Privacy Policy

§1 GENERAL PROVISIONS

This document sets out the rules for the processing and protection of personal data of Customers of the Service available at https://euherbs.com.
The controller of personal data is Bohdan Liubynetskyi, an entrepreneur conducting business activity under the name Maxibuy Group Bohdan Liubynetskyi, registered in the Central Register and Information on Business Activity maintained by the minister responsible for economic affairs and maintaining the Central Register and Information on Business Activity, NIP: 6793354781, REGON: 543794703, ul. Telimeny 17, 30-838 Kraków (hereinafter referred to as the Controller).
Personal Data referred to in the Privacy Policy means information relating to an identified or identifiable natural person to whom the data relates, i.e. a person who can be identified directly or indirectly, in particular on the basis of an identifier such as a first and last name, identification number, location data, online identifier, or one or more characteristics determining the physical, physiological, genetic, mental, economic, cultural or social identity of a natural person.
Processing, within the meaning of this Privacy Policy, means an operation or set of operations performed on Personal Data or sets of Personal Data, whether by automated or non-automated means, such as collection, recording, copying, deletion, organization, arrangement, storage, adaptation or modification, retrieval and consultation.
The Controller processes the Personal Data of data subjects in accordance with applicable laws, in particular the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws of 2018, item 1000) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the GDPR).

§2 RIGHTS AND OBLIGATIONS OF THE DATA SUBJECT

Every Customer has the right to:
access their Personal Data,
rectify their Personal Data,
delete their Personal Data,
request restriction of processing,
object to the processing of Personal Data,
withdraw consent to the processing of Personal Data for one or more purposes for which consent was given, at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal,
data portability.
In order to exercise the rights referred to in point 1, an email should be sent to info@euherbs.com, the company may be contacted by telephone, the functionalities available in the Customer Account may be used, or written information may be sent to the Service Provider at: Bohdan Liubynetskyi, Telimeny 17, 30-838 Kraków, with the note PERSONAL DATA.
If a Customer places any personal data of other persons on the Service, including their first and last name, address, telephone number or email address, this may only be done provided that the applicable law and the personal rights of those persons are not violated.
Every Customer has the right to lodge a complaint with the President of the Personal Data Protection Office.

§3 LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

The legal basis for the processing of Personal Data is:

the consent of the data subject to the processing of their Personal Data;
the necessity to perform contracts concluded on or through the Service, or to take steps requested by the data subject prior to entering into a contract;
the necessity to comply with a legal obligation incumbent on the Service Provider;
the legitimate interests pursued by the Service Provider or by a third party, including electronic payment operators or other entities whose activities are related to the functionality of the Service, provided that this legal basis for processing Personal Data does not apply to children.
In the case referred to in point 1, Personal Data concerning children is processed only if the child has reached the age of 16.

§4 PURPOSE AND SCOPE OF DATA COLLECTION

Personal Data is processed by the Controller within the Service in order to enable the use of the Service's functionalities, including automatically during the use of the Service, for the purpose of:

registration on the Service, including first and last name, email address, password, IP address, cookies and date of birth;
concluding contracts through or available on the Service, in particular placing and fulfilling an Order, concluding and performing a Credit Agreement and an Insurance Agreement, including first and last name, address (street, house number, town/city together with postal code), contact telephone number, order number, IP address, cookies or other data provided by the Service Provider on the Service or during contact with the Customer;
efficient operation and functioning of the Service, including the Online Store, and ensuring the security of their use, including the detection of abuse and conducting analyses, including first and last name, address (street, house number, town/city together with postal code), contact telephone number, order number, IP address, cookies or other data provided by the Service Provider on the Service or during contact with the Customer;
fulfilling the Service Provider's obligations, in particular those relating to complaints concerning contracts concluded on or through the Service and the operation of the Service, including first name, last name, email address, telephone number, address (street, house number, town/city together with postal code), IP address, cookies and bank account number;
preparing and presenting advertisements and offers tailored to the interests and needs of data subjects and receiving commercial information, in particular sending the Newsletter ordered by the Customer to the email address provided by the Customer, including first name, last name, date of birth, email address, telephone number, address (street, house number, town/city together with postal code), date of conclusion of an installment agreement, number of credit installments, IP address, cookies and Order number.

§5 PERIOD OF PROCESSING OF PERSONAL DATA

The period for which the Controller processes data depends on the type of service provided and the purpose of processing:

for accounting purposes, for a maximum period of 5 years, calculated from the end of the calendar year in which the tax payment deadline related to the contract concluded on or through the Service expired;
for the duration of the provision of the service or fulfillment of the order;
until consent is withdrawn or an effective objection to processing is submitted in cases where the legal basis for processing the data is the consent of the data subject.

The data processing period may be extended if the processing is necessary to establish and pursue potential claims or defend against them, as well as where the data constitutes evidence in proceedings conducted under the law or the Controller becomes aware that it may constitute such evidence.

After the processing period has expired, the data is irreversibly deleted or anonymized.

§6 COOKIES

A cookie is a small piece of text information sent by a server and stored on the device of the person using the Service. It stores information that the Service may need in order to adapt to the way the Service is used by the User and to collect statistical data concerning the Service, such as which pages were visited and which elements were downloaded, as well as information about the domain name of the internet service provider or the country of origin of the User.
Most cookies are so-called session cookies, which are automatically deleted from the hard drive after the session ends, i.e. after logging out or closing the browser window. Some cookies allow the User's terminal device to be recognized when the Services are visited again. Such cookies are not automatically deleted and remain stored on the terminal device. In the case of mobile devices, a mechanism for accepting cookies has been applied in the same way as for stationary devices, enabling information related to the User to be remembered.
The User may disable the acceptance of cookies in their browser at any time; however, such a change may result in difficulties in using the services provided through the Service. Stored cookies may also be deleted by the User by using the appropriate functions of the web browser, programs designed for this purpose, or tools available within the operating system used by the User.
Failure to change the settings of the browser used with regard to the management of cookies will result in cookies being automatically placed on the User's terminal device. Failure by the User to change the browser settings to disable the acceptance of cookies and continued use of the Service constitutes the User's consent to the use of cookies on the terms described in this Privacy Policy.
For security reasons, it is recommended to use the latest available versions of web browsers.

§7 CHANGES TO THE PRIVACY POLICY

The Privacy Policy is reviewed on an ongoing basis and updated when necessary.