Privacy policy

PRIVACY POLICY

Data confidentiality is of the utmost importance to IQDENT Sp. z o.o., and we want every Customer to know how we process their data. For this reason, we have prepared this Privacy Policy, which describes how we protect and process personal data provided to us in connection with visiting and using our Online Store at https://iqnails.com.

DEFINITIONS

Online Store – the Service Provider's online store at https://iqnails.com

Service Provider or Iqdent - "Iqdent" spółka z ograniczoną odpowiedzialnością (limited liability company) registered by the District Court for Łódź-Śródmieście in Łódź, 20th Division of the National Court Register under KRS number: 0000584723, NIP: 7252103766, REGON: 362935470, share capital: 5,000.00 PLN, ul. Kilińskiego 228, 93-124 Łódź, Poland, e-mail: sklep@iqdent.pl.

User - any entity visiting the Online Store or using the services available therein.

§ 1. What is personal data?

According to the definition contained in Article 4(1) of the REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, published in the Official Journal of the EU L 2016.119.1 of 4 May 2016 (General Data Protection Regulation – "GDPR"), "personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

§ 2. What are the legal bases for data processing?

The User's personal data are processed for purposes related to the performance of the service that the User has ordered or intends to order. The provided data will be processed on the basis of Article 6(1)(b) and (c) of the GDPR, and in accordance with the General Data Protection Regulation, meaning that such processing is necessary to:

perform a contract to which the User and IQDENT are parties, or
take steps at the request of the User prior to entering into the contract referred to in point (a),
processing is necessary for compliance with a legal obligation to which IQDENT is subject.

The legal basis for processing may also be the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which includes carrying out direct marketing.

§ 3. Who is the Controller of Users' personal data?

The controller of Users' data is IQDENT Sp. z o.o. (Iqdent spółka z ograniczoną odpowiedzialnością) with its registered office in Łódź, ul. Kilińskiego 228, 93-124 Łódź, entered in the Register of Entrepreneurs by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register under KRS number: 0000584723, NIP: 7252103766 and REGON 362935470.

§ 4. Collection of personal data.

1. Unless expressly stated otherwise, data processed by the Service Provider includes:

- first and last name,

- residential address or company registered address,

- correspondence address,

- e-mail address,

- contact phone number,

- NIP, PESEL, REGON (Polish tax and identification numbers),

- delivery address (if different from the residential/company address).

2. Personal data are collected by the Service Provider during:

a. Newsletter sign-ups,

b. creating an account in the Online Store,

c. placing orders,

d. signing up to the SMS database.

3. When signing up for the newsletter, the Service Provider collects personal data such as: e-mail address and contact phone number.

4. When completing the account registration form, the Service Provider collects personal data such as: first name, last name, e-mail address, phone number, and billing address details;

5. When orders are placed by Users who do not have an account in the Online Store, the Service Provider collects personal data such as: first name, last name, e-mail address, phone number, and delivery address details.

5a. When signing up to the SMS database, the Service Provider collects personal data such as: first name, last name, residential address, country of residence, e-mail address, phone number, and – optionally – company name and NIP.

6. Users' data are collected:

automatically - data relating to your visit to the Online Store website are collected automatically, e.g. your IP address, domain name, browser type, operating system type, etc.,
when you contact us - when you contact us via the website, telephone, e-mail, etc., you provide us with your personal data, e.g. name, last name, e-mail address, etc.

§ 5. Where is Users' data stored?

We store the personal data we hold within the European Economic Area (hereinafter "EEA"). Every operation involving the transfer of personal data is carried out in accordance with applicable law. Occasionally, we will transfer some Users' personal data to Third Countries, i.e. countries located outside the European Economic Area.

§ 6. Who has access to Users' data? To whom do we entrust it?

1. Users' data are accessible within IQDENT and may also be shared with external entities supporting IQDENT or providing services that support its operations, including IT, accounting, legal, courier, postal, product marketing, or audit services. Data shared with external entities is used solely and exclusively for the purpose of providing our services to Users.

2. With the User's consent, their personal data may be shared with entities affiliated with us and our business partners for the purpose of direct marketing of those entities' products and services.

3. In the event of an inspection by the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych), Users' data may be made available to Office employees in accordance with the Personal Data Protection Act (ustawa o ochronie danych osobowych).

4. In the event of a breach of our service Terms and Conditions, a violation of the law, or when required by legal provisions, we may share Users' data with law enforcement authorities.

