Privacy Policy

1. Data administrator and definitions

• 1.1 The administrator of the personal data of the Customers / Users of the Internet Shop, also referred to as the Seller, is: PGDUO Magdalena Pec, phone: 447111510, NIP: 7681605623, REGON: 101857426.
• 1.2 The data administrator can be contacted by:
  • 1.2.1 at the mailing address: Owadów 24b, 26-332 Sławno;
  • 1.2.2 at e-mail address: bok@hurom.pl
• 1.3 User - natural person entering the website/pages of the Internet Shop or using the services or functionalities described in this Privacy and Cookies Policy;
• 1.4 Customer - a natural person with full legal capacity, a natural person who is a Consumer, a legal person or an organisational unit without legal personality, to which the Act grants legal capacity, which concludes a Distance Sales Agreement with the Seller.
• 1.5 Online Store - the website operated by the Seller, available at the following electronic addresses (sites): https://www.hurom.pl through which the Client/User may obtain information about the Goods and their availability and purchase the Goods or order service provision.
• 1.6 Newsletter - information, including commercial information within the meaning of the Act of 18 July 2002 on electronic provision of services (Dz. U. of 2020, item 344) originating from the Seller, sent to the Customer/User electronically; its receipt is voluntary and requires the Customer's/User's consent.
• 1.8 RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

2. Objectives, legal basis and duration of data processing

• 2.1 In order to perform the Distance Selling Contract, the Seller processes:
  • 2.1.1 information concerning the User's device in order to ensure the correct operation of the services: computer IP address, information contained in cookies or other similar technologies, session data, web browser data, device data, data concerning activity on the Website, including on individual subpages;
  • 2.1.2 geolocation information if the User has consented to the provider's access to geolocation. Geolocation information is used to provide more customized offers of products and services.
• 2.2 This information does not contain the Users' identities, but when combined with other information it may constitute personal data and therefore the Administrator covers it with the full protection afforded under the RODO.
• 2.3 This data is processed in accordance with Article 6(1)(b) of the RODO, for the purpose of carrying out the service, i.e. the contract for the provision of electronic services in accordance with the Regulations, and in accordance with Article 6(1)(a) of the RODO, in connection with the consent to the use of certain cookies or other similar technologies, expressed through the relevant settings of the Internet browser in accordance with the Telecommunications Law or in connection with the consent to geolocation. The data are processed until the end of the Customer/User's use of the Online Shop.

3. Marketing activities of the administrator

• 3.1 The Controller may display marketing information about its products or services on the Online Shop website. The display of such content is carried out by the Data Controller in accordance with Article 6(1)(f) of the RODO, i.e. in accordance with the Data Controller's legitimate interest consisting in the publication of content related to the services provided and promotional content of campaigns in which the Data Controller is involved. At the same time, this action does not violate the rights and freedoms of CustomersUsers, CustomersUsers expect to receive content of similar content, and even expect it or it is their direct purpose to visit the website/pages of the Online Shop.

4. Recipients of user data

• 4.1 The Data Controller shall disclose Users' personal data only to processors under concluded contracts of entrustment of personal data processing for the purpose of providing services to the Data Controller, e.g. hosting and maintenance of the Website, IT services, marketing and PR services.

5. Transfer of personal data to third countries

• 5.1 Personal data will not be processed in third countries.

6. Data subject rights

• 6.1 Every data subject has the right:
  • 6.1.1 access (Article 15 of the RODO) - to obtain confirmation from the Data Controller as to whether his/her personal data are being processed. If data about the person are processed, he/she is entitled to access them and obtain the following information: about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the data have been or will be disclosed, the period for which the data are stored or the criteria for their determination, the data subject's right to request rectification, erasure or restriction of the processing of personal data and to object to such processing;
  • 6.1.2 to obtain a copy of the data (Article 15(3) of the RODO) - to obtain a copy of the data undergoing processing, with the first copy being free of charge, and for subsequent copies the Data Controller may impose a reasonable charge based on administrative costs;
  • 6.1.3 to rectification (Article 16 RODO) - to request the rectification of personal data concerning him/her which are inaccurate or the completion of incomplete data;
  • 6.1.4 to erasure (Article 17 of the RODO) - to request the erasure of her personal data if the Data Controller no longer has a legal basis for the processing or the data are no longer necessary for the purposes of the processing;
  • 6.1.5 to restriction of processing (Article 18 of the RODO) - to request restriction of processing of personal data when:
    • 6.1.5.1 the data subject challenges the accuracy of the personal data - for a period allowing the Data Controller to verify the accuracy of the data,
    • 6.1.5.2 the processing is unlawful, and the data subject objects to the erasure of the data by requesting a restriction of its use,
    • 6.1.5.3 The controller no longer needs the data, but they are necessary for the data subject to establish, assert or defend a claim,
    • 6.1.5.4 the data subject has objected to the processing - until such time as it is established whether the legitimate grounds on the part of the controller override the grounds of the data subject's objection;
  • 6.1.6 to data portability (Article 20 RODO) - to receive in a structured, commonly used, machine-readable format the personal data concerning him or her which he or she has provided to the Controller, and to request that these data be sent to another Controller where the data are processed on the basis of the data subject's consent or a contract concluded with him or her and where the data are processed by automated means;
  • 6.1.7 to object (Article 21 RODO) - to object to the processing of his/her personal data for the legitimate purposes of the Controller on grounds relating to his/her particular situation, including profiling. The Controller shall then assess the existence of valid legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of claims. If, according to the assessment, the interests of the data subject outweigh the interests of the controller, the controller shall be obliged to cease processing for these purposes;
  • 6.1.8 to withdraw consent at any time and without giving reasons, but the processing of personal data carried out before the withdrawal of consent will continue to be lawful. Withdrawal of consent will result in the Administrator ceasing to process the personal data for the purpose for which the consent was given.
• 6.2 In order to exercise the aforementioned rights, the data subject shall contact, using the contact details provided, the Data Controller and inform the Data Controller which right and to what extent the data subject wishes to exercise.

