Empowered Living
Privacy Policy
Hi!
If you visit this page, it means that you probably value your privacy. We understand it perfectly, so we present you a document in which you will find in one place the ways of the personal data processing and the use of cookies and other tracking technologies in connection with the functioning of the website https://empoweredliving.pl/.
Formal information at the beginning – the website administrator is Agnieszka Jankiewicz – Empoweredliving.pl Agnieszka Jankiewicz, Koczargi Stare, ul. Leśna 7, 05-080 Izabelin. NIP: 7122436989, REGON: 147455614.
This Privacy policy is structured in the form of questions and answers. The choice of this form was dictated by the care for transparency and legibility of the information presented to you. Below you will find the table of contents of this policy corresponding to the questions we answer.
\# 1: Who is the administrator of your personal data?
\# 2: Who can you contact regarding the processing of your personal data?
\# 3: What information do we have about you?
\# 4: Where do we get your personal data from?
\# 6: For what purposes do we process your personal data?
Complaints and withdrawal from the contract – details
Comments and opinions about products – details
Correspondence handling – details
Tax and accounting obligations – details
Analysis, statistics, optimalization – details
\# 7: How long will we keep your personal data?
\# 8: Who are the recipients of your personal data?
\# 9: Do we transfer your data to third countries or international organizations?
\# 10: Do we use profiling? Do we make automated decisions based on your personal data?
\# 11: What rights do you have in relation to the processing of your personal data?
\# 12: Do we use cookies and what they actually are?
\# 13: On what basis do we use cookies?
\# 14: Can you disable cookies?
\# 15: For what purposes do we use our own cookies?
\# 16: What third party cookies are used?
Facebook Custom Audiences – details
\# 17: Do we track your behaviour within our website?
\# 18: Do we target targeted advertising at you??
\# 19: How you can manage your privacy?
\# 21: Is there anything else you should know?
In case of any doubts related to the privacy policy, you can contact us at any time by sending a message to the address aga@empoweredliving.pl.
\\# 1: Who is the administrator of your personal data?
The administrator of your data is Agnieszka Jankiewicz, Empoweredliving.pl Agnieszka Jankiewicz, Koczargi Stare, ul. Leśna 7, 05-080 Izabelin. NIP: 7122436989, REGON: 147455614.
\\# 2: Who can you contact regarding the processing of your personal data?
As part of the implementation of personal data protection in our organization, we have decided not to appoint a personal data protection officer due to the fact that in our situation it is not mandatory. In matters related to the protection of personal data and broadly understood privacy, you can contact us at the e-mail address aga@empoweredliving.pl.
\\# 3: What information do we have about you?
Depending on the purpose, we may process the following information about you:
- first name and last name,
- address,
- your company address,
- taxation number/VAT EU,
- e-mail address,
- phone number,
- data in correspondence addressed to us,
- bank account number,
- IP address,
- image (profile photo),
- products that you watched in the store,
- details of placed orders,
- details about abandoned baskets,
- activity in relation to messages sent through the newsletter system,
- information about the operating system and the web browser you use,
- subpages you viewed,
- time spent on the website,
- transitions between individual subpages,
- clicks on individual links,
- the source from which you come to our website,
- the age range you are in,
- your gender,
- your approximate location limited to the city,
- your interests based on your online activity.
We have described the scope of the processed data precisely in relation to each processing purpose. Information in this regard can be found in the further part of this policy.
\\# 4: Where do we get your personal data from?
In most cases, you pass them on to us yourself. This happens when:
- you register a user account,
- you place an order in the store,
- you submit complaints or withdraw from the contract,
- you subscribe to the newsletter,
- you add a comment or opinion about a product,
- you contact us.
In addition, some information about you may be automatically collected by the tools we use:
- the mechanisms of the store and the newsletter system collect your IP address,
- the shop mechanism collects information about the products you have viewed, details of the orders placed, including unfinished ones,
- the mechanism of the newsletter system collects information about your activity in relation to the content sent to you as part of the newsletter, such as opening messages, clicking on links, etc.,
- Google Analytics collects a variety of information on how you use our store.
\\# 5: Is your data safe?
We care about the security of your personal data. We have analyzed the risks associated with individual data processing processes, and then we have implemented appropriate security and personal data protection measures. We monitor the condition of our technical infrastructure on an ongoing basis, observe the procedures applied, and introduce necessary improvements. If you have any questions regarding your personal data, we are at your disposal at aga@empoweredliving.pl.
