Privacy policy

PRIVACY POLICY

The privacy policy and the use of "cookies" in the Online Shop www.buycrestwhitestrips.com

General information

The present document defines the rules of the Privacy Policy of the Online Shop (hereinafter referred to as "Online Shop"). The administrator of the Online Shop is DIAMOND  running a business under the name DIAMOND ;

Address:

DIAMOND

NIP(Company number): 7123162956

Street: Koncertowa 7/93B

20-843 Lublin, Poland

The words used in capital letters have the same meaning given to them in the Terms and Conditions of this Online Shop.

Personal data collected by the Administrator of the Online Shop are processed in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27/04/2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data and repeal of Directive 95/46/EC (general regulation on data protection) (EU Official Journal L 119, p. 1), hereinafter referred to as: GDPR.

The Administrator of the Online Shop is committed to respecting individual privacy and information provided to him regarding the Customers of the Online Shop. The Administrator selects and applies appropriate technical measures, including programming and organizational measures, which assure protection of the data being processed, in particular protection against unauthorized access, disclosure, loss and destruction, unauthorized modification, as well as against the processing of information in violation of the law in force.

The Goods and Services provided on the webpage can’t be used by children under the age of 16. The Personal Data Administrator does not intend to collect data on children under 16.

Personal data

Personal Data Administrator

The Administrator of your personal data is:

DIAMOND

NIP(Company number): 7123162956

Street: Koncertowa 7/93B

20-843 Lublin, Poland

 

For information on your personal data, please contact the Personal Data Administrator via:

  • e-mail: kontakt@buycrestwhitestrips.com

  • letter: ul. Koncertowa 7/93B , 20-843 Lublin POLAND

  • telephone: +48 514 589 393

Objectives and legal grounds for the processing of personal data

The Personal Data Administrator processes your personal data for the following purposes and in the following areas:

  • to take steps at the request of the data subject prior to entering into a contract (e.g. the creation of an account), i.e. data provided in the online registration form such as e-mail address and password, gender; if the Account is registered via an external authentication service (e.g. Google+, Facebook), we collect your first and last name, and if you register when purchasing Goods, we collect your name and data provided for the purpose of the order, such as the shipping address; in order to provide Services that require Account creation such as: keeping order history, informing about the status of order processing, we process data provided in the Account and when purchasing Goods;

  • to provide Services that do not require the Account creation and purchase of the Goods, i.e. browsing the Online Shop websites, searching Goods, we process personal data concerning your activity in the Online Shop, i.e. data about the Goods you browse, data about your device session, operating system, browser, location and unique ID, IP address;

  • to perform the contract of sales of Goods (e.g. to deliver ordered Goods), we process personal data provided by you while purchasing Goods, such as your name, e-mail address, address details, payment details, and if you make a purchase through an Account - your password;

  • to obtain statistics on individual functionalities available in the Online Shop, to facilitate the use of the Online Shop and to ensure IT security of the Online Shop, we process personal data regarding your activity in the Online Shop and the amount of time spent on each subpage of the Online Shop, your search history, location , IP address, device ID, data about your internet browser and operating system;

  • in order to determine, investigate and enforce claims, and defend against claims in court proceedings and before other judicial organs, we may process your personal data provided while purchasing the Goods or creating an Account and other data necessary to prove the existence of a claim or which result from a regulatory requirement, court order or other legal procedure;

  • to resolve complaints and requests as well as answer Customer questions in any form, we process the personal data provided by you in the contact form, complaints and requests, personal data provided by you in the Account as well as data regarding order of Goods and other Services provided by us that are the reason for the complaint or request, and the data contained in the documents attached to the complaints and requests;

  • for marketing purposes, to promote our Goods and Services as well as our clients and partners, including remarketing, for this reason, we process personal data provided by you when creating an Account and its updates, data about your activity in the Online Shop, including orders that are registered and stored via cookies, in particular order history, search history, clicks, login and registration dates, history and your activity while communicating with us. When it comes to remarketing, we use data about your activity in order to reach you by messages sent outside of the Online Shop. For this purpose, the services of external suppliers are used. These services consist in displaying our messages on websites other than the Online Shop. Details on this subject can be found in the points concerning Cookies;

  • to organize contests and customer loyalty programs, i.e. to send notifications about accumulated points and winning ad well as to advertise our offer, we use your personal data provided in the Account and while registering for a competition or loyalty program. Detailed information on this subject is provided each time in the participation conditions of a given competition or loyalty program;

  • to investigate the market and opinions on us or our partners, i.e. information about the order, your data provided in the Account or when purchasing the Goods, e-mail address. Data collected to investigate the market and opinions are not used by us for advertising purposes. The exact tips are given in the information about the questionnaire or whole entering your data.

Personal Data Categories

The Personal Data Administrator processes the following personal data categories:

  • contact details;

  • data on the activity in the Online Shop;

  • data on orders in the Online Shop;

  • data on complaints and requests;

  • data on marketing services.

Voluntary provision of personal data

The provision of the required personal data is voluntary and is required for the provision of services by the Personal Data Administrator via the Online Shop.

