Table of contents

1. About us
2. General provisions
3. How We Use Your Personal Information
4. Under what terms and on what basis do we process your data?
5. What rights do you have?
6. How we'll contact you
7. When will we fulfill your request?
8. Subcontractors/data processors
9. How We Handle the Processing of Your Data
10. Data Retention
11. Mandates
12. Cookies

1. About Us

The controller of the personal data of customers of the JEDYNASTY store, available at www.jedynasty.com Robert Jedynasty, who operates a business under the name Rezoner XI—Robert Jedynasty, located at Golesze Duże 21A, 97-320 Wolbórz; Tax ID (NIP): 9231654344; National Business Registry Number (REGON): 380478572

Personal data is collected and processed in the manner and according to the principles set forth in this Policy.

2. General Provisions

The administrator places particular emphasis on protecting the privacy of customers, business partners, employees, and associates. One of the key aspects of this is the protection of the rights and freedoms of individuals in connection with the processing of their personal data.

It ensures that your data is processed in accordance with the provisions of the General Data Protection Regulation 2016/679/EC (hereinafter referred to as the „GDPR”), the Personal Data Protection Act, and specific regulations (including those contained in labor law and the Accounting Act).

Robert Jedynasty, operating as a sole proprietor under the business name Rezoner XI—Robert Jedynasty, Golesze Duże 21A, 97-320 Wolbórz; Tax ID (NIP): 9231654344; National Business Registry Number (REGON): 380478572

is the controller of personal data within the meaning of Article 4(7) of the GDPR; it also uses the services of processors referred to in Article 4(8) of the GDPR—these processors process personal data on behalf of the controller (e.g., IT companies and web hosting providers).

The controller implements appropriate technical and organizational measures to ensure a level of security appropriate to the potential risk of a breach of the rights or freedoms of natural persons, taking into account the likelihood and severity of the risk. Our personal data protection activities are based on established policies and procedures, as well as regular training sessions designed to enhance the knowledge and skills of our employees and associates.

3. What is personal data used for?

As an employer, the Data Controller processes the personal data of employees and individuals who work with us on a basis other than an employment relationship. Contact information obtained from business partners (e.g., their employees) is used to enter into and efficiently fulfill contracts. Our customers’ data is used to fulfill contracts and provide online store services. The store conducts marketing activities and, as part of these efforts, strives to reach the widest possible audience to provide them with up-to-date information about products and services.

Data is disclosed to third parties with the Customer’s consent or when the Controller is required to do so by law.

4. Under what terms and on what basis is customer data processed?

The controller shall exercise due diligence to protect the interests of data subjects, and in particular shall ensure that the data:

• processed lawfully, fairly, and in a transparent manner with respect to the data subject;
• collected for specific, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes;
• adequate, relevant and limited to what is necessary for the purposes for which they are processed;
• accurate and updated as necessary. We take steps to ensure that personal data that is inaccurate in light of the purposes for which it is processed is deleted or corrected without delay;
• stored in a form that allows for the identification of the data subject for no longer than is necessary to fulfill the purposes of the processing;
• processed in a manner that ensures the appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss or destruction.

Data is typically processed based on consent, which may be withdrawn at any time. Another scenario is when data processing is necessary to fulfill a contract to which the Customer is a party or to take action at the Customer’s request prior to entering into a contract.

In certain situations, processing is necessary to fulfill a legal obligation incumbent upon the Controller. Such obligations arise, for example, from labor law or the Accounting Act.

Processing may also be necessary for purposes arising from the legitimate interests of the Administrator, an example of which is the assertion of claims from business activities.

5. What rights does the customer have?

The controller shall implement appropriate measures to provide the customer with all relevant information in a concise, transparent, understandable, and easily accessible form, and to communicate with the customer regarding the processing of personal data in connection with the exercise of the customer’s right to:

• information provided when collecting personal data;
• information provided upon request - about whether data is being processed, and other matters specified in Article 15 of the RODO, including the right to a copy of the data;
• correction of data;
• being forgotten;
• restrictions on processing;
• data transfer;
• Objections;
• not to be subject to a decision based solely on automated processing (including profiling);
• information about a data breach.

In addition, if personal data is processed based on consent, the Customer has the right to withdraw that consent. Consent may be withdrawn at any time, which does not affect the lawfulness of the processing carried out prior to its withdrawal.

To contact us regarding the exercise of a specific right, please reach out via: Rezoner XI—Robert Jedynasty

Golesze Duże 21A, 97-320 Wolbórz Tel: +48880209010

Mail: [email protected]

Data security is a priority for the Administrator; however, if the Customer believes that the processing of personal data violates the provisions of the GDPR, the Customer has the right to file a complaint with the President of the Personal Data Protection Office.

6. Contact Information

Information is provided in writing or by other means, including—where appropriate—electronically. If the Customer requests it, information may be provided orally, provided that the Customer’s identity is verified by other means. If the Customer submits their request electronically, the information will also be provided electronically whenever possible, unless the Customer specifies another preferred form of communication.

7. By when will the requests be fulfilled?

The administrator strives to provide information promptly—generally within one month of receiving the request.

If necessary, this deadline may be extended by an additional two months due to the complex nature of the request. However, in any case, within one month of receiving the request, the Administrator will inform the Customer of the actions taken and (if applicable) of the extension of the deadline, specifying the reason for such a delay.

