Privacy Policy

WEBSITE PRIVACY POLICY
WWW.PLAYROOM.PL

 

Ladies and Gentlemen,

Below we present information describing the principles of processing personal data obtained in connection with the use of our website https://playroom.pl/, hereinafter referred to as the "Website".

 

I. BASIC INFORMATION

 

1. The administrator of personal data collected via the Website is:

 

PLAYROOM SP. Z O.O.

00-850 Warszawa, ul. Prosta 2/14

VAT: 5272898555, REGON: 383865269, KRS: 0001006865

 

2. Contact with the Administrator is possible at the e-mail address: logistyka@playroom.pl or by phone: +48 22 101 77 39; +48 534 688 588 (09.00 to 16.00)
3. Each entity using the Website is its "User".
4. For the purposes of this Policy, the term "Buyer" means a natural person running a sole proprietorship (entered into CEIDG) or a legal entity (entered into the National Court Register) who registers a B2B Account on the Website in accordance with the Wholesale Regulations and uses the functionalities available on the account.
5. Personal data of the Website User are processed by the Administrator in accordance with applicable law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and in on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) - hereinafter referred to as "GDPR".
6. Contact with the Data Protection Inspector is possible at the e-mail address: iod@playroom.com.pl.
7. We guarantee the confidentiality of all personal data provided to us. We use appropriate technical and organizational security measures to ensure that the data is adequately protected against access by unauthorized persons.

II. PERSONAL DATA PROCESSING, PURPOSES, LEGAL BASIS, DATA STORAGE PERIOD

 

1. Business account – B2B account registration and order fulfillment

1.1. When registering an Account, the Buyer provides his/her data and company data required to set up an account in accordance with the Wholesale Regulations.

1.2. The data of the Buyer who is a person running a business will be processed on the basis of the contract (Article 6(1)(b) of the GDPR) for the purpose of:

1. verifying formal requirements, creating and maintaining a business account and enabling the use of functionalities available on the account;
2. execution of orders, i.e. sale of goods from the Commercial Offer and possible provision of logistics services DROPSHIPPING@PLAYROOM.PL.

1.3. Personal data of the User who, when registering a B2B account, represents the Buyer who is a legal entity (i.e. an authorized employee, proxy, member of the Buyer's management body), will be processed on the basis of the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) in order to : :

1. verifying formal requirements, creating and maintaining a business account and enabling the use of functionalities available on the account;
2. execution of orders, i.e. sale of goods from the Commercial Offer and possible provision of logistics services DROPSHIPPING@PLAYROOM.PL;

where the legally justified interest of the Administrator is the implementation of contracts with a legal entity.

ATTENTION!!! Please note that in the scope of using the DROPSHIPPING@PLAYROOM.PL service, the administrator of the End Customer's personal data is the Buyer, and Playroom sp. z o.o. acts as a Processor in accordance with the Wholesale Regulations.

1.4. Personal data of the Buyer who is a natural person and personal data of the User representing the Buyer who is a legal entity will also be processed for the purposes of:

1. implementation of legal requirements related to maintaining appropriate accounting documentation in accordance with Art. 6 section 1 letter c GDPR (issuing and storing invoices and accounting settlements);
2. enable the Administrator to pursue possible claims or defend against claims based on the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which is to pursue and defend against claims.

1.5. Personal data related to the registration and maintenance of a B2B account will be processed for the duration of this account, and then for the period of limitation of claims.

1.6. Order data will be processed for the time necessary to complete the order and then until the limitation period for claims under the concluded contract expires. Personal data appearing on the invoice will be stored for a period of 5 years from the end of the year in which the invoice was issued.

1.7. Providing personal data marked with an asterisk is required and necessary to achieve a given processing purpose. Providing other data is voluntary.

2. Contact form

2.1. Personal data sent to the Administrator via the Contact Form will be processed in order to answer the question. The legal basis for the processing of personal data is the legitimate interest of the Administrator consisting in responding to the User's messages and communicating with the User (legal basis: Article 6(1)(f) of the GDPR).

