terms and Conditions, or inactivity for a period of 6 months. Termination is subject to 7 days' notice. The Seller may require authorisation for re-registration.