Privacy Policy

NOTE FOR RESIDENTS OF THE USA: Residents of the USA should refer to the Privacy Policy for US Residents at Privacy Policy for US Residents, which bind US residents in place of these Privacy Policy

PRIVACY POLICY - movelle.store 

 

This Privacy Policy (hereinafter: "Policy") contains information about the processing of your personal data in connection with the use of the online shop "movelle.store", operating at the following web address www.movelle.store (hereinafter: the "Store"). 

 

Any capitalised terms not otherwise defined in the Policy have the meaning given to them in the Terms and Conditions, available at: www.movelle.store.

 

Personal data controller

 

The administrator of your personal data is Magdalena Palmer conducting business activity under the name: Magdalena Palmer with the registered office in Wrocław, ul. Parafialna 61/28, 52-233 Wrocław, entered into the Central Register of Information on Business Activity, holding NIP: 8992473087, REGON number: 022143490, (hereinafter: "Administrator").

 

Contact with the Administrator

 

For all matters relating to the processing of your personal data, you can contact the Controller  via:

  1. e-mail - at: hello@movelle.store;
  2. by post - to the following address: Parafialna 61/28, 52-233 Wrocław, Poland;

 

Data protection measures

 

The controller applies modern organisational and technical safeguards to ensure the best possible protection of your personal data and ensures that it processes your personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: "RODO"), the Act of 10 May 2018 on the protection of personal data and other data protection legislation.

 

Information on personal data processed

 

The use of the Shop requires the processing of your personal data. Below you will find detailed information about the purposes and legal grounds for the processing, as well as the duration of the processing and the obligation or voluntariness to provide it.

 

Purpose of processing

Personal data processed

Legal basis

Conclusion and execution of the Agreement for the provision of the Account Service
  1. name
  2. e-mail address

Article 6(1)(b) RODO 

 

(processing is necessary for the performance of the Agreement for the provision of the Account Service concluded with the data subject or for taking steps to conclude the Agreement)

The provision of the aforementioned personal data is a condition for the conclusion and performance of the contract for the provision of the Account Service (the provision of such data is voluntary, but the consequence of failing to provide such data will be the inability to conclude and perform the aforementioned contract, including the creation of the Account).

 

The Administrator will process the aforementioned personal data until the statute of limitations for claims arising from the Agreement for the provision of the Account Service.

 

Purpose of processing

Personal data processed

Legal basis

Conclusion and execution of the sales contract 
  1. name
  2. e-mail address
  3. phone number
  4. address of residence/business (street, house number, apartment number, town, postal code, country)
  5. delivery address (if different from residence/business address)
  6. Optional - Company name and VAT number (if the Buyer is an Entrepreneur or an Entrepreneur on the rights of a Consumer)

Article 6(1)(b) RODO 

 

(processing is necessary for the performance of the Sales Contract concluded with the data subject or to take steps to conclude it)

The provision of the aforementioned personal data is a condition for the conclusion and performance of the Sales Agreement (their provision is voluntary, but the consequence of their failure will be the inability to conclude and perform the Sales Agreement). 

 

The Administrator will process the above personal data until the statute of limitations for claims arising from the Sales Agreement.

 

Purpose of processing

Personal data processed

Legal basis

Conclusion and execution of the Newsletter Delivery Agreement

e-mail address

Article 6(1)(b) RODO 

 

(processing is necessary for the performance of the Newsletter Delivery Agreement concluded with the data subject or for taking steps to conclude it)

 

and

 

Article 6(1)(f) RODO

 

(processing is necessary for the Administrator's legitimate interest, in this case to inform about news and promotions available in the Shop)

Provision of the aforementioned personal data is voluntary, but necessary in order to receive the Newsletter (the consequence of failure to do so will be the inability to receive the Newsletter).

 

The Administrator will process the aforementioned personal data until an objection is successfully raised or the purpose of the processing is achieved, or until the statute of limitations for claims arising from the Newsletter Delivery Agreement (whichever occurs first).