7. President of the Office for Personal Data Protection

• 7.1 The data subject shall have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Office for Personal Data Protection with its seat in Warsaw, 2 Stawki Street, who can be contacted as follows:
  • 7.1.1 by post: ul. Stawki 2, 00-193 Warsaw;
  • 7.1.2 via electronic mailbox available at: https://www.uodo.gov.pl/pl/p/kontakt ;
  • 7.1.3 Hotline: 606-950-0000.

8th Data Protection Officer

• 8.1 In any case, the data subject may also directly contact the Controller's Data Protection Officer by email or in writing to the Controller's address as stated in section 1, point 2 of this Privacy and Cookies Policy.

9. Changes to Privacy Policy

• 9.1 The Privacy and Cookies Policy may be supplemented or updated in accordance with the current needs of the Administrator in order to provide current and reliable information to Customers/Users.

10th Cookies

• 10.1 The Online Store performs the functions of obtaining information about Customers, Users and their behaviour as follows:
• 10.1.1 through information voluntarily entered in forms for purposes resulting from the function of a specific form;
• 10.1.2 through the storage of cookies (so-called "cookies") on terminal equipment;
• 10.1.3 through collection of web server logs by the Internet Shop's hosting operator (necessary for proper operation of the service).
• 10.2 Cookies are IT data, in particular text files which are stored on the Customer's / User's terminal equipment and are intended for use on the website of the Internet Shop. Cookies usually contain the name of the website they come from, the time of storage on the end device and a unique number.
• 10.4 The consent referred to in the previous paragraph may include only selected cookies. In this case, the CustomerUser of the Online Shop should use the option: "Cookies settings", available in the message about the use of cookies by the Online Shop. At the same time, the Data Controller stipulates that disabling cookies necessary for authentication processes, security, maintaining the preferences of the CustomerUser may hinder, and in extreme cases may prevent the use of the Online Shop.
• 10.5 If the Customer/User of the Online Store does not consent to the use of cookies by the Online Store, he/she can use the option: "I DON'T CONSENT", also available in the message about the use of cookies by the Internet Shop, or make changes in the settings of the Internet browser he/she is currently using (however, this may cause incorrect operation of the Internet Shop website).
• 10.6 In order to manage cookie settings, select the Internet browser/system from the list below and follow the instructions: Internet Explorer, Chrome, Safari, Firefox, Opera, Android, Safari (iOS), Windows Phone.
• 10.7 The legal basis for the processing of personal data derived from cookies is the legitimate interests of the Data Controller, consisting in providing high quality services, ensuring the security of services.
• 10.8 There are two main types of cookies used within the Online Shop: "session" (session cookies) and "permanent" (persistent cookies). (persistent cookies). Session" cookies are temporary files which are stored on the User's end device until logging off, leaving the Internet Shop or switching off the software (web browser). "Permanent" cookies are stored on the end device of the ClientUser for the time specified in the parameters of cookies or until they are deleted by the ClientUser.
• 10.9 Cookies are used for the following purposes:
  • 10.9.1 to create statistics that help to understand how Customers/Users of the Online Shop use the websites, which enables the improvement of their structure and content;
• 10.10 Web browsing software (web browser) usually allows cookies to be stored on the Customer'sUser's terminal device by default. CustomersUsers may change their settings in this regard. The Internet browser allows you to delete cookies. It is also possible to block cookies automatically.
• 10.11 Restrictions on the use of cookies may affect certain functionalities available on the websites of the Online Shop.
• 10.12 Cookies placed on the Customer's/User's terminal device may also be used by advertisers and partners of the Internet Shop cooperating with the Internet Shop.
• 10.14 We recommend that the Customer/User read the privacy policies of these companies to learn about the use of cookies used in statistics: Google Analytics Privacy Policy .
• 10.15 Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to the way the Customer/User uses the Online Shop. For this purpose, they may retain information about the user's navigation path or the time spent on a given page.
• 10.16 With regard to information about the Customer's/User's preferences collected by the Google advertising network, the Customer/User may view and edit information resulting from cookies using the following tool: https://www.google.com/ads/preferences/ .
• 10.17 The Online Store website features plug-ins that may transmit Customer/User data to Administrators such as: Facebook, Google, Instagram, LinkedIn, YouTube, Salesmanago, Gemius.
• 10.18 In order to properly execute the Distance Selling Agreement, the Data Controller may share Customers'/Users' data with courier companies. The currently available delivery methods in the Internet Shop are available at: https://hurom.pl/Wysylka-cterms-pol-14.html .
• 10.19 In order to properly perform the Distance Selling Agreement, the Administrator may share Customers'/Users' data with online payment systems. Currently available payment methods in the form of prepayments in the Online Store are available at: https://hurom.pl/Sposoby-platnosci-cterms-pol-17.html .

