PRIVACY POLICY OF THE WEBSITE
fantour.eu

1. The Personal Data Administrator on the website at: https://fantour.eu/, hereinafter referred to as the Website, is Sebastian Wiewiórka conducting business activity under the name “FANTOUR SEBASTIAN WIEWIÓRKA” with the main office located at: ul. Ogrodowa 12/4, 81-759 Sopot, entered into the Central Register and Information on Economic Activity since August 2, 2017, NIP: 5782463709, REGON: 367874571. One of the functionalities of the Website is the ability to make purchases through the website: https://fantour.eu/sklep-2/ (further referred to as the Online Store), which is a part of the Website.
2. Respecting your rights as data subjects (individuals whose data is processed) and complying with applicable law, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2018, item 1000, hereinafter referred to as the Act) and other relevant provisions on the protection of personal data, we undertake to maintain the security and confidentiality of the personal data obtained from you. All employees have been properly trained in the processing of personal data, and as Personal Data Administrators, we have implemented appropriate security measures and technical and organizational measures to ensure the highest level of protection of personal data. We have implemented procedures and policies for the protection of personal data in accordance with the GDPR, thanks to which we ensure compliance with the law and the reliability of data processing processes, as well as the enforceability of all rights available to you as individuals whose data is processed. Additionally, if necessary, we cooperate with the supervisory authority in the Republic of Poland, i.e. with the President of the Office for Personal Data Protection (hereinafter referred to as PUODO).
3. In our Website, we collect the following personal data:
a) first and last name – may be processed when you as users of our Website (including customers or potential customers) provide them to us via email, WhatsApp, Instagram, and Facebook, traditional mail, or by phone, in order to use our offer,
b) phone number – may be processed when contacting us by phone (as customers or potential customers), and when you provide it to us via email, traditional mail, WhatsApp to allow us to contact you if needed in connection with providing services on your behalf, as well as to answer questions related to our offer,
c) email address – may be processed when you, as users of our Website (including customers or potential customers) provide it to us when contacting us via email, WhatsApp, as well as via traditional mail, or by phone; we send you a confirmation of the placed order, contact you if there is a need related to order fulfillment, as well as respond to questions related to our offer; if you have consented to receiving marketing content and have become a subscriber to our newsletter, we will also send you commercial information several times a month,
d) NIP – Tax Identification Number is collected from entrepreneurs and individuals who request an invoice and have a NIP number,
e) device IP address – information resulting from general principles of Internet connections, such as IP address (and other information contained in system logs), are used for technical and statistical purposes, including gathering general demographic information (e.g. about the region from which the connection originates),
f) any other data that may be collected as part of specific matters or may be provided by you as users of our Website (including customers or potential customers) via email, traditional mail, or by phone, and using WhatsApp, as well as social media platforms Instagram, Facebook.
4. Providing the data indicated in the preceding point is necessary in the cases indicated in the preceding point, in particular:
a) in order to use the services offered on our Website,
b) to fulfill the services ordered by you on our Website,
c) to respond to your questions and allow contact via email, traditional mail, or by phone, as well as using WhatsApp and social media platforms Facebook or Instagram,
d) to provide the service (subscription) to the newsletter – if you want to be informed about interesting events and commercial offers, you can become a subscriber to our newsletter; subscribing is voluntary, and you can unsubscribe at any time,
e) to take advantage of the offer available in our Online Store by placing an order through the order form without the need to register (create an account) in the Online Store,
f) for the shipment of Products ordered by you in our Online Store,
g) to respond to your questions and allow contact via email, traditional mail, or by phone.
5. Our Website uses Cookies technology to adjust its operation to your individual needs. Therefore, you may agree to have your data and information entered by you saved, making it possible to use them during your subsequent visits to our Website without the need to re-enter them. Owners of other websites will not have access to this data and information. However, if you do not agree to personalize the Website, we suggest disabling cookies in your internet browser settings.
6. Each of you as a person using our Website has the choice of whether and to what extent you want to use our services and provide information and data about yourself, as defined by the content of this Privacy Policy.
7. In accordance with the principle of minimization, we process only those categories of personal data that are necessary to achieve the purposes mentioned in points 3 and 4 above. In the scope of services provided through the Online Store, your data is processed by our company as the Personal Data Administrator in order to fulfill sales contracts and any additional services provided to you (i.e. individuals whose data is processed) and offered in the Online Store.