8. Subcontractors/Data Processors

If the Controller works with entities that process personal data on its behalf, it uses only the services of such processors that provide sufficient guarantees that appropriate technical and organizational measures will be implemented so that the processing complies with the requirements of the GDPR and protects the rights of data subjects.

The administrator thoroughly vetting the entities to which we entrust data processing. It enters into detailed agreements with them and conducts periodic audits to ensure that processing operations comply with the terms of such agreements and applicable laws.

The recipients of Customers' personal data may include:

• entities and authorities authorized to process personal data pursuant to applicable law, and banks when necessary for settlement purposes,
• institutions providing funding for the performance of a contract entered into with the Administrator,
• entities collaborating on marketing campaigns,
• couriers,
• a company providing IT and hosting services,
• online payment provider.

9. How We Handle the Processing of Your Data

To meet the requirements of the law, the Administrator has developed detailed procedures covering such issues as:

• data protection by design and data protection by default;
• data protection impact assessment;
• notification of violations;
• maintaining a record of data processing activities;
• data retention;
• the exercise of data subjects' rights;

The administrator regularly reviews and updates the documentation to demonstrate compliance with legal requirements in accordance with the principle of accountability set forth in the GDPR, but also, in the best interests of the data subjects, strives to incorporate best market practices into it.

10. Data Retention

Personal data is stored in a form that allows for the identification of the data subject for a period no longer than is necessary for the purposes for which the data is processed. After this period expires, the data is anonymized (stripped of features that would allow the identification of the individual) or deleted. The retention procedure ensures that the retention period for personal data is limited to the strict minimum.

The data processing period is determined primarily on the basis of legal provisions (e.g., retention periods for employee records and accounting documents), as well as the controller’s legitimate interests (e.g., marketing activities). The retention policy covers both data processed in paper form and in electronic form.

11. authorizations

The Controller ensures that any person acting on our behalf and having access to the Customer’s personal data processes such data solely on the Controller’s instructions, unless otherwise required by Union law or the law of a Member State

12. Cookies

The website's cookie policy.

1. Cookies are IT data—specifically, text files—that are stored on a Website User’s device and are intended for use when accessing the Website’s pages. Cookies typically contain the name of the website they come from, the duration of their storage on the end device, and a unique number.
2. The entity placing cookies on the final device of the Service User and accessing them is the owner of the service.
3. Cookies are not used to collect any information about website users or to track their browsing activity. The cookies used on this website do not store any personal data or other information collected from users and are used for statistical purposes.
4. By default, web browsing software (a browser) allows cookies to be stored on the User’s device on which it is running. In most cases, you can configure this software yourself, including, among other things, forcing the automatic blocking of cookies. Information regarding how to configure cookie settings can be found in the software’s settings (web browsers). Please note that settings restricting the handling of cookies may affect the operation of certain website features.
5. Cookies are used to
   • adjustment of the content of the Website's pages to the User's preferences and optimization of the use of websites; in particular, these files allow for recognition of the Website User's device and appropriate display of the website, adjusted to his/her individual needs;
6. compiling statistics that help us understand how Website Users interact with web pages, which allows us to improve their structure and content;
7. to maintain the Website User’s session (after logging in), so that the User does not have to re-enter their username and password on every subpage of the Website;
8. The Website uses two main types of cookies: „session” cookies and „persistent” cookies. „Session” cookies are temporary files that are stored on the User’s device until the User logs out, leaves the website, or closes the software (web browser). „Persistent” cookies are stored on the User’s device for the period specified in the cookie settings or until the User deletes them.
9. The Website uses the following types of cookies:
10. "necessary" cookies to enable the use of services available on the Website, such as authentication cookies used for services that require authentication on the Website;
11. cookies used to ensure security, such as those used to detect authentication fraud on the Website;
12. "performance" cookies, which allow you to collect information about how you use the Website's websites;
13. „Functional” cookies, which allow the website to „remember” the settings selected by the User and personalize the User's interface, such as the selected language or the User's region, font size, website layout, etc.;

Cookie Consent Banner

We use the Real Cookie Banner tool to obtain and document consent for cookies and the processing of personal data. The tool runs on our server, and consent data is not shared with its provider.

When consent is given, modified, or withdrawn, we record: a unique consent identifier, the date and time the consent was given, the banner version number, and the identifiers of the services and service groups for which consent was given. We do not record the IP address of visitors to the website.

The consent ID does not identify an individual—it is used solely to link a decision to its record in our documentation. We store this data in cookies, in the browser’s local storage, and in a log on the website’s server so that we can demonstrate compliance with the obligation under Article 7(1) of the GDPR.

This consent remains valid for 120 days. After this period expires, the banner will reappear. You may change or withdraw your consent at any time.

A complete list of the cookies used, along with information about their purpose, retention period, and recipients of the data, can be found at Cookie Policy.

Links to other websites posted on the site

The website owner notes that the website contains links to other websites. The website owner recommends that you review the privacy policies in effect on those sites, as the website owner is not responsible for them.

Protecting User Data on the Website

A description of the technical and organizational security measures is included in the website owner’s Security Policy (Personal Data Protection Policy). In particular, the following security measures are in place:

1. The data automatically downloaded by the server is secured through an authentication mechanism for access to the service
2. The data collected from users during the registration process is secured by SSL protocol and through an authentication mechanism for access to the site
3. Access to website administration is granted through an authentication mechanism