Privacy Policy

PRIVACY POLICY

SHORT VERSION – MOST IMPORTANT INFORMATION

We care about your privacy, but also about your time. That is why we have prepared for you a shortened version of the most important rules related to privacy protection in connection with the use of the website www.orientana.pl.

• By creating a user account in the store, placing an order, filing a complaint, withdrawing from the contract or simply contacting us, you provide us with your personal data, and we guarantee that your data will remain confidential, secure and will not be made available to any third parties without your express consent.
• We entrust the processing of personal data only to verified and trusted entities providing services related to the processing of personal data.
• We use Google Analytics and Google Ads analytical tools to collect information about your visits to the site. For this purpose, Google Ireland Ltd cookies are used for the Google Analytics and Google Ads services.
• We also use Clarity, a tool that helps us better understand your activities on our site and tailor its appearance to our users' needs. Cookies from Microsoft Ireland Operations Limited are used for this purpose.
• We use marketing tools such as Facebook Pixel, which involves the use of cookies from Facebook Ireland Ltd. As part of the cookie settings, you can decide whether you consent to our use of Facebook Pixel in your case or not.
• We use Edrone.me live chat to enable direct contact with us via the website, which involves transferring your data to the messenger provider Edrone sp. z o. o.
• We use our own cookies to ensure the proper operation of the website and its security.
• We process your data within our social media websites and channels.

If the above information is not sufficient for you, you will find further details below.

PERSONAL DATA

Administrator Your personal data within the meaning of the personal data protection regulations is Orientana Sp. z o. o. ul. Tamka 29/17 , 02-834 Warsaw, Poland. In matters concerning your data, you can contact us using the above address or write an e-mail to us at sklep@orientana.pl .

The Administrator, through the Website and other forms of communication, collects and processes the following personal data of Users provided during the registration process on the Website: name and surname, address of residence, e-mail address, telephone number, etc.

Right .

The provisions of the GDPR define your rights in connection with the processing of your data, which are:

• the right to access personal data,
• the right to rectify personal data,
• the right to delete personal data,
• the right to restrict the processing of personal data,
• the right to object to the processing of personal data,
• the right to transfer data,
• the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office),
• the right to withdraw consent to the processing of personal data, if you have given such consent.

You may request the implementation of each of the above rights, however, whether it will be possible to fulfill it will depend on the specific case and the rules specifying the method of implementing your rights described in Articles 12-22 of the GDPR. We encourage you to familiarize yourself with these provisions. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and will not apply to you in relation to all activities of processing your personal data. For your convenience, we have made an effort to indicate the rights you are entitled to within the framework of these operations in the description of individual operations of processing personal data.

We would like to emphasize that you always have one of the rights indicated above - if you believe that we have violated the provisions on personal data protection when processing your personal data, you have the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office).

You can also always contact us with a request to provide you with information about what data we have about you and for what purposes we process it. Just send a message to the address sklep@orientana.pl . However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. You can also use the e-mail address provided above in case of any questions related to the processing of your personal data.

The Administrator, via the Website and other forms of communication, collects and processes the following personal data of Users provided during the registration process on the Website: name and surname, address of residence, e-mail address, telephone number, etc.

Security .

We guarantee the confidentiality of all personal data provided to us. We ensure that all security measures and personal data protection measures required by the provisions on the protection of personal data are taken. Personal data is collected with due diligence and properly protected against access by unauthorized persons.

Entities with which we share data .

We share your information in connection with orders placed in our online store:

1. DPD Polska Sp. z o. o. ul. Mineralna 5, 02-274 Warsaw – for the purpose of shipping the order.
2. InPost SA, ul. Wielicka 28, 30-552 Kraków – for the purpose of shipping the order.
3. Poczta Polska SA, ul. Rodziny Hiszpańskich 8, 00-940 Warsaw – for the purpose of shipping the order.
4. Areda Sp. z o. o., ul. Tytoniowa 20, 04-228 Warsaw – for the purpose of server administration and storing personal data on the server.
5. 2Sides Tomasz Szwed, ul. Sokratesa 9/123, 01-909 Warsaw – management and technical modernization of the website.
6. Ringier Axel Springer Polska sp. z o. o., ul. Domaniewska 49 02-672 Warsaw – sending inquiries about satisfaction with the order handling and purchased products

Your data may also be made available to entities providing accounting, bookkeeping, legal and IT support, if this is necessary to provide the services.

