The privacy protection of Tributo.pl Shop (“Shop“) users is of significant importance to us. We ensure the security of personal data entrusted to us and make every effort to enhance the level of this protection.
To explain to our Users the principles and methods of collecting, processing and using information about Shop Users, below we present a document that clearly explains the privacy protection of our Users, so that they can feel secure and enjoy using the services offered within our Shop.
I. WHO IS THE DATA CONTROLLER OF SHOP USERS’ PERSONAL DATA?
The controller of Users’ personal data, i.e. the entity responsible for ensuring the security of Users’ personal data (“Controller“), is Tributo Accounting Office Ltd. with its registered office in Wrocław at Bolesława Krzywoustego 73/1, 51-116 Wrocław, entered into the register of entrepreneurs maintained by the District Court in Wrocław, VI Commercial Division of the National Court Register, under KRS number 0000663790, NIP: 8952121755.
II. HOW TO CONTACT US?
If you have any questions or comments regarding our Shop and data processing, please contact us at biuro@tributo.pl or by post at ul. Krzywoustego 73/1 51-115 Wrocław. Requests for correction or deletion of personal data should be sent to us at: biuro@tributo.pl
III. HOW TO CONTACT OUR DATA PROTECTION OFFICER?
The Data Controller has appointed a Data Protection Officer, who can be contacted at the email address or correspondence address provided above with the note “DPO”.
IV. WHAT DATA DO WE COLLECT IN THE SHOP AND FOR WHAT PURPOSE?
The scope and purpose of our data collection depends on the User’s activity in the Shop.
a) Placing an order in the Shop
Personal data of Users who placed an order in the Shop is processed to handle the submitted order.
Placing an order does not require having an account in the Service.
Providing data marked as mandatory is necessary to process the order and failure to provide it results in non-acceptance of the order. Providing other data is optional.
Personal data is processed:
- for order fulfilment (including handling potential complaints) – the legal basis for processing is the necessity of processing for contract performance, while for optional data, the legal basis for processing is consent;
- to fulfil statutory obligations incumbent on the controller, resulting in particular from tax and accounting regulations, including the necessity to issue an invoice for goods sold and its archiving – the legal basis for processing is legal obligation;
- for potential establishment, pursuit or defence against claims – the legal basis for processing is legitimate interest, consisting in protecting our rights;
- for analytical and statistical purposes – the legal basis for processing is legitimate interest, consisting in analysing Users’ activity in the Shop and their purchasing preferences to improve functionalities;
- for publishing non-profiled advertisements of our goods or services, the legal basis for processing is legitimate interest, consisting in direct marketing;
- for informing about circumstances concerning our Shop that are not of commercial nature – the legal basis for processing is legitimate interest, consisting in informing about our activities.
b) Contact with Customer Service
When a User contacts us through Customer Service, the operator may request data only when necessary to handle the matter of contact. The legal basis in such case is our legitimate interest consisting in the need to resolve the reported matter related to the Shop.
When a User contacts us through Customer Service regarding a placed order, the operator may request data enabling order identification. The legal basis in such case is the necessity of processing for contract performance.
c) User data that is automatically collected upon entering the Shop
To enable service provision and protect copyright, as well as for statistical and settlement purposes, the Shop processes data characterising how Users use the Shop’s services. For this purpose, the server:
- monitors the IP address from which the User connects,
- collects statistical information about viewed pages.
The Shop does not store any information about the User’s computer hardware configuration or installed programs.
The IT system used by the Shop automatically collects in logs data related to the device from which the User connects to the Shop. This data is collected only for statistical purposes and concerns: device type, operating system, browser type, screen resolution, color depth, IP, Internet service provider, or Shop entry address and is used only in the Shop optimization process to ensure maximum convenience of use, which constitutes legitimate interest.
This data is never combined with other data and serves only as material for statistical analysis and system error correction mechanisms.
V. HOW LONG DO WE PROCESS USERS’ PERSONAL DATA?
The processing period depends on the type of service provided and the purpose of processing. As a general rule, data is processed:
- for the duration of service provision or order fulfilment;
- until withdrawal of consent;
- until effective objection is raised;
- until effective request for data deletion.
The data processing period may be extended when processing is necessary for the establishment, pursuit or defence of potential claims, and after this period, only if and to the extent required by law. For example, according to the current Accounting Act, we are obliged to archive invoices for 5 years, counting from the end of the calendar year in which the tax payment deadline expired.
