Privacy policy

The personal data administrator responsible for their processing is:
Modelmania
ul. Kilińskiego 4
Gdańsk, 80-452 post office@modelmania.com.pl

 

Thank you for your interest in our online store. The protection of your privacy is very important to us. Below you will find detailed information on the handling of your data.

1. Access data and hosting

You can visit our websites without providing personal information. Each time a website is accessed, the server automatically saves only so-called cookies. server logs, e.g. the name of the requested file, your IP address, date and time of the request, the amount of data transferred and the Internet service provider submitting the query (so-called access logs) and documents the page visit. This data is only analyzed to ensure the proper functioning of our website and to improve our offer. The above serves in accordance with art. 6 sec. 1 lit. f GDPR to secure our legitimate interest in the optimal, correct presentation of our websites and offers.

Hosting

All access data will be deleted at the latest one week after the end of your visit to our website.

Website hosting and display services are partly provided on our behalf by our service providers as part of entrusting data processing. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basics of working with them, please contact us. Our contact details can be found in the section "Our contact details and your rights".

2. Collection and processing of data for the purposes of contract performance and contact

2.1 Data processing for the purposes of contract performance

We process the personal data provided by you voluntarily when placing an order in order to perform the contract (including inquiries regarding the consideration of claims under warranty for defects or guarantees and the obligation to inform about necessary updates). The legal basis in this regard is art. 6 sec. 1 lit. b GDPR. Mandatory fields are marked as such because they concern data that is necessary to complete the order and without providing them we are unable to complete it. What data is collected results directly from the forms into which the data is entered.

Further information on the processing of your data, in particular regarding the transfer of data to our service providers for order processing, payment and shipping, can be found in the following sections of this privacy policy. After the contract is completed, the processing of your data will be limited, and after the expiry of the retention periods required under tax regulations and the Accounting Act, these data will be deleted (Article 6(1)(c) of the GDPR), unless you give your express consent (Article 6 section 1(a) of the GDPR) for further use of this data for other purposes or we reserve the right to further use them in cases permitted by law, which we inform you about in this privacy policy.

2.2 Customer Account

If pursuant to Art. 6 sec. 1 lit. a RODO, you will give your consent to set up a customer account - we will process your personal data necessary for this purpose. They will also be used for future orders on our website. Your customer account may be deleted at any time. For this purpose, please send a message to our contact address indicated in the section "Our contact details and your rights" or use the appropriate function in the customer account settings. After deleting your customer account, the processing of your data will be limited, and after the expiry of the retention periods specified in tax regulations and the Accounting Act, these data will be deleted (Article 6(1)(c) of the GDPR), unless you expressly consent (Article 6(1)(a) of the GDPR) for further use of these data or in accordance with in accordance with applicable law, we reserve the right to further use the data for other purposes, which in such a situation we inform you about in this privacy policy.

2.3 Data processing for contact purposes

As part of communication with the client, we process personal data in order to process your inquiries (Article 6(1)(b) of the GDPR). You provide us with this data voluntarily when contacting us (e.g. via the contact form or e-mail). Mandatory fields are marked as such because they relate to data that is necessary to develop the query. What data is collected results directly from the forms into which the data is entered. After your inquiry has been fully processed, your data will be deleted, unless you expressly consent (Article 6(1)(a) of the GDPR) to further use of this data for other purposes or we reserve the right to further use it in cases permitted by law, about which in such a situation, we inform you in this privacy policy.

3. Data processing for the purpose of delivery

In order to perform the contract (Article 6(1)(b) of the GDPR), we transfer your data to the shipping company selected by you in the ordering process, which was commissioned to deliver the ordered products.

4. Data processing for the purpose of making payments

In order to process payments in our online store, we cooperate with external service providers that support electronic online payments and transfer your data to the payment service company selected by you in the ordering process. The above is for the performance of the contract (Article 6(1)(b) of the GDPR).