In addition, we may share your information in connection with your use of our website and social media to:

1. Google Ireland LTd, Gordon House Barrow Street, Dublin 4, Ireland for the provision of analytics and advertising services;
2. Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Dublin, Ireland for marketing purposes;
3. Microsoft Ireland Operations, Ltd. One Microsoft Place South County Business Park Leopardstown, Dublin 18 D18 P521 for the purpose of analysing user behaviour on the website.

 

Purposes and activities of processing

 

User account.

• When creating a user account in the store, you must provide your e-mail address and define a password for the account.
• Providing your data is voluntary, but necessary to set up an account. When editing your user profile, you can provide more detailed information about yourself, such as your name, billing address, and shipping address. Providing this information is completely voluntary. You can have an account without providing this more detailed information. In such a case, when placing an order, you will have to enter this information manually.
• The data you enter into your user account is processed solely for the purpose of maintaining your account and providing you with the ability to use it. Providing data in your user account is intended to make it easier for you to place orders in the store by automatically entering the data into the order form.
• The legal basis for the processing of your personal data within the user account is the performance of the account management agreement that you enter into based on the store regulations – art. 6 sec. 1 letter b of the GDPR. We will also process your data in connection with the obligations imposed on us under tax and accounting regulations (art. 6 sec. 1 letter c of the GDPR).
• Data collected in the user account is processed within the WordPress system and stored on the server.
• Your data will be processed within the account for as long as you have an account on the website. After deleting your account, your data will be removed from the database, except for data on placed orders, which will be stored for the next 5 years after the year in which you deleted your account due to tax obligations.
• You can access your personal data processed within your account at any time by logging in to your user account. After logging in to your account, you can modify your data at any time, as well as delete it, with the exception of data on placed orders. You can also decide to delete your account at any time.
• In relation to the data collected in your user account, you also have the right to data portability, as referred to in Article 20 of the GDPR.

Orders .

• When placing an order, you must provide the data necessary to complete the order, i.e. name and surname, billing address, delivery address, email address, phone number. Providing data is voluntary, but necessary to place an order.

• The data provided to us in connection with the order are processed for the purpose of fulfilling the order (Article 6 paragraph 1 letter b of the GDPR), issuing an invoice (Article 6 paragraph 1 letter c of the GDPR), including the invoice in our accounting documentation (Article 6 paragraph 1 letter c of the GDPR) and for archival and statistical purposes (Article 6 paragraph 1 letter f of the GDPR).
• The data contained in the order placed via the store is processed within the WordPress system and stored on the server.
• If you have a user account in the store and the order was placed via the store, your order will be visible within the order history of the account.
• We may use your information to inquire about your satisfaction with purchases made and customer service in our online store.
• Each order is documented with a receipt or invoice (in the case of an invoice, please provide your Tax Identification Number when placing the order).
• Orders are also registered in our internal database for archival and statistical purposes.
• Order data will be processed for the time necessary to complete the order, and then until the expiry of the limitation period for claims under the concluded contract. In addition, after this period, the data may still be processed by us for statistical purposes. Remember also that we are obliged to store invoices with your personal data for a period of 5 years from the end of the tax year in which the tax obligation arose.
• In the case of order data, you do not have the possibility to rectify this data after the order has been completed. You also cannot object to the processing of data or demand the deletion of data until the expiry of the limitation period for claims under the concluded contract. Similarly, you cannot object to the processing of data or demand the deletion of data contained in invoices. After the expiry of the limitation period for claims under the concluded contract, you may, however, object to the processing of your data by us for statistical purposes, as well as demand the deletion of your data from our database.
• In relation to order data, you also have the right to data portability as referred to in Article 20 of the GDPR.

Complaints and withdrawal from the contract .

• If you submit a complaint or withdraw from the contract, you provide us with personal data contained in the content of the complaint or declaration of withdrawal from the contract, which includes your name and surname, address, telephone number, e-mail address, bank account number.
• The data provided to us in connection with the submission of a complaint or withdrawal from the contract are used for the purpose of implementing the complaint procedure or the procedure for withdrawal from the contract (Article 6, paragraph 1, letter b, c of the GDPR).
• Data will be processed for the time necessary to complete the complaint procedure or the withdrawal procedure. Complaints and declarations of withdrawal from the contract may also be archived for statistical purposes.
• In the case of data contained in complaints and declarations of withdrawal from the contract, you do not have the possibility of correcting this data. You also cannot object to the processing of data or demand the deletion of data until the expiry of the limitation period for claims under the concluded contract. After the expiry of the limitation period for claims under the concluded contract, you can, however, object to our processing of your data for statistical purposes, as well as demand the deletion of your data from our database.

