Privacy Policy

PRIVACY POLICY

1. This Privacy Policy outlines the rules for processing personal data obtained through the online store mowoodwork.eu (hereinafter referred to as the "Online Store").
2. The owner of the Online Store and the data administrator is Mo Furniture Marcin Wakszyński, Michał Bis civil partnership, based in Stalowa Wola (37-450), Targowa 7, NIP: 8652563325, REGON: 364546607, hereinafter referred to as Mo Furniture s.c.
3. The personal data collected by Mo Furniture s.c. through the Online Store is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR.
4. Mo Furniture s.c. takes special care to respect the privacy of Customers visiting the Online Store.

§ 1 Type of Processed Data, Purposes, and Legal Basis

1. Mo Furniture s.c. collects information about natural persons undertaking legal actions not directly related to their business activities, natural persons conducting business or professional activities on their own behalf, and natural persons representing legal entities or organizational units without legal personality, to whom the law grants legal capacity, hereinafter collectively referred to as Customers.
2. Customers' personal data is collected in the following cases:
a) Registration of an account in the Online Store, in order to create and manage an individual account. Legal basis: necessity for the performance of the account service agreement (Article 6(1)(b) of the GDPR);
b) Placing an order in the Online Store, in order to execute a sales agreement. Legal basis: necessity for the performance of the sales agreement (Article 6(1)(b) of the GDPR);
c) Subscription to the newsletter, in order to execute the agreement for the provision of electronic services. Legal basis: the consent of the data subject for the execution of the newsletter service agreement (Article 6(1)(a) of the GDPR);
d) Use of the contact form service in the Online Store, in order to execute the agreement for the provision of electronic services. Legal basis: necessity for the performance of the contact form service agreement (Article 6(1)(b) of the GDPR);
e) Use of the "post a review" service, in order to execute the agreement for the provision of electronic services. Legal basis: necessity for the performance of the "post a review" service agreement (Article 6(1)(b) of the GDPR).
3. When registering an account in the Online Store, the Customer provides:
a) an email address.
4. During account registration in the Online Store, the Customer independently sets an individual password for their account. The Customer may change the password later, as described in §5.
5. When placing an order in the Online Store, the Customer provides the following data:
a) Email address;
b) Address details
a. Postal code and city;
b. Country;
c. Street along with house/apartment number.
c) First and last name;
d) Phone number.
6. For Entrepreneurs, the above data scope is additionally expanded to include:
a) The company name;
b) VAT identification number (NIP).
7. When using the Newsletter service, the Customer only provides their email address.
8. When using the contact form service, the Customer provides the following data:
a) Email address;
b) First and last name..
9. When using the "post a review" service, the Customer provides the following data:
a) Pseudonym/nickname;
b) Email address.
10. While using the Online Store Website, additional information may be collected, particularly: the IP address assigned to the Customer's computer or the external IP address of the Internet provider, domain name, browser type, access time, and type of operating system.
11. Navigation data may also be collected from Customers, including information about links and references they decide to click or other actions taken in the Online Store. Legal basis: legitimate interest (Article 6(1)(f) of the GDPR), which involves facilitating the use of electronically provided services and improving the functionality of these services.
12. To establish, pursue, and enforce claims, certain personal data provided by the Customer while using the functionalities of the Online Store, such as name, surname, data concerning the use of services (if claims arise from the way the Customer uses the services), and other data necessary to prove the existence of a claim, including the extent of the damage suffered, may be processed. Legal basis: legitimate interest (Article 6(1)(f) of the GDPR), which involves establishing, pursuing, and enforcing claims and defending against claims in court proceedings and other governmental bodies.
13. Providing personal data to Mo Furniture s.c. is voluntary in connection with the sales agreements or services provided through the Online Store Website. However, it should be noted that failure to provide certain data in the registration forms will prevent registration and the creation of a Customer Account, and in the case of placing an order without registering a Customer Account, it will prevent the submission and fulfillment of the Customer's order.

§ 2 To Whom Are the Data Disclosed or Entrusted, and How Long Are They Stored?

