Privacy Policy

Privacy policy of the One Million Shop Website
https://www.onemillionshop.com
("Website")

Dear User!

We care about your privacy and want you to feel comfortable while using our services. This is why we present below the most important information concerning the processing of your personal data and cookies used by our Website. The information complies with General Data Protection Regulation (GDPR).

PERSONAL DATA ADMINISTRATOR

Grupa One Million sp. z o.o. with its seat in Katowice (40-875), 101 Tysiąclecia Street, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court Katowice-East in Katowice, VIII Commercial Division of the National Court Register, number: 0000692558, with Tax Identification Number: 9542781961 and Polish National Business Registry Number: 368250068, initial capital of 50 000,00 PLN.

If you wish to contact us about processing your personal data, please send us an e-mail: [email protected]

If you make a purchase in the Website, the administrator of your personal data in connection with the concluded sales contract, is the seller of a given merchandise or service. However, this privacy policy concerns processing your personal data by One Million Group.

PERSONAL DATA AND PRIVACY

We process your data for the purposes of functioning of this Website and providing the services we offer. Below you can find the detailed information about processing your data, depending on the activities you choose.

WE PROCESS YOUR DATA IN THE FOLLOWING SITUATIONS:

If you use the services offered in our Website (including the opening of a User’s Account)

  • Purpose of processing
    • providing the services we offer
    • Testing your satisfaction with the services we provide in order to suit them to the Users’ needs in the future
  • On what ground?
    • The contract for providing services or activities taken at your request, aiming at entering into such a contract (Art. 6 section 1 letter b GDPR)
    • Our legal obligation connected with accountancy and prevention of money laundering and terrorist financing (Art.. 6 section 1 letter c GDPR)
    • Our legally justified interest consisting in processing data for the above-mentioned purpose (Art. 6 section 1 letter f GDPR)
  • How long?
    • Until you delete your Account in our Website or until the legal obligations expire * / **
    • Not longer than a month since the moment of completion of providing the service or until the moment we comply with your objection for processing the data * / **
  • What happens if I refuse to provide my data?
    • We will not be able to provide our services

When you contact us

  • Purpose of processing
    • Servicing your inquiry or application
  • On what ground?
    • the contract or activities taken at your request, aiming at entering into such a contract (Art. 6 section 1 letter b GDPR – in case your inquiry or application concerns a contract we are or could be a party of
    • Our legally justified interest consisting in processing your data in order to communicate with you (Art. 6 section 1 lit. f GDPR) – if your inquiry or application does not concern the contact
  • How long?
    • Not longer than a month since the problem described in your inquiry is solved
    • or until we comply with your objection for processing the data */**
  • What happens if I refuse to provide my data?
    • We will not be able to answer your inquiry or application

When you enter our website with the browser settings which allow for performing marketing activities

  • Purpose of processing
    • Direct marketing in the form of displaying personalized adverts (more information in the section ”Marketing activities” and ”Cookies” of Privacy Policy)
  • On what ground?
    • Our legally justified interest consisting in processing data for the above-mentioned purpose (Art. 6 section 1 letter f GDPR)
  • How long?
    • Until the cookie expiries or until we comply with your objection for processing the data * / **
  • What happens if I refuse to provide my data?
    • Lack of possibility to receive product or service suggestions what you may be interested in

When you enter our website with the browser settings which allow for performing analytic activities

  • Purpose of processing
    • Analysis of the way you use and move around the Website, in order to suit the website to the Users’ needs and behavior (More information in the section ”Analytic activities” and ”Cookies ” of Privacy Policy)
  • On what ground?
    • Our legally justified interest consisting in processing data for the above-mentioned purpose (Art. 6 section 1 letter f GDPR)
  • How long?
    • Until the cookie expiries or until we comply with your objection for processing the data * / **
  • What happens if I refuse to provide my data?
    • We will not take into consideration your preferences in terms of using the Website, while working on its accessibility and intuitive features

* When you undertake actions that may cause certain claims against our Website or services to arise

  • Purpose of processing
    • determining, seeking or defending the claims by Parties, in connection to the contract concluded or services provided
  • On what ground?
    • Our legally justified interest consisting in processing data for the above-mentioned purpose (Art. 6 section 1 letter f GDPR)
  • How long?
    • Until the claims’ period of prescription expires or until we comply with your objection for processing the data * / **
  • What happens if I refuse to provide my data?
    • No possibility to determine, seek or defend the claims

** depending on which applies in a given case and which happens first

ANALYTIC ACTIVITIES

Within the Website, we run analytic activities aiming at making it more intuitive and accessible - it will apply to you only in case your browser’s setting allow such activities. While analyzing, we will take into consideration the way you move around the Website - e.g. how much time you spend on a given subpage or which areas of the Website you click at. Thanks to this, we are able to suit the layout, look of the Website and the content to the Users’ needs.

