Privacy Policy

Published On: 24/09/2024

Privacy Policy

What is a Privacy Policy?

In our Privacy Policy, you will find all the essential information about how we process your personal data. We encourage you to read it, and we promise it won’t take more than a few minutes.

I. Who is the administrator of the www.7sun.eu website?

The administrator of the website is Paweł Sternal, conducting business under the company name 7SUN Paweł Sternal, registered in the Central Register and Information on Economic Activity (CEIDG) run by the Minister of Economy, located at ul. Wojska Polskiego 8, 41-208 Sosnowiec, NIP 6443163595, REGON 240990583 (i.e., us).

Personal Data

II. What legal regulation governs the processing of your personal data?

Your personal data is collected and processed by us in accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1), commonly referred to as GDPR. In areas not regulated by the GDPR, personal data processing is governed by the Polish Data Protection Act of May 10, 2018.

III. Who is the administrator of your personal data?

The administrator of your personal data is Paweł Sternal, conducting business under the company name 7SUN Paweł Sternal, registered in the Central Register and Information on Economic Activity (CEIDG) with the address ul. Wojska Polskiego 8, 41-208 Sosnowiec, NIP 6443163595, REGON 240990583, phone: +48 534 991 991, email: orders@7sun.eu.

You can contact us regarding your personal data through the following methods:

Email: orders@7sun.eu
Traditional mail: ul. Wojska Polskiego 8, 41-208 Sosnowiec
Phone: +48 534 991 991

IV. How do we process the personal data you provide?

We offer a variety of services on our website, and for each, we process different personal data based on various legal grounds.

On our website, we offer you a number of different services for which we process different personal data, under different legal bases.

Aim

Personal data

Legal basis for processing

Data storage time

conclusion and performance of the agreement

name, surname, correspondence address, NIP, REGON, e-mail address, telephone number, bank account number, payment card number

article 6(1)(b) GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into an agreement and processing necessary for the performance of an agreement to which you are party

until the expiry of the limitation period for claims concerning the performance of the agreement

opening and maintaining an account

name, surname, e-mail address, telephone number, postal address

until the expiry of the limitation period for claims concerning the performance of the agreement

Contact form "Inquire about the Goods"

e-mail, company, telephone number

article 6(1)(f) GDPR i.e. processing for the purpose of pursuing our legitimate interest in maintaining continuity of communication and enabling contact with us in business matters

until an objection is raised to the processing of the personal data

interactive chat

Name, surname, image, data provided by the Client in the course of using the Service

article 6(1)(f) GDPR i.e. processing for the purpose of pursuing our legitimate interest in maintaining continuity of communication and enabling contact with us in business matters

until an objection is raised to the processing of the personal data

establishment, investigation, enforcement and defence of claims in proceedings before the courts and other state authorities

name, surname, residence address, NIP, REGON, e-mail address, telephone number, IP address, bank account number, payment card number

article 6(1)(f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest in the establishment, pursuit and enforcement of claims and the defence of claims before the courts and other state authorities

until the expiry of the limitation period for claims concerning the performance of the agreement

fulfilment of legal obligations arising from legislation, in particular tax and accounting legislation

name, surname, business name, PESEL number, NIP or REGON, e-mail address, telephone, correspondence address, payment card number

Article 6(1)(c) of the GDPR, i.e. the processing is necessary for the fulfilment of legal obligations incumbent on us under the law, in particular tax and accounting regulations

until the expiry of the legal obligations incumbent on the Controller which justified the processing of the personal data

Marketing (including newsletter)

IP address, name, email, phone

Art. 6(1)(a) – consent

Until the consent is withdrawn.

Data Usage

In certain situations, the Administrator has the right to share your personal data with other recipients if it is necessary for the execution of the contract you have entered into or to fulfill the Administrator’s legal obligations.

For the purpose of providing the Newsletter service, the Administrator uses the services of a third party – the Freshmail platform. Data entered into the newsletter subscription form is transmitted, stored, and processed by this external service provider.