 

Purpose of processing

Personal data processed

Legal basis

Conduct of the complaints procedure 
  1. name
  2. e-mail address

Article 6(1)(c) RODO

 

(processing is necessary for the fulfilment of a legal obligation incumbent on the Administrator, in this case obligations:

  • respond to a complaint - Article 7a of the Consumer Rights Act;
  • the exercise of the Customer's rights under the provisions on the Administrator's liability in the event of non-conformity of the Physical Goods with the Sales Contract or the Digital Goods with the Contract relating to them)

Provision of the aforementioned personal data is a condition for receiving a response to a complaint or for exercising the Customer's rights under the provisions on the Administrator's liability in the event of non-compliance of the Physical Goods with the Sales Agreement or the Digital Product with the Agreement relating to it (their provision is voluntary, but the consequence of failing to provide them will be the inability to receive a response to a complaint and exercise the aforementioned rights).

 

The administrator will process the aforementioned personal data for the duration of the complaint procedure and, in the case of exercising the aforementioned rights of the client, until their expiry.

 

 

Purpose of processing

Personal data processed

Legal basis

Sending e-mail notifications 

e-mail address

Article 6(1)(f) RODO

 

(processing is necessary for the purposes of the Administrator's legitimate interests, including in the case of informing Clients about activities undertaken in connection with the performance of the Contracts concluded with the Clients)

Provision of the aforementioned personal data is voluntary, but necessary in order to receive information on activities related to the execution of the Agreements concluded with the Clients (the consequence of failing to do so will be the inability to receive the aforementioned information).

 

The controller will process the above personal data until you successfully lodge an objection or the purpose of the processing is achieved (whichever comes first).

 

Purpose of processing

Personal data processed

Legal basis

Handling customer enquiries
  1. name 
  2. e-mail address
  3. other data contained in the message to the Administrator

Article 6(1)(f) RODO

 

(processing is necessary for the Administrator's legitimate interest, in this case to respond to an enquiry received)

The provision of the aforementioned personal data is voluntary, but necessary in order to receive a response to the enquiry (the consequence of failing to do so will be the inability to receive a response).

 

The controller will process the above personal data until you successfully lodge an objection or the purpose of the processing is achieved (whichever comes first).

 

Purpose of processing

Personal data processed

Legal basis

Fulfilment of tax obligations (e.g. issuing a VAT invoice, keeping accounting records)
  1. name/company
  2. residential/residential address
  3. NIP

Article 6(1)(c) RODO 

 

(processing is necessary for the fulfilment of a legal obligation incumbent on the Administrator, in this case obligations under tax law)

The provision of the aforementioned personal data is voluntary, but necessary in order for the Administrator to comply with its tax obligations (the consequence of failure to do so will be the Administrator's inability to comply with the aforementioned obligations).

 

The controller will process the above personal data for a period of 5 years from the end of the year in which the deadline for payment of tax for the previous year expired.

 

 

 

Purpose of processing

Personal data processed

Legal basis

Compliance with data protection obligations
  1. name
  2. the contact details you have provided (e-mail address; postal address; telephone number)

Article 6(1)(c) RODO 

 

(processing is necessary for the fulfilment of a legal obligation incumbent on the Controller, in this case obligations under data protection legislation)

The provision of the aforementioned personal data is voluntary, but necessary in order for the Administrator to properly perform its obligations under data protection legislation, including the exercise of the rights granted to you by the RODO (the consequence of failing to provide the aforementioned data will be the inability to properly exercise the aforementioned rights).

 

The controller will process the aforementioned personal data until the expiry of the limitation periods for claims for breach of data protection legislation.

 

 

 

Purpose of processing

Personal data processed

Legal basis

Establishing, pursuing or defending against claims
  1. name/company
  2. e-mail address
  3. residential/residential address
  4. PESEL number
  5. NIP

Article 6(1)(f) RODO

 

(processing is necessary for the purposes of the Administrator's legitimate interests, including in the case of establishing, investigating or defending against claims that may arise in connection with the performance of the Contracts concluded with the Administrator)

Provision of the aforementioned personal data is voluntary, but necessary in order to establish, assert or defend against claims that may arise in connection with the performance of the Agreements concluded with the Administrator (the consequence of failing to provide the aforementioned data will be the Administrator's inability to take the aforementioned actions)

 

The Administrator shall process the aforementioned personal data until the expiry of the limitation periods for claims that may arise in connection with the performance of the Agreements concluded with the Administrator.