Duration of data processing

Personal data will be processed for the period necessary to fulfil orders, services, marketing activities and other services performed for the Customer. Personal data will be deleted in the following cases:

  • when the data subject asks to delete personal data or withdraws the acceptance of personal data provision;

  • when the data subject does not take action for over 10 years (inactive account);

  • after obtaining information that the stored data is out of date or inaccurate.

Data such as e-mail address, first and second name, may be stored for the next 3 years for evidence purposes and for the resolution of the complaints and claims related to services provided by the Online Shop - these data will not be used for marketing purposes.

Data regarding orders for Goods and paid services, contests and customer loyalty programs will be stored for a period of 5 years from the date of order delivery.

Data regarding Customers who are not logged in are stored for a period corresponding to cookies duration on the devices or until they are deleted by the Customer on the Customer's device.

Personal data concerning your preferences, behaviours and selection of marketing content can be used as a basis for automated decisions to determine the sales capability of the Online Shop.



Recipients of personal data

After a request, the following recipients may obtain your personal data:

• state authorities, such as the prosecutor's office, the Police,

• service providers with whom we work to run the Online Shop, e.g. to fulfil an order. Depending on contractual arrangements and circumstances, these entities act on our behalf or determine their goals and methods of processing them. The list of service providers:

SERVICE PROVIDER

PURPOSE

Paypal Polska sp. z o.o. established in Warsaw, Poland

Payments

PayLane Sp. z o.o. established in Gdańsk, Poland

Payments

Poczta Polska S.A. established in Warsaw, Poland

Order completion

Operator DPD sp. z o.o. established in Warsaw, Poland

Order completion

Google Inc. (Google Cloud, Google Analytics, Google Analytics 360, Fabric Software) established in the USA

Measuring traffic, reporting on application errors, creating statistics, receiving opinions

Google Inc. established in the USA

Defining Customers’ profiles –

Google Adwords

Google Inc. established in the USA

Analysing Customers’ activities

Google Ireland Ltd (Google Adwords, Double Click Manager,  Double Click Search, Remarketing Service, Firebase) established in Ireland

Measuring the effectiveness of advertising campaigns, managing advertising campaigns

Facebook Ireland established in Ireland

Promoting the Online Shop using the facebook.com social network

Instagram LLC. established in the USA

Promoting the Online Shop using the instagram.com social network

Smartlook established in the Czech Republic

Analysing Customers’ activities

tawk.to inc. established in the USA

Chatting with customers

Twitter Inc. established in the USA

Promoting the Online Shop using the twitter.com social network

Rights of the personal data subject

According to GDPR, you have the right to :

  • request the access to your personal data;

  • request the correction of your personal data;

  • request the removal of your personal data;

  • requests to limit the processing of personal data;

  • raise an objection to the processing of personal data;

  • requests for moving personal data.

The Personal Data Administrator without undue delay - and in any case within one month of receipt of the request - provides you with information about the actions taken to fulfil your request. If necessary, the monthly period may be extended by another two months due to the complex nature of the request or the number of requests.

In all such cases, the Personal Data Administrator informs you of such extension within one month receipt of the request, stating the reasons for the delay.

Right to access your personal data (Art. 15 GDPR)

The data subject has the right to obtain from the Personal Data Administrator confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, you have the right to:

  • access the personal data;

  • access information on the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; the right to lodge a complaint with a supervisory authority; where the personal data are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling or the protection of your personal data when passed outside the EU;

  • get the copy of your personal data.

If you want to request access to your personal data, please submit your request to: kontakt@buycrestwhitestrips.com.

Right of rectification of personal data (Art. 16 GDPR)

If your personal data are inaccurate, you have the right to obtain from the Personal Data Administrator without undue delay the rectification of these data.

You have the right to complete your personal data.

If you want to rectify or complete your personal data, please submit your request to: contact@buycrestwhitestrips.com.

If you have created an account in the Online Shop, you can rectify and complete your personal data after logging in to the Online Shop.

Right to erasure – „right to be forgotten” (Art. 17 GDPR)

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies

  • You have the right to obtain from the Personal Data Administrator the erasure of your personal data when:

  • Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed

  • Your personal data have been unlawfully processed;

  • You have objected to the processing of your personal data for the purposes of direct marketing, including profiling, to the extent to which the processing of your personal data is related to direct marketing;

  • You have objected to the processing of your personal data for the purposes of direct marketing, including profiling, to the extent to which the processing of personal data is related to direct marketing;

  • You have objected to the processing of your personal data in connection with the processing necessary to perform the task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by the Personal Data Administrator or a third party.

Despite the request to remove your personal data, the Personal Data Administrator may process your data further to determine, assert or defend claims. You will be notified about it.

If you want to delete or complete your personal data, please submit your request to: contact@buycrestwhitestrips.com.