Data processing to prevent fraud and optimize payments

In some situations, we may provide our service providers with additional information that may be used by them along with the information necessary to complete the payment. These service providers then act on our behalf as processors and provide us with services in the field of fraud prevention and optimization of payment processes (e.g. invoicing, analysis of rejected payments, accounting support). According to Art. 6 sec. 1 lit. f GDPR, this serves our legitimate interests in protection against abuse and fraud and in the effective management of payments.

Installment purchase

If you choose the "purchase in installments" payment and express your consent (Article 6(1)(a) of the GDPR), your personal data (name, surname, address, e-mail address, telephone number, date of birth, IP address, gender ) together with the data necessary to complete the transaction (article, invoice amount, due date, total amount, invoice number, taxes, currency, date and time of the order) will be transferred to our partner Credit Agricole Bank Polska SA, ul. Legnicka 48 bud. CD, 54-202 Wroclaw, Poland. In order to verify the creditworthiness of the customer making the purchase in installments, our partner checks and collects information from publicly available databases as well as from economic information offices and agencies. The list of service providers from whom information is obtained, including information on the customer's creditworthiness determined on the basis of mathematical and statistical models, as well as information on data processing after their transfer to our partner Credit Agricole Bank Polska SA, can be found in its privacy policy at website: https://www.credit-agricole.pl/polityka-prezentnosci.

The information received regarding the statistical probability of non-payment will be used by our partner Credit Agricole Bank Polska SA to make decisions regarding the establishment, implementation or termination of the contractual relationship. You can present your point of view and disagree with a given decision by contacting our partner Credit Agricole Bank Polska SA for this purpose. The consent to the transfer of data expressed in the ordering process may be revoked by you without giving any reason at any time with effect for the future.

5. Cookies and similar technologies

General Information

In order to make your visit to our website more attractive and to enable you to use its key functions, we use technological tools for this purpose, including the so-called cookies. cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the web browser session, i.e. after it is closed (so-called session cookies). Other cookies are stored on your end device and enable us to recognize your browser the next time you visit the website (so-called persistent cookies).

Protection of the privacy of end devices
When using our online offer, we use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website. In this respect, the storage of information on the user's end device or access to information that is already stored on his end device does not require the user's consent.

For functions that are not strictly necessary, the storage of information on the user's end device or access to information already stored on his end device requires the user's consent. It should be taken into account that in the absence of consent, some functions or elements of the website may not be available in full. Any consents granted by the user remain valid until the consent is withdrawn, the settings are configured or the relevant settings are reset on the end device.

Other data processing using cookies and other technologies

We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. shopping cart function). These technologies process data such as your IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website (e.g. about the contents of the shopping cart). This serves in accordance with Art. 6 sec. 1 lit. f GDPR, our legitimate interest in the optimal presentation of our offer.

In addition, we also use technological tools to comply with legal obligations to which we are subject (e.g. to prove consent to the processing of your personal data), as well as for web analytics and internet marketing. Further information on this, including the applicable legal bases for data processing, is provided in the following sections of this privacy policy.

In the auxiliary menu of the web browser you will find explanations on changing the settings in the field of cookies. They are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

When you have given us your consent to use certain technological tools (Article 6(1)(a) of the GDPR), you may withdraw your consent at any time. In order to withdraw your consent, please contact us via the contact address indicated in the section "Our contact details and your rights".

6. Use of cookies and similar technological tools

Provided you have given your consent (Article 6(1)(a) of the GDPR), we use the following cookies and other similar technological tools of external service providers on our website. After the purpose of processing is achieved and the use of a given technological tool is completed, the data collected as part of the use of these tools will be deleted. The consent given may be withdrawn by you at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the section "Cookies and similar technologies". Further information can be found on the websites of the respective service providers. If you have questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found in the section "Our contact details and your rights".

Use of Google services

We use the following technology tools from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information collected automatically by Google technologies regarding the use of our website is usually transferred to the server of Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued an adequacy decision for the US. Our cooperation is based on standard data protection clauses adopted by the European Commission. If your IP address is processed as part of the use of Google's technological tools, then thanks to the activated IP anonymization, your address is shortened before being stored on Google's servers. Only in exceptional cases will the full IP address be sent to a Google server and shortened there. Unless otherwise specified for individual Google technologies described in this privacy policy, data processing is carried out on the basis of an agreement concluded with Google for the co-control of personal data in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in the privacy policy on the Google website .