11th Newsletter

• 11.1 The Customer may consent to receive commercial information electronically by selecting the appropriate option in the registration form or at a later date in the appropriate tab. If such consent is given, the Customer/User will receive information (Newsletter) of the Online Store as well as other commercial information sent by the Seller to the email address provided by the Customer.
• 11.2 The Customer may unsubscribe from the Newsletter at any time independently, by unchecking the appropriate box on the page of his/her Account or by going to the form https://hurom.pl/newsletter.php , clicking the appropriate link located in the content of each Newsletter or through Customer Service.

12 Account

• 12.1 The Customer/User must not upload to the Online Shop or provide the Seller with content, including opinions and other data of an unlawful nature.
• 12.2 The Customer/User gains access to the Account after registration.
• 12.3 As part of the registration, the Customer/User provides the account type or gender, first name, surname, company name, VAT ID, data for issuing a sales document, shipping data, email address and selects a password. The Customer/User warrants that the data provided by him/her in the registration form are true. Registration requires careful reading of the Terms and Conditions and indicating on the registration form that the Customer/User has read the Terms and Conditions and fully accepts all of their provisions.
• 12.5 Registration of an Account on one of the pages of the Internet Shop means at the same time registration allowing access to other pages under which the Internet Shop is available.
• 12.6 The Customer/User may terminate the agreement for the provision of services by electronic means at any time with immediate effect by informing the Seller of this by e-mail or in writing to the address of the Data Controller given in Section 1, item 2 of this Privacy and Cookies Policy.
• 12.7 The Seller has the right to terminate the contract for the provision of services concerning the Account in the event of discontinuation of the provision or transfer of the service of the Online Store to a third party, violation by the CustomerUser of the law or the provisions of the Terms and Conditions, as well as in the event of inactivity of the CustomerUser for a period of 6 months. The contract is terminated with a seven-day notice period. The Seller may stipulate that re-registration of the Account will require the permission of the Seller.

13 Twisto Shopping Formula

INFORMATION OF THE PERSONAL DATA ADMINISTRATOR DONE UNDER ART. 13 PAR. 1 and 2 of the General Data Protection Regulation (RODO)

In view of the entry into force and the need to apply the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "Regulation"), the owner of the Internet domain provides the following information concerning the principles of processing your personal data.

• 13.1 The website processes your personal data for the following purposes:

a)realization of services offered on the website,

b)transferring your personal data to ING Bank Śląski S.A. ("Bank") in connection with

• provision by the Bank to the Internet Shop of the service of making available the infrastructure for handling payments via the Internet (legal basis: Article 6(1)(f) of the Regulation).
• handling and settlement by the Bank of payments made by customers of the Internet Store via the Internet using payment instruments (legal basis: Article 6(1)(f) of the Regulation).
• in order for the Bank to verify the proper performance of agreements concluded with the Online Shop, in particular to ensure the protection of interests of payers in connection with their complaints (legal basis: Article 6(1)(f) of the Regulation).

c)transfer of your personal data to Twisto Polska Sp. z o.o. in connection with the possibility of offering payment for purchased goods or services by Twisto Polska Sp. z o.o. under a contract of mandate including a purchasing formula "Buy with Twisto" and making this purchasing formula available through the Internet Shop, and also for the purpose of verification by Twisto Polska Sp. z o.o. of the proper performance of such contracts of mandate (legal basis: art. 6, sec. 1 letter f) of the Ordinance).

• 13.2 In connection with the processing of personal data for the purposes specified in paragraph 2, your personal data may be made available by the Internet Shop to other recipients or categories of recipients of personal data, which may be:

a)ING Bank Śląski S.A.

b)Twisto Polska sp. z o.o.

• 13.3 In the event that you provide your personal data in order to transfer them to Twisto Polska sp. z o.o. prior to the conclusion of a contract of sale of goods (or services) purchased in the Online Shop, the transfer of such data is a condition for the conclusion of a contract of sale in connection with the business model adopted by the Online Shop.
• 13.4 In the case of transferring your personal data to the Bank in connection with the handling and settlement of payments made by you to the Online Shop via the Internet using payment instruments, the provision of data is required in order to process the payment and provide confirmation of its execution by the Bank to the Online Shop.
• 13.5 If your personal data is provided to the Bank in order for the Bank to verify the proper performance of the agreements concluded with the Online Shop, in particular to ensure the protection of the interests of the payers in connection with their complaints, the provision of such data is required in order to enable the performance of the agreement concluded between the Online Shop and the Bank.

>