Privacy Policy & Cookies

Privacy Policy

1. In accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”), we kindly inform you that the data controller of your personal data is Club 27 Poland Sp. z o. o., NIP: 5223048704, REGON: 363244198, with its registered office at Al. Jerozolimskie 123a, Warsaw (02-017).
2. To exercise your rights, you can contact the data controller via email at: sklep@crimston.pl
3. We collect the following personal data:
   1. Name, address, phone number, email address – when placing an order, you will be asked to provide these data for the purpose of fulfilling the contract and enabling communication.
   2. IP address – information resulting from the general rules of Internet connections, such as an IP address (and other information contained in system logs), is used by the server administrator for technical purposes.
   3. Cookies – our electronic platform uses Cookies technology to tailor the service to your individual needs. Users can give consent to store and use entered data for future visits to the electronic platform. Owners of other websites will not have access to this data. If you do not agree to personalize the service, we suggest disabling cookies support in your web browser settings.
4. The provision of the above data occurs in the following cases:
   1. When making a purchase through the electronic platform without logging into an account, after completing such an order, we delete all data allowing for user identification (name, surname, address, phone number, email address). Only the sales document remains stored for fiscal purposes.
   2. Registration in the customer database is voluntary; we store this data in the database to facilitate your future purchases on our electronic platform.
   3. If you wish to be informed about interesting events and commercial offers, you have the option to become a newsletter subscriber. Participation is voluntary, and you can unsubscribe at any time. During the ordering process, you can also consent to the processing of personal data for marketing and promotional purposes. Such consent is not necessary to fulfill the contract.
5. We do not store sensitive data, such as payment card numbers.
6. Your personal data will be processed for the following purposes:
   1. Fulfillment of the contract concluded (Art. 6(1)(b) GDPR), as well as based on your consent (Art. 6(1)(a) GDPR). The legal basis for data processing is the fulfillment of the contract and your consent.
   2. For marketing and promotional purposes, sending newsletters based on separate non-obligatory consent.
   3. Tax and accounting purposes (Art. 6(1)(c) GDPR).
   4. Investigating, establishing, or defending against claims based on a legitimate interest (Art. 6(1)(f) GDPR).
   5. Establishing and maintaining business relationships (Art. 6(1)(b) or (f) GDPR).
   6. Data archiving (Art. 6(1)(f) GDPR).
7. Your personal data may be transferred to third parties for the purpose of processing them to the extent necessary for the performance and settlement of the concluded contract, for which separate consent is not required.
8. Your personal data will not be transferred outside the European Economic Area.
9. The retention period of your personal data depends on its purpose and the type of consent given:
   1. Data obtained with your consent will be processed until you withdraw your consent, in other cases only to achieve the purposes for which they were collected. The withdrawal of consent does not affect the lawfulness of data processing carried out on the basis of consent before its withdrawal. Withdrawal of consent and any other instructions regarding the processing of personal data should be sent to the email address: sklep@crimston.pl.
   2. Data processed to investigate, establish, or defend against claims arising from our activities will be processed until the claims become statute-barred in accordance with legal regulations.
   3. Data processed in connection with the necessity to issue and store invoices and other accounting documents will be processed for a period of 5 years from the end of the tax year in which the transaction was made, unless the regulations governing the storage period change.
   4. Data processed for the purpose of contract performance will be processed until the completion of the contract, and data processed for the purpose of establishing business relationships will be processed until the conclusion of the contract.
10. We inform you that you have the right to:
    1. Access your data (Art. 15 GDPR).
    2. Correct your data (Art. 16 GDPR).
    3. Request the erasure of your data, which can be done in cases specified in Art. 17(1) GDPR, taking into account exceptions as specified in Art. 17(3) GDPR.
    4. Request the restriction of data processing in cases specified in Art. 18 GDPR.
    5. Data portability to another data controller, but only in cases specified in Art. 20 GDPR.
    6. Object to the processing of personal data for reasons related to your particular situation if the legal basis for processing is Art. 6(1)(f) GDPR.
    7. File a complaint with the President of the Personal Data Protection Office.
11. We take due care to protect your rights and freedoms in connection with the processing of your data. We ensure that data is processed:
    1. Lawfully, fairly, and transparently.
    2. For specific, explicit, and legitimate purposes, and not processed further in a manner that is incompatible with those purposes.
    3. Adequately, appropriately, and limited to what is necessary for the purposes for which they are processed.
    4. Accurately, and if necessary, updated.
    5. In a form that allows for your identification for no longer than is necessary for the purposes for which this data is processed – “storage limitation”;
    6. In a manner ensuring the appropriate security of personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage, through the use of suitable technical or organizational measures – “integrity and confidentiality”.

