Privacy policy
This privacy policy describes how and when DUDEK Jarosław Dudek uses and shares your data when you buy a product from it, contact it or in any other way use its services through the giggi.eu online store or related pages and services with this website.This privacy policy does not apply to the practices of third parties that DUDEK Jarosław Dudek does not own or control.
I. Data of the Personal Data Administrator
We kindly inform you that the administrator of your personal data is DUDEK, based at ul. Do lasku 8, 43-365 Wilkowice, using the NIP number 9372531282. Contact regarding personal data protection is possible at the following e-mail address: giggi@giggi.eu
II. Purposes and grounds for processing personal data
In order to enable customers to order goods in our giggi.eu store, Dudek Jarosław Dudek processes your personal data – for various purposes, but always in accordance with the law. Below you will find detailed purposes for the processing of personal data along with the legal basis.In order to make a purchase, we process personal data such as:
● name and surname,
● email address,
● order number,
The legal basis for such data processing is Art. art. 6 section 1 letter a GDPR, which allows the processing of personal data if it is necessary to perform a contract or take steps to conclude a contract;
In order to consider complaints, we process personal data such as:
● name and surname,
● e-mail address,
● order number,
● possibly residential address – if the money is refunded,
● possibly bank account number – if the money is refunded.
The legal basis for such data processing is Art. 6 section 1 letter b GDPR, which allows the processing of personal data if it is necessary to perform a contract or take steps to conclude a contract;
In order to send information about the purchase and shipment to the e-mail address, we process the following personal data:
● e-mail address,
● order number.
The legal basis for such data processing is Art. 6 section 1 letter f GDPR, which allows the processing of personal data if in this way the Personal Data Administrator pursues its legitimate interest (in this case, the company’s interest is to inform the customer about activities related to the provision of the service);
In order to contact you by phone in matters related to the provision of the service, we process personal data such as:
● telephone number,
● order number- if you are interested in telephone contact (we do not require providing a telephone number).
The legal basis for such data processing is Art. 6 section 1 letter a GDPR, which allows the processing of personal data on the basis of voluntarily granted consent;
In order to issue an invoice and fulfill other obligations arising from tax law, such as storing accounting documentation for 5 years, we process personal data such as:
● name and surname,
● company,
● residential address or registered office address,
● Tax Identification Number,
● order number.
The legal basis for such data processing is Art. 6 section 1 letter c GDPR, which allows the processing of personal data if such processing is necessary for the Personal Data Administrator to fulfill its obligations under the law;
In order to create registers and records related to the GDPR, including, for example, a register of customers who have raised objections in accordance with the GDPR, we process personal data such as:
● name and surname
● e-mail address,because,
firstly, the provisions of the GDPR impose on us certain documentation obligations to demonstrate compliance and accountability, secondly, if you object, for example, to the processing of your personal data for marketing purposes, we must know who should not use direct marketing, because he doesn’t want it.
In order to establish, pursue or defend against claims, we process personal data such as:
● name and surname (if the surname was provided) or possibly company name,
● residential address (if provided),
● PESEL number or NIP number (if provided),
● e-mail address,
● IP,
● order number.
The legal basis for such data processing is Art. 6 section 1 letter f GDPR, which allows the processing of personal data in connection with the possibility of establishing, pursuing or defending against claims, including those of customers and third parties.
For archival and evidentiary purposes, we process personal data such as:
● name and surname,
● e-mail address,
● order number — for the purpose of securing information that may be used to demonstrate facts of legal significance.
The legal basis for such data processing is Art. 6 section 1 letter f GDPR, which allows the processing of personal data if in this way the Personal Data Administrator pursues its legitimate interest.
III. The Dudek Jarosław Dudek company shares and discloses personal data of its clients:
- Service providers with whom it cooperates, such as accounting offices and courier companies. Personal data is shared with them only to the extent required to provide their services.
- It may collect, use, preserve and disclose its customers’ personal information when it has a good faith belief that doing so is reasonably necessary to: (a) comply with legal process or administrative order; (b) enforce agreements, terms and conditions; (c) investigate, resolve, or prevent fraud or other illegal activity, technical issues, and security issues. and (d) protect the rights, property and safety of its customers and others.
IV. Data storage period I store personal data for as long as necessary to provide my services, in accordance with the provisions of my privacy policy. However, I may be required to retain this information to comply with laws and regulations, to resolve disputes and to enforce agreements. I usually keep buyers’ personal information for 4 years.
V. RIGHTS OF THE DATA SUBJECT
- The right of access, rectification, restriction, deletion or transfer – the data subject has the right to request from the Administrator access to his or her personal data, rectification, deletion (“right to be forgotten”) or limitation of processing and has the right to lodge a complaint. object to processing and has the right to transfer his data. Detailed conditions for exercising the above-mentioned rights are indicated in Art. 15-21 of the GDPR Regulations.
- The right to withdraw consent at any time – a person whose data is processed by the Administrator on the basis of consent (pursuant to Article 6(1)(a) or Art. 9 section 2 letter a) of the GDPR), the data subject has the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.
- The right to lodge a complaint with the supervisory authority – the person whose data is processed by the Administrator has the right to lodge a complaint with the supervisory authority in the manner and manner specified in the provisions of the GDPR and Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Personal Data Protection Office.
- The right to object – the data subject has the right to object at any time – for reasons related to his or her particular situation – to the processing of his or her personal data based on Art. 6 section 1 letter e) (public interest or tasks) or f) (legitimate interest of the administrator), including profiling based on these provisions. In such a case, the Administrator is no longer allowed to process this personal data, unless he demonstrates the existence of valid legally justified grounds for processing, overriding the interests, rights and freedoms of the data subject, or grounds for establishing, pursuing or defending claims.
- The right to object to direct marketing – if personal data are processed for the purposes of direct marketing, the data subject has the right to object at any time to the processing of his or her personal data for the purposes of such marketing, including profiling, to the extent to the extent that the processing is related to such direct marketing.
VI. Contact with the Personal Data Administrator. I, Jarosław Dudek, am the controller of your personal data for the purposes of data protection law applicable in the EU. If you have any questions or concerns, please send an e-mail to giggi@giggi.eu.