\\# 6: For what purposes do we process your personal data?
There are more than one of these purposes. Below is a list of them followed by a more detailed explanation. We have also assigned the appropriate legal grounds for processing to the individual purposes.
- registration and maintenance of a user account – Art. 6 sec. 1 lit. b GDPR,
- order handling – Art. 6 sec. 1 lit. b GDPR,
- handling complaints or withdrawing from the contract – art. 6 sec. 1 lit. f GDPR,
- sending the newsletter – art. 6 sec. 1 lit. a GDPR,
- handling comments or opinions about a product – Art. 6 sec. 1 lit. a GDPR,
- handling correspondence – art. 6 sec. 1 lit. f GDPR,
- fulfilment of tax and accounting obligations – Art. 6 sec. 1 lit. c GDPR,
- creating an archive for the possible need to defend, establish or pursue claims, as well as to identify a returning customer – art. 6 sec. 1 lit. f GDPR,
- own marketing – art. 6 sec. 1 lit. f GDPR,
- analysis, statistics and optimization – Art. 6 sec. 1 lit. f GDPR.
User account – details
When creating a user account, you must provide the data necessary to create an account: name and surname, city, postal code, e-mail address and password. Providing data is voluntary, but necessary to create an account.
As part of editing the account data, you can provide your further data, in particular data that can be used when placing orders, such as the full address of residence or your company, tax identification number, telephone number. As part of editing your account details, you can also set your avatar, e.g. a profile picture including your image.
In addition, the system used to service user accounts saves your IP number that you used when registering a user account.
Moreover, we use the integration of Google Analytics with the user account mechanism. In this way, the data collected by the Google Analytics tracking code about your use of our store is assigned to your user account. It is concerning information such as:
- information about the operating system and the web browser you use,
- viewed subpages,
- time spent on the website,
- transitions between individual subpages,
- clicks on individual links,
- the source from which you come to our website,
- the age range you are in,
- your gender,
- your approximate location limited to the town.
- your interests based on your online activity.
We analyze such information about you in order to optimize our websites in terms of user experience, effectiveness and conversion, which is our legitimate interest, as referred to in Art. 6 sec. 1 lit. f GDPR.
You can modify the information about you provided to us in connection with the registration of your user account at any time.
The data provided by you in connection with the creation of an account are processed in order to provide you with an electronic service consisting in providing you with the possibility of using the user account. This service is provided on the basis of an agreement concluded on the terms described in the regulations, which means that in this respect the legal basis for the processing of your personal data is art. 6 sec. 1 lit. b GDPR.
The data will be stored for the duration of the user’s account. You can decide to delete your account at any time, but it will not delete information about your orders placed using the account from our database. Data about orders is stored in our archive throughout the entire period of the store’s operation due to the possibility of identifying the returning customer, recreating his purchase history, granted discounts, etc., which is our legitimate interest referred to in art. 6 sec. 1 lit. f GDPR.
Orders – details
When placing an order in the store, you must provide the data necessary to complete the order. Depending on the order details, the data catalogue may be different. For example, if you order physical products, we need to know the address to which to deliver the order to you. If you are requesting an invoice for a company, we need to know the tax identification number and the business address. Providing data is voluntary, but necessary to place an order.
In addition, our system saves your IP number that you used when placing the order.
Each order is saved in our database, which means that your personal data assigned to the order is also accompanied by information about the order, such as ordered products, selected payment method, selected delivery method, payment date.
The data collected in connection with the order are processed in order to perform the contract concluded by placing an order (Article 6 (1) (b) of the GDPR), issuing an invoice (Article 6 (1) (c) of the GDPR in connection with the provisions regulating the issuing invoices), taking into account the invoice in the accounting documentation and fulfilling other tax and accounting obligations (Article 6 (1) (c) of the GDPR in connection with the provisions governing tax and accounting obligations) and for archival purposes for the purposes of possible defense, establishing or pursuing claims, as well as identifying a returning customer, which is our legitimate interest (Article 6 (1) (f) of the GDPR).
