privacy policy
WHAT IS THE PRIVACY POLICY?
We would like to familiarize you with the details of our processing of your personal data to give you full knowledge and comfort in using our website.
Since we operate in the internet industry ourselves, we know how important it is to protect your personal data. Therefore, we make special efforts to protect your privacy and the information you provide to us.
We carefully select and apply appropriate technical measures, in particular those of a programming and organizational nature, ensuring the protection of processed personal data. Our website uses encrypted data transmission (SSL), which ensures the protection of data identifying you.
In our Privacy Policy you will find all the most important information regarding our processing of your personal data. We ask you to read it and we promise that it will not take you more than a few minutes.
Who is the administrator of the website www.theodderside.com?
The administrator of the website is THE ODDER SIDE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, based in Warsaw, at the following address: ul. View of 10 units 3A, 00-023 Warszawa, registered by the District Court for the Capital City of Warsaw Warsaw in Warsaw, 14th Commercial Division of the National Court Register, KRS 0000983656, NIP 7010439296, REGON 147420946, with a share capital of PLN 5,000 (i.e.: us).
PERSONAL DATA
What legal act regulates the processing of your personal data?
Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95 /46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), commonly known as: GDPR. To the extent not regulated by the GDPR, the processing of personal data is regulated by the Personal Data Protection Act of May 10, 2018.
Who is the administrator of your personal data?
The administrator of your personal data is THE ODDER SIDE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, based in Warsaw, at the following address: ul. View of 10 units 3A, 00-023 Warszawa, registered by the District Court for the Capital City of Warsaw Warsaw in Warsaw, 14th Commercial Division of the National Court Register, KRS 0000983656, NIP 7010439296, REGON 147420946, with share capital of PLN 5,000, telephone: +48 882 124 830, e-mail: hello@theodderside.com
You can contact us regarding your personal data via:
- e-mail: hello@theodderside.com,
- traditional mail: ul. View of 10 units 3A, 00-023 Warsaw,
- phone: +48 882 124 830.
The personal data administrator has appointed a Data Protection Inspector (DPO) - Mikołaj Ryzop, whom you can contact regarding the protection of your personal data via:
- e-mail: ryzop@dpag.pl;
- phone number: +48 600094612.
HOW DO WE PROCESS YOUR PERSONAL DATA THAT YOU PROVIDE TO US?
What personal data do we process and for what purposes do we process it?
On our website, we offer you many different services for which we process various personal data, based on various legal bases.
|
Objective |
Personal data |
Legal basis for processing |
Data storage time |
|
conclusion and performance of the contract |
name, surname, correspondence address, Tax Identification Number, e-mail address, telephone number |
art. 6 section 1 letter b) GDPR, i.e. processing in order to take action at your request, before concluding a contract and processing necessary to perform a contract to which you are a party |
until the expiry of the limitation period for claims regarding the performance of the contract |
|
setting up and maintaining an account |
name, surname, e-mail address, telephone number, mailing address |
art. 6 section 1 letter b) GDPR, i.e. processing in order to take action at your request, before concluding a contract and processing necessary to perform a contract to which you are a party |
until the expiry of the limitation period for claims regarding the performance of the contract |
|
newsletter |
name, surname, e-mail address |
art. 6 section 1 letter a) GDPR, i.e. processing based on your consent to the processing of your personal data |
until the date you withdraw your consent to the processing of personal data |
|
contact form |
name, e-mail address |
art. 6 section 1 letter f) GDPR, i.e. processing in order to pursue our legitimate interest, consisting in maintaining continuity of communication and enabling contact with us in matters of our business activities |
until you object to the processing of your personal data |
|
interactive chat |
name, surname, e-mail address |
art. 6 section 1 letter f) GDPR, i.e. processing in order to pursue our legitimate interest, consisting in maintaining continuity of communication and enabling contact with us in matters of our business activities |
until you object to the processing of your personal data |
|
traffic analysis on the online store website |
residence address, IP address, browser data |
Art. 6 section 1 letter f) GDPR, i.e. processing in order to pursue our legitimate interest in analyzing customer traffic on the store's website |
until you object to the processing of your personal data |
|
direct marketing of own goods and services, including remarketing |
residence address, IP address, browser data, e-mail address, name, surname |
Art. 6 section 1 letter f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest in direct marketing of our own services, including remarketing |
until you object to the processing of your personal data |
|
determination, investigation and enforcement of claims and defense against claims in proceedings before courts and other state authorities |
name, surname, residential address, PESEL number, NIP number, REGON number, e-mail address, telephone number, IP number, bank account number, payment card number |
art. 6 section 1 letter f) GDPR, i.e. processing in order to pursue our legitimate interest, consisting in determining, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities |
until the expiry of the limitation period for claims regarding the performance of the contract |
|
fulfillment of legal obligations arising from legal regulations, in particular tax and accounting regulations |
name, surname, company, PESEL number, NIP or REGON number, e-mail address, telephone number, correspondence address, payment card number |
Art. 6 section 1 letter c) GDPR, i.e. processing is necessary to fulfill our legal obligations arising from legal provisions, in particular tax and accounting regulations |
until the expiry of the legal obligations imposed on the Administrator, which justified the processing of personal data |
Voluntary provision of personal data
Providing the required personal data by you is voluntary, but it is a condition for us to provide services to you (e.g. sending a newsletter or creating an account).
Recipients of personal data
You can find a current list of entities to which we disclose your personal data here .
Automated decision-making (including profiling)
We use tools to direct personalized advertisements to you. Based on your actions in the Store, in particular the selection of content viewed and the time spent on the Store's subpages, we adapt and display marketing content tailored to you. Thanks to such profiling, we can target marketing messages that are more desirable to you, which is a benefit for both us and you, because in this way we limit marketing messages regarding goods and services that are not in your area of interest.
Will we transfer your personal data outside the EEA or to an international organization?
In order to use Google tools, your personal data may be transferred to the United States, where Google LLC servers are located.
Google LLC is included in the list of entities participating in the "Privacy Shield" certification program* (link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), and uses model contractual clauses on data security approved by the European Commission .
In order to use Facebook tools, your personal data may be transferred to the United States, where Meta Inc. servers are located.
Meta Inc. is included in the list of entities participating in the Privacy Shield program (link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active), regarding the Workplace service and advertising options and measurement tools. Meta Platforms Ireland Limited transfers data to Meta Inc. based on the Annex on the transfer of European data by Facebook, which takes into account the standard new contractual clauses that entered into force in 2022. More information can be found here: https://www.facebook.com/legal/terms/dataprocessing/update, https: //www.facebook.com/legal/EU_data_transfer_addendum/update.
In order to use Pinterest, your personal data may be transferred to the United States, where Pinterest Inc.'s servers are located.
Pinterest Europe Ltd. only transfers personal data outside the EEA where appropriate safeguards are in place to protect the personal data, such as standard contractual clauses.
In order to provide its services, Klaviyo may transfer your personal data to its external suppliers based outside the European Union.
Klaviyo only transfers personal data outside the EEA where appropriate safeguards are in place to protect the personal data, such as standard contractual clauses.
*Remember that the Privacy Shield is no longer a law in force in the European Union, but a program that sets certain personal data protection standards for entities that have their servers in the United States. Currently, it is a form of certification; entities entered into the Privacy Shield meet certain personal data protection standards.
WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH OUR PROCESSING OF YOUR PERSONAL DATA?
Pursuant to the GDPR, you have the right to:
- request access to your personal data,
- request rectification of your personal data,
- request the deletion of your personal data,
- requests to limit the processing of personal data,
- object to the processing of personal data,
- request the transfer of personal data.
If you submit any of the above requests to us, we will provide you with information about the actions taken in response to your request without undue delay - and in any case within one month of receiving the request.
If necessary, we may extend the monthly deadline by another two months due to the complexity of the request or the number of requests.
In any case, we will inform you within one month of receiving the request about the extension of the deadline and provide you with the reasons for the delay.
The right to access personal data (Article 15 of the GDPR)
You have the right to obtain information whether we process your personal data. If we process your personal data, you have the right to:
- access to personal data,
- obtain information about the purposes of processing, categories of personal data processed, about the recipients or categories of recipients of this data, the planned storage period of your data or the criteria for determining this period, about your rights under the GDPR and the right to lodge a complaint with the President of the Personal Data Protection Office, about the source of this data, about automated decision-making, including profiling, and about the safeguards used in connection with the transfer of this data outside the European Union;
- obtain a copy of your personal data.
If you want to request access to your personal data, please submit your request to: hello@theodderside.com.
The right to rectify personal data (Article 16 of the GDPR)
If your personal data is incorrect, you have the right to request that we immediately correct your personal data. You also have the right to request that we complete your personal data. If you want to request correction or supplementation of your personal data, please submit your request to: hello@theodderside.com.
The right to delete personal data, the so-called "right to be forgotten" (Article 17 of the GDPR)
You have the right to request the deletion of your personal data when:
- Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you have withdrawn specific consent, to the extent that personal data were processed based on your consent;
- Your personal data was processed unlawfully;
- you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of personal data is related to direct marketing;
- you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by us or a third party.
Despite submitting a request to delete personal data, we may continue to process your data in order to establish, pursue or defend claims, of which you will be informed.