8. We process personal data for the period necessary to achieve the purposes listed in points 3 and 4 above. Personal data may be processed for a longer period if such authorization or obligation imposed on us as the Administrator arises from special legal provisions, a legitimate interest of the Administrator, as mentioned in point 10 lit. c below (i.e. for the limitation period of claims or completion of relevant proceedings, if they were initiated during the limitation period), or if the service we provide is continuous (e.g. newsletter subscription).
9. The source of the personal data processed by the Personal Data Administrator is the persons whose data is processed.
10. The legal basis for processing your personal data is:
a) art. 6 sec. 1 lit. b GDPR, i.e. the necessity to perform a contract to which you are a party, or to take action at your request before entering into a contract, or
b) art. 6 sec. 1 lit. c GDPR, i.e. the necessity to comply with legal obligations incumbent on the Administrator, or
c) art. 6 sec. 1 lit. f GDPR, i.e. the legitimate interest of the Administrator, which is to establish, investigate, or defend claims until they expire or until the end of the relevant proceedings, if they have been initiated during this period, or
d) art. 6 sec. 1 lit. a GDPR, i.e. your consent to the processing of personal data for specific purposes, when other legal grounds for processing personal data do not apply – e.g. when providing a newsletter service.
11. Personal data is not transferred by us to a third country or international organization within the meaning of the GDPR. In the event that personal data is transferred to a third country or international organization, you will be informed in advance, and the Administrator will apply the safeguards referred to in Chapter V of the GDPR.
12. We do not disclose personal data to third parties without the explicit consent of the individuals whose data is being processed. Personal data without the consent of the individuals whose data is processed may only be disclosed to public authorities, i.e. authorities and administrations (e.g. tax authorities, law enforcement authorities, and other entities authorized by universally applicable laws).
13. Personal data may be entrusted to entities processing such data on our behalf as the Personal Data Administrator. In such a situation, as the Personal Data Administrator, we conclude a personal data processing agreement with the entity processing the data. The data processor processes the entrusted personal data only for the purposes, to the extent, and for the purposes specified in the processing agreement mentioned above. Without entrusting your personal data for processing, we could not conduct our business within the Website. As the Personal Data Administrator, we entrust personal data for processing to the following entities:
a) providing hosting services for the website on which our Website operates,
b) providing other services necessary for the current functioning of the Website on our behalf.
14. Personal data is not subject to profiling by us as the Administrator within the meaning of the GDPR.
15. According to the GDPR, every person whose personal data we process as the Personal Data Administrator has the right to:
a) be informed about the processing of personal data, as referred to in art. 12 of the GDPR – the Administrator is obliged to provide you as individuals whose data will be processed with information specified in the GDPR (e.g. about your data, contact details of the Data Protection Officer, purposes, and legal bases of personal data processing, recipients or categories of recipients of personal data, if any, or the period for which data will be processed or the criteria for determining this period); this obligation must be fulfilled at the time of data acquisition (e.g. when placing an order by a customer in the online store), and if the data is not obtained from the individuals whose data is processed but from another source – within a reasonable period, depending on the circumstances; the Administrator may refrain from providing this information if the individuals whose data is processed already have it,
b) access to their personal data, as referred to in art. 15 of the GDPR – by providing us with personal data, you have the right to access and inspect it; however, this does not mean that you have the right to access all documents containing your data, as they may contain confidential information; however, you have the right to know what data we process and for what purpose, and the right to obtain a copy of your personal data, with the first copy issued free of charge, and for each subsequent copy, according to the GDPR, we charge an administrative fee corresponding to the costs of making a copy,
c) rectification, supplementation, updating, correction of personal data, as referred to in art. 16 of the GDPR – if your personal data has changed, please inform us as the Personal Data Administrator to ensure that the data we hold is accurate and up-to-date; also in a situation where there has been no change in personal data, but for any reason, this data is incorrect or has been recorded incorrectly (e.g. due to a typographical error), please let us know so that we can correct or rectify such data,
d) erasure of data (right to be forgotten), as referred to in art. 17 of the GDPR – in other words, you have the right to demand the “deletion” of data held by us as the Personal Data Administrator and the right to request that we inform other administrators to whom we have transferred your data about the need to delete them. You may request the erasure of your personal data primarily when:
· the purposes for which personal data was collected have been achieved, e.g. we have fully completed the sales agreement concluded with you,
· the legal basis for processing your personal data was solely consent, which has subsequently been withdrawn, and there are no other legal grounds for further processing your personal data, e.g. if you unsubscribe from the newsletter subscription and no longer use our company’s offer in any other way,
· you have objected based on art. 21 of the GDPR and believe that we have no overriding legal basis for further processing your personal data