Privacy Policy

I. General provisions

  1. This document defines the principles of processing and protecting the personal data of Customers of the Website available at https://www.mydecor.pl. (Privacy Policy).

  2. The personal data controller of the www.mydecor.pl Store (hereinafter referred to as the Controller), i.e. the person responsible for ensuring the security of your personal data, is:

Mydecor Sp. z o. o.

65B Juranda ze Spychowa Street

03-257 Warsaw

Tax Identification Number: 524 275 99 78

REGON: 146714019

  2. Personal Data referred to in the Privacy Policy is information about an identified or identifiable natural person to whom the data relates, i.e. one who can be identified directly or indirectly, in particular on the basis of a feature such as: name and surname, identification number, location data, online identifier or one or more features defining the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.

  3. The Service Provider processes Personal Data of data subjects in accordance with applicable regulations, in particular Polish law and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR).

  4. Processing, within the meaning of the Privacy Policy, means an operation or set of operations performed on Personal Data or sets of Personal Data in an automated or non-automated manner, such as collecting, recording, organizing, structuring, storing, adapting or modifying, downloading, viewing.

    II. Scope and purpose of collected data

  5. Personal Data are processed by the Administrator on the Website in order to enable the use of the Website's functionalities, including automatically when using the Website, i.e. in order to:

    1. Registration on the Website;

    2. concluding contracts via or available on the Website, in particular placing and executing an Order, concluding and executing a Loan Agreement and an Insurance Agreement;

    3. efficient operation and functioning of the Website, including the Online Store, and ensuring the safety of their use, including the detection of abuses and carrying out analyses;

    4. fulfilling the obligations of the Service Provider, in particular complaints regarding contracts concluded on the Website or via the Website and the functioning of the Website;

    5. preparing and presenting advertisements and offers tailored to the interests and needs of persons whose Personal Data relate to, and receiving commercial information, in particular sending the ordered Newsletter by the Service Provider to the e-mail address indicated by the Customer;

    6. for the purpose of publishing the Content.

  6. In order to:

    1. Registration on the Website – the following Personal Data are processed – name and surname, e-mail address, Password, IP address, cookies;

    2. concluding contracts via or available on the Website, in particular placing and executing an Order, concluding and executing a Loan Agreement and an Insurance contract – the following Personal Data are processed – name and surname, address (street, house number, town and postal code), contact telephone number, order number, IP address, cookies or other data provided by the Service Provider on the Website or during contact with the Customer;

    3. for the efficient operation and functioning of the Website, including the Online Store, and to ensure the safety of their use, including the detection of abuses, the creation of reports and analyses, including statistics on the viewing of subpages of the Website – the following Personal Data are processed – listed in point 8 b;

    4. fulfilling the obligations of the Service Provider, in particular complaints regarding contracts concluded on the Website or via the Website and the functioning of the Website – the following Personal Data are processed – name, surname, e-mail, telephone number, address (street, house number, town and postal code), IP address, cookies, bank account number;

    5. preparing and presenting advertisements and offers tailored to the interests and needs of persons whose Personal Data relate to, and receiving commercial information, in particular sending the ordered Newsletter by the Service Provider to the e-mail address indicated by the Customer – the following Personal Data are processed: first name, last name, date of birth, e-mail, telephone number, address (street, house number, town and postal code), IP address, cookies, Order number;

    6. in order to publish the Content – ​​the following Personal Data are processed: name, surname, e-mail, nickname, IP address, cookies.

      III. Legal basis for processing Personal Data

  7. The legal basis for the processing of Personal Data is:

    1. consent of the person whose Personal Data relates to their processing;

    2. necessity to perform contracts concluded on or through the Website, or to take actions requested by the person to whom the Personal Data relates before concluding the contract;

    3. necessity to fulfil a legal obligation incumbent on the Service Provider;

    4. legitimate interests pursued by the Service Provider or by a third party, such as electronic payment operators or other interests pursued in connection with the functionality of the Website, provided that this basis for the processing of Personal Data does not apply to children.

    In the case referred to in point 9 a), Personal Data relating to children are processed only if the child is over 16 years of age.

