The data controller for personal data collected via the website www.oiadekoracje.com (hereinafter: the „Website”), operated under the OIA Dekoracje brand, is OMNOM SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, entered in the Register of Entrepreneurs by the District Court for Gdańsk-Północ in Gdańsk, 8th Commercial Division of the National Court Register under KRS number: 0000888565, place of business and address for service: 48 Świętojańska Street, 81-393 Gdynia, Tax Identification Number (NIP): 5862366486, National Business Registry Number (REGON): 388396804, email address: omnomsk@wp.pl, telephone number: +48 535 522 186, hereinafter referred to as the „Controller” and also acting as the „Service Provider”.
Personal data collected by the Controller via the Website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the „GDPR”.
Any words or phrases appearing in capital letters in this Privacy Policy shall be understood in accordance with their definitions set out in the Terms and Conditions of the website www.oiadekoracje.com.
§2 The type of personal data processed, the purpose and scope of data collection
PURPOSE OF PROCESSING AND LEGAL BASIS. The Data Controller processes the personal data of Service Users when they use the Enquiry Form (wedding and reception decorations, event decorations, shop window and venue decorations) for the purpose of providing a response, preparing a preliminary proposal and an individual quotation for decorations, pursuant to Article 6( 1(b) of the GDPR (measures taken prior to entering into a contract at the request of the data subject) and Article 6(1)(f) of the GDPR (the legitimate interests of the controller).
TYPE OF PERSONAL DATA PROCESSED. The Service User provides the following in the Enquiry Form: their first name and surname or company name and contact person, email address, telephone number, as well as information about the planned event (including the date, venue, number of guests, decoration preferences and budget) and – on a voluntary basis – photographs and links to inspiration.
RETENTION PERIOD FOR PERSONAL DATA. The Controller retains Service Users’ personal data for as long as is necessary to handle enquiries and, where applicable, to perform the contract; thereafter, for a period corresponding to the limitation period for claims. Unless otherwise provided for by a specific provision, the limitation period is six years, and for claims relating to periodic payments and claims arising from the conduct of business activities – three years.
Whilst using the Website, additional information may be collected, in particular: the IP address assigned to the Service User’s computer or the external IP address of their internet service provider, the domain name, the browser type, the time of access and the type of operating system.
The provision of personal data by the Service User is voluntary, but necessary in order to respond to the enquiry.
The controller takes particular care to protect the interests of data subjects, and, in particular, ensures that the data collected by the controller is processed lawfully, collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes, factually accurate and relevant to the purposes for which it is processed, and stored in a form which permits identification of the data subjects for no longer than is necessary to fulfil the purpose of the processing.
§3 Disclosure of personal data
Service Users’ personal data may be disclosed to service providers used by the Controller in the course of its business activities, in particular: web hosting providers, email and instant messaging service providers, an accountancy firm, and the florist Adel de Flores, which assists with the creation of floral arrangements.
Service providers to whom personal data is disclosed – depending on contractual arrangements and circumstances – either follow the Controller’s instructions regarding the purposes and means of processing such data (data processors), or independently determine the purposes and means of processing such data (controllers).
Service Users’ personal data is stored exclusively within the European Economic Area (EEA), subject to § 5.
§4 The right to inspect, access and rectify one’s own data
The data subject has the right to access their personal data, as well as the right to rectify, erase or restrict the processing of such data, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
Legal basis for the Data Subject’s requests: access to data – Article 15 of the GDPR; rectification of data – Article 16 of the GDPR; erasure of data (the so-called ‘right to be forgotten’) – Article 17 of the GDPR; restriction of processing – Article 18 of the GDPR; data portability – Article 20 of the GDPR; objection – Article 21 of the GDPR; withdrawal of consent – Article 7(3) of the GDPR.
To exercise the rights referred to in point 2, you may send an email to: omnomsk@wp.pl or eventy@omnom.com.pl.
Where the Data Subject exercises a right arising from the above provisions, the Controller shall comply with the request or refuse to comply with it without delay, but no later than one month after receiving it. However, if – due to the complex nature of the request or the number of requests – the Controller is unable to comply with the request within one month, it shall comply within the following two months, having first informed the Service User, within one month of receiving the request, of the intended extension of the deadline and the reasons for it.
If it is found that the processing of personal data infringes the provisions of the GDPR, the data subject has the right to lodge a complaint with the President of the Personal Data Protection Office.
§5 Cookies
The Administrator’s website uses „cookies”.
The use of cookies is necessary for the Website to function properly. Cookies contain information essential for the proper functioning of the website and also enable us to compile general statistics on website visits.
The Website uses two types of „cookies”: „session” cookies – temporary files stored on the User’s device until they leave the website – and „persistent” cookies – which are stored for the period specified in the „cookie” settings or until they are deleted by the User.
The user has the right to control whether „cookies” can access their computer by changing the settings in their browser. Detailed information on the options and methods for managing „cookies” is available in the software settings (web browser).
§6 Final provisions
The controller shall implement technical and organisational measures to ensure that the personal data being processed are protected in a manner appropriate to the risks and the categories of data concerned, and, in particular, shall safeguard the data against unauthorised access, unauthorised removal, processing in breach of applicable legislation, and alteration, loss, damage or destruction.
In matters not covered by this Privacy Policy, the provisions of the GDPR and other relevant provisions of Polish law shall apply mutatis mutandis.
We respect your privacy 🍪
We use cookies to ensure the website works properly and, with your consent, also for traffic analysis and marketing purposes. Find out more at Privacy Policy.
