Privacy and cookies policy

HISTFENC.EU ONLINE STORE PRIVACY POLICY

1. General information

This Privacy Policy sets out the rules for the processing of your personal data in connection with the use of our Histfenc Online Store, which is available at https://histfenc.eu/.

2. Administrator

The Personal Data Administrator is: Histfenc sp. z o.o. with its registered office in Toruń (formerly: „HISTFENC” Andrzej Zmuda Trzebiatowski), ul. Wapienna 46, 87-100 Toruń, entered into the register of entrepreneurs of the National Court Register under the KRS number KRS 0001213849, NIP 8792773092, REGON 543616309.

You can contact the Administrator in the way You choose:

  • by sending a letter to the address: st. Wapienna 46, 87-100 Toruń,
  • by sending an e-mail to the e-mail address: info@histfenc.com.

If we use the terms "Store" or "Website" in this Privacy Policy, this refers to the Histfenc Online Store (https://histfenc.eu/) and related functionalities.

3. Purposes and basics of processing

We may process Your personal data (including full name, address, e-mail address, telephone number) for various purposes and to a different extent, depending on how you use our Store and what functionalities you use:

1) If you visit our Website (Store) and view its content or you use the contact form or send us a message to the e-mail address provided in the Store, we process your personal data for the following purposes

a. in order to ensure the proper operation of the Store, traffic monitoring, verification of the way visitors use the website and possible counteracting the actions of users that are inconsistent with the Store Terms and Conditions or generally applicable law. We save this data in particular as part of cookies and logs related to the website. The legal basis for data processing in this regard is the provision of art. 6 sec. 1 let. f) of the Regulation, that enables the processing of data when it is necessary for the purposes of valid interests pursued by the administrator or by a third party, while the valid interest of the administrator in this case is to ensure the proper operation of the website, keeping statistics on the operation of the Website, counteracting fraud and violations of the Terms and Conditions or the law,

b. in order to contact persons who use contact forms on the Website or send messages by e-mail - the legal basis for data processing in this regard is the provision of art. 6 sec. 1 let. f) of the Regulation, that enables the processing of data when it is necessary for the purposes of valid interests pursued by the administrator or by a third party. The valid interest of the administrator in this case is the need to process data in order to contact people and answer their questions,

c. in order to conduct marketing activities regarding the Administrator's products and services. In this case, personal data is processed on the basis of art. 6 sec. 1 let. f) of the Regulation, that enables the processing of data when it is necessary for the purposes of valid interests pursued by the administrator or by a third party. The valid interest of the Administrator in this case is to conduct marketing activities. These measures may include, e.g., enabling the subscription and the sending of a newsletter. Regardless of abovementioned, in a situation where the law requires the data subject to express a separate consent, e.g. in order to present them offer by means of electronic communication or telecommunications devices, the Administrator obtains such consent in accordance with the requirements of the law. Such consent is required under the provisions of the Telecommunications Act in relation to the sending of marketing messages such as newsletters.

2) If you purchase the products we offer in the Store, we process your personal data for the following purposes:

a. in order to conclude and perform the provisions of the sales agreement, including in particular ordering the product, delivery and enabling payment, as well as any additional activities related to the purchase process, to the extent and on the terms set out in the Terms and Conditions of the Histfenc Store - the legal basis for data processing in this regard is a provision of art. 6 sec. 1 let. b) of the Regulations that enables the processing of data when it is necessary to conclude and to perform the agreement to which the data subject is a party, or to take action at the request of the data subject, before concluding the agreement,

b. in order to fulfil the obligations imposed on the Administrator on the basis of legal provisions, in particular in the field of tax regulations - the legal basis for data processing in this regard is the provision of art. 6 sec. 1 let. c) of the Regulations that enables the processing of data when it is necessary to fulfil the legal obligation incumbent on the administrator,

c. in order to prevent abuse and fraud and possible pursuit of claims or defense against claims - this is the valid interest of the administrator, and thus personal data are processed on the basis of art. 6 sec. 1 let. f) of the Regulation, that enables the processing of data when it is necessary for the purposes of valid interests pursued by the administrator or by a third party.

