Privacy Policy

I. General information

This document contains all information regarding our processing of your personal data that you provide to us via the websites we manage (“Privacy Policy”).

The controller of your personal data is Mydlane Prezenty

Company details

For any matters related to the processing of your personal data, you can contact us:

- by email at: infoline@factorymolds.com.

We will try to respond as promptly as possible, no later than within 14 days, unless a shorter period is required by law.

We apply the technical measures required by current personal data protection regulations to prevent unauthorized persons from acquiring and modifying personal data transmitted to us electronically.

Personal data means any information about an identified or identifiable natural person. A natural person is identified in particular on the basis of an identifier such as a first and last name, identification number, location data, online identifier, or one or more specific factors determining their physical, physiological, genetic, mental, economic, cultural, or social identity.

II. For what purpose do we process your data and on what legal basis?

Your data will be processed primarily for the purpose of performing the contract we conclude between us. When you purchase a product from us in the online store, your personal data will be processed by our sales system in order to complete the transaction, deliver the goods you have purchased, and issue an invoice or receipt. If you contact us with questions regarding your order, your personal data will also be used to provide you with a response.

If you create an account in our online store available at https://factorymolds.com/en/, your personal data will also be processed for the purposes of maintaining your account in the Store and enabling you to log in to the Store and place orders.

In the case of processing your data as mentioned above, we do not need your separate consent for such processing. We process it under the statutory authorization to process personal data to the extent necessary to perform the contract.

Important! Providing your personal data in the order form is always voluntary. However, if you do not provide the personal data marked as required, you will not be able to purchase the service or goods.

If you have purchased our goods or services but have not made full payment (if the system allows you to use the goods or service before making full payment), we may also process your data for the purpose of pursuing claims. In this respect, we also do not need your separate consent, because in this way we pursue our legitimate interest. Also without your consent, we may process your personal data to the necessary extent for statistical purposes and for business analysis of our activity.

In addition, from time to time we may obtain your consent to process personal data for other purposes as well. For example, you may grant us consent to process your personal data for the marketing of services and goods offered by us or by our business partners cooperating with us, including to receive commercial information at the email address or phone number you have provided (the so-called “Marketing Consent”). In such a case, we process your personal data on the basis of your consent, which you may withdraw at any time, and granting it is always voluntary. Our marketing activities may consist m.in. of:

1. informing you about our new products or services, promotions, loyalty programs and partner programs used by us, and sending you invitations to participate in special programs;

2. sending or providing you with catalogs, newsletters, promotional materials, and other similar materials.

Your Marketing Consent will be recorded by us so that we can demonstrate that it was granted to us.

If Marketing Consent is granted, you will receive commercial information regarding goods and services offered by us, and, if you agree to it, also by our business partners.

You may also consent to the processing of your personal data for other purposes, which we will describe to you in detail before you give your consent.

Whenever we process your personal data on the basis of consent you have given, you may withdraw this consent at any time. After withdrawal of consent, we will cease processing your personal data for the purpose for which you previously gave consent. Withdrawal of consent does not affect the processing carried out before the withdrawal of consent.

III. Recipients or categories of recipients of your personal data

The processing of your personal data may be entrusted to entities cooperating with us. Such entrustment of processing always takes place on the basis of a written agreement. Entrusting the processing of data means that third parties will gain access to your data, but solely for the purpose of processing it on our behalf and within the scope of the purposes we have specified.

For the purpose of performing the contracts under which you purchase our goods or services, your personal data may be entrusted in particular to the following entities or categories of entities:

1. entities providing postal and courier services,

2. entities providing payment processing services,

3. entities providing hosting services for us,

4. entities providing accounting and legal services for us,

5. entities providing IT services for us.

If you have given consent to the processing of your personal data for the purposes of marketing goods and services and for sending you commercial information, your personal data may also be entrusted to entities providing marketing, advertising, and promotional services for us. Your data will not be used by these entities for the marketing, sale, or promotion of their own goods or services.

Your personal data will not be transferred to third countries without your separate consent.

IV. Period for storing your personal data

Your personal data will be stored for the period necessary to complete and settle the orders placed. During the Controller’s period of operation, your personal data will also be stored for the purposes of fulfilling the obligations incumbent on us (e.g., accounting) or for the fulfillment of our legitimate interests (statistical purposes and business analysis).

Where the processing of your data is based on your consent, your personal data will be processed until you submit a statement withdrawing consent to the processing of personal data for the purpose to which the consent related. Despite the withdrawal of consent, we may still process your personal data when (and only to the extent) we are authorized to do so by generally applicable law (e.g., to establish, pursue, or defend claims).

