Privacy Policy

§1

General provisions

This Privacy Policy defines the method of collecting, processing and storing personal data of Users of the Online Store available in the outbag.store domain.

The controller of personal data is the operator of the Out Bag Online Store (hereinafter referred to as the Online Store) PBS Hydrowiert NIP: 618 144 88 12 REGON: 250655078 Góra 10/2 88-101 Inowrocław.

· Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

· The data collected by the Administrator will be:

processed in accordance with the law,

collected for specified, lawful purposes and not subject to further processing incompatible with those purposes,

· factually correct and adequate in relation to the purposes for which they are processed,

· stored no longer than necessary to achieve the purpose of processing.

· The administrator has appointed a personal data protection officer who can be contacted at the following address: info@outbag.store

§2

Scope of data collected

· The Administrator processes personal data necessary to provide and develop services available in the Online Store.

· The scope of the collected data is adequate to the purposes for which they are collected (indicated in §3 point 1 of the Policy). In particular, this is: name and surname, e-mail address, correspondence address, telephone number.

§3

Purposes and legal basis of data processing

· Personal data of Users and Partners may be processed for the following purposes:

· account registration and User identity verification – based on acceptance of the Terms and Conditions (Article 6, paragraph 1, letter b of the GDPR),

taking action at the User's request before concluding the contract and implementing the concluded sales contract, including handling payments and delivering goods (Article 6, paragraph 1, letter b of the GDPR),

· making purchases online without registering a User account, including making online payments and delivering goods (Article 6, paragraph 1, letter b of the GDPR)

fulfilling the Controller’s legal obligations related to accounting and taxes and for archival purposes (Article 6, paragraph 1, letter c of the GDPR),

sending marketing content in the form of a newsletter, based on the User's voluntary consent (Article 6, paragraph 1, letter a of the GDPR),

communication with the User via the contact form available on the website, based on the legally justified interest of the administrator (Article 6, paragraph 1, letter f of the GDPR),

pursuing or defending against claims, which constitutes a legally justified interest of the administrator (Article 6 (1) (f) of the GDPR).

· In each of the above-mentioned cases (§3 section 1), the provision of data is voluntary, but necessary to conclude a contract or use other functionalities available within the Online Store.

§4

The period of personal data processing

Personal data will be processed for the period in which the person remains an active User of the Online Store, and after that time for the period necessary to comply with the law, pursue or defend against potential claims, but no longer than 6 years from the date of termination of the contract for the provision of electronic services (in the case of Users with a registered account on the website) or the last purchase (in the case of Users making purchases without registration).

· Data processed for the purposes of sending marketing information will be processed until the consent granted is withdrawn, provided that the withdrawal of this consent does not affect the lawfulness of the data processing carried out before such withdrawal.

§5

Data recipients

Personal data may be disclosed:

· Partner Administrator,

· online payment operators,

· entities providing courier and postal services,

· law firms,

· subcontractors, in particular entities supplying and servicing selected IT systems and solutions.

· Personal data will not be transferred outside the European Economic Area or to international organisations.

§6

Data Subject Rights

· The website user has the right in particular to:

· obtain access to the content of your personal data processed by the Administrator,

· rectification of data,

· deletion of data,

· restrictions on data processing,

· data transfer,

· object to processing based on the legally justified interest of the administrator,

withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of that consent before its withdrawal,

· The data subject has the right to lodge a complaint with the President of the Personal Data Protection Office if he or she considers that the processing violates his or her rights or freedoms, in particular those resulting from the GDPR.

· In case of doubts as to how to exercise his/her rights or the desire to submit a request with the request referred to in §6 section 1, the data subject may at any time contact the Controller at the following address: info@outbag.store

§7

Final provisions

· In the process of processing personal data, there is no automated decision-making, including profiling.

· The Administrator reserves the right to introduce changes to this Privacy Policy, at the same time ensuring that the rights of persons arising from this document will not be limited without their consent.