PRIVACY POLICY
PRIVACY POLICY
1. Data Controller and Definitions
The controller of personal data of Customers / Users of the Online Store, hereinafter also referred to as the Seller, is: Monument, phone: +48 881 718 480, NIP: 949-134-47-58, REGON: 152056920.
The Data Controller can be contacted:
at the correspondence address: Aleja Najświętszej Maryi Panny 31, 42-200 Częstochowa, Poland;
at the e-mail address: info@skatecapitol.com.
User – a natural person visiting the website(s) of the Online Store or using services or functionalities described in this Privacy and Cookies Policy.
Customer – a natural person with full legal capacity, a natural person acting as a Consumer, a legal entity, or an organizational unit without legal personality to which the law grants legal capacity, entering into a distance sales agreement with the Seller.
Online Store – an online service operated by the Seller at: https://skatecapitol.com through which the Customer/User may obtain information about Goods and their availability and purchase Goods or order services.
Newsletter – information, including commercial information within the meaning of the Act of 18 July 2002 on the provision of electronic services, sent electronically by the Seller to the Customer/User; receiving it is voluntary and requires consent.
Account – a set of data stored in the Online Store and in the Seller’s IT system relating to a given Customer/User and their orders and agreements, through which the Customer/User may place orders and conclude agreements.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
2. Purposes, Legal Basis and Duration of Data Processing
For the purpose of performing a distance sales agreement, the Seller processes:
information regarding the User’s device in order to ensure proper functioning of services: the IP address of the computer, information contained in cookies or other similar technologies, session data, internet browser data, device data, data regarding activity on the Website, including individual subpages;
geolocation information, if the User has consented to the service provider’s access to geolocation. Geolocation information is used to provide more tailored product and service offers;
Users’ personal data: first name, last name, registered address, correspondence address, e-mail address, phone number, tax identification number (NIP), bank account number or other personal data whose provision is necessary to complete a purchase and required by the Controller during the purchase process.
This information does not contain data directly identifying Users; however, when combined with other information it may constitute personal data and is therefore covered by full protection under GDPR.
This data is processed in accordance with Article 6(1)(b) GDPR for the purpose of performing a service, i.e., an agreement for the provision of electronic services in accordance with the Terms & Conditions, and in accordance with Article 6(1)(a) GDPR in connection with consent to the use of certain cookies or similar technologies expressed through browser settings or consent to geolocation. Data is processed until the Customer/User ceases using the Online Store.
The Controller undertakes to implement all measures required under Article 32 GDPR, taking into account the state of technical knowledge, implementation costs, nature, scope and purposes of processing, and the risk of violation of rights or freedoms of natural persons of varying likelihood and severity. Appropriate technical and organizational measures are implemented to ensure a level of security appropriate to the risk.
3. Marketing Activities of the Controller
On the Online Store website, the Controller may place marketing information about its products or services. Displaying such content is carried out in accordance with Article 6(1)(f) GDPR, i.e., the legitimate interest of the Controller consisting in publishing content related to services provided and promotional campaigns in which the Controller participates.
This activity does not violate the rights and freedoms of Customers/Users. Customers/Users expect to receive such content or visit the Online Store specifically for that purpose.
4. Recipients of User Data
The Controller discloses personal data only to entities processing data under personal data processing agreements for the purpose of providing services to the Controller, such as hosting, IT services, marketing and PR services.
5. Transfer of Personal Data to Third Countries
Personal data will not be processed in third countries.
6. Rights of Data Subjects
Each person whose data is processed has the right to:
Access (Art. 15 GDPR) – obtain from the Data Controller confirmation whether their personal data is being processed. If data concerning the person is processed, they are entitled to access it and obtain the following information: the purposes of processing, categories of personal data, recipients or categories of recipients to whom the data has been or will be disclosed, the period of data storage or criteria for determining it, the right to request correction, deletion, or restriction of personal data, and the right to object to such processing;
Receive a copy of the data (Art. 15(3) GDPR) – obtain a copy of the data subject to processing; the first copy is free, and the Data Controller may charge a reasonable fee for additional copies reflecting administrative costs;
Rectification (Art. 16 GDPR) – request correction of personal data that is inaccurate or completion of incomplete data;
Erasure (Art. 17 GDPR) – request deletion of personal data if the Data Controller no longer has a legal basis to process it or if the data is no longer necessary for processing purposes;
Restriction of processing (Art. 18 GDPR) – request restriction of personal data processing where:
- the data subject contests the accuracy of the personal data — for the period enabling the Data Controller to verify the accuracy of the data,
- processing is unlawful and the data subject opposes deletion, requesting restriction of its use,
- the Data Controller no longer needs the data, but it is required by the data subject for establishing, asserting, or defending legal claims,
- the data subject has objected to processing — until it is determined whether the Controller’s legitimate grounds override the data subject’s objection;
Data portability (Art. 20 GDPR) – receive personal data concerning them in a structured, commonly used, machine-readable format and request transfer of this data to another Data Controller, if the data is processed based on consent or a contract and is processed in an automated manner;
Objection (Art. 21 GDPR) – object to processing of personal data for the Controller’s legitimate purposes for reasons related to their particular situation, including profiling. The Data Controller will assess whether there are overriding legitimate grounds for processing, in which case the processing may continue; otherwise, processing must cease;
Withdrawal of consent at any time without giving a reason, without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent will result in cessation of personal data processing for the purposes for which consent was given.
