PRIVACY AND COOKIES POLICY www.kraksky.pl

• 1. General Information

1. This document sets out the privacy rules on the website www.kraksky.pl with regard to the collection, processing and use of personal data obtained by the Administrator.
2. Personal data collected by the Administrator is processed on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter GDPR), the Personal Data Protection Act of 10 May 2018, and the Act of 18 July 2002 on the provision of electronic services (Journal of Laws 2002 No. 144, item 1204, as amended).
3. Pursuant to Article 4(7) of the GDPR, the Data Controller is STOWARZYSZENIE SKYDIVE KRAKÓW, Węgrzce Wielkie 616, 32-002 Węgrzce Wielkie, NIP: 6832121243.
4. The Administrator takes particular care to protect the privacy and information entrusted to it relating to users of the website.
5. In connection with the Administrator’s use of tools supporting its ongoing operations provided by, for example, Google, the Customer’s Personal Data may be transferred to a country outside the European Economic Area, in particular to the United States of America (USA) or another country in which a cooperating entity maintains tools for processing Personal Data in cooperation with the Administrator.

• 2. Principles of Personal Data Processing

1. Personal data is processed in accordance with the principles set out in Article 5 of the GDPR, i.e.:

1. processed lawfully, fairly and in a transparent manner in relation to the data subject (“lawfulness, fairness and transparency”);
2. collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes (“purpose limitation”);
3. adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimisation”);
4. accurate and, where necessary, kept up to date (“accuracy”);
5. kept in a form which permits identification of the data subject for no longer than is necessary for the purposes for which the personal data are processed (“storage limitation”);
6. processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (“integrity and confidentiality”).

• 3. Purposes and Legal Bases of Processing

1. Personal data collected on www.kraksky.pl includes information such as: first name, surname, email address, phone number, delivery address.
2. The Administrator collects information provided voluntarily by Customers of the Website. However, providing the specified personal data is a condition for placing an order, and the consequence of not providing it will be the inability to order products in the store.
3. Personal data will be processed on the basis of Article 6(1)(b) of the GDPR, i.e. where processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.
4. Upon the granting of separate consent, on the basis of Article 6(1)(a) of the GDPR, data may also be processed for the purpose of sending commercial information by electronic means or making telephone calls for direct marketing purposes – respectively in connection with Article 10(2) of the Act of 18 July 2002 on the provision of electronic services or Article 172(1) of the Act of 16 July 2004 – Telecommunications Law.
5. The Customer’s Personal Data may also be processed on the basis of:

1. applicable legal provisions – where processing is necessary to fulfil a legal obligation incumbent on the Administrator, e.g. where the Administrator settles concluded contracts on the basis of tax or accounting regulations (Article 6(1)(c) of the GDPR);
2. necessity for purposes other than those listed above arising from the legitimate interests pursued by the Administrator or by a third party, in particular for the establishment, pursuit or defence of claims (Article 6(1)(f) of the GDPR).

1. Furthermore, the Administrator may store information about connection parameters such as IP addresses for technical purposes related to server administration and for gathering general, statistical demographic information (e.g. about the region from which the connection originates), as well as for security purposes.
2. Personal data processed for purposes related to the completion of purchases will be processed for the period necessary to complete the purchase and order, after which data subject to archiving will be stored for the period appropriate to the limitation of claims. Personal data processed for marketing purposes covered by a consent declaration will be processed until the consent is withdrawn.

• 3. Recipients of Personal Data

1. The catalogue of recipients of personal data processed by the Administrator results from legal provisions, the customer’s consent, and the scope of services used by the customer.
2. Recipients of personal data may include state authorities, service providers, employees, associates of the administrator, and an accounting office.

• 4. Your Rights in Personal Data Protection

1. Given the voluntary nature of providing your personal data, you have the right to:

1. access your personal data (Article 15 of the GDPR)
2. rectify your personal data (Article 16 of the GDPR)
3. erase your personal data (the “right to be forgotten” – Article 17 of the GDPR)
4. restrict the processing of your personal data (Article 18 of the GDPR)
5. data portability (Article 20 of the GDPR)
6. object (Article 21 of the GDPR)

1. If you determine that the processing of personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office.
2. Consent to the processing of personal data may be withdrawn at any time. Withdrawal of consent to the processing of data does not affect the lawfulness of data processing carried out by the Administrator on the basis of consent before its withdrawal.

