1. General Information
This policy applies to the website operating at the following URLs: ironingaristry.com and sztukaprasowania.com
The website operator and the personal data controller is: STYL Joanna Dowejko, ul. Wenecka 41/1, 62-080 Tarnowo Podgórne, NIP: 599 276 54 34

​

The operator’s email contact address is: joanna.dowejko@sztukaprasowania.com

​

The operator is the controller of your personal data with respect to the data you voluntarily provide on the Website.

Purposes and Legal Bases for the Processing of Personal Data

​

The Data Controller processes Customers’ personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), solely to the extent necessary to achieve specific purposes and on appropriate legal bases.

​

Customers’ personal data is processed for the following purposes:
  1. to conclude and perform a sales contract, including order fulfillment, delivery of goods, payment processing, and contacting the Customer regarding matters related to the order—pursuant to Article 6(1)(b) of the GDPR;
  2. to fulfill the legal obligations incumbent upon the Controller, in particular those arising from tax and accounting regulations, as well as those concerning the handling of complaints and the fulfillment of warranty obligations—pursuant to Article 6(1)(c) of the GDPR;
  3. pursuing the Controller’s legitimate interests, such as ensuring the security of the website, preventing abuse, investigating or defending against claims, conducting statistical analyses, and marketing its own products and services, provided that this is in accordance with applicable laws—pursuant to Article 6(1)(f) of the GDPR;
  4. sending commercial information, newsletters, or conducting other marketing activities requiring consent—pursuant to Article 6(1)(a) of the GDPR, i.e., the Customer’s voluntarily given consent, which may be withdrawn at any time without affecting the lawfulness of the processing carried out prior to its withdrawal;
  5. conducting online chat conversations;
  6. handling inquiries via the contact form
  7. providing the ordered services
  8. presenting offers or information

 

Providing the personal data necessary to conclude and perform the contract is voluntary; however, failure to provide such data will prevent the order from being fulfilled. In the case of data processed on the basis of consent, providing such data is voluntary and does not affect the ability to make purchases in the Store.

 

The website collects information about users and their behavior in the following ways:
- through data voluntarily entered into forms, which is then entered into the Operator’s systems.
- by storing cookies on end-user devices.

​

2. Selected Data Protection Methods Used by the Operator
The login pages and areas where personal information is entered are protected at the transmission layer (SSL certificate). As a result, personal information and login credentials entered on the website are encrypted on the user’s computer and can only be decrypted on the destination server.

 

Personal data stored in the database is encrypted in such a way that only the Operator, who possesses the key, can decrypt it. This ensures that the data remains protected in the event that the database is stolen from the server.

 

The website uses two-factor authentication, which provides an additional layer of protection for logging into the website.

 

The Operator periodically changes its administrative passwords.

 

An essential element of data protection is the regular updating of all software used by the Operator to process personal data, which specifically includes regular updates to software components.

 

3. Hosting
The website is maintained and hosted on the Wix.com Ltd. platform, headquartered at 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. Personal data may be processed by Wix.com Ltd. as a data processor solely to the extent necessary to provide hosting services and ensure the proper functioning of the website.

 

To ensure technical reliability, the hosting provider maintains server-level logs. The following may be logged:
- resources identified by a URL (addresses of requested resources—pages, files),
- the time the request was received,
- the time the response was sent,
- the client’s hostname – identified via the HTTP protocol,
- information about errors that occurred during the execution of an HTTP transaction,
- the URL of the page previously visited by the user (referrer link) – if the user accessed the Website via a link,
- information about the user’s browser,
- IP address information,
- diagnostic information related to the process of independently ordering services through the order forms on the website,
information related to the handling of emails sent to the Operator and sent by the Operator.

​

4. Your Rights and Additional Information on How Your Data Is Used
In certain situations, the Controller has the right to transfer your personal data to other recipients if this is necessary to fulfill the contract concluded with you or to comply with the Controller’s legal obligations. This applies to the following groups of recipients:
- hosting companies acting as data processors
- email service providers
- banks
- payment processors
- online chat solution providers
- accounting firms
- IT service providers
- companies that provide analytical and marketing services to the Controller

 

Transfer of Data Outside the European Economic Area
Certain data may be transferred outside the European Economic Area in connection with the use of services provided by Wix and other technology providers.
Such transfers are carried out in accordance with applicable GDPR provisions, in particular based on a European Commission decision on an adequate level of protection or using Standard Contractual Clauses.

 

Your personal data is processed by the Controller for the following periods:
- ​the term of the contract,
- as required by tax and accounting regulations,
- until the statute of limitations for claims expires,
- until consent is withdrawn—in the case of data processed on the basis of consent.