VI. WHAT RIGHTS DO USERS HAVE?
We guarantee the implementation of all rights of individuals whose data we process, including the right to:
- access data, including obtaining a copy,
- delete data,
- transfer data,
- withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal),
- rectify data,
- restrict processing,
- object,
- lodge a complaint with the President of the Personal Data Protection Office.
IF A USER WISHES TO EXERCISE THEIR RIGHTS, PLEASE CONTACT US FIRST.
VII. WHO DO WE SHARE THE PERSONAL DATA PROVIDED TO US WITH?
If a User selects one of the payment methods available in the Shop, their personal data may be shared with the payment service provider, solely to enable payment processing.
Personal data may be transferred to data processors acting on our behalf based on appropriate agreements, including IT service providers, etc. Such entities process data solely in accordance with our instructions, maintaining their confidentiality and security. We have the right to control how the data entrusted by us is processed.
In other cases, personal data may be disclosed to authorised entities solely on the basis of legal provisions.
VIII. TRANSFER OF DATA OUTSIDE THE EEA
We do not transfer Users’ personal data outside the EEA.
IX. COOKIES POLICY
The Shop uses cookies. These are small text files placed on Users’ devices (e.g. computers) through web browsers. These files allow storing specific information on the User’s device and then reading it by the Shop that created these files. Cookies usually contain, apart from the Shop’s domain name they come from, their storage time on the end device and a unique number.
Cookies are used by us to:
- adapt the content of the Shop’s websites to individual User preferences and optimise their use of websites (cookies allow in particular to recognise the Shop User’s device and display the website appropriately to best suit their individual needs);
- maintain the Shop User’s session after logging in (this is extremely useful for the User as it prevents the need to log in again (enter login and password) on each subsequent subpage of the Shop);
- create statistics (so we can better understand how Users of our Shop use the websites, and consequently improve their structure and content);
The Shop does not store any information about the User’s computer hardware configuration or installed programs.
Changing cookie settings
Usually, the User’s web browser by default allows storing cookies on the User’s end device. However, Shop Users have the possibility and right to change cookie settings at any time. To change cookie settings, Users should familiarise themselves with detailed information about cookie handling options available in their web browser settings.
If a User does not agree to place cookies on their device, they can block their placement by appropriately configuring their web browser. Information on how to do this can be found in their web browser’s help files. Unfortunately, if cookies from the Shop are blocked, we cannot guarantee its proper functioning. If the User does not change the cookie settings, these files will be placed on the User’s end device. This means we will store information on the User’s end device and access this information.
X. SOCIAL MEDIA
The Service uses plugins and other social tools provided by social networks such as Facebook.
When using the Service that contains such a plugin, the User’s browser establishes a direct connection with the servers of social network administrators (service providers). The plugin content is transferred by the service provider directly to the User’s browser and integrated with the page. Through this integration, service providers receive information that the User’s browser has displayed the Service, even if the User does not have a profile with the service provider or is not currently logged in. This information (along with IP address) is sent by the User’s browser directly to the service provider’s server (some servers are located in the USA ) and stored there.
If a User is logged into one of the social networks, the service provider will be able to directly associate the visit to the Service with the User’s profile in that social network. If the User uses a plugin, e.g. the “Like” button, the relevant information will also be sent directly to the service provider’s server and stored there. Furthermore, this information will be published in the social network and displayed to people added as the User’s contacts.
The purpose and scope of data collection and their further processing and use by service providers, as well as contact options and Users’ rights in this regard and the possibility of making settings ensuring User privacy protection are described in the privacy policy of individual service providers.
Facebook – https://www.facebook.com/privacy/explanation
If a User does not want social networks to associate data collected during visits to the Service directly with their profile in a given network, they must log out of that network before visiting the Service. It is also possible to completely prevent plugins from loading on the page by using appropriate extensions for the User’s browser, e.g. script blockers.
XII. OUR PARTNERS’ TOOLS
To provide our services and improve and analyse them, we also use services and tools of other entities. These entities implement only the goals we specify. Below we present information about our partners and their tools used.
a) Google Analytics
In the Shop, we use Google Analytics tool, provided by Google Inc. (Google) based in the USA. As part of this function, we use cookies to obtain and analyse information about, among others, the number of pages visited, effectiveness of our marketing campaigns, and time spent in the Shop. We use this information solely to improve the Shop’s quality.
XIII. CHANGES TO PRIVACY POLICY
The policy is regularly verified and updated when needed. The current version of the policy was adopted and is effective from 25.07.2023