Dear User!
The protection of our website and online store users’ personal data is very important to us and that is why we make every effort to ensure that this data is safe in every aspect. This Policy describes our protection methods and the rules and regulations of the way we process personal data of users of our website and explains the rights of each person whose data we process. The provisions of the Policy are compliant with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (regulation RODO)
Please read carefully the content of this Policy. In the future, this document may be updated, e.g. due to new legal requirements or a change in the security and used procedures. In case of any doubts regarding the provisions of the Policy, please contact us.
Administrator of personal data
The administrator of the website and the administrator of users’ personal data transmitted through it is (hereinafter: the Administrator):
LOCCO Sp z o.o. Sp k.
ul. Wielicka 36/38
02-657 Warszawa
NIP: 521-375-99-87 REGON: 366094919
The Administrator may be contacted in writing (via traditional mail) at the following address:
ul. Wielicka 36/38, 02-657 Warszawa or by email contact@loccodesigns.com.
The administrator ensures confidentiality of all transferred personal data transferred and makes every effort to ensure that the data processed are safe throughout their storage period, protected by technical and organizational measures, including appropriate implemented procedures, against access by unauthorized persons.
Legal basis of personal data processing
The administrator processes personal data of users using the services offered through the website and online store based on consent and in relation to the legitimate interests of the Administrator. The user should express a separate consent for each of the services offered.
The user's consent to the processing of data for a specific purpose may be withdrawn at any time. Expressing consent to the processing of personal data is voluntary, however, the lack of consent to processing of data, prevents the completion of transactions within the online store, delivery of the order and any communication.
What personal data do we process?
The administrator is guided by the principle of data minimization and collects data only to the extent that is justified by the nature of the business and services offered.
For the purpose of completing the order in the online store, the Administrator collects the following user data:
- contact details necessary for the Administrator's communication with the user, such as name, address, e-mail address and telephone number,
- information about payments,
- information about orders.
This data is needed to manage online purchases, process orders, returns, complaints, confirmations and information about problems or changes to the order.
For the purpose of creating a customer account on the online store website, the Administrator collects the following user data:
- contact details necessary for the Administrator's communication with the user, such as name, address, e-mail address and telephone number,
- information on order history and payment history,
- information on shopping preferences, as part of profiling.
This data is needed to conduct ongoing communication and make it easier to place orders in the online store. Profiling enables the user to present a personalized commercial offer tailored to user’s interests.
For the purpose of implementing the newsletter sending service and / or sending commercial offers, the Administrator collects the following user data:
- name and last name, e-mail address.
This data is needed to send the user a general newsletter and commercial offers that are not subject to profiling.
Personal data period of storage
Data is collected only for the period necessary to achieve the purposes for which they were collected, except when separate regulations impose an obligation on the Administrator to keep them for longer.
Personal data provided in connection with the execution of the contract will be kept until the storage periods specified in the tax regulations and the Accounting Act have expired.
Personal data provided in connection with the registration of a user account on the site will be kept until the account is deleted by the user, or the account is deactivated by the Administrator, if the user has not logged in to the website for a period of at least 12 months.
Personal data provided for the purpose of receiving the newsletter and / or commercial offers from the website will be kept until the consent is revoked / filed for the removal of data by the user.
Data transmission
The processed personal data of users is not transferred to unauthorized entities. To the extent permitted by law, this data may, however, be made available on the basis of separate contracts entrusted to specific entities only in connection with the necessity to perform the services we provide. These entities include: accounting and accounting offices, IT service providers, marketing agencies, courier companies, and payment institutions.
In the case of such a transfer, the Administrator enters into these agreements with these entities, which guarantee confidentiality and security of entrusted data and use them only to provide us with a given service or product.
Users' data may also be made available to entities authorized to receive them under applicable law, including the competent judicial authorities.
Rights of persons whose data is processed
The user's consent to the processing of data for a specific purpose may be withdrawn at any time. The User also has the right to access the data concerning him or her, rectify, delete or limit the processing, as well as the right to object, demand the cessation of processing and data transfer, as well as the right to lodge a complaint to the supervisory body in connection with u y is the President of the Office for the Protection of Personal Data). In all matters regarding the implementation of the above rights, the User should contact the Data Administrator via e-mail.nauthorized processing of his personal data by the Administrator (the supervisory bod
The Administrator reserves the right to process user's data also after withdrawal of consent only in the scope of seeking possible claims before the court or if national or EU regulations or international law oblige the Administrator to retain data.
Automatically collected data
When using the website and online store, certain data can be collected automatically. These are, in particular, data regarding the IP address, domain, used browser or operating system. The data can be collected through "cookie" files, Google Analytics, Google Adwords, Facebook.
"Cookies" are small text information stored on the user's end device (eg computer, tablet, smartphone) that can be read by the Administrator's IT system to obtain statistical information and for marketing purposes and to ensure correct display and operation of the site.
Most web browsers usually have default settings that allow automatic acceptance of cookies. However, the user has the option to change these settings so that cookies are blocked and the ability to delete files of this type stored on the device the user uses.
Social media
The site contains links, links and plugins of external social media such as Facebook, Instagram and Pinterest. Their functionality is activated when the user clicks on a given link. determined by the privacy policies of these websites. The administrator is not responsible for their actions.Specified information can also be transferred to these portals, if the user uses the website and online store being simultaneously logged in to these social networking sites (eg information about making purchases or browsing certain products).
The purpose and scope of the processing of personal data through social networks and the type of security measures used to guarantee the confidentiality of personal data is determined by the privacy policies of these websites. The administrator is not responsible for their actions.