5. When we list individual categories of recipients, these are the following entities:

· Transport service providers / couriers:

o InPost S.A, ul. Pana Tadeusza 4, 30-727 Kraków;

o DPD Polska Sp. z o.o., ul. Mineralna 5, 02-274 Warszawa;

o Centrala Poczty Polskiej S.A., ul. Rodziny Hiszpańskich 8, 00-940 Warszawa.

· IT service provider: IT TATA DOMINIK BARTŁOMIEJCZYK, ul. Andrzeja Sacharowa 10/12/95, 92-541 Łódź.

· Hosting provider: cyber_Folks S.A. with its registered office in Poznań, ul. Wierzbięcice 1B, 61-569 Poznań.

· E-mail service provider: DHT-It Jacek Żurkiewicz, ul. Gdańska 126/128, 90-520 Łódź.

· Invoicing software provider: InsERT S.A., ul. Jerzmanowska 2, 54-519 Wrocław.

· Legal / advisory / debt collection service provider – these service providers are engaged on an individual basis as the need arises on each occasion.

· Electronic payment service providers:

o PayPal S.à r.l. et Cie, S.C.A., Luxembourg;

o Dotpay S.A., ul. Wielicka 72, 30-552 Kraków,

o InPost S.A., ul. Pana Tadeusza 4, 30-727 Kraków

o PayU S.A. ul. Grunwaldzka 186, 60-166 Poznań

· E-commerce platform: The Store uses the PrestaShop e-commerce platform to handle orders, process customer personal data, and manage the database. PrestaShop processes personal data for the purpose of fulfilling orders, ensuring a smooth purchasing process, and for marketing and customer communication purposes. Personal data are secured in accordance with applicable law and the privacy policy available at https://prestashop.com/privacy-policy/

§ 7. For what purposes do we process Users' data?

1. Data are processed in connection with entering into contracts with Users (in particular sales contracts) and are used during their term, among other things, for the following purposes:

- fulfilment of legal obligations, including storing data relating to electronic/postal correspondence for the purposes of future claims or proceedings by authorised bodies,

- placing an order, concluding and performing a contract between IQDENT and the User, including ensuring a proper quality of service,

- pursuing and defending against claims,

- other purposes arising from legal provisions.

2. Personal data collected when signing up for the Newsletter are collected for the purpose of carrying out marketing activities towards Users, including for analytical and statistical purposes.

3. Personal data collected when creating an account in the Online Store are processed for the purpose of:

concluding and performing an agreement for the provision of electronic services, i.e. enabling the User to use our website;
concluding and performing a (distance) sales contract, the subject of which are goods available in our Online Store;
handling complaints that may be submitted in connection with the purchase of goods in the Online Store;
pursuing or defending against claims arising from the conclusion of the above-mentioned contracts;
conducting marketing activities for products and services, including for analytical and statistical purposes;
contacting Users, including in connection with permitted marketing activities, via available communication channels, in particular and with the Users' consent – by e-mail and telephone;

4. Personal data collected when placing orders are processed for the purpose of:

concluding and performing an agreement for the provision of electronic services, i.e. enabling the use of the Online Store;
concluding and performing a (distance) sales contract, the subject of which are goods available in our Online Store;
handling complaints that may be submitted in connection with the purchase of goods in the Online Store;
pursuing or defending against claims arising from the conclusion of the above-mentioned contracts;
conducting marketing activities for products and services, including for analytical and statistical purposes;
contacting Users, including in connection with permitted marketing activities, via available communication channels, in particular and with the Users' consent, by e-mail and telephone.

§ 8. How do we use Users' data?

1. If you have signed up for our Newsletter or otherwise consented to receiving it, we will use your data to send it. You will be asked whether you wish to receive the Newsletter during registration. Automatically collected data may be used to analyse User behaviour on our website, collect demographic data about our Users, or to personalise the content of our web pages. These data are collected automatically for every User. Above all, however, personal data are collected for the purpose of performing the services you order or intend to order from us.

2. Providing us with your personal data is entirely voluntary; however, if you do not do so, you will not be able to use or order our services, or receive the Newsletter from IQDENT.

3. We will process your data until the completion of the services provided to you, and after such completion for a period that allows IQDENT to pursue or defend against claims arising from the use of our services, until the statute of limitations on such claims expires, and until the fulfilment of obligations arising from tax and accounting regulations or other generally applicable provisions of law.

§ 9. What rights do you have?

1. The User has the right to access their data and the right to request its rectification, erasure, or restriction of its processing.

Right of access to data:

At any time, you have the right to request information about which of your personal data we hold. To do so, please contact IQDENT.

