Privacy policy

The protection of users' privacy is particularly important to us. Therefore, Users of the internetto.eu website (hereinafter referred to as the Internet Shop) are guaranteed the highest standards of privacy protection. As a personal data administrator, Inter Arma Sp.z o.o. cares about the safety of personal data provided by Users.

Considering the above and in view of the requirements introduced by the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU.L.2016.119.1 of 2016.05.04) (hereinafter referred to as RODO), in order for Inter Arma Sp.z o.o. to ensure the security of personal data, this Privacy Policy has been adopted.

This Privacy Policy sets out the principles for the processing and protection of personal data provided by Users in connection with their use of the Online Shop and other related websites, communications and services.

A User is any data subject who uses the Online Shop and other related websites, communications and services. (hereinafter referred to as User).

The administrator of the personal data collected in the Internet Shop is Inter Arma Sp.z o.o., ul. Krakowska 60, 32-064 Rudawa, NIP: 6762235733, REGON: 356689112 (hereinafter referred to as Administrator).

To the extent necessary for the performance of the agreement concluded by the User with the Administrator, as well as to the extent necessary for the Administrator to take action at the request of the User and to the extent necessary for the fulfilment of the Administrator's legal obligation - the processing of the User's personal data takes place on the basis of a legal provision, i.e. Article 6(1)(b) and (c) RODO, without the User having to give his/her consent to the processing of his/her personal data. For the rest, the provision of personal data by the User is voluntary. However, to the extent that the User has consented to the processing of his/her personal data for marketing purposes only, the provision of his/her personal data by the User is voluntary, but the refusal to consent or the withdrawal of consent will prevent the Administrator from informing the User about new offers and discounts.

I. USER CONSENT

The use of the Online Shop by the User implies the User's acceptance that the Administrator collects, uses and discloses non-personal and personal data in accordance with this Privacy Policy. However, the User has control over the way in which his/her data is used and shared, as detailed in Section V of this Privacy Policy "User Rights".

Where personal data is processed on the basis of the User's consent, the User has the right to withdraw the consent previously given at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. The Administrator shall inform the User of the possibility of withdrawing consent before the User gives his/her consent.

In the event that there is a change to this Privacy Policy and the User continues to use the Online Store, this action shall be deemed to be the User's consent to the current terms of the Privacy Policy.

II. PERSONAL DATA PROCESSED BY THE ADMINISTRATOR

Manner of collecting personal data
1. Personal data obtained directly from the User
  The Administrator obtains personal data in two ways. The first way is to obtain personal data directly from the User, through:
  - the sending of a message by the User, thanks to the contact form provided in the Online Shop,
  - creating a customer account in the Online Shop by the User,
  - placing an order for goods or services in the Online Shop,
  - contacting the User with the Administrator in order to obtain technical assistance, lodge a complaint or for any other purpose.
2. Personal data obtained from other sources
  The Administrator also obtains personal data from sources other than directly from the User, viz:
  by recording the User's use of the Online Shop through cookies and other technologies and receiving error reports or usage data from software running on the User's device,
  - from partners with whom the Administrator offers goods and services or conducts joint marketing activities.
Personal data processed by the Administrator
The scope of personal data collected by the Administrator regarding the Users may vary depending on the purpose of personal data processing.
Among others, the Administrator collects the following personal and non-personal data:
- Login name,
- First and last name / company name / entrepreneur's name or first and last names of entrepreneurs acting in the form of a civil partnership,
- Correspondence address,
- Telephone no,
- E-mail address,
- NIP,
- REGON,
- Computer IP,
- Payment data, if the User makes a purchase in the Online Shop.
- Information contained in cookies and similar technologies concerning the User's interaction with the Administrator's Online Shop.

In addition, the Administrator collects data on the content of the User's files and messages when this is required for the fulfilment of the order placed, the provision of the customer account service to the User, including the collection of: the subject and content of the email message, the text or other content of the instant message, the audio and video recording of the video message, the audio recording and transcription of the voice message received by the User or the text message dictated by the User.

The Administrator also collects information provided by the User, including opinions and evaluations of goods and services and information provided for technical support. In addition, when contact is made, the Administrator collects the content of the message.

III. METHOD OF DATA PROCESSING - PURPOSES OF PERSONAL DATA PROCESSING BY THE ADMINISTRATOR

The manner in which the Administrator processes personal data concerning the User depends on the extent of the User's use of the Online Shop.