 

 

 

Purpose of processing

Personal data processed

Legal basis

Analysis of your shop activity
  1. date and time of visit 
  2. the IP number of the device
  3. type of operating system of the device
  4. approximate location
  5. type of web browser
  6. time spent in the shop
  7. Goods viewed
  8. pages visited and other actions taken within the Shop

Article 6(1)(f) RODO

 

(processing is necessary for the Administrator's legitimate interest, in this case to obtain information about your activity in the Shop)

The provision of the aforementioned personal data is voluntary, but necessary in order for the Administrator to obtain information about your activity in the Shop (the consequence of failing to do so will be the Administrator's inability to obtain the aforementioned information).

 

The controller will process the above personal data until an objection is successfully lodged or the purpose of the processing is achieved.

 

 

 

Purpose of processing

Personal data processed

Legal basis

Shop administration
  1. IP address
  2. server date and time
  3. browser information
  4. information on the operating system

 

The above data is saved automatically in so-called server logs every time the Shop is used (administration of the Shop without the use of server logs and automatic saving would not be possible).

Article 6(1)(f) RODO

 

(processing is necessary for the Administrator's legitimate interest, in this case to ensure the proper operation of the Shop)

Provision of the aforementioned personal data is voluntary, but necessary to ensure the proper operation of the Shop (the consequence of failing to provide such data will be the inability to ensure the proper operation of the Shop).

 

The controller will process the above personal data until an objection is successfully lodged or the purpose of the processing is achieved.

 

 

Profiling

 

In order to create your profile for marketing purposes and to target you with direct marketing tailored to your preferences, the Administrator will process your personal data by automated means, including profiling - but this will not have any legal effect on you or similarly materially affect you.

 

The extent of the personal data profiled corresponds to that indicated above with regard to the analysis of your activity in the Store and the data you save in your Account.

 

The legal basis for the processing of personal data for the above purpose is Article 6(1)(f) of the RODO, according to which the Administrator may process personal data in order to pursue its legitimate interest, in this case to conduct marketing activities tailored to the preferences of recipients. The provision of the aforementioned personal data is voluntary, but necessary for the fulfilment of the aforementioned purpose (the consequence of failing to provide such data will be the Administrator's inability to conduct marketing activities tailored to the recipients' preferences).

 

The controller will process personal data for profiling purposes until you successfully object or the purpose of the processing is achieved.

 

Recipients of personal data

 

The following external entities cooperating with the Administrator will be the recipients of the personal data:

 

  1. hosting company;
  2. logistics operator and courier companies;
  3. providers of online payment systems;
  4. provider of a newsletter service and marketing automation tools;
  5. companies providing tools to analyse activity on the Shop and direct marketing to users (e.g. Google Analytics);
  6. an accounting services firm;

 

In addition, personal data may also be transferred to public or private entities if such an obligation arises from generally applicable law, a final court judgment or a valid administrative decision. 

 

Transfer of personal data to a third country

 

In connection with the Administrator's use of the services provided by Google LLC , your personal data may be transferred to the following third countries: UK, Canada, USA, Chile, Brazil, Israel, Saudi Arabia, Qatar, India, China, South Korea, Japan, Singapore, Taiwan (Republic of China), Indonesia and Australia. The basis for the transfer of data to the aforementioned third countries is:

 

  • in the case of the UK, Canada, Israel and Japan, decisions of the European Commission finding an adequate level of protection for personal data in each of the aforementioned third countries;
  • for the USA, Chile, Brazil, Saudi Arabia, Qatar, India, China, South Korea, Singapore, Taiwan (Republic of China), Indonesia and Australia, contractual clauses providing an adequate level of protection in accordance with the standard contractual clauses set out in Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries under Regulation (EU) 2016/679 of the European Parliament and of the Council.

 

You can obtain from the Controller a copy of the data transferred to a third country .

