Privacy Policy

This document defines the principles of the Privacy Policy on the Superlikes.co.uk portal (hereinafter referred to as the “Website”). The administrator of the Website is VVES Spółka z ograniczoną odpowiedzialnością with its registered office in Katowice (postal code 40-007) at street Uniwersytecka 13, NIP 9542879134, REGON 540152128, KRS 0001137605.

The words used in capital letters have the meaning given to them in the regulations of this Website.

Personal data collected by the Website Administrator are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), hereinafter referred to as: GDPR.

The Website Administrator makes special efforts to protect the privacy and information provided to him, concerning the Website Customers. The Administrator selects and applies appropriate technical measures, including programming and organizational measures, with due diligence, ensuring the protection of processed data, in particular protects data against unauthorized access, disclosure, loss and destruction, unauthorized modification, as well as against their processing in violation of applicable law.

The Services available on the Website (in particular the possibility of placing an Order) are not addressed to persons under the age of 16. The Personal Data Administrator does not envisage the intentional collection of data concerning persons under the age of 16.

Personal Data Administrator

The Administrator of your personal data is:

VVES Spółka z ograniczoną odpowiedzialnością with its registered office in Katowice (40-007) at street Uniwersytecka 13.

In the matter of your personal data, you can contact the Personal Data Administrator by:

e-mail: [email protected]

traditional mail: Uniwersytecka 13, 40-007 Katowice, Poland

Purposes and legal basis for processing personal data

The personal data administrator processes your personal data for the following purposes and scope:

In order to take action before concluding a contract at your request (e.g. setting up an account), i.e. data provided in the registration form on the Website, i.e. e-mail address and password set, gender; if the Account is registered via an external authentication service (e.g. Google+, Facebook) we collect your name and surname, and if you register when ordering Goods, we collect your name and surname and data provided for the purpose of fulfilling the order, such as the shipping address;

In order to provide Services requiring the creation of an Account, such as: maintaining order history, informing about the status of order fulfillment, we process your data provided in the Account and when ordering Goods;

In order to provide Services that do not require the creation of an Account and purchase of Goods, i.e. browsing the Website’s www pages, searching for Goods, we process personal data concerning your activity on the Website, i.e. data concerning the Goods you browse, data concerning your device’s session, operating system, browser, location and unique ID, IP address;

In order to perform the brokerage agreement (e.g. delivery of ordered Goods), we process personal data provided by you when ordering Goods, such as name and surname, e-mail address, address data, payment data;

In order to statistics the use of individual functionalities available on the Website, to facilitate the use of the Website and to ensure the IT security of the Website, we process personal data concerning your activity on the Website and the amount of time spent on each of the subpages on the Website, your search history, location, IP address, device ID, data concerning your web browser and operating system;

In order to establish, pursue and enforce claims and defend against claims in court proceedings and other enforcement bodies, we may process your personal data provided when ordering Goods or creating an Account and other data necessary to prove the existence of a claim or which result from a legal requirement, court order or other legal procedure;

In order to consider complaints, grievances and applications and to answer Customers’ questions, we process the personal data provided by you in the contact form, complaints, grievances and applications, or to answer questions contained in another form and some personal data provided by you in the Account, as well as data regarding the order of Goods and other Services provided by us that are the cause of the complaint, grievance or application and data contained in documents attached to the complaint, grievance and application;

For the purpose of marketing our Goods and Services and our customers and partners, including remarketing, we process personal data provided by you when creating an Account and updating it, data on your activity on the Website, including orders, which are registered and stored via cookies, in particular order history, search history, clicks on the Website, login and registration dates, history and your activity related to our communication with you. In the case of remarketing, we use data on your activity to reach you with our marketing messages outside the Website and we use the services of external suppliers for this purpose. These services consist in displaying our messages on websites other than the Website. Details on this can be found in the provisions on Cookies;

Categories of relevant personal data

The Personal Data Administrator processes the following categories of relevant personal data:

contact data;

data regarding activity on the Website;

data regarding orders on the Website;

data regarding complaints and applications;

data regarding marketing services.