Cookie Files

1. What are Cookies?
   1. On this website, as on almost every other website, we use cookies files.
   2. Cookies are small pieces of information consisting of a series of letters and numbers.
      They make the user’s life easier by allowing the storage of preferences and personalizing web pages.
   3. They are not dangerous, do not modify the configuration settings of end devices, such as computers, smartphones, or tablets, do not affect the software installed on these devices, and cannot be used to transfer viruses. Importantly, they can be entirely or partially disabled by the user through the internet browser settings.
   4. Cookies are typically classified into session cookies, which are automatically deleted when the internet browser is closed, and persistent (permanent) cookies, which remain in the browser’s memory for a longer time, even after it is closed.
   5. It is also worth knowing that cookies can be divided into first-party cookies, which are installed on the user’s end device by the administrator of a specific website, in this case, by us, and can be read by us. Meanwhile, third-party cookies are read by the teleinformatic systems of these third-party entities, excluding the administrator of a specific internet service.
2. We inform you that:
   1. We are the administrators of the internet service located at www.sklep.crimston.pl. We place our own cookies on your end device, and we can read them.
   2. We inform you that we do not automatically collect any data, including personal data, other than through cookies.
   3. During your first visit to the service, we will display information about the use of cookies, encouraging you to make an informed decision regarding cookie settings.
3. To manage cookie settings, please select your internet browser from the list below and follow the instructions:
   1. Chrome
   2. Firefox
4. If you do not change your cookie settings, it means that you accept the default browser settings. We emphasize that disabling cookie files may make it difficult or, in some cases, impossible to use our service and other websites.

Third-party cookie files

1. Google Analytics Cookies:
   1. We use the Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to create statistics and analyze them for the optimization of our website.
   2. Google Analytics automatically collects information about how you use our website. Information collected in this way is often transmitted to servers in the United States and stored there.
   3. Google LLC is based in the USA and uses technical infrastructure located in the USA, where GDPR and other European Union regulations do not apply. To legally operate in European Union countries, including Poland, Google LLC has joined the EU-US Privacy Shield program to ensure an adequate level of personal data protection required by European regulations. As part of the agreement between the USA and the European Commission, the latter has recognized an adequate level of data protection for companies holding the Privacy Shield certificate.
   4. You can prevent Google from recording the data collected by cookies regarding your use of our website and processing this data by Google by installing a browser plug-in available at the following address: https://tools.google.com/dlpage/gaoptout.
2. Additionally, we inform you that by displaying our website, which contains plugins from external social media services (Facebook, YouTube, Instagram), your browser will establish a direct connection with the servers of the administrators of these social media services (Facebook administrator, YouTube administrator, Instagram administrator). The content of the plugin is transmitted directly to your browser by the respective administrator and integrated into the page. As a result, the mentioned administrators will receive information that your browser has displayed our page, even if you do not have a
   profile with the respective administrator or are not currently logged in. Such information (along with your IP address) is sent directly to the server of the respective service provider (some servers are located in the USA) and stored there. We encourage you to read the privacy policies of the individual external administrators. If you do not want social media services to associate the data collected during visits to our website directly with your profile in the respective service, please log out of that service before visiting our website. You can also completely prevent the loading of plugins on the website by using appropriate extensions for your browser, such as script blockers.
3. If you want to learn more about how the administrators of social media services mentioned in the preceding point process personal data and cookies files, we refer you to the regulations of these administrators (click on the link or paste the relevant address in your browser window):
   1. Facebook – https://www.facebook.com/privacy/policy?locale=pl_PL
   2. Instagram – https://help.instagram.com/519522125107875?helpref=page_content
   3. Google and YouTube – https://policies.google.com/privacy?hl=en
4. Using this service, as well as any other, involves sending requests to the server hosting the page. Each such request is logged on the server. Logs include, among other things, your IP address, the time the request was received, and the time the response was sent, as well as information about your web browser. We do not link this data to any of your personal information or use it to identify individuals.