Data about orders will be processed for the time necessary to perform the order, and then until the expiry of the limitation period for claims under the contract. In addition, after this deadline, the data may still be processed by us for archival purposes for the possible need to defend, establish or pursue claims, as well as identify the returning customer. Remember also that we are obliged to keep accounting records, which may contain your personal data, for the period required by law.
Complaints and withdrawal from the contract – details
If you submit a complaint or withdraw from the contract, you provide personal data contained in the content of the complaint or the declaration of withdrawal from the contract, which includes your name and surname, address, telephone number, e-mail address, bank account number. Providing data is voluntary, but necessary to submit a complaint or withdraw from the contract.
The data provided to us in connection with the submission of a complaint or withdrawal from the contract are used to implement the complaint procedure or the procedure for withdrawal from the contract, and then for archival purposes, which is our legitimate interest (Article 6 (1) (f) of the GDPR).
The data will be processed for the time necessary to implement the complaint procedure or the withdrawal procedure. The complaint documents will be kept until the expiry of the warranty rights. The statements of withdrawal from the contract will be kept together with the accounting documentation for the period required by law.
Newsletter – details
By subscribing to the newsletter, you provide us with your name and e-mail address. Providing data is voluntary, but necessary to subscribe to the newsletter.
In addition, our system used to handle the newsletter, saves your IP number that you used when subscribing to the newsletter, determines your approximate location, the e-mail client you use to handle e-mail and tracks your actions taken in connection with the newsletters sent to You. Therefore, we also have information about which messages you have opened, in which messages you clicked on links, etc.
The data provided to us in connection with the subscription to the newsletter is used to send you the newsletter, and the legal basis for their processing is your consent (Article 6 (1) (a) of the GDPR) expressed when subscribing to the newsletter. As for the processing of information that does not come from you, and was collected automatically by our mailing system, we rely in this respect on our legitimate interest (Article 6 (1) (f) of the GDPR) in analyzing the behaviour of newsletter subscribers in order to optimize mailing activities.
You can unsubscribe from the newsletter at any time by clicking on the dedicated link in each message sent as part of the newsletter or by simply contacting us. Despite unsubscribing from the newsletter, your data will still be stored in our database in order to identify the returning subscriber and possibly defend claims related to sending you the newsletter, in particular to prove that you consent to receiving the newsletter and the moment of its withdrawal, which is our legal legitimate interest referred to in art. 6 sec. 1 lit. f GDPR.
You can modify your data provided for the purpose of receiving the newsletter at any time by clicking on the appropriate link visible in each message sent as part of the newsletter or by simply contacting us.
Comments and opinions about products – details
When adding a comment or opinion about a product, you must provide at least a username that will be assigned to the comment or opinion (the name may contain personal data, such as first or last name) and an e-mail address. Providing this data is voluntary, but necessary to add a comment or opinion. You can also add your avatar (it may contain your image, e.g. a photo) and provide your website address, but it is not obligatory.
The data provided in connection with adding a comment or opinion will be processed in order to publish a comment or opinion on the website. The basis for processing is your consent (Article 6 (1) (a)) resulting from sending a form for publishing a comment or opinion. You can withdraw your consent at any time by requesting the removal of your comment or opinion.
Your comment or opinion will be publicly available on the website as long as it is available on the Internet, unless you request removal of the comment or opinion in advance. You can also modify the content of the comment at any time, as well as modify the data assigned to it as the person who added the comment or opinion.
Correspondence handling – details
By contacting us, you naturally provide us with your personal data contained in the correspondence, in particular your e-mail address and name and surname. Providing data is voluntary, but necessary to make contact.
In this case, your data is processed in order to contact you, and the basis for processing is art. 6 sec. 1 lit. f GDPR, i.e. our legitimate interest. The legal basis for processing after the end of contact is also our legitimate purpose in the form of archiving correspondence for the purpose of ensuring the possibility of proving certain facts in the future (Article 6 (1) (f) of the GDPR).
The content of the correspondence may be archived and we are not able to clearly determine when it will be deleted. You have the right to request a history of correspondence with us (if it was subject to archiving), as well as request its removal, unless its archiving is justified due to our overriding interests, e.g. defense against potential claims on your part.
Tax and accounting obligations – details
If we issue an invoice for you, it is part of the accounting documentation, which will be kept for the period of time required by law. In such a situation, your personal data is processed in order to fulfil our tax and accounting obligations (Article 6 (1) (c) of the GDPR in connection with the provisions governing tax and accounting obligations).