 

Entitlements

 

In connection with the processing of your personal data, you have the following rights:

 

  1. The right to be informed which personal data concerning you is processed by the Administrator and to receive a copy of this data (the so-called right of access). The issue of the first copy of the data is free of charge, for subsequent copies the Administrator may charge a fee;
  2. if the data processed becomes outdated or incomplete (or otherwise incorrect), you have the right to request rectification;
  3. In certain situations you may ask the Administrator to delete your personal data, e.g. when:
    1. the data will no longer be needed by the Administrator for the purposes for which he has informed you;
    2. you have effectively withdrawn your consent to process the data - provided that the Controller is not entitled to process the data on another legal basis; 
    3. processing is unlawful;
    4. the need to delete the data arises from a legal obligation on the Administrator;
  4. where your personal data is processed by the Controller on the basis of your consent to the processing or for the performance of a Contract with the Controller, you have the right to transfer your data to another Controller;
  5. where personal data is processed by the Administrator on the basis of your consent to processing, you have the right to withdraw that consent at any time (withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal);
  6. if you consider that the personal data being processed is incorrect, the processing is unlawful, or the Administrator no longer needs the data concerned, you may request that for a certain, necessary period of time (e.g. to check the correctness of the data or to assert claims) the Administrator does not perform any operations on the data, but only stores them;
  7. you have the right to object to the processing of personal data based on the Administrator's legitimate interests. If you successfully raise an objection, the Administrator will stop processing your personal data for the aforementioned purpose;
  8. you have the right to lodge a complaint with the President of the Data Protection Authority if you consider that the processing of your personal data violates the provisions of the RODO.

 

Cookies

 

  1. The Administrator informs that the Shop uses "cookies" (cookie files), installed in your terminal device. These are small text files which can be read by the Administrator's system, as well as by systems belonging to other entities whose services are used by the Administrator (e.g. Facebook, Google).
  2. The administrator uses cookies for the following purposes:
    1. ensuring proper functioning of the Shop - thanks to cookies, it is possible to ensure proper functioning of the Shop, use its functions and convenient browsing between individual sub-pages;
    2. increasing the browsing experience of the Shop - cookies make it possible to detect errors on certain pages and to continuously improve them;
    3. creating statistics - cookies are used to analyse how users use the Shop. This makes it possible to continuously improve the Store and to adapt its operation to the preferences of users;
    4. to carry out marketing activities - thanks to cookies, the Administrator can target users with advertisements tailored to their preferences.
  3. The administrator may place both permanent and temporary (session) files on your device. Session files are usually deleted when you close your browser, while closing your browser does not delete permanent files.
  4. Information about the cookies used by the Administrator is displayed in the panel at the bottom of the Shop website. Depending on your decision, you can enable or disable cookies of particular categories (except for essential cookies) and change these settings at any time.
  5. The data collected through cookies does not allow the Administrator to identify you.
  6. The administrator uses the following cookies or tools that use them:

 

TOOL

SUPPLIER

FUNCTIONS AND SCOPE OF DATA TO BE COLLECTED

PERIOD OF OPERATION

Necessary cookies

Administrator

The operation of these files is necessary for the proper functioning of the Shop website, therefore you cannot disable them. Thanks to these files (which collect, among other things, the IP number of your device), it is possible, among other things, to inform you of cookies operating on the Shop website

Most of the necessary cookies are session cookies, but some remain on your terminal device for a period of 24 months or until they are deleted;

Google Analytics

Google

This tool makes it possible to collect statistical data on how the Store is used by Customers, including the number of visits, duration of visits, search engine used, location. The collected data helps to improve the Store and make it more customer-friendly.

up to 2 years or until they are removed (whichever occurs first)

Facebook Pixel

Facebook

This tool makes it possible to determine that you have visited the Shop also to target you with display advertisements on the social networks Facebook and Instagram and to measure their effectiveness.

up to 3 months or until they are removed (whichever occurs first)

 

 

 

  1. Through the majority of commonly used browsers, you can check whether cookies have been installed on your terminal device, as well as delete installed cookies and block their future installation by the Shop. However, disabling or restricting the use of cookies may cause quite serious difficulties in using the Shop, e.g. in the form of the need to log in to each subpage, longer loading times of the Shop website, limitations in the use of certain functionalities.

 

Final provisions

 

To the extent not covered by the Policy, the generally applicable data protection regulations shall apply. 

 

The policy is effective as of 24.06.2023.