3) If you are a person who acts on behalf of our Customer, who is a legal person and therefore you contact us, acting as a representative of our Customer (in particular as a board member, partner, representative, employee or associate), we process Your personal data in order to conclude and the performance of the agreement between the Store and the Customer - in that case, the legal basis for data processing is the provision of art. 6 sec. 1 let. f) of the Regulation, which indicates that data processing is allowed when it is necessary for the purposes of valid interests pursued by the administrator or by a third party. The valid interest of the administrator in this case is the performance of the agreement between us and the Customer (legal person), which requires contacting the Customer’s representatives.

4) If you create an Account in the Store and in connection with that you provide your personal data, we process Your personal data in order to conclude and perform the provision of electronic services agreement - the legal basis for data processing in this regard is the provision of art. 6 sec. 1 let. b) of the Regulations that enables the processing of data when it is necessary to conclude and to perform the agreement to which the data subject is a party, or to take action at the request of the data subject, before concluding the agreement.

5) We also have a fan page regarding our Store  on Facebook, Instagram, YouTube and TikTok. Therefore, we can process the personal data of persons who enter the fan page, like the posts, comment on the posts or follow the fan page. Within these social networks, we can direct marketing content to you (display posts marked as sponsored) in accordance with the regulations of Facebook, Instagram or TikTok, which is also our valid purpose as a data controller. Our Facebook fan page is connected to our website (Store) by means of plugins placed within the Store. This means that by visiting our website, Facebook may obtain information that you have visited it. We process data related to the activities of our fan page on Facebook, Instagram and TiktTok as well as Facebook plugins on the Website on the basis of art. 6 sec. 1 let. f) of the Regulation, i.e. based on our valid interest.

4. Data recipients

In order to provide our services properly, we use the help of certain third parties. Therefore, the personal data provided by you may be transferred:

The entity responsible for hosting our website, i.e. nazwa.pl sp.z o.o. with its registered seat in Krakow,

  • an entity that provides analytical and marketing services to us (Google Analytics and Google Ads) - Google Ireland Ltd. and Google LLC with its registered seat  in Mountain View, California. The legal basis for the transfer of data to the United States are Standard Contractual Clauses, approved by the European Commission, contained in the contract concluded between Google Ireland Ltd. and Google LLC,
  • an entity that manages Facebook and Instagram social networks - Facebook Ireland Limited with its registered seat in Dublin, Ireland ((if you visit our fan page on these platforms or visit our website),
  • the entity that manages the TikTok portal - TikTok Technology Ltd. with its registered seat in Dublin, Ireland (if you enter our fan page on this application),
  • the entity that manages the YouTube portal - Google Ireland Ltd. and Google LLC with its registered seat in Mountain View, California (if you enter our fan page on this platform),.
  • payment operators who enable electronic payments within the store:
  1. PayPal service - PayPal (Europe) S.a.r.l. et Cie, S.C.A z with its registered seat in Luksemburg,
  2. iMoje service – ING Bank Śląski S.A. with its registered seat in Katowice,
  3. Stripe service – Stripe Payments Europe Limited with its registered seat in Dublin, Ireland
  • the entity that is responsible for sending the newsletter - Freshmail sp.z o.o. with its registered seat in Krakow,
  • an entity that provides IT services to us - INFILAB Krzysztof Flis with its registered seat in Toruń,
  • the entity that is responsible for the operation of the ERP Modus software, which is Mariusz Okoński RHO Software registered seat in Krakow,
  • an entity that provides accounting services to us - Grant Thornton Frąckowiak spółka z o. o. sp.k. with its registered seat in Poznań,
  • an entity that provides legal assistance or assistance in the field of taxes and accounting - DB77 sp.z o.o.,
  • courier and shipping service providers.

5. Period of personal data storage

We store your data only for the necessary period, i.e.