Voluntary provision of personal data

Your provision of the required personal data is voluntary and is a condition for the provision of services by the Personal Data Administrator via the Website.

Data processing time

Personal data will be processed for the period necessary to complete orders, services, marketing activities and other services performed for the Client. Personal data will be deleted in the following cases:

when the data subject requests their deletion or withdraws the consent granted;

when the data subject does not take action for more than 10 years (inactive contact);

after obtaining information that the stored data is outdated or inaccurate.

Some data in the scope of: e-mail address, name and surname, may be stored for the next 3 years for evidentiary purposes, handling complaints, grievances and claims related to the services provided by the Website – this data will not be used for marketing purposes.

Data regarding orders for paid Goods and services, competitions and loyalty programs will be stored for a period of 5 years from the date of delivery of the order.

We store data regarding Customers who are not logged in for a period corresponding to the life cycle of cookies saved on devices or until they are deleted from the Customer’s device by the Customer.

Your personal data regarding preferences, behaviors and selection of marketing content may be used as a basis for making automated decisions in order to determine the sales possibilities of the Website.

Recipients of personal data

We transfer your personal data to the following categories of recipients:

state authorities, e.g. prosecutor’s office, Police, PUODO, President of the UOKiK, if they ask us to do so,

service providers that we use to run the Website, e.g. to fulfill an order.

Rights of the data subject

Under the GDPR, you have the right to:

request access to your personal data;

request rectification of your personal data;

request deletion of your personal data;

request restriction of the processing of your personal data;

object to the processing of your personal data;

request transfer of your personal data.

The Personal Data Administrator shall provide you with information on the actions taken in connection with your request without undue delay – and in any case within one month of receiving your request. If necessary, the one-month period may be extended by another two months due to the complex nature of the request or the number of requests.

In any case, the Personal Data Administrator shall inform you of such extension within one month of receiving the request, stating the reasons for the delay.

The right to access personal data (Article 15 of the GDPR)

You have the right to obtain information from the Personal Data Administrator as to whether your personal data is being processed.

If the Administrator processes your personal data, you have the right to:

access personal data;

obtain information about the purposes of processing, categories of personal data being processed, recipients or categories of recipients of this data, the planned period of storing your data or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with the supervisory authority, the source of this data, automated decision-making, including profiling and the safeguards applied in connection with the transfer of this data outside the European Union;

obtain a copy of your personal data.

If you want to request access to your personal data, submit your request to the following address: [email protected].

The right to rectify personal data (Article 16 of the GDPR)

If your personal data is incorrect, you have the right to request the Administrator to immediately rectify your personal data.

You also have the right to request that the Administrator supplement your personal data.

If you want to request that your personal data be rectified or supplemented, submit your request to the following address: [email protected].

If you have registered on the Website, you can correct and supplement your personal data yourself after logging in to the Website.

The right to delete personal data, the so-called “right to be forgotten” (Article 17 of the GDPR)

You have the right to request that the Administrator of personal data delete your personal data when:

Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

you have withdrawn a specific consent, to the extent that the personal data were processed based on your consent;

your personal data were processed unlawfully;

you have filed an objection to the processing of your personal data for the purposes of direct marketing, including profiling, to the extent that the processing of personal data is related to direct marketing;

you have filed an objection to the processing of your personal data in connection with the processing necessary for the performance of a task carried out in the public interest or the processing necessary for the purposes resulting from the legitimate interests pursued by the Personal Data Administrator or a third party.

Despite the request to delete personal data, the Personal Data Administrator may process your data further in order to determine, pursue or defend claims, about which you will be informed.

If you want to request the deletion of your personal data, submit your request to the following address: [email protected].

