PRIVACY POLICY OF KINDERY.PL

This is our privacy policy, which explains how we collect, use, and disclose information that we gather when you use kindery.eu.

We strive to protect your data and privacy.

Below we present the principles under which your personal data is processed.

Definitions

Privacy Policy – this document, which defines the purpose and scope of personal data processing, how it is used, and the rights of the individuals to whom the data pertains.

Service/Portal – the website available at kindery.eu, which is a collection of educational materials and personal opinions of the Portal’s editors on education and child-rearing, through which the User can browse blog post content, subscribe to the newsletter, or contact the author.

Administrator – the entity managing and operating the Service, whose owner is an individual: Anna Kubczak.

User – an individual whose data is being processed, providing data while using the Service, subscribing to the newsletter, contacting via the contact form, or leaving a comment.

  • an adult individual with access to the services offered by the Portal and accepting all provisions of this Regulation and Privacy Policy,
  • a minor and/or an individual lacking full legal capacity, provided that consent is obtained from a legal guardian and accepted by them for all provisions of this Regulation and Privacy Policy. The Administrator may require a written consent to be presented, under the threat of suspending access to the Portal,
  • employees of an authorized educational institution accepting all provisions of this Regulation and Privacy Policy.

I. Personal Data Administrator

  1. The administrator of your personal data is Sergiusz Simonoff conducting business under the name Sergiusz Simonoff WEBPANDA at ul. Krasnobrodzka 4, 03-214 Warsaw, NIP 5272860529; REGON 380959596.
  2. For matters related to personal data protection and broadly understood privacy, you can contact us at the email address: kontakt@kindery.eu.
  3. The Administrator, in accordance with Article 32(1) of the GDPR, adheres to the principles of personal data protection and applies appropriate technical and organizational measures to prevent accidental or unlawful destruction, loss, modification, unauthorized disclosure, or unauthorized access to personal data processed in connection with the conducted activity.
  4. The data administrator processes personal data, particularly in the form of identification data (first and last name and company name), address data, tax identification number and other registration numbers, contact data (phone number), and identification data of individuals designated for contact by the client.

II. Purpose and Legal Basis for Processing Personal Data

  1. Providing personal data by the client is voluntary, but necessary for the conclusion of a contract with the data administrator.
  2. You provide us with your data when:
    – you create a user account,
    you place an order in the store,
    you edit your profile,
    you subscribe to the newsletter,
    you add a comment or review about a product,
    you contact us.
    Additionally, some information about you may be automatically collected by the tools we use:
    the store and newsletter system collect your IP address,
    the store mechanism collects information about the products you viewed, details of orders placed, including those not completed,
    the newsletter system collects information about your activity regarding the content sent to you in the newsletter, such as message openings, clicking on links, etc.,
    Google Analytics collects a range of information about how you use our store.
  3. The administrator processes personal data for the following purposes:
    – registration and maintenance of the user account – art. 6 sec. 1 lit. b GDPR,
    preparation of a commercial offer in response to the client’s interest, which is a legitimate interest of the data administrator (art. 6 sec. 1 lit. f GDPR);
    conclusion and execution of sales contracts with clients, based on the concluded contract (art. 6 sec. 1 lit. b GDPR);
    provision of services electronically through the online store, based on the concluded contract (art. 6 sec. 1 lit. b GDPR);
    handling the complaint process, based on the obligation of the data administrator under applicable law (art. 6 sec. 1 lit. c GDPR);
    accounting related to issuing and receiving settlement documents, based on tax law, including the Accounting Act of September 29, 1994 and the Goods and Services Tax Act of March 11, 2004 (art. 6 sec. 1 lit. c GDPR);
    data archiving for the potential establishment, pursuit, or defense against claims or the need to demonstrate facts, which is a legitimate interest of the data administrator (art. 6 sec. 1 lit. f GDPR);
    telephone or email contact, particularly in response to inquiries directed to the data administrator, which is a legitimate interest of the data administrator (art. 6 sec. 1 lit. f GDPR);
    sending technical information regarding the operation of the online store and services used by the client, which is a legitimate interest of the data administrator (art. 6 sec. 1 lit. f GDPR);
    analysis, statistics, and optimization – art. 6 sec. 1 lit. f GDPR.

Registration

In order to enable access to selected Products available on the Service, only for registered and logged-in Users. During registration, you need to provide a username, first name, and email address.