    IV. Period of processing of personal data

  8. Personal Data collected on the Website will be stored for accounting purposes for a maximum period of 5 years, counted from the end of the calendar year in which the tax payment deadline related to the contract concluded on or through the Website expired. To the extent otherwise justified by the processing purposes, Personal Data will be stored for as long as there is a legal basis for their processing, unless applicable law requires a longer storage period, e.g., for use in proceedings concerning the operation of the Website. At the end of the storage period, personal data will be deleted or anonymized.

    V. Voluntary provision of personal data

  9. Providing Personal Data on the Website is voluntary, but necessary for the implementation of one or more of the purposes of processing Personal Data defined in point 7 above, which the Service Provider will not be able to implement if Personal Data is not provided on the Website, respectively for one or more of the purposes defined in point 7 above.

    VI. Profiling of Personal Data

  10. Personal Data will be processed in an automated manner, including profiling, which is used for information on purchases, activities in the Service Provider's sales channels (computer IP, cookies, preferred methods of purchase), sociodemographic data (e.g. gender, age, income, place of residence)), in order to tailor marketing information to individual preferences.

    VII Cookies

  11. The Service Provider informs that when using the Website, Personal Data is also collected automatically in the Website's system logs, through Cookies.

  12. The Service Provider informs that from the moment the Customer connects to the Website, information about the number (including IP address) and type of the Customer's end device from which the Customer connects to the Website appears in the Service's system logs. The Service Provider informs that, in accordance with the law, it also processes data regarding the number (including IP address) and type of the Customer's end device, as well as the time of the Customer's connection to the Website, and other operational data regarding the Customer's activity on the Website. The described data is processed for technical purposes to adapt the Website to Customers' needs and to collect general statistical information regarding the operation of the Website.

  13. The Service Provider uses cookies to collect information related to the Customer's use of the Website. Cookies are IT data, in particular small text files, saved and stored on the devices through which the Customer uses the Website, enabling:

    1. maintaining the Customer's session (after logging in), thanks to which the Customer does not have to re-enter the Login and Password on each subpage of the Website,

    2. adapting and optimizing the Website to the needs of customers,

    3. personalization of marketing messages,

    4. ensuring the security and reliability of the Website.

  14. The Website uses session cookies, which are deleted after closing the web browser window, as well as persistent cookies, which are saved for a specified period of time on the devices through which the Customer uses the Website.

  15. The Customer may independently and at any time change the cookie settings, specifying the conditions for their storage and access by Cookies to the Customer's Device. The Customer may change the settings referred to in the preceding sentence using the web browser settings or through the service configuration. These settings may be changed, in particular, to block the automatic handling of Cookies in the web browser settings or to notify each time Cookies are placed on the Customer's Device. Detailed information about the possibilities and methods of handling Cookies is available in the Customer's software (web browser) settings.

  16. The Customer may delete Cookies at any time using the functions available in the web browser he or she uses.

  17. Restricting the use of cookies may affect some of the functionalities available on the Website.

  18. The Website also uses cookies placed by the Service Provider's partners, enabling the personalization of advertising activities and the accounting for their effects. The Privacy Policy does not regulate the use of cookies by third parties. More information about them may be available on the websites of the Service Provider's partners.

    VIII Rights and obligations of the Service Provider

  19. The Service Provider reserves the right to disclose selected Personal Data to competent authorities or third parties who submit a request for such information, based on an appropriate legal basis, in accordance with applicable law.

  20. The Service Provider declares that it entrusts the processing of Personal Data, on the basis of a written agreement concluded in accordance with applicable regulations, to entities providing the Service Provider with hosting, administration, maintenance and management services of the Website, as well as services in the field of message optimization and management of promotional campaigns.

  21. The Service Provider declares that it entrusts the processing of Customer Personal Data to entities providing services to the Service Provider or directly to the Customer to the extent necessary to use the Website, including the execution of contracts, in particular Orders, complaint handling, and use of financial services available in the Online Store, based on a written agreement concluded in accordance with applicable regulations. Customer Personal Data may be entrusted, in particular, to Product suppliers.

