Privacy policy
Cookie policy
This privacy and cookie policy applies to the online store operating at skarbyroztocza.mom, belonging to Skarby Sp. z o.o. By using the online store, you consent to the use of cookies in accordance with this policy. If you do not agree to our use of cookies, you should change your browser settings accordingly or refrain from using the site.
What are cookies?
Cookies are small files, saved and stored on your computer, tablet, or smartphone while you visit various websites on the Internet. A cookie typically contains the name of the website it comes from, the cookie's "lifetime" (that is, its duration of existence), and a randomly generated unique number used to identify the browser from which the connection to the website is made.
What do we use cookies for?
Skarby Sp. z o.o. uses cookies for various purposes: to make the site work faster and be easier to use, to better match content and advertisements to your expectations and interests, and to collect anonymous, aggregated statistics that help in improving the functionality and content of the store. By using cookies in the manner described above, we never identify the identity of users based on the information stored in cookies.
§ Protection of personal data and privacy
1. The administrator of your personal data is Skarby Sp. z o.o., Skryhiczyn 70, 22-145 Skryhiczyn, Poland. The company is entered into the register of entrepreneurs of the National Court Register maintained by the District Court Lublin-Wschód in Lublin with its registered office in Świdnik (VI Commercial Division of the National Court Register) under KRS number: 0001151135, BDO: 000707484, share capital in the amount of: 10,000 PLN. NIP number: 5632460342.
2. The Administrator can be contacted:
b) by e-mail, to the address: info@skarbyroztocza.mom
3. In matters related to the protection of personal data, the Administrator can be contacted:
b) by e-mail, to the address: info@skarbyroztocza.mom
4. Customer's personal data are processed by the Administrator for the purpose of:
2) concluding and performing the contract – Art. 6(1)(b) GDPR – for the time necessary to perform the contract and make settlements thereunder;
3) fulfilling legal obligations incumbent on the Administrator – legal basis Art. 6(1)(c) GDPR including:
b) obligations under the withdrawal or termination of the contract – for the period until the statute of limitations for claims in this respect;
5) storing data in order to demonstrate compliance with the accountability obligation and others imposed by personal data protection regulations – for the duration of the liability in this respect;
6) implementation of the so-called legitimate interests of the Administrator – legal basis Art. 6(1)(f) GDPR – occurring in the case of:
b) creating summaries, analyses, and statistics for the internal needs of the Administrator, including in particular reporting, research, and planning for product development, including services and improving their quality, development work in IT systems – for the period of activities before concluding the contract and until the performance of the contract, and then no later than the statute of limitations for claims under that contract or the Administrator's actions related to the contract or requests before concluding the contract;
c) ensuring network and information security – throughout the entire period of data storage, i.e., until the statute of limitations for claims under the contract or the Administrator's actions related to the contract or requests before concluding the contract and the cessation of the Administrator's liability for accountability and other obligations imposed by personal data protection regulations;
d) customer service support, including through its adaptation to needs resulting from placed orders, complaints, grievances, requests – for the duration of the contract or until the completion of actions taken at request before concluding the contract;
e) marketing purposes, including profiling, i.e., in order to provide information about promotions, products, including services, events, actions, including special offers of the Administrator – for the duration of the contract until its performance;
f) protection against fraud attempts – for the duration of proceedings in this matter.
5. Customer's personal data are provided voluntarily. The Customer is not obliged to provide any data, and providing them is not a statutory obligation, but only a contractual obligation. Providing personal data can only occur if the Customer agrees and at the Customer's discretion. However, providing personal data may be necessary for:
b) issuing a VAT invoice and making tax settlements;
c) creating an Account;
d) sending the Newsletter to the Customer;
e) handling, identifying, and considering complaints or statements of withdrawal from the contract by the Customer and fulfilling the Administrator's obligations in these respects;
f) handling and settling matters with which the Customer applies before concluding the contract or after its termination;
g) in the case of optional data – the lack of possibility to, for example, contact the Customer in a specific optional way or to make a refund to a bank account.