Your personal data will be processed by the Administrator no longer than necessary to perform activities related to it as specified by applicable regulations. Regarding marketing data, it will not be processed for more than 10 years.

Voluntary Provision of Personal Data

Providing the required personal data is voluntary, but it is a condition for us to provide services to you (e.g., account creation).

Automated Decision-Making (Including Profiling)

Based on the information you provide in your account, such as data related to the services provided, information obtained through cookies (including location data), and your past behavior or interest in specific goods or services, personalized offers and marketing information, such as complementary products to those viewed, will be prepared.

V. Will we transfer your personal data outside the EEA or to an international organization?

For marketing purposes, we use advertising tools provided by Facebook, Inc. and Instagram (part of Meta, Inc.), as well as an analytics tool called Facebook Pixel. Your personal data may be transferred to the United States, where Meta Inc.'s servers are located.

We also use marketing and analytics tools provided by Google, including Google Analytics, Google Ads, Google My Business, Google Search Console, and Google Tag Manager. Your personal data may be transferred to the United States, where Google LLC’s servers are located.

For marketing purposes, we also use advertising tools offered by Microsoft Corporation. Your personal data may be transferred to the United States, where Microsoft Corporation's servers are located.

VI. What are your rights regarding the processing of your personal data?

Under the GDPR, you have the right to:

Request access to your personal data,
Request the correction of your personal data,
Request the deletion of your personal data,
Request the restriction of the processing of your personal data,
Object to the processing of your personal data,
Request the transfer of your personal data.

Upon submitting any of the above requests, we will provide you with information about the actions taken in connection with your request without undue delay, and in any case, within one month of receiving the request.

If necessary, we may extend the one-month period by an additional two months due to the complexity of the request or the number of requests. In any case, we will inform you within one month of receiving the request about the extension of the deadline and provide the reasons for the delay.

Right of Access to Personal Data (Article 15 of GDPR)

You have the right to obtain information about whether we are processing your personal data. If we are processing your data, you have the right to:

Access your personal data,
Obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of the data, the planned retention period of your data or the criteria for determining that period, your rights under GDPR, the right to lodge a complaint with the President of the Data Protection Office, the source of the data, any automated decision-making, including profiling, and the safeguards used for transferring the data outside the European Union,
Receive a copy of your personal data.

If you would like to request access to your personal data, please submit your request to: orders@7sun.eu.

Right to Rectification of Personal Data (Article 16 of GDPR)

If your personal data is incorrect, you have the right to request its immediate correction. You also have the right to request that we complete any incomplete personal data. If you wish to request rectification or completion of your personal data, please submit your request to: orders@7sun.eu.

Right to Erasure of Personal Data ("Right to be Forgotten") (Article 17 of GDPR)

You have the right to request the deletion of your personal data when:

Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
You have withdrawn your consent, where the data was processed based on your consent,
Your personal data was processed unlawfully,
You objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent the data processing is related to direct marketing,
You objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by us or a third party.

Despite your request for erasure, we may continue to process your data to establish, exercise, or defend legal claims, which you will be informed about.

If you would like to request the deletion of your personal data, please submit your request to: orders@7sun.eu.

Right to Request Restriction of Personal Data Processing (Article 18 of GDPR)

You have the right to request the restriction of the processing of your personal data when:

You contest the accuracy of your personal data – in such a case, we will limit the processing of your data while we verify the accuracy of the data,
The processing is unlawful, and instead of deletion, you request the restriction of processing,
Your personal data is no longer needed for processing purposes, but it is required to establish, exercise, or defend your legal claims,
You objected to the processing of your personal data – until it is determined whether our legitimate interests override your objections.

If you would like to request the restriction of your personal data processing, please submit your request to: orders@7sun.eu

Right to Object to the Processing of Personal Data (Article 21 of GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

Processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the Data Controller or a third party;
Processing for direct marketing purposes.