Google Analytics

For the purpose of analyzing the use of our website, we use Google Analytics - a web analytics tool from Google, which automatically processes your data for this purpose (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website ) and creates pseudonymous user profiles on their basis. Cookies may be used for this purpose. Your IP address is generally not combined with other data collected by Google. Data processing as part of the Google Analytics service takes place on the basis of a data entrustment agreement concluded with Google.

Google Maps

For the visual presentation of geographical information, Google Maps will store and process information about your use of the maps and individual functions, including, for example, your IP address and location data. We have no influence on this data processing by Google.

7. Integration with Trusted Shops Trustbadge and other widgets

If you have given your consent in accordance with Art. 6 sec. 1 lit. a GDPR, Trusted Shops widgets are integrated into our website in order to display Trusted Shops services (e.g. quality seal, feedback system) and to offer Trusted Shops products to buyers after placing an order.

The Trustbadge and the services advertised with it are an offer of Trusted Shops AG, Subbelrather Str. 26 GDPR, we are jointly responsible for the protection of jointly controlled data. We hereby inform you about the essential content of the joint arrangements of the joint controllers (Article 26(2) of the GDPR).

As part of the joint responsibility between us and Trusted Shops AG, if you have questions about data protection and want to assert your rights, please contact Trusted Shops using the contact details provided in the Trusted Shops privacy policy . However, regardless of this, you can always contact the co-administrator of your choice. Your inquiry or request will then, if necessary, be forwarded to the other joint controller for processing/answering it.

7.1 Data processing as part of the integration of Trustbadga and other widgets

The Trustbadge is provided by the American content provider CDN (Content-Delivery-Network). An adequate level of data protection is ensured by standard data protection clauses and additional contractual agreements.

When the Trustbadge is called up, the web server automatically saves a so-called log file (server logs), which also contains your IP address, date and time of the call, the amount of data transferred and the requesting operator (access data) and documents the call. The IP address is anonymized immediately after collection, so that the saved data cannot be assigned to a specific person. The anonymized data is used in particular for statistical and error analysis purposes.

7.2 Post-Order Data Processing

If you have given your consent, the Trustbadge obtains access to the order information stored on your end device after placing the order (order sum, order number and, if applicable, the product purchased) and your e-mail address used when placing the order. The email address is hashed using a crypto one-way function. The hash value is then transmitted to Trusted Shops together with the order information in accordance with Art. 6 sec. 1 point 1 lit. and the GDPR.

This is to check whether you are already registered with Trusted Shops AG for the use of Trusted Shops buyer services. If you are already registered, further data processing takes place in accordance with the contract between you and Trusted Shops. If you are not registered or do not consent to the Trusbadge automatically recognizing your registration, you will be given the option to register manually for the use of the services or to secure your purchase under an existing user agreement.

For this purpose, the Trustbadge, after placing an order in the store, obtains access to the following information stored on the end device you use: order sum, order number and e-mail address. This is necessary so that we can offer you buyer protection. The above data is only transferred to Trusted Shops if you actively decide to exercise buyer protection by clicking on the correspondingly marked button in the so-called trust card. If you decide to use these services, further data processing is carried out on the basis of the contract concluded with Trusted Shops (Article 6 (1) (b) of the GDPR) in order to register buyer protection and secure your order, and so that you can receive email invitations to review your purchase.

Trusted Shops uses service providers for hosting and log monitoring. The legal basis in this regard is art. 6 sec. 1 lit. f GDPR, and the legitimate interest is to ensure the trouble-free operation of our pages. The related data processing may also take place in third countries (USA and Israel). Adequacy has been ensured for the US by agreeing on standard data protection clauses and further contractual measures, and for Israel there is an adequacy decision. Further information can be found here .