6. The Customer's personal data may be shared by the Administrator with:
2) entities processing the Customer's personal data on behalf of the Administrator and participating in the performance of activities by the Administrator, i.e.:
b) advertising agencies or other entities organising or conducting or cooperating or mediating in the organisation or conduct of the Administrator's marketing actions;
c) entities operating the Administrator's ICT systems or providing the Administrator with ICT tools, including IT platforms, or space on servers or websites;
d) entities providing the Administrator with advisory, consultation, audit services, or legal, tax, or accounting assistance;
e) research agencies acting on behalf of the Administrator;
f) entities providing services to the Administrator regarding the security of persons and property;
b) entities conducting postal or courier activities – in order to deliver correspondence or shipments;
c) entities conducting the transport of goods shipments or forwarding services – in order to deliver goods shipments;
d) entities conducting payment activities (banks, payment institutions) – in order to make refunds or to ensure the operation of the direct debit service;
e) entities conducting credit activities (banks) – in order to provide credit for the purchase of products, including services, and to make refunds;
f) insurance companies – in order to insure goods shipments;
g) entities acquiring receivables – in the event of non-payment of the price for the purchased goods or remuneration for the execution of the order within the time limit or other dues to the Administrator.
7. For the duration of contracts with the Customer until their performance or termination, and after that time based on the Customer's consent, the Customer's personal data may be used for automated decision-making, including profiling. Decisions will be made automatically, based on criteria such as the number and frequency of purchases made in the Online Store and the number and type of purchased goods and services. After determining that the criteria are met, the IT system will automatically send the Customer information about a special offer or a granted benefit. The Customer can use it or opt-out, and also appeal against a given decision.
8. The Customer has the right to:
b) the right to rectify personal data if they are incorrect and the right to supplement incomplete data;
c) the right to erase personal data;
d) the right to restrict the processing of personal data;
e) the right to portability of personal data;
f) the right to lodge a complaint with the personal data protection authority, i.e., the President of the Personal Data Protection Office, in the event of finding unlawful processing of personal data;
9. The Customer may withdraw any consent to the processing of their data at any time without consequences and without providing reasons.
10. Withdrawal of consent does not affect the lawfulness of the data processing that was carried out based on the consent before its withdrawal.
11. The Customer has the right to object to the processing of their personal data:
b) for purposes resulting from the so-called legitimate interest pursued by the Administrator, other than marketing, for reasons related to the Customer's particular situation.
12. The Customer may exercise the rights referred to in points 8-11 above at any time by making an appropriate request.
13. The Customer may apply to the Administrator with the requests referred to in points 8-11 above by submitting a written statement:
b) by e-mail, to the address: info@skarbyroztocza.mom
14. The Administrator is obliged to provide the Customer with information about the actions taken in connection with the requests referred to in points 8-11 above without undue delay, and in any case within one month of receiving the request. If necessary, the period referred to in the preceding sentence may be extended by another two months due to the complex nature of the request or the number of requests. Within one month of receiving the request, the Administrator informs the Customer of such an extension of the deadline, giving the reasons for the delay.
15. If the Administrator does not take action in connection with the Customer's requests referred to in points 8-11 above, they shall immediately – at the latest within one month of receiving the request – inform the Customer of the reasons for not taking action and the possibility of lodging a complaint with the President of the Personal Data Protection Office and using legal remedies before a Court.
16. If the Administrator has reasonable doubts concerning the identity of the Customer in connection with the submission of a request, we may ask the Customer to provide additional information necessary to confirm it.
17. The Administrator provides the information referred to in points 14-16 above in writing, at the choice of the Administrator:
b) electronically to the e-mail address provided by the Customer,
except for cases when:
b) the Customer requested information to be provided by the Administrator orally, and their identity was confirmed by other means – then the Administrator provides information orally.
18. All communication and actions taken by the Administrator in connection with the Customer's requests referred to in points 8-11 above are free of charge. However, if the cited requests are clearly unjustified or excessive, e.g., due to their continuous nature, the Administrator may:
b) refuse to take action in connection with the request.
19. The Administrator informs about the rectification, supplementation, erasure, or restriction of the processing of the Customer's personal data, which they carried out in execution of the Customer's request, each recipient to whom the Customer's data were disclosed. The Administrator is not obliged to provide such information only when it proves impossible (e.g., the company was liquidated) or it would require a disproportionately large effort (the data were disclosed very many years ago and it was not possible to establish contact with the recipient despite attempts made).
20. At the Customer's request, the Administrator informs about the recipients whom they informed about the rectification, erasure, or restriction of the processing of the Customer's personal data, as well as about the recipients whom the Administrator failed to notify.
21. The Customer's personal data/cookies from the browser may be used for ad personalisation. Upon giving consent on the form available on the website, the Customer's personal data may be transferred to our advertising partners, in particular Google, Facebook (Meta), Microsoft Bing, TikTok. Google will use personal data in accordance with its privacy policy available at Google Privacy Policy.
22. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