User Profile

After registration, it is possible to complete the User profile with additional information, such as interests.

Data collected through the User’s profile will be used for statistical purposes and to personalize the content of the pages.

Newsletter

The purpose of sending the newsletter, as well as related commercial and marketing information electronically. To receive the newsletter, it is necessary to give voluntary consent to subscribe, provide your name, and an active email address in the appropriate form.

Contact Form

To respond to a message or question sent via the contact form.

Comments

When a User leaves a comment, we collect data visible in the commenting form, as well as the IP address of the visitor and the signature of their browser as assistance in detecting spam.
An anonymized string created from your email address (also called a hash) may be sent to the Gravatar service to check if it is being used. The privacy policy of the Gravatar service is available at: https://automattic.com/privacy/. Once the comment is approved, your profile picture is publicly visible in the context of your comment.
Data visible after adding a comment is not subject to the Privacy Policy. It is not possible to secure against their use by third parties.

Media

If you are a registered User and upload images to the site, you should avoid uploading images with location EXIF tags. Visitors to the site can download and read the full location data from the images on the Site.

Automatically

During your visit to the Service, information regarding the visit is automatically collected, such as IP address, domain name, browser type, and operating system, etc. Data about the referring URL or website that redirected the User to the Service, pages viewed in the Service, clicked links, and time spent during the visit to the Service are also collected.

Unannounced Messages

The Administrator reserves the right to send unannounced messages to registered Users and individuals receiving the newsletter.

These messages may concern information related to the activities of the Service. They may also include commercial information from the Service Partners and non-commercial newsletters.

Cookies

Cookies are data in the form of small files, saved and stored on the User’s device while browsing websites.

Cookies stored on the User’s device are sent to the site kindery.eu every time the User returns to the Service. They are used to optimize the process of using the Service. They help identify and track visitors while using the Service, learn their preferences, which allows for improvements to the structure of the Service and its content.

When leaving a comment on the Site, there is an option to save data such as name, email address, and website address in cookies. This way, when leaving another comment, this information will be automatically filled in.

When logging into the Service, a temporary cookie is created to check whether the User’s device accepts cookies. It is deleted after closing the web browser.

Additional cookies are needed during login to store information about the login and selected screen options.

Google Analytics Cookies

The Service uses Google Analytics to analyze User interactions with the Service’s pages. Google Analytics collects demographic data, interest data, and generates statistical data and other information about website usage through cookies. These cookies are stored on the User’s device. We share this information with Google, which will store and use this information on its servers. All obtained information remains the property of the Service and is subject to this Privacy Policy.

The information obtained allows for the improvement of the Service and the expansion of interesting content for Users. It does not allow for the identification of the User in any way. We do not allow the use or sharing of User data, except in cases specified in the agreement, or when required by law.

Google’s privacy policy is available at: https://policies.google.com/privacy

Advertising Cookies

Advertisements displayed on the Service’s pages are based on the use of services from external advertising companies, such as:

Thanks to them, the Service bystredziecko.pl, which the User uses, can remain free.

Our advertisers and advertising providers display targeted ads. They may use their own cookies or other tracking technologies to collect anonymous information while using the Service. Among other things, to determine the number of ad impressions and clicks, as well as preferences based on the pages viewed on the Service and other visited websites. This information allows for the delivery of ads related to goods and services that are most interesting to the User.

By interacting with an ad or clicking on it, the User agrees to the possibility that the advertiser assumes that they meet the criteria used for targeting the ad. The Service does not provide information that would allow for the identification of the User.

Google’s advertising privacy policy is available at: https://policies.google.com/technologies/ads

Blocking Cookies

The User has the right to control the browser settings regarding cookies, limiting their use or completely blocking them. However, this may hinder the use of the Service, so we recommend keeping them enabled.

Embedded content from other sites

Articles published on the Service may contain embedded content from other sites, such as videos, images, games. Each time, this content behaves similarly to how the User would experience it if they visited the specific site directly.

As a result, external sites may use cookies, collecting information about the User through external tracking systems to monitor the User’s interactions with the embedded material.