8. Social media

8.1 Social Media Plugins: Facebook (Meta)

On our website, so-called cookies are used. plugins (buttons) of social networking sites. These plugins are available via an HTML link, which ensures that when visiting our website containing such plugins (buttons), no automatic, direct connection to the servers of the operator of a given social networking site is established. After clicking on one of the buttons (plug-in), a new window of your browser will open, displaying the page of a given social networking site, where you can approve the use of a given button, e.g. "Like" or "Share".

8.2 Our activity on social networks: Facebook, Instagram

If you have given your consent to a given social networking site in this regard (Article 6(1)(a) of the GDPR), when visiting our account/profile on the above-mentioned social networking sites, your data will be automatically collected and stored for internet analytics and marketing purposes. Pseudonymous user profiles are created on the basis of this data. They can be used, for example, to place so-called cookies within and outside social networks. personalized advertisements that are likely to match your interests. Cookies are usually used for this purpose.
Detailed information on the processing and use of your data by individual social networking sites, as well as information on your rights and the possibility of configuring privacy settings, as well as contact details for the purposes of submitting an inquiry are described in the privacy policies of individual social networking sites linked below. If you need assistance in this regard, you can also contact us.

Facebook (by Meta) is a social networking service provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). Automatically processed information about your activity and the way you use our fan page on Facebook (by Meta) is usually sent to the server of Meta Platforms Ireland, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and stored there . In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing when visiting the Facebook fan page (by Meta) is carried out in accordance with Art. 26 of the GDPR based on the joint arrangements of the joint controllers, which are available here . Further information on the processing of your personal data when visiting a Facebook fan page (information on the page statistics function) is available here .

Instagram (by Meta) is a social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). Automatically processed information about your activities and the use of our Instagram fan page account is usually sent to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and stored there. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing when visiting the Instagram fan page account (by Meta) is carried out in accordance with Art. 26 of the GDPR based on the concluded joint arrangements of the joint controllers. Further information on the processing of your personal data when visiting a Facebook fan page (information on the page statistics function) is available here .

9. Our contact details and your rights

9.1 Your rights

Persons whose data is processed have the following rights:

• in accordance with Art. 15 of the GDPR: the right to obtain information about the processing of data to the extent specified in this article;

• in accordance with Art. 16 GDPR: the right to have your inaccurate or incomplete personal data rectified;

• in accordance with Art. 17 GDPR: the so-called "the right to be forgotten", i.e. the right to delete your personal data stored with us, unless further processing is necessary:

  • to exercise the right to freedom of expression and information;

  • to comply with a legal obligation;

  • for reasons of public interest;

  • to establish, pursue or defend claims;

• in accordance with Art. 18 GDPR: the right to limit the processing of personal data, provided that:

  • the accuracy of this personal data is contested by you;

  • the processing is unlawful and you oppose their erasure;

  • we no longer need personal data, but you need them to establish, pursue or defend claims;

  • you have submitted pursuant to Art. 21 objection to data processing;

• in accordance with Art. 20 GDPR: the right to receive the data provided to us in a structured, commonly used and machine-readable format and to send it to another controller;

• in accordance with Art. 77 of the GDPR: the right to lodge a complaint with the supervisory body (President of the Personal Data Protection Office "UODO").

Right to object If we process personal data in the manner described in this privacy policy to protect our legitimate interests, then you may object to the processing of your data for this purpose - with effect for the future. If the processing takes place for direct marketing purposes, you can exercise your right to object at any time. If the processing takes place for other purposes, you have the right to object only for reasons arising from your particular situation. After you have exercised your right to object, we will not continue to process your personal data, unless we demonstrate the existence of valid, legitimate grounds for processing and they override your interests and rights, or when the data processing is for the purpose of asserting, exercising or defending legal claims . The previous sentence does not apply when data processing is carried out for direct marketing purposes. In this case, after expressing your objection, we will always stop further processing of your personal data.

9.2 Contacting us

In case of questions regarding the collection, processing and use of your personal data, as well as in the event of a request for information, rectification, limitation of processing or deletion of data, and in order to withdraw consents granted or object to the use of specific data, please contact the data controller directly indicated at the beginning of this privacy policy.