1) if you are a person who has entered our website, we process Your personal data as long as you are using the website and for a period of up to 12 months after leaving it,

2) if you are a person who wrote to us by the contact form on our website or by e-mail - we process Your personal data as long as the agreement between You and us lasts. After its completion and the expiry of 3 months, we delete the personal data that we obtained in this way,

3) if you are a person who purchased a product from us that is offered as part of our Store, we process Your personal data for a period of 6 years from the end of the year in which you made the purchase,

4) if you are a person who has concluded an agreement with us for the provision of electronic services (created an Account) as a Customer, Your data is processed for the duration of the provision of electronic services agreement that was concluded between You and us and after its termination for a period of up to 6 years from the end of the year in which you finished using the service, in accordance with the limitation periods for claims. This also applies to the Customer's representatives who are persons designated within the Customer's organization to contact us,

5) if you have expressed your will to receive a newsletter or other marketing materials from us, we process Your personal data for this purpose until you unsubscribe from our mailing list or until the end of our promotional activities,

6) if you follow us on a social networking site, like our posts or contact us via our fan page, we process Your personal data for the duration of the interaction between You and our fan page and until the end of the year after the end of the interaction.

6. Your rights

We inform that you have the following rights: 

  • the right to access your personal data, 
  • the right to rectify your personal data, 
  • the right to delete your personal data, 
  • the right to limit the processing of personal data, 
  • the right to object to processing - to the extent that the processing takes place on the basis of the valid interest of the administrator, 
  • request to transfer data that concern you, 
  • the right to bring a complaint to the supervisory body, which is the President of Personal Data Protection (to the address of the Personal Data Protection Office, st. Stawki 2, 00-193 Warsaw).

You can withdraw your consent to activities that involve the processing of personal data (e.g. sending a newsletter) at any time, which will not affect the correctness of data processing before the consent is withdrawn.

Your personal data will not be used for profiling, including automated decision making. We can target you with advertisements based on your previous activities as part of the Store or the social networks we use, but activities in this regard are standard marketing activities and are not related to automated decision-making or other activities that may have a significant impact on you.

The Administrator undertakes to make efforts to maintain adequate protection of your Customer's personal data and to keep your personal data secret.

Providing personal data may be a condition for creating an Account as part of the Store or a condition for purchasing a Commodity that is offered as part of the Store.

Request for data deleting

We can delete any data with your personal informations on your request. Just let as know at info@histfenc.com

COOKIES

Cookies are small files that enable or facilitate the use of certain website functions. They can be saved on your device directly by us or by third parties with whom we cooperate. As part of the use of cookies, we can process your personal data, in particular, such as: 

  • IP address,
  • history of your use of the website,
  • information about the device or software you use.

The cookies we use are related to the functioning of our website, they are used to control traffic on our website, create statistics in the field of the website use by its users, undertake marketing activities, prevent errors and technical defects, ensure website security or prevent abuse. and violations of the law.

There are the following cookies:

Session cookies: they are stored on Your device while you are using our website (and are deleted when you close your browser). Session cookies enable the proper use of our website. Blocking them may result in errors or preventing the use of our website.

Persistent cookies: they are stored on your device until they are deleted or until they expire.

The use of cookies is based on your consent, expressed in accordance with the provisions of art. 173 § 1 of the Telecommunications Act. The lack of such consent or the subsequent deletion of cookies may result in the inability to use the functionality of the Store.

You have the option to limit or disable cookies on Your device. The settings for the use of cookies can be found in the settings of your web browser. Web browsers allow you to disable all or part of cookies (e.g. from third parties). If cookies are partially disabled, cookies generated by our website may be stored on your device, enabling the website to function properly. However, this will result in the fact that you will not be able to use all the functionalities of the Store.

However, remember that if you restrict the use of cookies, the use of individual services may be limited, and in some cases it may turn out to be impossible.

In matters not covered by the Privacy Policy, the provisions of the Civil Code and relevant acts of Polish law, as well as European Union law, in particular GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) shall apply.