Archive – details
As part of the description of the individual purposes of personal data processing, which are listed above, we have indicated the dates of personal data storage. These terms are often related to the archiving of certain data by us for the purposes of ensuring the possibility of proving certain facts in the future, reconstructing the course of cooperation with the client, exchanging correspondence, defense, establishing or pursuing claims. In this regard, we rely on our legitimate interest, referred to in art. 6 sec. 1 lit. f GDPR.
Own marketing – details
As part of our store, we use the mechanism of recovering abandoned carts. In a situation where you start the ordering process but do not complete it, our system will record this fact in order to take action to invite you to finalize the order. These activities may include, in particular, sending you an e-mail with an incentive to complete your order or the display of targeted advertising while browsing the Internet.
Our store may also collect information about your activity and on this basis show you targeted ads while browsing the Internet. However, if you are not a registered user, the information used for this purpose is not personal data. Only when they are combined with your personal data collected in the user account, they acquire the nature of personal data.
We carry out the activities described above based on our legitimate interest referred to in art. 6 sec. 1 lit. f GDPR consisting in the marketing of own products.
Analysis, statistics, optimalization – details
We collect statistical information about user behaviour when browsing our websites, such as clicks on links, transitions between pages, time spent on individual pages, etc. We analyze this information in order to optimize our pages in terms of user experience, effectiveness and conversion. In most cases, the information processed in this way is not personal data. The exception is when you are a registered user. We can then combine this information with your other data collected in your user account.
We carry out the activities described above based on our legitimate interest referred to in art. 6 sec. 1 lit. f GDPR, consisting in the optimization of our websites.
\\# 7: How long will we keep your personal data?
The data storage periods have been indicated separately for each purpose of processing. You will find this information under the details for each separate processing purpose.
\\# 8: Who are the recipients of your personal data?
We will risk saying that modern business cannot do without services provided by third parties. We also use such services. Some of these services are related to the processing of your personal data. External service providers who are involved in the processing of your personal data are:
- hosting provider that stores data on the server,
- cloud computing service provider in which backups that may contain your personal data are stored,
- provider of the mailing system in which your data is stored, if you are a newsletter subscriber,
- CRM system provider in which we store your data in order to improve the customer service process and for archival purposes,
- supplier of the invoicing system in which your data is stored for the purpose of invoicing,
- an accounting office that processes your data visible on invoices,
- courier companies that process your data to the extent necessary to deliver your order,
- a law company that obtains access to data if it is necessary to provide legal assistance to us,
- an entity providing maintenance services that gains access to data, if the technical works carried out relate to areas where personal data are located,
- other subcontractors who gain access to data, if the scope of their activities requires such access.
Your personal data may also be transferred to tax offices to the extent necessary to fulfill tax and accounting obligations. It concerns in particular all declarations, reports, statements and other accounting documents in which your personal data is located.
In addition, if necessary, your personal data may be made available to entities, bodies or institutions authorized to obtain access to data on the basis of legal provisions, such as the police, security services, courts, prosecutor’s offices.
What’s more, we use tools that collect a lot of information about you related to the use of our store. It concerns, in particular, the following information:
- information about the operating system and the web browser you use,
- viewed subpages,
- time spent on the website,
- transitions between individual subpages,
- clicks on individual links,
- the source from which you come to our website,
- the age range you are in,
- your gender,
- your approximate location limited to the town.
- your interests based on your online activity.
This information in itself is not, in our opinion, personal data. Since this information is collected by external tools that we use, this information is also processed by tool providers on the terms resulting from their regulations and privacy policies. Basically, this information is used to provide and improve services, manage them, develop new services, measure the effectiveness of advertisements, protect against fraud and abuse, as well as personalize the content and advertisements displayed on individual websites, sites and applications. We have tried to describe the details in this regard in the further part of this policy, as part of the explanations for individual tools.
\\# 9: Do we transfer your data to third countries or international organizations?
Yes, part of the processing of your personal data may involve their transfer to third countries.
We transfer your personal data to third countries in connection with the use of tools that store personal data on servers located in third countries, in particular in the USA. The providers of these tools guarantee an adequate level of personal data protection through the use of compliance mechanisms such as standard contractual clauses.