    IX Processing of Personal Data by Processors

  22. Processors within the meaning of the Privacy Policy are entities referred to in points 23 and 24, which process Personal Data on behalf of the Service Provider.

  23. The Processor is authorized and has the right to process Personal Data only for the purposes and to the extent specified in the Privacy Policy.

  24. Personal Data may be processed only in Poland, a Member State of the European Union (EU) or a signatory to the Agreement on the European Economic Area (EEA).

  25. The Processor processes the entrusted Personal Data in accordance with applicable legal provisions, in particular the Processor:

    1. applies technical and organizational measures required by law, in particular regarding the security of Personal Data processing.

    2. applies measures to ensure: i) the ability to continuously ensure the confidentiality, integrity, availability and resilience of processing systems and services; ii) the ability to promptly restore the availability and access to personal data in the event of a physical or technical incident; iii) regular testing, measuring and assessing the effectiveness of technical and organisational measures to ensure the security of processing.

    3. applies Personal Data security measures at a level no lower than that used by the Service Provider.

  26. The Processor may amend, delete, or block Personal Data being processed only upon the Data Controller's instruction. If a data subject requests the Processor directly to amend or delete their Personal Data, the Processor shall immediately, but no later than 5 business days, forward such request to the Service Provider.

  27. The Processor should not process Personal Data for any purpose other than fulfilling the obligations set out in the Privacy Policy. The Processor may not disclose Personal Data to third parties.

  28. The Processor is liable to the person whose Personal Data are processed for any damage that the person may suffer as a result of the Processor’s actions and omissions.

    X Rights and obligations of the person whose Personal Data is processed

  29. Every customer has the right to:

    1. access to your Personal Data, the right to rectify it, delete it and the right to request restriction of processing.

    2. object to the processing of Personal Data, withdraw consent to the processing of Personal Data for one or more purposes for which it was granted, at any time without affecting the lawfulness of processing based on consent before its withdrawal, as well as the right to transfer your Personal Data.

  30. In order to exercise the rights referred to in point 32 a) above, please send an e-mail to the following address: biuro@mydecor.pl or call the telephone number 22 884 80 83

  31. In order to exercise the rights referred to in point 32 b) above, please send an e-mail to: biuro@mydecor.pl with the word "objection" or "withdrawal of consent" in the title, call 22 884 80 83 and inform about the objection or withdrawal of consent, click on the link causing the withdrawal of consent included in the content of commercial information or send written information about the withdrawal of consent to receive commercial information to the address of the Service Provider: Mydecor Sp. z o.o. ul. Juranda Ze Spychowa 65 b; 03-257 Warsaw, with the note PERSONAL DATA.

  32. If the Customer places any personal data of other people on the Website (including their name, address, telephone number or e-mail address), they may do so only if they do not violate applicable law and the personal rights of such people.

  33. The Customer is entitled to use Personal Data and content made available by other persons on the Website only in connection with the use of the Website and with their consent in a manner consistent with the provisions of applicable law, unless they obtain the consent of these other persons to process their Personal Data and their content within the scope or for the purpose provided for in the Privacy Policy and going beyond the use of the Website.

  34. Every Customer has the right to lodge a complaint with the authority supervising the processing of Personal Data.

    XI Personal Data Protection

  35. The Service Provider declares that it makes every effort to provide Customers with a high level of security in the use of the Website and for this purpose:

    1. applies technical and organizational measures required by law, in particular regarding the security of Personal Data processing;

    2. applies measures to ensure: i) the ability to continuously ensure the confidentiality, integrity, availability and resilience of processing systems and services; ii) the ability to promptly restore the availability and access to Personal Data in the event of a physical or technical incident; iii) regular testing, measuring and assessing the effectiveness of technical and organisational measures to ensure the security of processing.

  36. Any events affecting the security of information and data transmission, including suspected sharing of files containing viruses and other files of a similar nature or other than files with destructive mechanisms, should be reported to the Service Provider via e-mail: biuro@mydecor.pl

    XII Final Provisions

  37. In matters not regulated in the Privacy Policy, the provisions of law regarding the processing of Personal Data, including the GDPR, shall apply.