§1 GENERAL PROVISIONS
This document defines the Privacy Policy of the online store “Couple Away” operating at www.coupleaway.com, managed by Justyna Małota – Ślęczka conducting business under the name Couple Away Justyna Malota – Sleczka, ul. Jasińskiego 34/3B, 30-815 Kraków, NIP: 6793068992 REGON: 386485930. This policy specifically covers regulations regarding the protection of personal data and the security of other data entered into the Service by the User. The Privacy Policy is an integral attachment to the Terms and Conditions of the online service “Couple Away.”
§2 DEFINITIONS
The terms used in this document mean:
Personal Data Administrator (also called the Administrator) – Justyna Malota – Sleczka conducting business under the name Couple Away Justyna Małota – Ślęczka ul. Jasińskiego 34/3B 30-815 Kraków, NIP: 6793068992 REGON: 386485930. Service – the website at www.coupleaway.com and all its subpages. User – a natural person who uses the Service and provides their personal data within it. Personal Data – information about an identified or identifiable natural person through one or more specific factors determining physical, physiological, genetic, mental, economic, cultural, or social identity, including an image, voice recording, contact details, location data, information contained in correspondence, information collected through recording equipment or similar technology, GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, Terms and Conditions – the regulations of the online service “Couple Away” operating at www.coupleaway.com.
§3 PROTECTION OF PERSONAL DATA
The Administrator is the personal data administrator within the meaning of the GDPR. The Administrator collects and processes personal data in accordance with applicable law, in particular, the GDPR, and in accordance with the principles set out in these regulations. The Administrator informs about the processing of data at the time of collection. The Administrator processes data within the scope, time, and purposes specified each time in the content provided under forms used to collect personal data from the User. The Administrator only discloses personal data to trusted subcontractors of the Administrator, i.e., couriers, suppliers responsible for the operation of information systems, entities such as banks and payment operators, entities providing accounting and legal services, marketing agencies (for marketing services), entities providing other IT and programming services. The Administrator has the right to transfer selected User’s personal data to the competent authorities and third parties if required by applicable law and when these entities request such information based on the appropriate legal basis. The Administrator ensures the security and confidentiality of processed personal data and provides access to information about data processing to the User. If, despite the security measures taken, there is a breach of the protection of personal data (e.g., a “data leak” or loss) that could pose a high risk of violating the rights or freedoms of the User, the Administrator will inform the User in accordance with the regulations. The User can contact the data administrator. The contact details are as follows: Mailing address: Couple Away Justyna Małota – Ślęczka ul. Jasinskiego 34/3B 30-815 Krakow, Poland, Email address: info@coupleaway.com
§4 SECURITY OF PERSONAL DATA
The Administrator uses all available technical and organizational means to ensure the security of the User’s personal data and protect them from accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, or access. User’s personal data are stored and processed on servers with a high level of security, with the necessary security measures, meeting the requirements of Polish law. The entrusted data are stored on top-quality hardware and servers in appropriately secured information storage centers, accessible only to authorized persons. The Administrator performs activities related to the processing of personal data with respect to all legal and technical requirements imposed on them by data protection regulations. The Administrator regularly analyzes the risks associated with the processing of personal data and ensures that only authorized persons have access to the data and only to the extent necessary for the performance of their duties. The Administrator takes all necessary actions to ensure that their subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process personal data on behalf of the Administrator. The Administrator undertakes to keep backup copies containing the User’s personal data.
§5 USER’S RIGHTS
In the event of a change in personal data, the User should update them by sending a relevant message to the Administrator. The User is entitled to the following rights: the right to information about the processing of personal data, the right to obtain a copy of the personal data processed by the Administrator, the right to rectify personal data, the right to erase personal data (on this basis, it is possible to request the deletion of data whose processing is no longer necessary