We also remind you here that we use external tools that may collect anonymous information about you. We have mentioned this on several occasions under this policy, including in response to a previous question. The providers of these tools often use servers located around the world, in particular in the United States of America (USA), to store the collected information.
\\# 10: Do we use profiling? Do we make automated decisions based on your personal data?
We do not make decisions based solely on automated processing, including profiling, which would have legal effects on you or similarly significantly affect you.
Yes, we use tools that may take specific actions depending on the information collected as part of the tracking mechanisms, but we believe that these actions do not have a significant impact on you, because they do not differentiate your situation as a customer, do not affect the terms of the contract, which you can enter into with us, etc.
By using certain tools, we can, for example, direct personalized advertisements to you based on your previous actions taken on our website or suggest products that may be of interest to you. We are talking about the so-called behavioral advertising. We encourage you to learn more about behavioral advertising, in particular regarding privacy issues. Detailed information, along with the ability to manage your behavioral advertising settings, can be found here: http://www.youronlinechoices.com.
We emphasize that as part of the tools we use, we do not have access to information that would allow your identification. The information we are talking about here is, in particular:
- information about the operating system and the web browser you use,
- seen subpages,
- time spent on the website,
- transitions between individual subpages,
- the source from which you go to our website,
- the age range you are in,
- your gender,
- your approximate location limited to the city,
- your interests based on your online activity.
We do not match the information indicated above with your personal data, which is in our databases. This information is anonymous and does not allow us to identify you. This information is stored on the servers of the suppliers of individual tools, and these servers can most often be located all over the world.
The exception to the anonymous nature of the information referred to above is the situation in which you have a user account in our store. This information can then be matched with your data stored in your user account. However, we still do not make decisions based on automated processing, including profiling, with the use of this information, which would have legal effects on you or similarly significantly affect you. We believe that activities in the field of targeting ads to you depending on your activity in our store and taking optimization measures do not significantly affect you. Therefore, in this regard, we rely on our legitimate interest, referred to in art. 6 sec. 1 lit. f GDPR.
\\# 11: What rights do you have in relation to the processing of your personal data?
GDPR grants you the following potential rights related to the processing of your personal data:
- the right to access your data and receive a copy of it,
- the right to rectify (correct) your data,
- the right to delete data (if in your opinion there are no grounds for us to process your data, you can request that we delete it),
- the right to limit data processing (you can request that we limit the processing of data only to their storage or performance of activities agreed with you, if, in your opinion, we have incorrect data or we process it unreasonably),
- the right to object to the processing of data (you have the right to object to the processing of data on the basis of a legitimate interest; you should indicate a special situation that, in your opinion, justifies the cessation of the processing covered by the objection; we will stop processing your data for these purposes, unless we will demonstrate that the grounds for data processing by us override your rights or that your data is necessary for us to establish, assert or defend claims),
- the right to transfer data (you have the right to receive from us, in a structured, commonly used, machine-readable format, personal data that you provided to us on the basis of a contract or your consent; you can commission us to send this data directly to another entity),
- the right to withdraw consent to the processing of personal data, if you have previously given such consent,
- the right to lodge a complaint with a supervisory authority (if you find that we are processing data unlawfully, you can file a complaint with the President of the Office for Personal Data Protection or another competent supervisory authority).
The rules related to the implementation of the above-mentioned rights are described in detail in Art. 16 – 21 GDPR. We encourage you to familiarize yourself with these regulations. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and you will not be entitled to all activities of processing your personal data.
We emphasize that you always have one of the rights indicated above – if you believe that we have breached the provisions on the protection of personal data while processing your personal data, you have the option to lodge a complaint with the supervisory body (the President of the Office for Personal Data Protection).
You can also always ask us to provide you with information about what data we have about you and for what purposes we process it. All you need to do is send a message to aga@empoweredliving.pl. However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. You can also use the e-mail address provided above if you have any questions related to the processing of your personal data.
\\# 12: Do we use cookies and what they actually are?
Our website, like almost all other websites, uses cookies.
Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone), which can be read by our ICT system (own cookies) or ICT systems of third parties (third party cookies). In cookies, specific information can be saved and stored, to which IT systems can then access for specific purposes.
Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you visit the website (persistent cookies).
If you want to learn more about cookies as such, you can see, for example, this material: https://pl.wikipedia.org/wiki/HTTP_cookie.