Email contact

• When you contact us via email, you naturally provide us with your email address as the sender's address. In addition, you can also include other personal data in the message.
• In this case, your data is processed for the purpose of contacting you, and the basis for processing is Article 6, paragraph 1, letter a of the GDPR, i.e. your consent resulting from initiating contact with us. The legal basis for processing after the end of contact is the justified purpose of archiving correspondence for internal purposes (Article 6, paragraph 1, letter f of the GDPR).
• The content of correspondence may be archived and we are unable to clearly determine when it will be deleted. You have the right to demand a history of correspondence that you have conducted with us (if it was archived), as well as to demand its deletion, unless its archiving is justified due to our overriding interests, e.g. defense against potential claims on your part.

COOKIES AND OTHER TRACKING TECHNOLOGIES

• Our website, like almost all other websites, uses cookies to provide you with the best experience possible.
• Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone) that can be read by our IT system.
• Cookies can be divided into first-party cookies and third-party cookies.
• See below for more details.

Cookies consent .

• During your first visit to the site, you are presented with information about the use of cookies, along with a question about your consent to the use of cookies. You can change cookie settings from your browser or delete cookies altogether. Remember, however, that disabling cookies may cause difficulties in using the store, as well as many other websites that use cookies.
• Own cookies . We use our own cookies to ensure the proper operation of the store, in particular for the proper functioning of the ordering process, basket, user account.
• Third-party cookies . Our store, like most modern websites, uses functions provided by third parties, which involves the use of cookies from third parties. The use of this type of cookies is described below.

Analysis and statistics .

We use cookies to track website statistics. We use Google Analytics for this purpose, which involves the use of Google cookies. More information about Google Analytics can be found in the terms of use: https://marketingplatform.google.com/about/analytics/terms/pl/

Marketing .

We use marketing tools such as:

1. Facebook Pixel. This involves the use of Facebook cookies. For more information, see the terms of use https://marketingplatform.google.com/about/analytics/terms/pl/
2. Clarity analyzing Microsoft user behavior. More information can be found here: https://clarity.microsoft.com/
3. Google in Ads, in connection with which data is transferred to Google. For more information, see the terms of use: https://support.google.com/adspolicy/answer/54818?hl=pl

As part of your cookie settings, you can decide whether you consent to our use of Facebook Pixel in your case or not.

LiveChat.

In order to use the plugin available on the website, it is necessary to transfer your data to the Edrone.me messenger provider. More information can be found here: https://edrone.me/pl/privacy-policy/

Server logs

• Using the store involves sending queries to the server where the page is stored. Each query directed to the server is saved in the server logs.
• Logs include, among others, your IP address, server date and time, information about the web browser and operating system you are using. Logs are saved and stored on the server.
• Data stored in server logs is not associated with specific people using the website and is not used by us to identify you.
• The server logs are only auxiliary material used to administer the website, and their content is not disclosed to anyone other than persons authorized to administer the server.

Voluntary provision of data .

All your data related to browsing our website and using it is provided voluntarily. In the case of cookies other than technical ones (enabling logging in and safe use of the website), providing data is not required (you can block these cookies at any time). Data necessary to set up an account, place an order, settle accounts and make complaints are necessary to achieve these goals. Failure to provide them will prevent you from shopping in our store.

Information on the processing of fanpage user data
on Facebook and Instagram

General information aimed at users facebook.com/orientana/ and instagram.com/orientana/ - hereinafter collectively referred to as "Fanpage"

• While browsing the Fanpage (regardless of whether the User
  is logged in or not) his/her data is collected by the Facebook application,
  to be able to deliver advertising from Facebook and its partners.
• The rules for the use of Facebook User data are available in the Facebook privacy policy: https://www.facebook.com/privacy/explanation
• When a User uses a Fanpage, its owner also processes his or her data.
• Providing data, including through cookies, is voluntary but necessary.
  for the proper use of the Fanpage.

