PERSONAL DATA CONTROLLER CHÉRIR SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office at Sienkiewicza 1c, 34-500 Zakopane, entered in the National Court Register - Register of Entrepreneurs by the DISTRICT COURT IN GDAŃSK-NORTH IN GDAŃSK, 7th DIVISON OF THE NATIONAL COURT REGISTER, under KRS No. 0000801049, NIP 5833368376, REGON 38423715000000. If you wish to contact us in relation to our processing of your personal data, please email us at contact@cherir.eu.

YOUR RIGHTS

You have the right to request:

access to your personal data, including obtaining a copy of your data (Article 15 GDPR or, if applicable, Article 13(1)(f) GDPR),
their rectification (Article 16 GDPR),
their erasure (Article 17 GDPR),
restriction of their processing (Article 18 GDPR),
transfer to another controller (Article 20 GDPR).

And also the right: to object at any time to the processing of your data:

- for reasons related to your particular situation – against the processing of personal data concerning you based on Article 6(1)(f) GDPR (i.e. the legitimate interests pursued by us), including profiling (Article 21(1) GDPR);
- where personal data is processed for the purposes of direct marketing, including profiling, to the extent that the processing is related to such direct marketing (Article 21(2) GDPR).

Contact us if you wish to exercise your rights. You may object to our use of cookies (which you will read about below) in particular by means of the relevant browser settings.

If you consider that your data is being processed unlawfully, you may lodge a complaint with the President of the Data Protection Authority.

PERSONAL DATA AND PRIVACY

Below you will find detailed information on the processing of your data depending on your activities.

1. Placing an order in the Store

For what purpose?
processing of your order
On what basis?
sales agreement (Article 6(1)(b) GDPR)	legal obligation related to accounting, obliging us to process your personal data (Article 6(1)(c) GDPR)
For how long?
for the duration of the aforementioned agreement	until the expiry of our legal accounting obligations
in addition, your data will be processed until the expiry of the period during which claims may be asserted – by you or by us (see the last table of this section for more information)
What happens if you do not provide the data?
you will not be able to place an order

2. Creating an account in the Store

For what purpose?

performance of the store account service agreement

On what basis?

service agreement (Article 6(1)(b) GDPR)

For how long?

until the account is deleted by you or by us at your request

in addition, your data will be processed until the expiry of the period during which claims may be asserted – by you or by us

(see the last table of this section for more information)

What happens if you do not provide the data?

you will not be able to create an account and use its functions, such as viewing your order history or checking the status of your order

3. Getting in touch with us (e.g. to ask a question)

For what purpose?
handling your enquiries or requests
On what basis?
an agreement or action taken at your request with a view to concluding an agreement (Article 6(1)(b) GDPR) – where your enquiry or request relates to an agreement to which we are or may be a party	our legitimate interest in processing your data for the purpose of communicating with you (Article 6(1)(f) GDPR) – if your enquiry or request is not related to the agreement
For how long?
for the duration of the agreement binding us or, if no agreement is concluded, until the expiry of the claim period – see last table of this section*	until the expiry of the claim period – see last table of this section – or until we have positively considered your objection to the processing*
in addition, your data will be processed until the expiry of the period during which claims may be asserted – by you or by us (see the last table of this section for more information)
What happens if you do not provide the data?
we will not be able to respond to your enquiry or request

* whichever is applicable in the case and whichever occurs earliest

4. Browser settings or other similar action allowing marketing activities.

For what purpose?

direct marketing through the display of personalised advertising

(read more about this in the "Profiling" and "Cookies" sections of the Privacy Policy).

On what basis?

our legitimate interest in processing the data for the purpose stated above (Article 6(1)(f) GDPR)

For how long?

until the cookies used for marketing purposes* expire or are deleted by you

What happens if you do not provide the data?

you will not receive suggestions for products or services in which you may be interested

* whichever is applicable in the case and whichever occurs earliest

5. Browser settings or other similar action to allow analytics to be carried out

For what purpose?

analysing how you use and navigate around the Store's website in order to adapt the site to your needs and behaviour (you can read more about this in the "Analytics" and "Cookies" sections of the Privacy Policy)

On what basis?

our legitimate interest in processing the data for the purpose stated above (Article 6(1)(f) GDPR)

For how long?

until the cookies used for analytical purposes* expire or are deleted by you

What happens if you do not provide the data?

we will not take your preferences regarding the use of the Store into account in the development of the Store

* whichever is applicable in the case and whichever occurs earliest

6. Newsletter subscription

For what purpose?

sending a newsletter

On what basis?

agreement for the provision of a newsletter mailing service (Art. 6(1)(b) GDPR)

For how long?

until you unsubscribe from our newsletter

in addition, your data will be processed until the expiry of the period during which claims may be asserted – by you or by us

(see the last table of this section for more information)

What happens if you do not provide the data?

you will no longer be able to receive information about the Store and our services

7. Taking any action or omission that may give rise to a claim relating to the Store or our services

For what purpose?

establishment, assertion or defence of possible claims relating to the agreement concluded or the services provided

On what basis?

our legitimate interest in processing your personal data for the purpose indicated above (Article 6(1)(f) GDPR)

For how long?

until the expiry of the claims period or until we positively consider your objection to the processing*

What happens if you do not provide the data?

inability to establish, assert or defend claims

* whichever is applicable in the case and whichever occurs earliest

PROFILING

We carry out profiling within the Store – this will be done in relation to you if you allow it. This profiling involves automatically assessing what products or services you may be interested in, using information about the content you view. As a result, advertisements for products or services displayed within the online services you use will be more tailored to you and your needs.

The profiling we perform does not result in decisions that produce legal effects for you or affect you in a similarly significant manner.

ANALYTICS

We carry out analytics on the Store to make it more intuitive and accessible – this will be done for you if you allow it. As part of the analytics, we will take into account how you navigate the Store – so, for example, how much time you spend on a particular subpage or which places in the Store you click on. This allows us to adapt the layout and design of the Store and the content it contains to suit your needs.

DATA SECURITY

When processing your personal data, we apply organisational and technical measures in accordance with the relevant legislation, including the use of encryption of the connection using an SSL certificate.

Our Store, like most websites, uses so-called cookies. These files:

are stored on your device (computer, phone, etc.);
do not result in changes to the settings of your device.

In this Store, Cookies are used for the following purposes:

statistical
marketing

To find out how to manage cookies, including how to disable them in your browser, you can refer to your browser's help file. You can find out more about this by pressing F1 in your browser. In addition, you will find relevant tips on the respective pages, depending on the browser you are using:

Firefox
Chrome,
Safari
Internet Explorer / Microsoft Edge

Below you will find information on the function of the cookies we process and their period of validity.

cookie name	cookie validity period	cookie function
"_ga"	duration of session	Movement tracking

Using the relevant options of your browser, you can at any time:

delete cookies,
block the use of cookies in the future.

In such cases, we will no longer process them.

For more information on cookies, see Wikipedia.

EXTERNAL SERVICES / DATA RECIPIENTS

We use third-party entities to support us in running our business. We entrust them with processing your data – these entities only process data on our documented instructions.

Below you will find a list of the recipients of your data:

ACTION	DATA RECIPIENTS	TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION
any action in connection with the Store	operator of an online commerce platform	none
placing an order in the Store	payment provider	none
	provider of business management software (e.g. accounting software)	none
	provider of standard office software (including e-mail boxes)	none
	accounting office	none
getting in touch with us (e.g. by asking a question)	provider of standard office software (including e-mail boxes)	none

And furthermore:

the relevant public authorities insofar as we are obliged to make the data available to them.