Orders, customer account (performance of the contract)
If the User decides to place an order for goods or services presented in the Online Store, the Administrator shall process the User's personal data to the extent necessary to conclude a sales contract or a service contract and to ensure due performance of the contract concluded with the User.
If the User creates a customer account in the Online Shop, the Administrator shall use the User's personal data for the purpose of due performance of the contract for the provision of electronic services, including authentication and authorisation of the User's access to the customer account.
Communication (performance of the contract, legitimate purpose pursued by the Administrator)
The Administrator uses the User's personal data to communicate with the User in a personalised manner. This communication consists of sending emails, posting notifications on websites and other means within the framework of the Online Shop and the customer account service provided, including text messages and push notifications. The content communicated to the User concerns the goods and services offered, i.e. the availability of services and how to use them, the security of personal data, web updates, reminders, but also suggested offers by the Administrator.
Communication with the User also relates to the User's service. Personal data is used to help the User, solve problems and respond to his/her complaints.
The Administrator also uses the User's personal data to enable the User to comment on the Administrator's activities, the Online Shop, services and goods.
Advertising (consent, legitimate purpose pursued by the Administrator)
The Administrator uses the User's personal data in order to offer tailored advertisements to the User, if the User has consented to such actions or if a business relationship develops between the Administrator and the User. These advertisements concern both the Administrator's offers and those of entities cooperating with the Administrator.
The advertisements presented to the User are adapted individually to each User (so-called "profiling") by using:
- data provided directly by the User,
- data collected during User's use of the Internet Shop,
- information provided by third parties,
- data derived from advertising technologies, such as cookies,
- beacons, pixels, advertising tags and mobile IDs.
The Administrator will not share the User's personal data with third-party advertisers or advertising networks without the User's consent. However, in the event that the User clicks on an advertisement displayed to him/her, the advertiser will be informed.
Improvement of the online shop (legitimate interest of the Administrator)
The Administrator uses the User's personal data for analytical and statistical purposes in order to continuously improve the Online Shop, the goods and services offered by the Administrator, to provide better solutions, to add new functions and opportunities.
Personal data concerning Users is also used by the Administrator in the field of market research, opinion polling and economic analysis in order to continuously improve the Online Store.
Security (Administrator's legitimate interest)
The Administrator uses the User's personal data to monitor, prevent, detect and combat fraud and abuse, to protect other Users from such abuse and to ensure network and information security. Where there is a reasonable suspicion that a crime has been committed, the User's personal data will be used to investigate the likely commission of a crime or other breach of this Privacy Policy by undesirable persons.
Investigation of claims (legitimate interest of the Administrator)
In the event that the User decides to use the Online Shop, in particular by creating a customer account, placing an order for goods or services through it, the Administrator may process the User's personal data to the extent necessary for the investigation of possible claims on account of a business activity, as well as the analysis of potential violations of the rules of use of the Online Shop.
Tax documentation (fulfilment of a statutory obligation)
In the event that the User places an order for goods or services via the Online Shop, the Administrator shall process the User's personal data to the extent necessary for the maintenance of tax records and settlements for orders made.

IV. SHARING OF PERSONAL DATA BY THE ADMINISTRATOR

The User's personal data is or may be provided to the following categories of recipients:

entities providing certain services in the sales process, i.e. courier / postal service providers, payment institutions intermediating payment by Users for orders placed for goods or services;
to advertising or marketing service providers, in the event of the fulfilment of the purpose of direct marketing of the Administrator's own services;
providers of legal and advisory services, as well as those supporting the Administrator in the enforcement of due claims (in particular law firms, debt collection companies);
entities processing personal data on behalf of the Administrator, e.g. technical service providers operating the technical infrastructure necessary to run the Internet Shop;
entities entitled to obtain data on the basis of applicable law, e.g. courts or law enforcement agencies, when they make a demand on the basis of the relevant legal basis.

V. USER RIGHTS

The User has the right to decide about his/her personal data by making choices regarding the disclosure of individual personal data, including the choice of privacy settings. However, in such a situation, the User must be aware that he/she will not be able to make full use of some of the functionalities of the Online Shop or the services offered by the Administrator.

If the User wishes to exercise his/her rights as a personal data subject, he/she may contact the Administrator by e-mail sent to kontakt@internetto.eu Part of his/her rights as a personal data subject may be exercised by the User through his/her customer account in the Online Shop.