To exercise the above rights, the data subject should contact the Data Controller using the contact details provided in section 1 and indicate which right they wish to exercise and to what extent.
7. President of the Personal Data Protection Office
A data subject has the right to lodge a complaint with the supervisory authority in Poland:
President of the Personal Data Protection Office
ul. Stawki 2, 00-193 Warsaw, Poland
Contact methods:
- by mail: ul. Stawki 2, 00-193 Warsaw,
- via the electronic mailbox available at: https://www.uodo.gov.pl/pl/p/kontakt,
- hotline: +48 606 950 000.
8. Data Protection Officer
In any case, a data subject may also contact the Controller’s Data Protection Officer directly via e-mail or in writing to the address provided in section 1.
9. Changes to the Privacy Policy
The Privacy and Cookies Policy may be supplemented or updated according to the Controller’s current needs in order to provide accurate and reliable information to Customers/Users.
10. Cookies
The Online Store collects information about Customers/Users and their behavior in the following ways:
- through voluntarily provided information in forms for the purposes related to the function of a given form;
- by storing cookies on end devices (so-called “cookies”);
- by collecting server logs by the Online Store hosting operator (necessary for correct functioning of the service).
Cookies are information in computer files, particularly text files, stored on the Customer/User’s end device, and intended for use on the Online Store website. Cookies usually contain the website name, storage time on the end device, and a unique number.
The Online Store uses cookies only after obtaining prior consent from the Customer/User. Consent is expressed by clicking the button “Close” during the display of the cookie consent message, or by closing this message.
If the Customer/User does not consent to cookies, they may select “I do not consent” in the cookie notice or change browser settings (this may cause improper functioning of the Online Store website).
To manage cookies, select your browser/system and follow the instructions: Internet Explorer, Chrome, Safari, Firefox, Opera, Android, Safari (iOS), Windows Phone.
The legal basis for processing personal data from cookies is the legitimate interest of the Data Controller, consisting of ensuring high-quality services and security.
The Online Store uses two main types of cookies: session cookies and persistent cookies.
- Session cookies are temporary, stored until logout, leaving the Online Store, or closing the browser.
- Persistent cookies are stored on the end device for the period specified in the cookie parameters or until deleted by the Customer/User.
Functional cookies (required):
(full list as in Polish original, including skatecapitol.com, IAI S.A., IdoSell, PayPal, etc.)
Analytical cookies:
_(e.g., _IAI_AC2, Google Maps SID)
Advertising cookies:
(e.g., RSSID, IAIRSUSER)
Cookies are used for:
- creating statistics to understand how Customers/Users use the Online Store and improve structure and content,
- maintaining Customer/User sessions (so they do not have to log in on each subpage),
- determining Customer/User profile for personalized product recommendations and advertising.
Web browsers usually allow cookies by default. Users can change settings, delete, or block cookies. Limiting cookies may affect Online Store functionality.
Cookies may also be used by advertising partners and the Google network to display personalized ads. Users can manage preferences via Google Ads Settings.
Plugins on the Online Store may transmit Customer/User data to third parties such as Google Maps, PayPal, Google reCAPTCHA, IdoAccounts, IdoSell, IAI S.A.
For correct performance of distance sales agreements, the Controller may share data with courier services and online payment systems. Available delivery and payment methods are listed at:
- Delivery: https://skatecapitol.com/pol-delivery.html
- Payments: https://skatecapitol.com/pol-payments.html
11. Newsletter
Customers may consent to receive commercial information electronically by selecting the appropriate option during registration or later via the account settings.
Once consent is given, the Customer/User will receive the Newsletter at their provided email address, as well as other commercial information sent by the Seller.
The Customer may unsubscribe at any time via:
- account settings,
- the newsletter page: https://skatecapitol.com/newsletter.php,
- the unsubscribe link in each Newsletter,
- contacting Customer Service.
12. Account
Customers/Users may not post or provide unlawful content, including opinions or other illegal data.
Account access is granted after registration. During registration, the Customer/User provides account type or gender, first and last name, company name, NIP, invoicing and shipping data, email address, and chooses a password. The Customer/User confirms that provided data is accurate and accepts the Terms & Conditions.
By granting access to an Account, a service agreement for electronic services is concluded for an indefinite period. Consumers may withdraw according to the Terms & Conditions.
Registration on one Online Store site simultaneously registers the user for access to all Online Store sites.
The Customer/User may terminate the electronic services agreement at any time with immediate effect via email or written notice to the Data Controller (contact in section 1).
The Seller may terminate the Account in case of:
- discontinuation or transfer of the Online Store service,
- violation of law or Terms & Conditions,
- inactivity for 6 months.
Termination requires 7 days’ notice. Re-registration may require the Seller’s permission.