Data collection

• The fanpage is used to present and promote products and contact with Orientana
• When you browse the Fanpage, Facebook automatically collects information about each visit.
• Through the shared administrator panel, Orientana sees statistical information about visits within the Fanpage, e.g. the age of visitors, their reactions, activity. This is used to match content to the preferences of Fanpage users,
  and checking the effectiveness of the ads displayed.
• Facebook decides whether a User sees a given ad. Orientana only sees statistical information about reactions to the ad, as well as reactions and comments under the ads.
• Orientana can see the comments and reactions of the Users. As a Facebook user (Fanpage administrator), he/she can also view the User's public profile and contact him/her via the available
  in Facebook Messenger.

How we use your data

Data collected during correspondence will be used solely for the purpose of responding to the query. Statistical data is used to create new advertisements, as well as to select the content displayed. All decisions are made in a non-automated manner.

Data storage time

Orientana Fanpage User data is stored until the end of use
from the Fanpage, and then for the period specified in the Facebook Terms and Conditions.

Processing your personal data allows us to provide services, including maintaining your account, processing orders, contact related to the performance of the contract, and sending marketing information (including the newsletter). Personal data for processing which you have consented to will be stored until you withdraw your consent.

Personal data will be stored for the duration of the contract and for a period consistent with applicable regulations, taking into account the limitation of claims and tax liabilities. Personal data for processing which you have given consent will be stored until you withdraw your consent

The User has the right to view and change his/her personal data at any time, as well as to demand that the Administrator immediately delete them ("the right to be forgotten").

You can submit requests regarding the processing of personal data by e-mail to the address of the personal data administrator: sklep@orientana.pl

You have the right to lodge a complaint with the supervisory authority responsible for the protection of personal data, which is the President of the Personal Data Protection Office.

Information on joint data control with Facebook Ireland Limited

1. In connection with running a fanpage on Facebook Orientana together with Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland)
   are joint controllers of the User's data in the scope of data processing
   for statistical and advertising purposes.
2. Joint administration includes collective data analysis in order to display statistics of Fanpage user activity.
3. Facebook Ireland is responsible for joint control of:

• having a legal basis for processing data for website statistics purposes
• ensuring the implementation of the rights of data subjects
• reporting violations to the supervisory authority and notifying the persons affected by the violation about the event
• providing appropriate technical and organizational measures to ensure data security.

4. Orientana's liability resulting from joint administration:

• having a legal basis for processing data for statistical purposes
• fulfillment of information obligations

5. Facebook Ireland may make the substantive content of the Page Insights Annex available to the User, pursuant to Article 26(2) of the GDPR, via the data contained in the Page Insights Information, which can be accessed from the Pages’ Fanpage.
6. The lead supervisory authority for joint controllership is the Irish Data Protection Commission (notwithstanding Article 55(2) of the GDPR, where applicable).
7. Detailed information on mutual arrangements between administrators is available at: facebook.com/legal/terms/page_controller_addendum
8. Rules for processing user personal data by Facebook Ireland
   are available at: facebook.com/privacy/explanation

6. Opinions about the online store

1.1.The Online Store Customer has the option of voluntarily and free of charge issuing an opinion regarding purchases made in the Online Store. The subject of the opinion may also be an assessment, photo or review of a product purchased in the Online Store.
1.2. After making purchases in the Online Store, the Seller transfers the data necessary to create an email invitation to the company handling the survey process. The sending of surveys and the process of collecting opinions in forms is fully handled by TrustMate SA with its registered office at Bartoszowicka 3, 51-641 Wrocław. TrustMate SA sends the Customer an email with a request to leave an opinion and a link to an online form enabling it to be issued - the online form allows you to answer the Seller's questions regarding purchases, evaluate them, add your own description regarding the opinion and a photo of the purchased product. In the event of failure to leave an opinion after receiving the first invitation to leave an opinion, TrustMate may re-send the invitation.
1.3. An opinion may only be issued by a Customer who has made a purchase in the Seller's Online Store.
1.4. Opinions issued by the Customer are published by the Seller in the Online Store and the TrustMate.io business card.
1.5. The Customer may not use the opinion provided for any illegal activities, in particular for activities constituting an act of unfair competition towards the Seller, or activities violating personal rights, intellectual property rights or other rights of the Seller or third parties.
1.6. An opinion can only be issued for products actually purchased in the Seller's Online Store. It is prohibited to conclude fictitious/sham sales agreements for the purpose of issuing an opinion. The author of the opinion cannot be the Seller himself or his employees, regardless of the basis of employment.
1.7. An opinion may be deleted by its author at any time.