Right of access to data
The User is entitled to obtain confirmation from the Administrator as to whether his/her personal data are being processed and, if this is the case, he/she is entitled to access information concerning the details of the processing of his/her data, including in particular information on the purpose of the processing and the categories of data processed.
You also have the right to request a copy of the personal data being processed.
Right to rectification of data
The user has the right to rectify those personal data which are inaccurate. He/she has the right to request the replacement, completion or deletion of errors, faults and misleading information in the entire data file concerning him/her.
The subject of supplementation may not be personal data which are incorrect, i.e. the User may not request the replacement or supplementation of existing data with incorrect data.
If the processed personal data is incomplete, the User may submit an additional statement in order to complete it. Such a declaration may be made in any form, including electronically.
Right of erasure (right to be forgotten)
The User has the right to request the deletion of his/her personal data if one of the following circumstances applies:
1. the User's personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
2. The User has withdrawn the consent on which the processing is based and there is no other legal basis for the processing;
3. The User objects to the processing of personal data concerning them;
4. the personal data has been unlawfully processed;
5. the personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State to which the Controller is subject;
6. the personal data were collected in connection with the offering of information society services.
The right to be forgotten, the User has the right to be forgotten only if the right to erasure is exercised and only if the personal data concerning him/her has been made public by the Administrator.
Right to restrict processing
The User has the right to restrict the processing of his/her personal data in the following cases:
1. the User questions the correctness of the personal data - for a period of time allowing the Administrator to check the correctness of the data;
2. the processing is unlawful and the User objects to the erasure of the personal data, requesting instead the restriction of its use;
3. The Administrator no longer needs the User's personal data for the purposes of processing, but they are needed by the User to establish, assert or defend claims;
4. The User has objected to the processing - until it is determined whether the legitimate grounds on the part of the Administrator override the grounds of the User's objection.
In the case of restriction of processing, the Administrator may process personal data, with the exception of storage, only:
1. with the User's consent or
2. in order to establish, assert or defend claims, or
3. in order to protect the rights of another natural or legal person, or
4. for important grounds of public interest of the Union or of a Member State.
Right to data portability
You have the right to receive in a structured, commonly used format the personal data concerning you that you have provided to the Controller and you have the right to have that data transferred to another controller.
You also have the right to request that your personal data be sent by the Controller directly to another controller, where technically possible.
Right to object
The User has the right to object at any time, on grounds relating to his/her particular situation, to the processing of his/her personal data:
1. in the public interest, in the exercise of the public authority entrusted to the Administrator,
2. to the processing for direct marketing purposes, including profiling insofar as it is related to this direct marketing,
3. for a legitimate purpose of the Controller.
The processing of the objection and all communication is free of charge, and it is also possible to lodge an objection electronically.
Right to lodge a complaint
The user has the right to lodge a complaint with the Data Protection Authority, in particular in the Member State of his/her habitual residence, his/her place of work or the place where the alleged infringement was committed.

VI. COOKIES AND OTHER TECHNOLOGIES USED BY THE ADMINISTRATOR

The Administrator uses cookies and other similar technologies in order to ensure optimal handling of the User's visit to the Online Store, to enable faster and easier access to information and to offer the Users increasingly improved functionalities of the Online Store, as well as for marketing and remarketing purposes (including necessary analytical activities and compiling into marketing profiles on the basis of the User's activity on individual subpages of the Online Store). Cookies ("cookies") are code fragments that are text files corresponding to HTTP requests directed to the Administrator's server. The Online Store also uses other available technologies that allow information to be stored in the browser in appropriate data stores (Session Storage, Local Storage), and also places code fragments of analytical tools provided by other providers that allow cookies to be stored in the domains of these services. The information stored or accessed does not cause any configuration changes to the User's device or the software installed on it. The information contained in cookies and similar technologies is considered personal data only in conjunction with other personal data available about the User. If the User does not agree to the saving and receiving of information in cookies or similar technologies, he/she can change the rules regarding cookies through the settings of his/her Internet browser or by using the so-called opt-out option on the website of the provider of the given technological solution. Detailed information on the technologies used by the Administrator is available in the Cookie Policy.

VII. OTHER IMPORTANT INFORMATION

Protection of personal data security
The Administrator implements various measures to ensure the security of the User's personal data. Safe use of the services offered is ensured by the systems and procedures applied to protect against access and disclosure of data to unauthorised persons. Moreover, the systems and procedures used by the Administrator are regularly monitored in order to detect possible threats. The personal data obtained by the Administrator are stored in computer systems to which access is strictly limited.
Storage of personal data
The storage period of the Users' personal data may vary due to the fact that different purposes for processing the personal data of different Users may be defined.
The Administrator shall store personal data for such period as is necessary to achieve the specified purposes, viz:
1. in the case of analytical and statistical purposes, for the period necessary to achieve the purposes related to the effective functioning and development of the Online Shop;
2. in the case of processing orders, providing services to the User - for the duration of the contract and the period of limitation of claims;
3. for the period required by law for the purpose of keeping tax records and settlements in respect of contracts being performed;
4. in the case of the processing of personal data for marketing purposes - for the period of the existence of a business relationship with the User, unless the User first objects to the processing for these purposes;
In each of the above cases, after the expiry of the necessary processing period, the data may be processed only to secure the assertion or defence of claims, and thereafter only in the case and to the extent required by law.
Users' personal data are stored in the Administrator's database, where technical and organisational measures have been applied to ensure the protection of the processed data in accordance with the requirements set out in the applicable legislation. Only the Administrator has access to the database.
Changes to the privacy policy
In order to update the information contained in this Privacy Policy and its compliance with the applicable laws, this Privacy Policy may be amended. Along with the change of the content of the document, the date of its update, placed at the beginning of this Privacy Policy, will be changed. However, the User shall be notified of any material change through a notice posted on the website of the Online Store or directly. In order to obtain information on how to protect personal data, the Administrator recommends that Users regularly read this Privacy Policy.
Contact information
In case of any doubts concerning personal data protection issues or in order to obtain information concerning this Privacy Policy, the User may contact the Administrator by e-mail kontakt@internetto.eu and by post at the following address: ul. Krakowska 60, 32-064 Rudawa.