 

You have the right to request from the Controller:
- access to your data,
- correction of your data,
- deletion of your data,
- restriction of processing,
- data portability,
- objection to processing,
- withdrawal of consent at any time,
- filing a complaint with the President of the Personal Data Protection Office.

 

You have the right to object to the processing described in Section 3.2 regarding the processing of personal data for the purpose of pursuing the Controller’s legitimate interests, including profiling; however, the right to object may not be exercised if there are compelling legitimate grounds for the processing that that override your interests, rights, and freedoms, in particular the establishment, exercise, or defense of legal claims.

 

You may file a complaint regarding the Controller’s actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

 

Providing personal data is voluntary but necessary for the operation of the Website.

Automated decision-making, including profiling, may be applied to you for the purpose of providing services under the concluded contract and for the Controller to conduct direct marketing.

 

Personal data is not transferred from third countries as defined by data protection regulations. This means that we do not transfer it outside the European Union.

 

5. Information in Forms
The Website collects information voluntarily provided by the user, including personal data, if provided.
The Website may store information about connection parameters (timestamp, IP address).

In some cases, the website may store information that makes it easier to link the data in the form to the email address of the user filling out the form. In such cases, the user’s email address appears within the URL of the page containing the form.

The data provided in the form is processed for the purpose specified by the form’s function, e.g., to handle a service request or sales inquiry, register for services, etc. In each case, the context and description of the form clearly indicate its purpose.

 

6. Administrator Logs
Information regarding user behavior on the website may be logged. This data is used for the purpose of administering the website.

​

7. Relevant Marketing Techniques
The operator uses statistical analysis of website traffic via Google Analytics (Google Inc., headquartered in the U.S.). The operator does not transfer personal data to the provider of this service, but only anonymized information. The service relies on the use of cookies on the user’s device. With regard to information about user preferences collected by the Google advertising network, users can view and edit information derived from cookies using the following tool: https://www.google.com/ads/preferences/

 

The Operator uses remarketing techniques that allow advertising messages to be tailored to a user’s behavior on the website, which may give the impression that the user’s personal data is being used to track them; however, in practice, no personal data is transferred from the Operator to advertising providers. The technical prerequisite for these activities is that cookies must be enabled.

 

The Operator uses the Facebook pixel. This technology allows Facebook (Facebook Inc., headquartered in the U.S.) to know that a person registered with Facebook is using the Website. In this case, Facebook relies on data for which it is the controller; the Operator does not transfer any additional personal data to Facebook. The service relies on the use of cookies on the user’s device.

 

The Operator uses a solution that automates the Website’s operation with respect to users, e.g., one that can send an email to a user after they visit a specific subpage, provided that the user has consented to receiving commercial communications from the Operator.

8. Information About Cookies
The Website uses cookies.

Cookies are IT data—specifically, text files—that are stored on a Website User’s end device and are intended for use with the Website’s pages. Cookies typically contain the name of the website from which they originate, the duration of their storage on the end device, and a unique number.

 

The entity that places cookies on the Website User’s end device and accesses them is the Website operator.

Cookies are used for the following purposes:
- to maintain the Website User’s session (after logging in), so that the user does not have to re-enter their username and password on every subpage of the Website;
- to achieve the objectives specified above in the section “Relevant Marketing Techniques”;

 

The Website uses two main types of cookies: “session” cookies and “persistent” cookies. “Session” cookies are temporary files that are stored on the User’s device until the User logs out, leaves the website, or closes the (web browser). “Persistent” cookies are stored on the User’s end device for the duration specified in the cookie settings or until the User deletes them.

Web browsing software (a web browser) typically allows cookies to be stored on the User’s device by default. Users of the Website may change their settings in this regard. The web browser allows you to delete cookies. It is also possible to automatically block cookies. Detailed information on this topic can be found in the web browser’s help section or documentation.

 

Restrictions on the use of cookies may affect certain features available on the Website’s pages.

Cookies placed on a Website User’s end device may also be used by entities cooperating with the Website operator; this applies in particular to the following companies: Google (Google Inc., headquartered in the U.S.), Facebook (Facebook Inc., headquartered in the U.S.), and Twitter (Twitter Inc., headquartered in the U.S.).

 

9. Managing Cookies – How to Give and Withdraw Consent in Practice?
If you do not wish to receive cookies, you can change your browser settings. Please note that disabling cookies necessary for authentication, security, and maintaining your preferences may hinder, and in extreme cases may prevent, your use of the websites
To manage your cookie settings, select the web browser you use from the list below and follow the instructions:
- Edge
- Internet Explorer
- Chrome
- Safari
- Firefox
- Opera

 

Mobile devices:
- Android
- Safari (iOS)
- Windows Phone.