DATA SECURITY

While processing your personal data, we use organizational and technical measures consistent with competent rules of law, including the encryption of connection through SSL certificate.

YOUR RIGHTS

You have the right to demand:

  • access to your personal data (Art. 15 GDPR),
  • correcting your personal data (Art. 16 GDPR),
  • deleting it (Art. 17 GDPR),
  • limiting its processing (Art. 18 GDPR),
  • moving the data to another administrator (Art. 20 GDPR).

You also have the right to:

  • appeal at any time against processing your data:
    • For reasons connected with your particular situation - against processing the data that concern you, under the terms of Art. 6 section 1 letter f GDPR (i.e. our legally justified interests), (Art. 21 section 1 GDPR);

Contact us, if you wish to exercise your rights.

If you think that your data are processed with the violation of the law, you can file a complaint to the Chairman of Personal Data Protection Authority.

COOKIES

Our Website, as most others, uses cookies. These files:

  • Are saved in the memory of your device (computer, phone, etc.);
  • Enable, among others, to use all Website functions available to you;
  • Do not cause any changes in your device’s settings.

By using certain options in your browser, you can, at any time:

  • Delete cookies,
  • Block the use of cookies in the future.

This Website uses cookies to:

  • Remember the information about your session,
  • Run statistics,
  • Share the Website’s functions.

In order to learn how to manage cookies, including how to disable them in your browser, you can use the help file of your browser. By pressing F1 button in your browser, you will see more information on this subject. Moreover, helpful tips can be found on the following subpages, depending on the browser you use:

  • Firefox
  • Chrome
  • Safari
  • Internet Explorer / Microsoft Edge

If you do not disable cookies in your browser’s setting, it means that you agree for them to be used.

We process cookies for the maximum of 30 days.

The cookies saved from the Website are used by entities providing us with analytic services - you can find more information in the table below.

More information on cookies can be found in Wikipedia

EXTERNAL SERVICES / DATA RECEIVERS

We use the services of external entities that support us in conducting business. We entrust them with the processing of your data - these entities process data only on our documented order.

Below is a list of recipients of your data:

ACTIVITYDATA RECIPIENTDATA RECIPIENT TRANSFERRING DATA OUTSIDE EUROPEAN UNION
Each activity in connection with the Website
Persons cooperating with us through civil legal contracts, supporting our current activitiesDoes not take place
Hosting providerDoes not take place
Using the services connected with making payments (including the verification payment
Accounting officeDoes not take place
Bookkeeping software providerDoes not take place
Appropriate public authorities (within the scope that obliges us to share the data)Does not take place
Purchase of merchandise through the Website
The seller for a sales contract concludedDoes not take place
When you initiate the contact (e.g. in order to ask a question)
Entities which send emails and provide an email boxyes – the USA *
When you enter our Website with the browser settings which allow us to provide direct marketing
Entity which enables to provide direct marketing based on the content you displayyes – the USA **
When you enter our Website with the browser settings which allow us to provide analytic activities
Entity which enables to provide analytic activities based on the way you move around the Websiteyes – the USA *

TRANSFERRING PERSONAL DATA TO COUNTRIES OUTSIDE EUROPEAN UNION

* Your personal data will be also processed by entities outside European Union - in cases marked in the table above. The proper level of securing your data, including the use of suitable protection, is ensured by the participation of the above-mentioned entities in EU-U.S. Privacy Shield, established by the Implementing Decision of the European Commission as a set of rules that guarantee proper protection of your privacy.

KRS: 0000692558, NIP: 9542781961. District court Katowice-Wschód in Katowice, Faculty VIII.

Copyright © 2020 Grupa One Million Sp. z o.o. All Rights Reserved.