Right to rectification of data:

You have the right to request the correction of your personal data if it is incorrect, as well as to have incomplete data completed, by contacting IQDENT.

Right to erasure of data:

You have the right at any time to have any data processed by IQDENT deleted, except in the following situations:

- you have an ongoing matter with IQDENT,

- you have an open order that has not yet been fulfilled or has been only partially fulfilled,

- you have an outstanding debt with IQDENT, regardless of the payment method,

- your debt has been sold to a third-party company within the last three years,

- you have made purchases of any services, in which case we will retain your personal data relating to the transaction for accounting purposes.

Right to restriction:

You have the right to request that IQDENT restrict the processing of your personal data under the following conditions:

- if you object to the processing of data based on IQDENT's legitimate interest, IQDENT will restrict any processing of such data after verifying whether such a legitimate interest exists,

- if you report that your personal data is incorrect, IQDENT must restrict any processing of that data until its accuracy has been verified,

- if the processing of data is unlawful, you may object to the deletion of personal data and instead request the restriction of the use of your personal data,

- if IQDENT no longer needs your personal data, but it is required for the establishment, exercise, or defence of legal claims.

2. To the extent that the basis for processing personal data is the performance of a contract or the User's consent – the User has the right to data portability, i.e. to transfer the personal data they have provided to another controller. When IQDENT processes your personal data in an automated manner, on the basis of your consent or a concluded contract, you have the right to receive a copy of your data in a machine-readable format. This applies exclusively to personal data that has been provided to us.

3. To the extent that the basis for processing data is the legitimate interest of the Controller – the User has the right at any time to object to the processing of their personal data. You have the right to object to the processing of your data. IQDENT will cease processing your personal data, unless we are able to find a legitimate justification for the processing that overrides your interests or rights, or due to legal claims.

4. In order to exercise the rights referred to in paragraphs 1–3, the User should contact the Controller at sklep@iqdent.pl or by post to the Controller's registered office address indicated above.

§ 10. Right to lodge a complaint with a supervisory authority

If you believe that IQDENT is processing your personal data incorrectly, you may contact us. You also have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

§ 11. How do we secure Users' personal data?

Communication between your computer and our server, when we collect your personal data, is unencrypted. However, our databases are secured against access by third parties.

§ 12. How can you exercise your rights?

We have designated employees who will respond to questions on the above matters and will be responsible for ensuring compliance with GDPR provisions, providing recommendations on data protection impact assessments, and cooperating with the supervisory authority. To contact them, please write to sklep@iqdent.pl

§ 13. Updates to our Privacy Policy:

In the future, it may be necessary to update this Privacy Policy. The latest version will always be available on our website. We will inform you of any changes to the content of the Privacy Policy, for example regarding the purposes for which we use your personal data or your rights.

§ 14. Cookies

Cookies are digital data, in particular text files, which are stored on the end device of the user of services, including web portals, websites, and applications. Cookies contain the name of the domain of the website from which they originate, the duration of their storage on the end device, and a unique identifier. Cookies store information that is often essential for the correct functioning of a website. A unique number that identifies the user's device may be stored in cookies, but the identity of the user cannot be established on its basis alone.

On the website https://www.iqnails.com/ we use our own cookies: session cookies and persistent cookies. Our own cookies are used for the purposes of: maintaining the User's shopping basket and session; remembering the language version and delivery country; remembering the referral code (the source from which a given customer came to us); remembering data entered in the order form – delivery and payment method, delivery address and billing address; remembering the User's preferences, e.g. sorting settings, or whether to show certain messages again, etc. We also use third-party cookies, originating from entities we collaborate with, such as Google, Facebook, Instagram. Due to the fact that the operation of some cookies originating from third-party partners may differ from what is described in this policy, and we cannot control cookies placed by third-party websites, you should familiarise yourself with the information on these cookies available on our partners' websites, e.g. Google: https://www.google.pl/intl/pl/policies/technologies/cookies/ and Google Analytics Terms of Use Facebook: http://www.facebook.com/help/cookies [p1]; Instagram Cookie Information https://help.instagram.com/1896641480634370?ref=ig

Based on the purpose they serve, we use the following types of cookies and similar technologies:

essential for the operation of services and applications – enabling the use of our services, e.g. authentication cookies used for services requiring authentication;
security cookies, e.g. used to detect authentication fraud;
performance cookies – enabling the collection of information on how websites and applications are used;
functional cookies – enabling the "remembering" of settings selected by the user and personalisation of the user interface, e.g. in terms of the selected language or region from which the user comes, font size, appearance of the website and application, etc.;
advertising cookies – enabling the delivery to users of advertising content better tailored to their interests;
statistical cookies – used to count statistics relating to websites and applications.