If you would like to object to the processing of your personal data, please submit your request to: orders@7sun.eu

Right to Data Portability (Article 20 of GDPR)

You have the right to receive your personal data from us in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller.

We will typically provide your personal data in CSV format. If you prefer to receive your data in a different format, please indicate your preferred format in your request, and we will do our best to provide the data in your chosen format.

You may also request that we send your personal data directly to another data controller, where technically feasible.

If you would like to request the transfer of your personal data, please submit your request to: orders@7sun.eu.

VII. Can you withdraw your consent to the processing of personal data?

Yes, you can withdraw your consent to the processing of your personal data at any time. Withdrawing consent does not affect the legality of the data processing carried out before the consent was withdrawn.

If you would like to withdraw your consent, please submit your request to: orders@7sun.eu.

VIII. Complaint to the Supervisory Authority

If you believe that the processing of your personal data violates data protection regulations, you have the right to file a complaint with the supervisory authority, particularly in the member state of your habitual residence, place of work, or where the alleged violation took place.

In Poland, the supervisory authority is the President of the Personal Data Protection Office (PUODO), who replaced GIODO on May 25, 2018.

More information can be found at: https://uodo.gov.pl/pl

Cookies

I. General Information

While browsing the Online Store's website, "cookies" are used, referred to as Cookies, which are small text files stored on your device in connection with the use of the Online Store. Their use is intended to ensure the proper functioning of the Online Store's website.

These files allow us to identify the software you are using and customize the Online Store individually to your needs. Cookies typically contain the name of the domain they originate from, the time they are stored on your device, and a value assigned to them.

II. Security

The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malicious software to enter your devices through Cookies.

III. Types of Cookies

We use two types of Cookies:

Session Cookies: These are stored on your device and remain there until the session of the respective browser ends. The stored information is then permanently deleted from the memory of your device. The mechanism of session Cookies does not allow for the collection of any personal data or confidential information from your device.
Persistent Cookies: These are stored on your device and remain there until they are deleted. Ending the session of a given browser or turning off the device does not cause their removal from your device. The mechanism of persistent Cookies does not allow for the collection of any personal data or confidential information from your device.

IV. Purposes

We also use third-party Cookies for the following purposes:

Configuration of the Online Store;
Presentation of the Certificate of Compliance through the solidnyregulamin.pl website, operated by APM Poniatowska-Maj Kancelaria Prawna sp. k., based in Gdańsk. The Privacy Policy of this service is available at the following link: http://solidnyregulamin.pl/polityka-prywatnosci/;
Creation of statistics that help understand how users interact with the website, allowing us to improve its structure and content through Google Analytics tools, administered by Google Ireland Ltd. The privacy policy of Google is available at: https://policies.google.com/privacy?fg=1;
Running advertising campaigns via Google Ads, administered by Google Ireland Ltd. The privacy policy of Google is available at: https://policies.google.com/privacy?fg=1;
Running advertising campaigns via Meta Ads, administered by Meta Inc. based in the United States. The privacy policy of Meta is available at: https://www.facebook.com/help/cookies/;
Collecting user behavior information using Facebook Pixel, administered by Meta Inc. based in the United States. The privacy policy of Facebook is available at: https://www.facebook.com/help/cookies/;
Running advertising campaigns via Microsoft Advertising, administered by Microsoft Corporation, based in the United States. The privacy policy of Microsoft is available at: https://privacy.microsoft.com/pl-pl/privacystatement;
Sending commercial information via Freshmail, administered by Freshmail Sp. z o.o., based in Krakow. The privacy policy of Freshmail is available at: https://freshmail.pl/regulamin-serwisu/.

We recommend reviewing the privacy policies of the aforementioned companies to understand their use of Cookies.

Using the website without changing your cookie settings means that you consent to the use of cookies. You can always withdraw your consent by changing your browser's cookie settings. Here are instructions for managing cookies in various browsers: