PRIVACY POLICY
The administrator of your personal data is Nina bien s.r.o., Soukenická St. 877/9, Moravská Ostrava, 702 00 Ostrava, Czech Republic, NIP CZ19060106.
You can contact the Administrator:
in writing – correspondence address: Kościuszki St, 40/8, 90 – 481 Łódź, Poland
by e-mail – to the e-mail address: contact@ninabien.com
by phone – at +33 645 70 00 71.
Your personal data, as a user (“User”) of the website www.ninabien.com (“Website”) is processed in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”), as well as in accordance with the Act on the provision of electronic services of July 18, 2002.
Is your data secure?
The administrator undertakes to take all security and personal data protection measures required by applicable law, as well as to collect data with due diligence and protect it appropriately against access by unauthorized persons.
Purposes of personal data processing
The administrator may process your personal data if it is necessary for you to use the Website.
The basis for the processing of your personal data is to enable you to use the Website, including for the purpose of completing the Contact Form.
The purposes of processing your personal data relate to:
- provision of electronic services consisting of:
- concluding agreements with Website Users and performing agreements for the sale of products ordered by Users via the Website, including the return and exchange of products and the handling of complaints – the legal basis for processing is Article 6(1)(b) of the GDPR,
- creating and maintaining a User account on the Website – the legal basis for processing is Article 6(1)(b) of the GDPR,
- fulfilling obligations under the law, including accounting, bookkeeping, and financial reporting – the legal basis for processing is Article 6(1)(c) of the GDPR,
- pursuing the legitimate interests of the Controller (the legal basis for processing is Article 6(1)(f) of the GDPR), which should be understood as:
- marketing activities, including newsletters,
- communicating with you in connection with your message sent via the contact form,
- ensuring the proper functioning of the Website, including the contact form, registration form, and order form,
- archiving, statistics, and possible pursuit of claims or defense against claims related to the performance of a contract provided electronically.
Data processing time
Your personal data will be processed for the period necessary to achieve the purposes for which the data is processed, i.e.:
- until the expiry of the limitation periods for any claims related to the functioning of the Website, including those resulting from contracts concluded through it;
- until a justified objection is lodged, with regard to data processed within the scope of the Administrator’s legitimate interest,
- until consent to receive marketing information by email or telephone is withdrawn or until an objection to the processing of data for marketing purposes is lodged,
- expiry of the data storage obligation resulting from legal provisions, including the obligation to store accounting documents relating to concluded contracts.
Audience categories
Your data may be transferred to entities whose services the Administrator uses in the performance of its duties and in the conduct of its business. These are the following categories of entities: IT service providers, accounting service providers, marketing service providers, transport and postal companies, and online payment operators.
In addition, your data may be transferred to other entities authorized to access the data to the extent and for the purposes specified in the law.
Your personal data will always be processed using appropriate measures to protect and secure personal data.
The Administrator does not intend to transfer your personal data to countries outside the European Economic Area or to an international organization.
Automated decision-making/profiling
The administrator will make decisions about you in an automated manner, including in the form of profiling.
Your rights
You have the right to:
- access to your personal data and the right to request its rectification, deletion, or restriction of processing;
- to transfer personal data;
- to withdraw your consent to the processing of personal data – to the extent that the basis for the processing of your personal data is consent (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal);
- to object to the processing of your personal data – to the extent that the basis for the processing of your personal data is the legitimate interest of the Controller;
- lodge a complaint with the supervisory authority responsible for personal data protection (the President of the Personal Data Protection Office) if you believe that the processing of your data violates the GDPR.
To exercise your rights, please contact the Administrator.
Do you have to provide your personal information?
Providing personal data is voluntary, but necessary to achieve the purposes specified in the Privacy Policy.
COOKIE POLICY
Cookies
Cookies are small text and number files that are saved by the ICT system on your ICT system (on your computer, phone, or other device used to connect to the Website) while browsing the Website and allow you to be identified when you reconnect to the Website from the device (e.g., computer, phone) on which they were saved.
The Website uses the following types of cookies:
- session cookies, which are automatically deleted when you close your web browser;
- persistent cookies, which are stored on your device for a specified period of time; the storage of these files does not depend on closing your browser;
- first-party cookies, which are set by the Website;
- third-party cookies, set by other services, i.e., Google Analytics.
The Website uses both first-party cookies and third-party cookies.
The Administrator uses Google Analytics, a tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to compile statistics, analyze the functioning of the Website, and improve the quality of its use (based on a legitimate interest).
The main purpose of the Administrator’s use of cookies is to manage the Website and improve the quality of its content. Cookies are necessary for the proper display and functioning of the Website. The Administrator may also process the data contained in cookies for the purpose of conducting anonymous statistics and analyses showing how the Website is used and the average length of visits to the Website. Cookies are not used to determine the identity of Website users.
Cookies are used with your consent. The administrator does not sell them or share them with other companies. Your consent is expressed through the appropriate settings of the software, in particular the web browser, installed on the telecommunications device you use to view the content on the Website.
Most browsers accept cookies by default. You can withdraw or change your consent to the use of cookies on the Website at any time and delete them from your browser. You can restrict or disable cookies in your browser at any time by setting it to block cookies or warn you before a cookie is stored on the device you are using. In this case, however, you may not have access to some content on the Website, and in extreme cases, the correct display of the Website may be completely blocked.
Using the Website involves sending queries to the server on which the website is stored. Each query sent to the server is recorded in the server logs. The logs include, among other things, your IP address, the date and time of the server, information about the web browser and operating system you are using. The logs are saved and stored on the server. The data saved in the server logs is not associated with specific individuals using the website and is not used by me to identify you. Server logs are only auxiliary material used to administer the website, and their content will not be disclosed to anyone other than those authorized to administer the server.
Klauzule informacyjne pod formularze na stronie internetowej:
- Informacja pod formularz kontaktowy:
The administrator of your personal data processed within the contact form is Nina bien s.r.o., Soukenická St. 877/9, Moravská Ostrava, 702 00 Ostrava, Czech Republic. For more information on the rules for processing personal data and the rights of data subjects, please refer to the Privacy Policy.
- Informacja pod formularz zapisu na newsletter*:
By providing your email address in the above newsletter subscription form, you consent to its processing for the purpose of sending marketing information about the Administrator’s products. The administrator of your personal data processed for the above purpose is Nina bien s.r.o., Soukenická St. 877/9, Moravská Ostrava, 702 00 Ostrava, Czech Republic. For more information on the rules for processing personal data and the rights of data subjects, please refer to the Privacy Policy.
* Zgoda na wykorzystanie adresu mailowego jest wyrażana poprzez samo działanie (podanie adresu mailowego)
Ponadto w treści samego newsletter należy zapewnić możliwość łatwego wypisania się z niego.