2.2. If the User asks the Administrator to present a commercial offer, his or her personal data will be processed for this purpose pursuant to Art. 6 section 1 letter b GDPR, i.e. taking action at the request of the data subject before concluding the contract (if the User is to be a party to the contract) or on the basis of the Administrator's legitimate interest in presenting the ordered offer (Article 6(1)(f) of the GDPR) if The user represents a legal entity.

2.3. The User's personal data will be processed for the period necessary to handle correspondence, extended by the period resulting from the relationship between the correspondence and the concluded legal relationship, archiving obligations, pursuing possible claims or other obligations required by generally applicable law.

3. Adding comments

3.1. If a user wants to add a comment to the blog, he or she must provide his or her name or nickname, e-mail address and the content of the comment/opinion. This data will be processed for the purpose of posting a comment on the Website based on the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which is the publication and management of comments under articles posted on the blog.

3.2. Personal data will be processed for the duration of publication of a given comment, however, the Administrator informs that the comment is deleted at the request of the User who posted the comment.

 

III. USER RIGHTS (RIGHTS OF THE DATA SUBJECT)

 

1. Pursuant to the principles described in the GDPR, the User has the following rights:
2. the right to access your data and request a copy thereof (Article 15 of the GDPR);
3. the right to request rectification of your personal data (Article 16 of the GDPR);
4. the right to request the deletion of personal data (Article 17 of the GDPR);
5. the right to request restriction of data processing (Article 18 of the GDPR);
6. the right to request data transfer, i.e. the right to receive from the Administrator personal data in a structured, commonly used, machine-readable format, to the extent that the data is processed on the basis of consent or for the purpose of concluding and performing a contract in an automated manner ( Article 20 of the GDPR);
7. the right to object to the processing of personal data on the basis of legitimate interest (Article 21 of the GDPR);
8. In order to exercise your rights, please send an application with your request to the e-mail address: iod@playroom.com.pl, or to the e-mail address logistyka@playroom.pl.
9. The User also has the right to lodge a complaint with the President of the Personal Data Protection Office if he/she considers that his/her personal data is being processed illegally.

 

IV. DATA RECIPIENTS

 

1. For the proper functioning of the Website, including the implementation of concluded Sales Agreements, it is necessary for the Administrator to use the services of external entities (such as e.g. software supplier, courier or payment processor). The Administrator only uses the services of such processors who provide sufficient guarantees of implementing appropriate technical and organizational measures so that the processing meets the requirements of the GDPR and protects the rights of data subjects.
2. Data is not transferred by the Administrator in every case and not to all recipients or categories of recipients indicated in the privacy policy - the Administrator transfers data only when it is necessary to achieve a given purpose of personal data processing and only to the extent necessary to achieve it. The transfer takes place by entrusting the processing of personal data on the basis of appropriate entrustment agreements or by making them available pursuant to relevant legal provisions.
3. Users' personal data may be transferred to the following recipients or categories of recipients:
4. couriers / forwarders / carriers - in the case of a Buyer who uses the online store to deliver the Product by post or courier, the Administrator provides the collected personal data of the Customer in order to deliver the Product to the Customer.
5. entities handling electronic or payment card payments.
6. service providers supplying the Administrator with IT, technical and organizational solutions enabling the Administrator to run the company's business, including the website and electronic services provided via it (in particular suppliers of computer software for running the Website and online store, e-mail and hosting providers, and suppliers of software for managing the company and providing technical assistance to the Administrator).
7. providers of legal, accounting and advisory services providing the Administrator with accounting, legal or advisory support (accounting office, law firm or debt collection company).
8. entities authorized to obtain personal data on the basis of legal provisions (other administrators), e.g. tax office, courts and law enforcement agencies.

 

V. INFORMATION ON THE REQUIREMENT/VOLUNTARYITY OF PROVIDING DATA

 

1. Providing personal data is voluntary, but may be necessary to achieve a given processing purpose.
2. In the case of Buyers, failure to provide data may result in the inability to perform the Agreement (it is therefore a contractual obligation).
3. In the forms posted on the Website, required fields are marked with an asterisk. Entering other data into the forms is voluntary.

 

VI. INFORMATION ON PROFILING AND TRANSFER OF DATA OUTSIDE THE EEA

 

Personal data will not be subject to automated decision-making, including profiling, and will not be transferred to third countries, i.e. outside the European Economic Area (EEA).