If you want to request the deletion of your personal data, please submit your request to: hello@theodderside.com.
The right to request restriction of the processing of personal data (Article 18 of the GDPR)
You have the right to request restriction of the processing of your personal data when:
- you question the accuracy of your personal data - in such a case, we will limit the processing of your personal data for a period of time enabling us to check the accuracy of this data;
- the processing of your data is unlawful, and instead of deleting your personal data, you request the restriction of the processing of your personal data;
- Your personal data is no longer necessary for the purposes of processing, but it is needed to establish, pursue or defend your claims;
- you have raised an objection to the processing of your personal data - until it is determined whether our legitimate interests override the grounds indicated in your objection.
If you want to request the restriction of the processing of your personal data, please submit your request to: hello@theodderside.com.
The right to object to the processing of personal data (Article 21 of the GDPR)
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
- processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Personal Data Administrator or a third party;
- processing for direct marketing purposes.
If you want to object to the processing of your personal data, please submit your request to: hello@theodderside.com.
The right to request the transfer of personal data (Article 20 of the GDPR)
You have the right to receive your personal data from us in a structured, commonly used, machine-readable format and to send it to another personal data controller.
As standard, we will provide you with your personal data in CSV format. If you prefer that the data be made available to you in a different format, please indicate your preferred format in your request. Whenever possible, we will try to provide you with data in your preferred format.
You can also request that we send your personal data directly to another administrator (if technically possible).
If you want to request the transfer of your personal data, please submit your request to: hello@theodderside.com.
Can you withdraw your consent to the processing of personal data?
You can withdraw your consent to the processing of your personal data at any time. Withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out by us on the basis of your consent before its withdrawal.
If you want to withdraw your consent to the processing of your personal data, please submit your request to: hello@theodderside.com.
Complaint to the supervisory authority
If you believe that the processing of your personal data violates the provisions on the protection of personal data, you have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office, who replaced the GIODO on May 25, 2018.
You will find more information here .
Cookies
General information
When browsing the websites of the Online Store, "cookies" files are used, hereinafter referred to as Cookies, i.e. small text information that is saved on your end device in connection with the use of the Online Store. Their use is aimed at the correct operation of the Online Store's websites.
These files allow you to identify the software used by you and adapt the Online Store individually to your needs.
Cookies usually contain the name of the domain from which they come, the time they are stored on the device and the assigned value.
Security
The cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to enter your devices through Cookies.
Types of cookies
We use two types of cookies:
- Session cookies: are stored on your device and remain there until the browser session ends. The saved information is then permanently deleted from your device's memory. The session cookies mechanism does not allow you to download any personal data or any confidential information from your device.
- Persistent cookies: are stored on your device and remain there until you delete them. Ending a given browser session or turning off your device does not delete them from your device. The persistent cookies mechanism does not allow you to download any personal data or any confidential information from your device.
Goals
We also use third-party cookies for the following purposes:
- configuration of the Online Store;
- creating statistics that help understand how users of the online store use websites, which allows improving their structure and content via Google Analytics analytical tools, the administrator of which is Google Ireland Ltd. based in Ireland, Google's privacy policy is available at the following link: https://policies.google.com/privacy?fg=1;
- determining the Customer's profile in order to display tailored materials to him in advertising networks, using the Google Ads online advertising tool, the administrator of which is Google Ireland Ltd. based in Ireland, Google's Privacy Policy is available at the following link: https://policies.google .com/privacy?fg=1;
- collecting information about the User's behavior using the Facebook Pixel tool, the administrator of which is Facebook Ireland Ltd. based in Ireland, the Facebook Privacy Policy is available at the following link: https://www.facebook.com/help/cookies/;
- collecting information about the User's behavior using the Pinterest Ads tool, the administrator of which is Pinterest Europe Ltd. Pinterest's privacy policy is available at the following link: https://policy.pinterest.com/pl/privacy-policy;
- communication within the chat on the website using an application provided by Shopify Shopify's privacy policy is available at the following link: h https://www.shopify.com/legal/privacy/app-users ;
- determining the customer profile and remarketing activities via Klaviyo tools.
To learn about the principles of using Cookies, we recommend reading the privacy policies of the above-mentioned companies.
Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to your preferences. For this purpose, information about how you navigate the Internet or the time you use the website may be stored.
To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at https://www.google.com/ads/preferences/.
Using your web browser settings or using the service configuration, you can change the cookie settings yourself at any time, specifying the conditions for storing them and accessing cookies to your device. You can change these settings to block the automatic handling of Cookies in your web browser settings or to notify you each time they are placed on your device. Detailed information about the possibilities and methods of handling Cookies is available in the settings of your software (web browser).