III. Data recipients. Transfer of data to third countries

  1. The recipients of personal data processed by the data controller may be entities cooperating with the data controller when it is necessary to fulfill the contract concluded with the person to whom the data pertains.
  2. The recipients of personal data processed by the data controller may also be subcontractors – entities whose services the data controller uses in processing data, e.g., accounting offices, law firms, IT service providers (including hosting services).
  3. The data controller may be required to provide personal data based on applicable laws, in particular to provide personal data to authorized authorities or state institutions.
  4. Personal data will not be transferred to third countries. Customer personal data may only be entrusted for processing for the purpose of fulfilling Sales Agreements and electronic service agreements by the Seller, the hosting company, and the accounting service provider for the Seller and the courier company. Personal data collected by the Seller may also be made available to: relevant state authorities upon their request based on applicable laws, or to other persons and entities – in cases provided for by law.
  5. The disclosure of personal data to unauthorized entities according to this Policy may only occur with the prior consent of the Customer whose data is concerned.

The Administrator does not sell collected data about Users to third parties.

IV. Retention period of personal data

  1. The data controller retains personal data for the duration of the contract concluded with the person to whom the data pertains and after its expiration for purposes related to pursuing claims related to the contract, fulfilling obligations arising from applicable laws, but for no longer than the limitation period according to the provisions of the Civil Code.
  2. The data controller retains personal data contained in accounting documents for the period specified by the provisions of the Goods and Services Tax Act and the Accounting Act.
  3. The data controller retains personal data for purposes other than those indicated in paragraphs 1-2 for a period of 3 years, unless consent for data processing has been withdrawn earlier, and data processing cannot be continued on any basis other than the consent of the person to whom the data pertains.

V. Rights of the data subject

1. Every person whose data is processed has the right:

  1. access – obtaining confirmation from the administrator whether their personal data is being processed. If the data about the person is being processed, they are entitled to access it and obtain the following information: the purposes of processing, categories of personal data, information about recipients or categories of recipients to whom the data has been or will be disclosed, the period for which the data will be stored or the criteria for determining that period, the right to request rectification, erasure, or restriction of processing of personal data to which the data subject is entitled, and to object to such processing (Article 15 GDPR);
  2. to receive a copy of the data – obtaining a copy of the data being processed, with the first copy being free of charge, while for subsequent copies the administrator may charge a reasonable fee based on administrative costs (Article 15(3) GDPR);
  3. to rectification – requesting rectification of their personal data that is inaccurate or completion of incomplete data (Article 16 GDPR);
  4. to erasure of data – requesting the erasure of their personal data if the administrator no longer has a legal basis for processing it or if the data is no longer necessary for the purposes of processing (Article 17 GDPR);
  5. to restriction of processing – requesting the restriction of processing of personal data (Article 18 GDPR) when:

– the data subject contests the accuracy of the personal data – for a period enabling the administrator to verify the accuracy of the data,

– the processing is unlawful, and the data subject opposes the erasure of the data, requesting the restriction of its use,

– the administrator no longer needs the data, but it is required by the data subject for the establishment, exercise, or defense of legal claims,

– the data subject has objected to the processing – until it is determined whether the legitimate grounds for the administrator’s processing override those of the data subject’s objection;

  1. to data portability – receiving in a structured, commonly used, machine-readable format the personal data concerning them that they provided to the administrator, and requesting the transfer of that data to another administrator, if the data is processed based on the consent of the data subject or a contract with them and if the data is processed in an automated manner (Article 20 GDPR);
  2. to object– to object to the processing of her personal data for the legitimate purposes of the administrator, for reasons related to her particular situation, including profiling. In such cases, the administrator assesses the existence of important legally justified grounds for processing, which are superior to the interests, rights, and freedoms of the data subjects, or grounds for establishing, pursuing, or defending claims. If, according to the assessment, the interests of the data subject outweigh the interests of the administrator, the administrator will be obliged to cease processing the data for those purposes (Article 21 GDPR).
  1. To exercise the aforementioned rights, the data subject should contact the administrator using the provided contact details and inform them which right and to what extent they wish to exercise.
  2. The data subject has the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office in Warsaw.

Data transmission

User comments may be checked using an automatic spam detection service.

VI. Profiling

Personal data will not be processed in an automated manner, including through profiling.

Final Provisions

The Administrator reserves the right to change the Privacy Policy.

Changes will be published on the Service’s pages, modifying the above provision.

The privacy policy comes into effect on the date of publication of the consolidated text on the Service’s pages.

Users are required to familiarize themselves with the introduced changes and accept them.

In the event of non-acceptance of the new provisions of the Privacy Policy, the User is required to delete their account on the Service.