We also use tracking pixels (also known as web bugs), which serve a similar function to cookies but are invisible to the user. Tracking pixels are used by us to measure User behaviour on the website, to send the newsletter, and to match offers in remarketing advertisements. The data are anonymous and are not linked to personal data on the User's end device or any database. To disable web bugs when using our service, tools such as webwasher, bugnosys, or AdBlock may be used. To disable web bugs in the newsletter, the e-mail client settings must be changed so that it does not display messages in HTML format. Web bugs also do not function when messages are read in offline mode.

In many cases, web browsing software (a web browser) allows the storage of information in the form of cookies and similar technologies on the user's end device by default. The user may, however, change these settings at any time. Failure to make changes means that the aforementioned information may be placed and stored on the user's end device, meaning that we will store information on the user's end device and access that information. Using the web browser the user is using, it is possible, for example, to independently manage cookies. The most popular browsers offer, among other things, the possibility of:

accepting cookie support, which allows the user to make full use of the options offered by websites;
managing cookies at the level of individual websites selected by the user;
defining settings for different types of cookies, for example accepting persistent cookies as session cookies, etc.;
blocking or deleting cookies.

Comprehensive information is available in the software (web browser) settings. Details for users of specific web browsers, including:

Please note that limiting or disabling the use of cookies and similar technologies may affect some functionalities available in our services.

§ 15. Third-Party Cookies

1. The use of third-party cookies is subject to the privacy and cookie policy applied by that entity.

2. We use cookies administered by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States, within the following services:

· Google Ads – these allow the conduct and quality assessment of advertising campaigns carried out using the Google Ads service,

· Google Analytics – these allow the quality assessment of advertising campaigns carried out using the Google Ads service, as well as the study of user behaviour and traffic, and the compilation of traffic statistics.

The data collected by Google Inc. are anonymous and aggregated. In particular, they do not contain identifying characteristics (understood as personal data) of Store users. By using the listed services, we collect data such as the sources through which users visiting the Store were acquired, as well as their behaviour on the Store website, information about the devices and browsers they use, IP address, domain, demographic data (age, gender), interests, and geographic data.

The use of third-party cookies is subject to the privacy and cookie policy applied by those entities. The current GOOGLE Inc. rules in this regard can be found here: https://policies.google.com/terms?hl=pl&fg=1; https://policies.google.com/privacy?hl=pl&fg=1

3. We also use the following data collection tools, which have their own privacy policies, to which we provide links so that you can read their content:

a) Meta - https://www.facebook.com/privacy/policy/?locale=pl_PL

b) Microsoft (Bing) - https://www.microsoft.com/pl-pl/privacy/privacystatement;

c) Pinterest - https://policy.pinterest.com/pl/privacy-policy; https://policy.pinterest.com/pl/cookies

d) TikTok - https://www.tiktok.com/legal/page/eea/privacy-policy/pl https://www.tiktok.com/legal/page/global/tiktok-website-cookies-policy/en

e) SalesManago - https://www.salesmanago.pl/info/obowiazek-informacyjny.htm; https://www.salesmanago.pl/info/cookies-information.htm

f) PrestaShop - https://prestashop.com/privacy-policy/

g) Baselinker - https://baselinker.com/pl-PL/polityka/; https://baselinker.com/pl-PL/blog/polityka-plikow-cookies/

h) SMSAPI - https://www.smsapi.pl/polityka-prywatnosci.

Additional information about cookies and other technologies can be found at wszystkoociasteczkach.pl.

§ 16. Advertisements

If ad personalisation is enabled, Google will use your data to tailor advertisements to your needs. For example, an online mountain bike shop may use Google advertising services. After visiting that website, you may see an advertisement for mountain bikes on other websites that display ads served by Google.

If ad personalisation is disabled, Google will not collect or use information about you to create an advertising profile or personalise the advertisements displayed. Advertisements will still be shown, but will not be tailored to your needs. They may be related to the topic of the website or application being browsed, current search terms, or your general location, but not to your interests or your search or browsing history. Your data may still be used for other purposes listed above, for example to measure the effectiveness of advertisements and to protect against fraud or abuse.

When using a website or application that uses Google services, you may see a question about whether you want to see personalised advertisements displayed by various companies, including Google. Regardless of the option chosen, Google will not personalise advertisements if you have the ad personalisation setting disabled, or if the personalised ad display feature does not apply to your account.

You can find out more here - How Google uses data from sites and apps that use our services – Privacy & Terms – Google