PRIVACY POLICY

1. The data controller of personal data collected through the 4HFT.PL Shop is Krzysztof Kowalczyk, who conducts business under the name 4HFT KRZYSZTOF KOWALCZYK and is registered in the Central Register and Information on Business Activity of the Republic of Poland, maintained by the minister responsible for the economy, with the place of business and mailing address: ul. Podhalańska 9/41, 41-907 Bytom, NIP: 6263015829, REGON: 367240984, email address (e-mail): krzysztof@4hft.pl, hereinafter referred to as the “Controller” and simultaneously as the Service Provider.
2. Any words or expressions written in this Privacy Policy with an initial capital letter shall be understood in accordance with their definition contained in the Terms and Conditions of the 4HFT.PL Shop.

1. Personal data will be processed for the purpose of fulfilling purchases in our online store and for direct marketing of our own products and services, carried out in traditional (paper) form, constituting a so-called legitimate interest of the entrepreneur. In these cases, the data will be processed on the basis of Article 6(1)(b), (c) and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
2. Upon providing separate consent, pursuant to Article 6(1)(a) of the GDPR, data may also be processed for the purpose of sending commercial information electronically or making telephone calls for direct marketing – respectively in accordance with Article 10(2) of the Act of 18 July 2002 on the provision of electronic services or Article 172(1) of the Act of 16 July 2004 – Telecommunications Law, including those resulting from profiling, provided that the user has given the appropriate consent.
3. In the event that it is necessary to deliver an order, personal data may be disclosed to postal operators or carriers solely for the purpose of order delivery.
   Transactional data, including personal data, may be transferred to the electronic payment operator chosen by the Customer during the ordering process, to the extent necessary to process the payment for the Order. Personal data processed for purposes related to the fulfillment of purchases will be processed for the period necessary to complete the purchase and order, after which archived data will be stored for the period applicable for the limitation of claims, i.e. 10 years. Personal data processed for marketing purposes covered by the consent statement will be processed until the consent is withdrawn.
4. If it is determined that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the General Data Protection Officer (since 25 May 2018 – the President of the Office for Personal Data Protection).
5. Providing personal data is voluntary; however, providing the specified personal data is a condition for placing an order, and failure to provide them will result in the inability to order products in the store.
6. Personal data will also be processed automatically in the form of profiling, provided that the user consents to this on the basis of Article 6(1)(a) of the GDPR. The consequence of profiling will be the assignment of a profile to the individual for the purpose of making decisions affecting them or for analyzing or predicting their preferences, behaviors, and attitudes.
7. The Controller takes special care to protect the interests of the data subjects and, in particular, ensures that the data collected:
   1. are processed in accordance with the law,
   2. are collected for specified, lawful purposes and are not subject to further processing that is incompatible with those purposes,
   3. are factually correct and adequate in relation to the purposes for which they are processed and are stored in a form that allows identification of the data subjects for no longer than is necessary to achieve the purpose of processing.

III. RIGHT OF CONTROL, ACCESS TO ONE’S OWN DATA, AND THEIR CORRECTION

1. The data subject has the right to access the contents of their personal data, as well as the right to have them rectified, deleted, or restricted, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent prior to its withdrawal.
2. To exercise the rights mentioned in point 1, a relevant email may be sent to: krzysztof@4hft.pl.

IV. "COOKIES" FILES

1. The Service Provider’s Shop uses “cookies”. Failure on the part of the Service User to change the browser settings is equivalent to giving consent to their use.
2. The installation of “cookies” is necessary for the proper provision of services in the Shop. The “cookies” contain information essential for the proper functioning of the Shop, in particular for those services requiring authorization.
3. Three types of “cookies” are used in the Shop: “session”, “persistent”, and “analytical”.
   • “Session cookies” are temporary files that are stored on the Service User’s device until they log out (or leave the Shop).
   • “Persistent cookies” are stored on the Service User’s device for the period specified in the cookie parameters or until they are deleted by the Service User.
4. The Service User has the right to decide on the access of “cookies” to their computer by pre-selecting them in their browser settings. Detailed information on the possibilities and methods of handling “cookies” is available in the settings of the software (web browser).

V. FINAL PROVISIONS

1. The Controller applies technical and organizational measures to ensure the protection of the processed personal data appropriate to the risks and the categories of data concerned, and in particular, safeguards the data from disclosure to unauthorized persons, unauthorized access, processing in violation of applicable regulations, as well as from alteration, loss, damage, or destruction.
2. The Service Provider provides appropriate technical means to prevent unauthorized persons from obtaining and modifying personal data transmitted electronically.
3. In matters not regulated by this Privacy Policy, the provisions of the 4HFT.PL Shop Terms and Conditions, the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (GDPR), and other applicable provisions of Polish law shall apply accordingly.
4. The provisions of this Privacy Policy come into effect on May 25, 2018.