The right to request the restriction of the processing of personal data (Article 18 of the GDPR)

You have the right to request the restriction of the processing of your personal data when:

you question the accuracy of your personal data – the Personal Data Administrator will limit the processing of your personal data for a period allowing for the verification of the accuracy of this data;

when the processing of your data is unlawful, and instead of deleting your personal data you request the restriction of the processing of your personal data;

your personal data is no longer needed for the purposes of processing, but it is needed to establish, pursue or defend your claims;

when you have objected to the processing of your personal data – until it is determined whether the legitimate interests of the Personal Data Administrator override the grounds indicated in your objection.

If you want to request the restriction of the processing of your personal data, submit your request to the following address: [email protected].

The right to object to the processing of personal data (Article 21 of the GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes resulting from the legitimate interests pursued by the Personal Data Controller or a third party;

processing for the purposes of direct marketing.

If you wish to object to the processing of your personal data, submit your request to the following address: [email protected].

The right to request the transfer of personal data (Article 20 of the GDPR)

You have the right to receive your personal data from the Personal Data Controller in a structured, commonly used machine-readable format and to send it to another personal data controller.

You can also request that the Personal Data Controller send your personal data directly to another controller (if technically possible).

If you wish to request the transfer of your personal data, submit your request to the following address: [email protected].

Right to withdraw consent

You may withdraw your consent to the processing of your personal data at any time.

Withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out on the basis of your consent before its withdrawal.

If you wish to withdraw your consent to the processing of your personal data, submit your request to the following address: [email protected] or use the appropriate functionalities in the Account.

Complaint to the supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to submit a complaint to the supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office (PUODO).

Cookies files

When browsing the websites of the Website, “cookies” files are used, hereinafter referred to as Cookies, i.e. small text information that is saved on your end device in connection with the use of the Website. Their use is aimed at the correct operation of the websites of the Website.

These files allow us to identify the software you use and customize the Website to your individual needs.

“Cookies” files usually contain the name of the domain they come from, the time they are stored on the device and the assigned value.

Security

The “cookies” files we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to get to your devices via “cookies”.

Types of cookies

We use two types of cookies:

Session cookies: they are stored on your device and remain there until the end of the browser session. The saved information is then permanently deleted from the memory of your device. The session cookie mechanism does not allow for the collection of any personal data or any confidential information from your device.

Persistent cookies: they are stored on your device and remain there until they are deleted. Ending the browser session or turning off the device does not delete them from your device. The persistent cookie mechanism does not allow for the collection of any personal data or any confidential information from your device.

Purposes

We also use third-party “cookies” for the following purposes:

configuration of the Website;

creating statistics that help understand how Website Customers use websites, which allows for improving their structure and content through Google Analytics analytical tools, which are administered by Google Inc. based in the USA. The Google Privacy Policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/;

defining the Customer’s profile in order to display tailored materials in advertising networks, using the Google AdSense online advertising tool, which is administered by Google Inc. based in the USA. The Google Privacy Policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/.

defining the Customer’s profile in order to display tailored materials in advertising networks, using the Google Adwords online advertising tool, which is administered by Google Inc. based in the USA, Google’s Privacy Policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/.

popularization of the Website using the social networking site Facebook.com, which is administered by Facebook Inc. based in the USA or Facebook Ireland based in Ireland, Facebook’s Privacy Policy is available at the following link: https://www.facebook.com/help/cookies/.

To learn about the principles of using Cookies, we recommend that you read the privacy policies of the above-mentioned companies.

Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to your preferences. For this purpose, information about how you navigate the network or the time of using the website may be stored.

To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at the link https://www.google.com/ads/preferences/.

Using your web browser settings or service configuration, you can change your Cookie settings at any time, specifying the conditions for storing and accessing your device by Cookie. You can change these settings to block automatic Cookie handling in your web browser settings or to inform you each time you place Cookie on your device. Detailed information about the possibilities and methods of handling Cookie handling is available in your software (web browser) settings.