PRIVACY POLICY
WHAT IS THE PRIVACY POLICY?
We would like to introduce you to the details of how we process your personal data to provide you with full knowledge and comfort while using our website.
As we operate in the internet industry ourselves, we know how important the protection of your personal data is. Therefore, we make special efforts to protect your privacy and the information you provide to us.
We carefully select and apply appropriate technical measures, particularly those of a programming and organizational nature, to ensure the protection of the processed personal data. Our website uses encrypted data transmission (SSL), which ensures the protection of data that identifies you.
In our Privacy Policy, you will find all the most important information regarding our processing of your personal data. We ask you to read it and promise that it will not take more than a few minutes.
Who is the administrator of the www.erkyart.com website?
The administrator of the website is Eryk Walaszczyk, conducting business under the name ERKY Eryk Walaszczyk, entered into the register of entrepreneurs of the Central Register and Information on Economic Activity (CEIDG) kept by the minister responsible for the economy, at the address: ul. Błońska 21a, 05-830 Nadarzyn, NIP: 5342621015, REGON: 386015531 (referred to as: "we").
PERSONAL DATA
Which legal act regulates the processing of your personal data?
Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1), commonly known as: GDPR. To the extent not regulated by GDPR, the processing of personal data is regulated by the Act on the Protection of Personal Data of May 10, 2018.
Who is the controller of your personal data? The controller of your personal data is Eryk Walaszczyk, conducting business under the name ERKY Eryk Walaszczyk, ul. Błońska 21a, 05-830 Nadarzyn, NIP: 5342621015, REGON: 386015531, phone: +48 506949225, e-mail: bok@erkyart.pl.
You can contact us regarding your personal data via:
-
E-mail: bok@erkyart.pl
-
Traditional mail: ul. Błońska 21a, 05-830 Nadarzyn
-
Telephone: +48 506949225
HOW DO WE PROCESS THE PERSONAL DATA YOU PROVIDE?
What personal data do we process and for what purposes? On our website, we offer many different services for which we process various personal data based on different legal grounds.
| Purpose | Personal Data | Legal Basis for Processing | Retention Period |
|---|---|---|---|
| Conclusion and execution of the contract | Name, surname, correspondence address, e-mail address, phone number | Art. 6(1)(b) GDPR – processing necessary to take steps at your request prior to entering into a contract and for the performance of a contract to which you are a party. | Until the expiry of the limitation period for claims regarding the performance of the contract. |
| Creating and maintaining an account | Name, surname, e-mail address, phone number | Art. 6(1)(b) GDPR – processing necessary for the performance of a contract. | Until the expiry of the limitation period for claims regarding the performance of the contract. |
| Adding reviews | Nickname, name | Art. 6(1)(f) GDPR – our legitimate interest in presenting opinions about goods and transactions on the store's website. | Until an objection to the processing is filed. |
| Contact form | E-mail address | Art. 6(1)(f) GDPR – our legitimate interest in maintaining communication continuity and enabling contact regarding business activities. | Until an objection to the processing is filed. |
| Traffic analysis on the store website | IP address, browser data | Art. 6(1)(f) GDPR – our legitimate interest in analyzing customer traffic on the store's website. | Until an objection to the processing is filed. |
| Direct marketing of own goods/services (incl. remarketing) | IP address, browser data | Art. 6(1)(f) GDPR – our legitimate interest in direct marketing of own services. | Until an objection to the processing is filed. |
| Establishment, pursuit, and defense of claims | Name, surname, address, PESEL, NIP, REGON, e-mail, phone, IP, bank account/card number | Art. 6(1)(f) GDPR – our legitimate interest in establishing, pursuing, and defending against claims before courts and state authorities. | Until the expiry of the limitation period for claims regarding the performance of the contract. |
| Compliance with legal (tax/accounting) obligations | Name, surname, company, PESEL, NIP/REGON, e-mail, phone, address, card number | Art. 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation to which the Controller is subject. | Until the expiration of the legal obligations that justified the processing. |
Voluntary provision of data Providing the required personal data is voluntary but is a condition for us to provide services to you (e.g., sending a newsletter or setting up an account).
Recipients of personal data The current list of entities to whom we disclose your personal data can be found [here].
Automated decision-making (including profiling) We do not make automated decisions regarding you, nor do we use profiling.
Will we transfer your personal data outside the EEA or to an international organization? In order to use Google tools, your personal data may be transferred to the United States, where Google LLC servers are located. Google LLC is listed as a participant in the Data Privacy Framework, which ensures an adequate level of protection in accordance with EU regulations (Commission Implementing Decision (EU) C(2023) 4745).
WHAT ARE YOUR RIGHTS REGARDING OUR PROCESSING OF YOUR PERSONAL DATA?
Based on the GDPR, you have the right to:
-
Request access to your personal data,
-
Request rectification of your personal data,
-
Request erasure of your personal data,
-
Request restriction of processing,
-
Object to the processing of personal data,
-
Request data portability.
If you submit any of the above requests, we will provide information on the actions taken without undue delay—and in any case within one month. If necessary, this period may be extended by another two months due to complexity or the number of requests.
Right of access (Art. 15 GDPR) You have the right to obtain confirmation as to whether or not your personal data is being processed. If it is, you have the right to access the data and information regarding purposes, categories of data, recipients, storage periods, and your rights under GDPR.
Right to rectification (Art. 16 GDPR) You have the right to have inaccurate personal data rectified or completed.
Right to erasure ("right to be forgotten") (Art. 17 GDPR) You can request data deletion if the data is no longer necessary, consent is withdrawn, or data was processed unlawfully. Note: We may still process data if necessary for the establishment or defense of legal claims.
Right to restriction of processing (Art. 18 GDPR) You can request that we limit the processing of your data in specific cases, such as when you contest the accuracy of the data or object to its deletion.
Right to object (Art. 21 GDPR) You have the right to object at any time to processing based on legitimate interests or for direct marketing purposes.
Right to data portability (Art. 20 GDPR) You have the right to receive your data in a structured, commonly used, machine-readable format (standardly CSV) and have it sent to another controller.
Complaint to a supervisory authority If you believe our processing violates data protection laws, you have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).