1. The Customer's personal data is provided to service providers used by Mo Furniture s.c. in operating the Online Store. Depending on the contractual arrangements and circumstances, the service providers to whom personal data is disclosed either follow the instructions of Mo Furniture s.c. regarding the purposes and methods of processing this data (processors) or independently determine the purposes and methods of processing the data (controllers).
a) Processors: Mo Furniture s.c. uses service providers who process personal data solely on the instructions of Mo Furniture s.c. These include, among others, providers of hosting services, accounting services, marketing systems, traffic analysis systems for the Online Store, and systems for analyzing the effectiveness of marketing campaigns.
b) Controllers: Mo Furniture s.c. uses service providers who do not operate solely on its instructions and independently determine the purposes and use of Customers' personal data. These include providers of electronic payment services and banking services.
2. Location: The service providers are located in Poland and other countries within the European Economic Area (EEA).
3. Customer personal data is stored:
a) When the legal basis for processing personal data is consent, the Customer's personal data is processed by Mo Furniture s.c. until the consent is withdrawn, and after withdrawal, for a period corresponding to the statute of limitations for claims that Mo Furniture s.c. may raise or that may be raised against it. Unless a specific provision states otherwise, the statute of limitations is six years, and for periodic claims and claims related to business activity, it is three years. Unless a specific provision states otherwise, the statute of limitations is six years, and for periodic claims and claims related to business activity, it is three years.
b) When the legal basis for processing data is the performance of a contract, the Customer's personal data is processed by Mo Furniture s.c. as long as it is necessary for the performance of the contract, and afterward, for a period corresponding to the statute of limitations for claims. Unless a specific provision states otherwise, the statute of limitations is six years, and for periodic claims and claims related to business activity, it is three years.
4. In the event of a purchase in the Online Store, personal data may be provided to the courier company to deliver the ordered goods.
5. Navigation data may be used to provide better service to Customers, analyze statistical data, tailor the Online Store to Customer preferences, and administer the Online Store.
6. If the Customer subscribes to the newsletter, Mo Furniture s.c. will send commercial information about promotions and new products available in the Online Store to their email address.
7. In the event of a request, Mo Furniture s.c. discloses personal data to authorized state authorities, in particular to organizational units of the Prosecutor's Office, the Police, the President of the Office for Personal Data Protection, the President of the Office of Competition and Consumer Protection, or the President of the Office of Electronic Communications.

§ 3 Cookies Mechanism, IP Address

1. The Online Store uses small files called cookies. They are saved by Mo Furniture s.c. on the device of the person visiting the Online Store, provided the web browser allows it. A cookie file typically contains the domain name it originates from, its "expiration time," and a unique, randomly selected number identifying that file. The information collected through such files helps tailor the products offered by Mo Furniture s.c. to the individual preferences and actual needs of visitors to the Online Store. They also allow for the development of general statistics of visits to the presented products in the Online Store.
2. Mo Furniture s.c. uses two types of cookies:
a) Session cookies: These are removed from the device's memory after the browser session ends or the computer is turned off. The session cookies mechanism does not allow for the collection of any personal data or confidential information from the Customers' computers.
b) Persistent cookies: These are stored on the Customer's device and remain there until they are deleted or expire. The persistent cookies mechanism does not allow for the collection of any personal data or confidential information from the Customers' computers.
3. Mo Furniture s.c. uses its own cookies to:
a) Authenticate the Customer in the Online Store and ensure the Customer's session in the Online Store (after logging in), so the Customer does not have to re-enter their login and password on every subpage of the Online Store;
b) Conduct analysis, research, and viewership audits, particularly to create anonymous statistics that help understand how Customers use the Online Store Website, which allows for improving its structure and content.
4. Mo Furniture s.c. uses external cookies to:
a) Collect general and anonymous statistical data via analytical tools like Google Analytics (external cookies administrator: Google Inc, based in the USA);
b) Present the "Reliable Regulations Certificate" via the website rzetelnyregulamin.pl (external cookies administrator: Rzetelna Grupa sp. z o.o., based in Warsaw).
5. The cookies mechanism is safe for the computers of Online Store Customers. In particular, it is not possible for viruses or other unwanted software or malware to enter Customers' computers via this method. However, Customers can limit or disable cookies access to their computers in their web browsers. If this option is used, using the Online Store will still be possible, except for functions that inherently require cookies.
6. Below are instructions on how to change cookie settings in popular web browsers:
a) Chrome and Chrome Mobile;
b) Facebook in-app Browser;
c) Internet Explorer;
d) Microsoft EDGE;
e) Mozilla Firefox;
f) Opera;
g) Safari and Safari Mobile;
h) Samsung Browser.
7. Mo Furniture s.c. may collect Customers' IP addresses. An IP address is a number assigned to the computer of the person visiting the Online Store by the Internet service provider. The IP number allows access to the Internet. In most cases, it is assigned to the computer dynamically, meaning it changes with each connection to the Internet. Mo Furniture s.c. uses IP addresses to diagnose technical problems with the server, create statistical analyses (e.g., determining from which regions we record the most visits), as information useful for administering and improving the Online Store, as well as for security purposes and potential identification of unwanted automatic programs browsing the Online Store that may burden the server.
8. The Online Store contains links and references to other websites. Mo Furniture s.c. is not responsible for the privacy practices in force on those websites.