Right to restriction of processing of personal data (Art. 18 GDPR)

You have the right to obtain from the Personal Data Administrator restriction of processing of your personal data when:

  • you contest the accuracy of the personal data – the Personal Data Administrator will restrict the processing of your personal data for a period enabling him or her to verify the accuracy of the personal data;

  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

  • the Personal Data Administrator no longer needs the personal data for the purposes of the processing, but they are required by for the establishment, exercise or defence of your legal claims;

  • you have objected to processing of your personal data - pending the verification whether the legitimate grounds of the controller override those of the data subject.

If you want to restrict the processing of your personal data, please submit your request to: contact@buycrestwhitestrips.com.

Right to object to personal data processing (Art. 21 GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in terms of:

  • processing necessary to perform a task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by the Personal Data Administrator or a third party;

  • processing for direct marketing purposes.

If you want to object to the processing of your personal data, please submit your request to: contact@buycrestwhitestrips.com.

Right to personal data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you, which he or she has provided to a Personal Data Administrator, in a structured, commonly used and machine-readable format and have the right to transmit those data to another Personal Data Administrator.

You can also request the Personal Data Administrator to send your personal data directly to another personal data administrator (if it is technically possible).

If you want to request the transmission of your personal data, please submit your request to: contact@buycrestwhitestrips.com.

Right to withdraw consent

You can withdraw your consent to the processing of your personal data at any time.

The withdrawal of consent to the processing of personal data does not affect the legality of the processing made on the basis of your consent before its withdrawal.

If you want to withdraw your consent to the processing of your personal data, please submit your request to: contact@buycrestwhitestrips.com

or use appropriate functions in the Account.

Complaint to the supervisory authority

If you believe that the processing of your personal data violates GDPR, you have the right to submit a complaint to the supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged violation.

> „Cookie” files

General information

While browsing the websites of the Online Shop, "cookie" files are used, hereinafter referred to as Cookies. These are the small text information files that is stored in your device. Their aim is to enable the correct functioning of the websites of the Online Store.

These files allow you to identify the software used by you and adapt the Online Shop to your individual needs.

"Cookies" usually contain the name of the domain from which they originate, their storage time on the device and the assigned value.

Security

The "cookie" files used by us are safe for your devices. In particular, it is not possible that the viruses or other unwanted and malicious software get into your device through “cookies.”

Types of "cookies"

We use two types of cookies:

  • Session cookies: they are stored on your device and remain there until the end of the browser session. The saved information is then permanently deleted from the memory of your device. The mechanism of session cookies does not allow the download of any personal data or any confidential information from your device.

  • Persistent cookies: they are stored on your device and remain there until they are deleted. When you end the browser session or turn off the device, cookies are not deleted from your device. The mechanism of persistent cookies does not allow the download of any personal data or any confidential information from your device.

Purposes

We also use third-party "cookies" for the following purposes:

• configuration of the Online Shop;

• creating statistics that help understand how the customers of the Online Shop use websites; it allows improving their structure and content through Google Analytics, which is administrated by Google Inc. based in the USA, Google's privacy policy is available under the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/;

• defining the Customer's profile in order to display materials adjusted to him or her in advertising networks, using the Google Adwords online advertising tool, which is administered by Google Inc. based in the USA, the Google Privacy Policy is available under the following link: http://www.google.com/intl/en/policies/privacy/,http://www.google.com/intl/en/policies/privacy / partners /.

• promotion of the Online Shop using the Facebook.com social network, which is administered by Facebook Inc. based in the USA or Facebook Ireland based in Ireland, the Facebook Privacy Policy is available under the following link: https://www.facebook.com/help/cookies/.

• promotion of the Online Store using the Instagram.com social network, the administrator of which is Instagram LLC. based in the USA, the Instagram.com Privacy Policy is available under the following link: https://help.instagram.com/155833707900388.

In order to learn the rules of using Cookies, we recommend that you read the privacy policies for the above-mentioned companies.

Cookies can be used by advertising networks, in particular the Google network, to display ads adjusted to your preferences. For this purpose, information about how you navigate the network or when you use the website can be preserved.

To browse and edit information about your preferences collected by the Google network, you can use the tool found under the following link: https://www.google.com/ads/preferences/.

By using your browser settings or service configuration settings, you can change your Cookie settings at any time by specifying the conditions for their storage and access on your device via Cookies. These settings can be changed to block the automatic handling of Cookies in your browser settings or to inform about them every time they are placed on your device. Detailed information about the possibilities and ways of handling Cookies are available in the settings of your software (browser).


"Use of this site requires personal data processing of a client in the following matter: ... (for example: first name and last name, phone number, e-mail, billing address, etc.). Data will be processed by: ... (merchants name) in a way that is crucial to agreeing on a contract, as well as its fulfillment. Transaction data, in that personal data, can be transferred for the benefit of PayLane Sp. z o.o. located in Gdańsk at Norwida 4, zip code: 80-280, KRS: 0000227278, on the terms that it will beneficial on in service connected to order payments. A client has the right to see the content of his data and any corrections made to it. Sharing of information is voluntary, however, at the same time it is crucial to using this site" .



Cart

Your shopping cart is empty

Buy your first product