V. Rights regarding the processing of your personal data

In connection with our processing of your personal data, you have numerous rights. These include:

A. Right to request access to personal data

At any time, you may request from us information about which of your personal data we process and for what purpose we process that personal data. You may also contact us to request information about the entities to which we have entrusted the processing of your personal data. If the information provided in the section “Period for storing your personal data” is insufficient, at your request we will also provide you with more detailed information in this regard. You may also request from us any information related to your right to lodge a complaint with the supervisory authority in personal data protection matters, as well as any other rights.

Importantly, at any time you may request that we issue you a copy of your personal data processed by us. The first copy of such data is always free of charge. If you request a second copy, we may charge a symbolic fee to cover the administrative costs associated with issuing it. If your request for a copy of personal data is sent to us electronically and does not include a request to issue the copy in another form, you will also receive a copy of your personal data electronically. If issuing a copy of your personal data cannot take place without disclosing the personal data of other persons, we will inform you that it is not possible to issue the requested copy.

B. Right to request rectification of personal data

At any time, you may contact us with a request to rectify your personal data if it is incorrect. You may also at any time request the completion of your incomplete personal data.

C. Right to request erasure of personal data

At any time, you may request that we erase your personal data when:

1. this data is no longer necessary for the purposes for which it was collected or otherwise processed,

2. you have objected to our processing of your personal data, and on our side there is no compelling interest in its processing that would override your right,

3. when you find that we process your personal data unlawfully and this is confirmed,

4. the personal data must be erased in order to comply with a legal obligation provided for under European Union law or Polish law,

5. you withdraw consent to the processing of your personal data, and the processing was carried out precisely on the basis of that consent.

In all these cases, your personal data will be erased by us without undue delay.

Nevertheless, your request will not be fulfilled in the following cases:

1. when further processing of your personal data is necessary for us to comply with a legal obligation incumbent on us under European Union law or Polish law,

2. when further processing of your personal data proves necessary to establish, pursue, or defend claims.

We inform you that one of the technical measures we use to protect personal data is the creation of backups of our IT systems. If we are obliged to erase your personal data, we will take all reasonable actions to ensure that your data is not accessible also in the event of a necessary system restore from a backup.

D. Right to request restriction of the processing of personal data

In the cases described in this section, you may request that we restrict the processing of your personal data. Restriction of the processing of personal data means such marking of your data in our systems that will allow limiting its processing in the future. You may request restriction of processing of your data when:

1. you contest the accuracy of your data – then we will restrict its processing for the period that allows us to verify the accuracy of this data,

2. when we find that the processing of your data is unlawful, yet you oppose its erasure from our systems, but you want its processing to be restricted,

3. we find that we no longer need to process your personal data, yet you want it to be retained in our systems because you consider it necessary for you to establish, pursue, or defend your claims,

4. you lodge an objection with us to our processing of your personal data for purposes arising from our legitimate interests – then we will restrict the processing of your personal data until it is determined whether our interest in processing your data is not overriding the grounds of your request.

If in the above cases you request restriction of the processing of your personal data, the only operation we will perform on this data will be its storage. Other forms of processing will be possible if you consent to it or if such processing is necessary to establish, pursue, or defend our claims, as well as when it is necessary to protect the rights of another natural or legal person.

Before lifting the restriction on the processing of your personal data, we will always inform you of this.

E. Right to object to the processing of personal data

When your personal data is processed by us for purposes arising from our legitimate interests (e.g., statistical purposes or business analysis), you will be able to object to its processing. In such a case, we will cease processing it unless we demonstrate grounds for its further processing to establish, pursue, or defend claims, or if we demonstrate that our interest in processing your data overrides your entitlement.

If you have given us Marketing Consent, at any time you may demand that we stop processing your personal data for this purpose. In such a case, we will promptly cease processing it for this very purpose.

F. Right to request data portability

If we process your personal data in an automated manner, on the basis of your consent or in connection with the performance of the contract concluded between us, you will be able to request from us to receive your data in a structured form, in a commonly used electronic file format (e.g., Excel) so that you can also use this data with other entities. You will also be able to request that we transmit such a file to another controller of personal data indicated by you.

G. Right to lodge a complaint with the supervisory authority

When you consider that our processing of your personal data violates your rights or is otherwise contrary to Polish law or European Union law, you have the right to lodge a complaint with the Inspector General for the Protection of Personal Data.

VI. Legal bases

This Privacy Policy is provided in order to fulfill the obligations arising from:

1. Article 24 of the Act of 29 August 1997 on the Protection of Personal Data (t.j. of 13 June 2016, Journal of Laws of 2016, item 922, as amended),

2. Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC,

3. Article 20(1) of the Act of 18 July 2002 on the Provision of Services by Electronic Means (t.j. Journal of Laws 2017, item 1219, as amended),

4. Article 173 of the Act of 16 July 2004 – Telecommunications Law (t.j. Journal of Laws 2017, item 1907, as amended).