• 5. Payment Service Providers

1. Transaction data, including personal data, may be transferred to the payment operator PayU S.A. with its registered office in Poznań, 60-166 Poznań, ul. Grunwaldzka 186, to the extent necessary for processing payment for the order. The Customer has the right to access and correct their data. Providing the data is voluntary, while at the same time necessary to use the service.
2. Transaction data, including personal data, may be transferred to the payment operator PayPal (PayPal (Europe) S.à r.l. & Cie, S.C.A., 5th floor, 22-24 Boulevard Royal, 2449 Luxembourg), to the extent necessary for processing payment for the order. The Customer has the right to access and correct their data. Providing the data is voluntary, while at the same time necessary to use the service.

COOKIES POLICY

• 1. What are cookies and for what purpose are they used in relation to customers.

1. Cookies are small text files sent by the server and stored on the Customer’s end device in connection with the use of the website www.kraksky.pl.
2. They store information that the Administrator may need in order to adapt to the way the customer uses the site and to collect statistical data about the website.
3. The use of cookies is aimed at the correct functioning of the website. The cookies used by the Administrator are safe for the Customer’s devices. In particular, it is not possible for viruses or other unwanted or malicious software to reach the Customer’s devices through this means. These files allow the software used by the Customer to be identified and the Website to be tailored individually to each Customer. Cookies typically contain the name of the domain they originate from, the duration of their storage on the device, and an assigned value.
4. The cookies used are primarily intended to make it easier for the customer to use the Website by remembering information entered once, so that the customer does not have to re-enter it each time, and cookies also serve to tailor their content, including displayed advertisements, to the customer’s preferences.
5. Cookies collect various types of information which, as a rule, do not constitute personal data. However, some information, depending on its content and manner of use, may be linked to a specific person – and thus be considered personal data. The provisions of the Privacy Policy, in particular those concerning the rights of the data subject, apply to information collected by cookies that may be linked to a specific person. Information regarding data collected by cookies is also made available, among other places, in the content of the information clause posted in a visible and easily accessible location during the first visit to the website.
6. The Customer may object to actions taken by the Administrator, and where consent has been given, it may be withdrawn at any time.

• 2. What types of cookies are used.

1. The Administrator uses the following types of cookies:

1. Session cookies: these are stored on the Website Customer’s device and remain there until the end of the given browser session. The stored information is then permanently deleted from the Website Customer’s device memory. The session cookie mechanism does not allow any personal data or any confidential information to be retrieved from the Website Customer’s device.
2. Persistent cookies: these are stored on the Website Customer’s device and remain there until they are deleted. Ending the given browser session or switching off the device does not cause them to be deleted from the Website Customer’s device. The persistent cookie mechanism does not allow any personal data or any confidential information to be retrieved from the Website Customer’s device.
3. “Analytical” cookies enable a better understanding of the way the Service User interacts with the Website’s content, allowing for better organisation of its layout. “Analytical” cookies collect information about how the Website is used by the Service User, the type of page from which the Service User was redirected, and the number of visits and duration of the Service User’s visit to the Website. This information does not record the Service User’s specific personal data, but is used to compile statistics on Website usage.

• 3. Additional Information on Cookies

1. Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to the way the Customer uses the Website. For this purpose, information about the Customer’s navigation path or the time spent on a given page may be stored.
2. With regard to information about Customer preferences collected by the Google advertising network, the Customer may view and edit information derived from cookies using the tool at: https://www.google.com/ads/preferences/.
3. We use the following services:

1. Google Analytics, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for the purpose of analysing traffic in the Service. On this basis, we obtain statistics showing how you and other users use the Service.
2. Google Ads, provided by Google Ireland Ltd. | Gordon House, Barrow Street, Dublin 4, Ireland, for the purpose of optimising the display of advertisements, remarketing and promoting the Service.

1. Obtaining and storing information using cookies is possible on the basis of consent. The Customer may independently and at any time change the settings regarding cookies, specifying the conditions for their storage and access to the Customer’s device. The Customer may make the changes referred to in the preceding sentence via the web browser settings or via the service configuration. These settings may be changed in particular so as to block the automatic handling of cookies in the web browser settings or to be notified each time cookies are placed on the Customer’s device. Detailed information on the possibilities and ways of handling cookies is available in the software (web browser) settings.
2. The Customer may delete cookies at any time using the functions available in the web browser they use.
3. Restricting the use of cookies may affect certain functionalities available on the website.

This version of the privacy and cookies policy is effective from 19.07.2021.