§ 4 Rights of Data Subjects

1. Right to withdraw consent - Legal basis: Article 7(3) of the GDPR.
a) The Customer has the right to withdraw any consent given to Mo Furniture s.c.
b) The withdrawal of consent takes effect from the moment of withdrawal.
c) The withdrawal of consent does not affect the processing carried out by Mo Furniture s.c. in accordance with the law before its withdrawal.
d) The withdrawal of consent does not entail any negative consequences for the Customer, but it may prevent further use of services or functionalities that, according to the law, Mo Furniture s.c. can only provide with consent.
2. Right to object to data processing - Legal basis: Article 21 of the GDPR.
a) The Customer has the right to object at any time - for reasons related to their particular situation - to the processing of their personal data, including profiling, if Mo Furniture s.c. processes their data based on a legitimate interest, e.g., marketing of Mo Furniture s.c. products and services, conducting statistics on the use of particular functionalities of the Online Store, facilitating the use of the Online Store, and conducting satisfaction surveys.
b) Opting out of receiving marketing communications regarding products or services via email will constitute an objection to the processing of the Customer's personal data, including profiling for these purposes.
c) If the Customer's objection is justified and Mo Furniture s.c. has no other legal basis for processing the personal data, the Customer's personal data will be deleted concerning the processing to which the Customer objected.
3. Right to erasure of data ("right to be forgotten") - Legal basis: Article 17 of the GDPR.
a) The Customer has the right to request the deletion of all or some of their personal data.
b) The Customer has the right to request the deletion of personal data if
a. The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
b. The Customer has withdrawn a specific consent to the extent that the personal data was processed based on that consent;
c. The Customer has objected to the use of their data for marketing purposes;
d. The personal data has been processed unlawfully;
e. The personal data must be deleted to comply with a legal obligation provided for under Union law or the law of a Member State to which Mo Furniture s.c. is subject;
f. The personal data was collected in connection with the offering of information society services,
c) Despite the request to delete personal data due to an objection or withdrawal of consent, Mo Furniture s.c. may retain certain personal data to the extent that processing is necessary to establish, pursue, or defend claims, as well as to comply with a legal obligation requiring processing under Union law or the law of a Member State to which Mo Furniture s.c. is subject. This particularly applies to personal data including: first name, last name, email address, which are retained for the purpose of handling complaints and claims related to the use of Mo Furniture s.c. services, or additionally, residential/mailing address, order number, which are retained for the purpose of handling complaints and claims related to sales agreements or the provision of services.
4. Right to Restrict Data Processing - Legal basis: Article 18 of the GDPR.
a) The Customer has the right to request the restriction of the processing of their personal data. The submission of such a request, until it is reviewed, prevents the use of certain functionalities or services, the use of which would involve processing the data covered by the request. Mo Furniture s.c. will also refrain from sending any communications, including marketing messages.
b) The Customer has the right to request the restriction of the use of personal data in the following cases:
a. When the Customer questions the accuracy of their personal data – in such cases, Mo Furniture s.c. will restrict the use of the data for the time necessary to verify the accuracy of the data, but no longer than 7 days;
b. When the processing of the data is unlawful, and instead of requesting the deletion of the data, the Customer requests the restriction of its use;
c. When the personal data is no longer needed for the purposes for which it was collected or used, but it is needed by the Customer to establish, assert, or defend claims;
d. When the Customer has objected to the use of their data – in such cases, the restriction will be in place for the time necessary to consider whether the protection of the Customer’s interests, rights, and freedoms outweighs the interests pursued by the Administrator when processing the Customer's personal data.
