Privacy policy

I. General provisions

1. The privacy policy sets out how personal data necessary for the provision of electronic services via www.mardomdecor.com website (hereinafter: the Website) is collected, processed and stored.
2. The controller of the personal data of the Customer/User is: Mardom spółka z ograniczoną odpowiedzialnością entered in the Register of Entrepreneurs of the National Court Register under KRS no.: 0000139654 by the District Court for Łódź Śródmieście in Łódź 20th Department of the National Court Register, Tax Identification Number (NIP) 725-184-61-23, Business Registry Number (REGON) 473081549 (Service Provider).
3. The data collected by the Controller shall be:
   • Processed in conformity with the law;
   • Processed for clearly defined purposes and not subject to further processing not in conformity with those purposes;
   • substantially correct and correspondent with the purposes for which they are processed;
   • Stored for no longer than necessary to achieve the purpose of the processing.
4. The personal data collected through the Website shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR).

II. Purpose of personal data collection

1. Personal data shall be processed for the purpose of:
   1. account registration, verification of identity and login to the User’s account and performance of the agreement for the provision of electronic services (Article 6(1)(b) of the GDPR);
   2. fulfilment of a distance sales agreement (Article 6(1)(b) of the GDPR);
   3. communication with the User in order to provide him/her with the necessary information (Article 6(1)(f) of the GDPR);
   4. promotion by the Controller of its own products and/or services and those of its Partners through the sending of marketing information by e-mail (newsletter), insofar as the User has consented to receive such notifications by e-mail (Art. 6(1)(a) of the GDPR);
   5. granting access to information on industry news directly related to the Controller’s business, insofar as the User has consented to receive such notifications by e-mail (Article 6(1)(a) of the GDPR);
   6. for analytical and statistical purposes on the basis of the Controller’s legitimate interest consisting in conducting verification of User activity and their preferences for optimisation of services and products as well as applied Website functionalities, i.e. collecting opinions by Trusted Shops Poland sp. z o.o., transferring data to the SALESmanago marketing platform (Article 6(1)(f) of the GDPR);
   7. possible establishment, assertion or defence of claims on the basis of the Controller’s legitimate interest in protecting its rights (Article 6(1)(f) of the GDPR).
2. The provision of data is voluntary, but necessary in order to conclude an agreement or make use of other functionalities of the Website.
3. The Controller may process the User’s personal data: name and surname, date of birth, residential address, e-mail address, telephone number, Tax Identification Number (NIP).

III. Period of personal data processing

1. Users’ personal data shall be processed for a period of time:
   • where the basis of data processing is the performance of an agreement – until the statute of limitations for claims after performance;
   • where data processing is based on consent – until revocation of consent, and after revocation of consent until the expiry of claims.

IV. Personal data sharing

1. Users’ personal data may be transferred to:
   1. entities related to the Controller;
   2. the Controller’s subcontractors, in particular to entities supplying and operating selected IT systems and solutions;
   3. entities cooperating with the Controller;
   4. courier/postal companies (DPD, Raben, GLS);
   5. online payment providers (PayU, Autopay);
   6. law firms.
2. Users’ personal data shall not be transferred outside the European Economic Area (EEA).

V. Users’ rights

1. The Service User has the right to:
   1. access the content of their personal data;
   2. rectify data;
   3. erase data;
   4. restrict data processing;
   5. transfer their data;
   6. object to the processing of data;
   7. revoke consent at any time, which shall not affect the legitimacy of processing carried out on the basis of consent before revocation.
2. The User has the right to lodge a complaint with the supervisory authority of the President of the Data Protection Authority if they consider that the processing of their personal data violate the provisions of the General Data Protection Regulation of 27 April 2016 (the so-called GDPR).

VI. Cookie files

1. The Website collects information by means of cookies.
2. The collection of cookies supports the correct provision of services on the Website and is used for statistical purposes.
3. When visiting the Online Shop, a message shall be displayed informing the User that it uses cookies. 
4. The Controller may process data contained in Cookies when visitors use the Online Shop for the following purposes:
   1. identification of Customers as logged in to the Online Shop and showing that they are logged in
   2. identification of Customers as logged in to the Online Shop and showing that they are logged in
   3. remembering the Products added to the shopping basket for the purpose of placing an Order
   4. remembering data from completed Order Forms or login data to the Online Shop
   5. adapting the content of the Online Shop to the individual preferences of the Customer and optimising the use of the pages of the Online Shop
   6. keeping anonymous statistics on the use of the Online Shop (hotjar, GA4, Pixel)
   7. remarketing, i.e. studying the behavioural characteristics of visitors to the Online Shop by analysing their actions anonymously (e.g. repeated visits to specific pages, keywords, etc.) in order to create a profile and provide them with advertisements tailored to their predicted interests, also when they visit other websites on the advertising network of Google Inc. and Facebook Ireland Ltd.;
5. The User may specify the extent to which cookies can access their device in the browser settings. Note that changing the settings of these files by restricting their use may affect some of the functionality available on websites that use them. Below we indicate how to change the cookie settings of the most popular search engines:
   1. Google Chrome
      Menu -> Settings -> Privacy and security – select the appropriate option.
   2. Microsoft Edge
      Menu -> Settings -> Cookies and site permissions – select the appropriate option.
   3. Mozilla Firefox
      Menu -> Preferences -> Privacy and security -> Cookies and site data – select the relevant option.
   4. Opera
      Menu -> Settings -> Privacy and security – select the appropriate option.
   5. Safari
      Menu -> Preferences -> Privacy > Cookies – select the appropriate option. 

VII. Automated decision-making and profiling

1. Users’ data may not be processed in an automated manner in such a way that any decisions may be made about them as a result.
2. Users’ data may be profiled in order to adapt the content and personalise the offer once they have given their consent.

VIII. Final provisions

1. The Contractor reserves the right to make changes to the Privacy Policy, but the Users’ rights shall not be restricted.
2. Information on the changes made shall appear in the form of a message available on the Website.
3. In any matters not governed herein, the provisions of the GDPR and the provisions of Polish law shall apply.