5. Right of Access to Data - Legal basis: Article 15 of the GDPR.
a) The Customer has the right to obtain confirmation from the Administrator as to whether or not personal data concerning them is being processed, and, if so, the Customer has the right to:
a. Gain access to their personal data;
b. Obtain information about the purposes of the processing, the categories of personal data being processed, the recipients or categories of recipients of that data, the planned period for which the Customer's data will be stored, or the criteria used to determine that period (if the specific storage period cannot be determined), the rights available to the Customer under the GDPR, the right to lodge a complaint with a supervisory authority, the source of the data, automated decision-making, including profiling, and the safeguards in place regarding the transfer of data outside the European Union;
c. Obtain a copy of their personal data.
6. Right to Rectify Data - Legal basis: Article 16 of the GDPR.
a) The Customer has the right to request from the Administrator the immediate correction of their personal data that is inaccurate. Taking into account the purposes of the processing, the Customer has the right to request the completion of incomplete personal data, including by submitting an additional statement, by directing the request to the email address specified in §6 of the Privacy Policy.
7. Right to Data Portability - Legal basis: Article 20 of the GDPR.
a) The Customer has the right to receive their personal data that they provided to the Administrator and then transmit it to another data controller of their choice. The Customer also has the right to request that the personal data be transmitted directly by the Administrator to such a data controller, where technically feasible. In such cases, the Administrator will transmit the Customer’s personal data in the form of a CSV file, which is a commonly used, machine-readable format that allows the received data to be transmitted to another data controller.
8. When a Customer exercises their rights as outlined above, Mo Furniture s.c. will fulfill the request or refuse to do so without delay, but no later than one month after receiving the request. However, if the request is complex or there are multiple requests, Mo Furniture s.c. may extend this period by two additional months, provided that the Customer is informed of the extension and the reasons for it within one month of receiving the request.
9. The Customer may submit complaints, inquiries, and requests to the Administrator concerning the processing of their personal data and the exercise of their rights.
10. The Customer has the right to request that Mo Furniture s.c. provide a copy of standard contractual clauses by submitting a request in the manner specified in §6 of the Privacy Policy.
11. The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that their rights to data protection or other rights granted under the GDPR have been violated.

§ 5 Security Management - Password

1. Mo Furniture s.c. ensures that Customers have a secure and encrypted connection when transmitting personal data and logging into their Customer Account on the Website. Mo Furniture s.c. uses an SSL certificate issued by one of the world's leading companies in the field of security and encryption of data transmitted over the Internet.
2. If a Customer with an account in the Online Store loses their access password in any way, the Online Store provides the ability to generate a new password. Mo Furniture s.c. does not send password reminders. The password is stored in an encrypted form, making it impossible to read. To generate a new password, the Customer must provide their email address in the form available at the link "Forgot your password?" located near the login form on the Online Store's website. The Customer will receive an email containing a link to a dedicated form available on the Online Store's website, where they will be able to set a new password.
3. Mo Furniture s.c. never sends any correspondence, including email, requesting login details, especially the access password to the Customer's account.

§ 6 Changes to the Privacy Policy

1. The Privacy Policy may be amended, of which Mo Furniture s.c. will inform Customers 7 days in advance.
2. Questions related to the Privacy Policy should be directed to: hi.mowoodwork@gmail.com