Privacy Policy

BOCA-CABO ONLINE STORE PRIVACY AND COOKIES POLICY

1. GENERAL PROVISIONS 

1. This privacy and cookie policy ("Privacy policy") defines the rules for the processing and protection of personal data of persons staying on the Store's website i.e. www.boca-cabo.com or using the Store ("Users") and the use of cookies on the website store. 

1. Capitalized terms used in this Privacy Policy, unless otherwise defined in this Privacy Policy, shall be understood in accordance with their definitions contained in the Terms and Conditions of the Store available at www.boca-cabo.com/regulamin; 

1. The joint administrators of the personal data processed in the Store are: 

1. Karolina Jania conducting business activity under the name of Karolina Jania Boca Cabo Spółka Cywilna with registered office in Krakow (30-347), ul. Wadowicka 7, entered in the Central Register and Information on Economic Activity, Tax no. (NIP): 6812004178, Statistical No. (REGON): 521544811, 

1. Bogumiła Szewczyk conducting business under the name Bogumiła Szewczyk with registered office in Kraków (30-347), ul. Wadowicka 7, entered in the Central Register and Information on Economic Activity, Tax no. (NIP): 6812054058, Statistical No. (REGON): 122532515

acting as partners in the civil partnership Boca Cabo Bogumiła Szewczyk Karolina Jania spółka cywilna with its registered office in Kraków (30-347), ul. Wadowicka 7, Tax no. (NIP): 6793239525, Statistical No. (REGON): 521704344, e-mail: customercare@boca-cabo.com , telephone number: 608-773-777 who is also the owner of the Store (individually "Administrator", collectively "Administrators"). 

1. In the case of the Store's social media profiles, the providers of the respective social media are also joint administrators (together with the Administrators) of the personal data processed on the social media. For detailed rules on the processing of personal data in individual social media, please refer to the pages of the providers of these media. 

1. The Administrators can be contacted from Monday to Friday from 08:00 to 16:00 at the following e-mail address customercare@boca-cabo.com or by telephone at 608-773-777 It is also possible to contact us by post at 30-347 Kraków ul. Wadowicka 7.

1. Users' personal data shall be processed by the Administrators in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation, "GDPR") and other applicable data protection legislation, in particular the Act of 10 May 2018 on the Protection of Personal Data. The Administrators jointly determine the purposes and methods of personal data processing.

1. OBJECTIVES, BACKGROUND AND SCOPE OF THE DATA TO BE PROVIDED

1. Users' personal data are processed by the Administrators for the following purposes and on the following grounds:

1. for the purpose of completing the order and performing the Sales Contract - pursuant to Article 6(1)(b) of the GDPR, the personal data indicated in the order form, i.e. name and surname, address data, e-mail address, telephone number, and in the case of entrepreneurs, also the entrepreneur's company name and NIP (Tax Identification Number) are processed; 

1. in order to handle "abandoned shopping cart" - on the basis of Article 6(1)(b) and (f) of the GDPR, personal data indicated in the order form is processed, e.g. name and surname, e-mail address; 

1. in order to operate the Customer Account - on the basis of Article 6(1)(b) of the GDPR, the personal data indicated in the registration form, i.e. name and surname, address data, e-mail address, telephone number, are processed; 

1. in order to handle the contact form - on the basis of Article 6(1)(b) of the GDPR, the personal data indicated in the contact form, i.e. name, address data, e-mail address, are processed;

1. in order to enable contact via chat - on the basis of Article 6(1)(f) of the GDPR, the personal data provided by the User in the correspondence and his/her IP address are processed; 

1. for the purpose of processing a return or complaint - on the basis of Article 6(1)(b) and (c) of the GDPR, the personal data indicated when submitting a declaration of withdrawal from the Sales Contract or making a complaint is processed;

1. in order to operate the Administrators' social media profiles - on the basis of Article 6(1)(f) of the GDPR, the data provided by the User in his/her profile in the respective medium or correspondence is processed; 

1. for statistical and analytical purposes connected with researching Internet traffic on the Store's website, for assessing interest in the content posted on the Store and for improving it and the services provided by the Administrators - on the basis of Article 6(1)(f) of the GDPR;

1. for promotional purposes - on the basis of Article 6(1)(b) and (c) of the GDPR - on the basis of Article 6(1)(f) of the GDPR; the extent of data processed for promotional purposes may vary depending on the type of promotional action; 

1. for marketing purposes - on the basis of Article 6(1)(a) or (f) of the GDPR; 

1. for the investigation and defence of claims - on the basis of Article 6(1)(f) of the GDPR; the extent of the data processed for the investigation and defence of claims may vary depending on what the claim concerns; 

1. in order to comply with legal obligations incumbent on the Administrators - on the basis of Article 6(1)(c) of the GDPR; the extent of data processed in order to comply with legal obligations incumbent on the Administrators varies depending on what the obligation concerns. 

1. When using the Store, additional information may be collected, e.g. navigation data, data concerning IP address, browser type, operating system, age, gender, session time, etc. In principle, these do not constitute personal data as they do not allow the User to be identified. In some cases, however, when they become associated with a User, they may be considered personal data. In this case, the provisions of this Privacy Policy, among others, the rights of Users, recipients of data or the transfer of data to third countries outside the EEA shall apply accordingly. 

1. Providing personal data is voluntary, however, it is necessary in order to use some of the Store's functionalities such as placing an order and concluding a sales contract, setting up a Customer Account, using the contact form.

1. Users' personal data are not subject to automated personal data processing, including profiling.

1. PROCESSING PERIOD 

Users' personal data is kept by the Administrators for the time necessary for the performance of the specific services or purposes and until:

1. the expiry of limitation periods for claims related to the contract to which the processing of personal data is connected;

1. the expiry of limitation periods for legal obligations;

1. lodging an effective objection - in relation to personal data processed on the basis of the Administrators' legitimate interests or for marketing purposes;

1. the withdrawal of consent or the achievement of the purpose of the processing - in relation to personal data processed on the basis of consent.

1. DATA RECIPIENTS 

Recipients of the User's personal data are entities cooperating with the Administrators in connection with the operation of the Store, such as: IT service providers, including hosts, software providers used to run the Store, e-mail providers, CRM software providers, providers of marketing, accounting, bookkeeping, electronic payment systems, order processing entities, Customer service providers, courier companies, the Polish Post Office, subcontractors, legal service providers, as well as public administration or judicial authorities. The entities to which the Administrator entrusts the processing of Users' personal data shall guarantee compliance with the obligations imposed by the GDPR.

Users' personal data may be transferred outside the EEA, in which case the Administrators shall ensure an adequate level of data protection in accordance with Commission Decisions finding that the country in question ensures an adequate level of data protection or by applying standard contractual clauses.

1. USERS' RIGHTS

1. The User has the right to request access to personal data from the Administrators, the right to rectify, erase or restrict processing, to object and the right to data portability.
2. As far as data processed on the basis of consent is concerned, the User has the right to withdraw the consent given at any time, without affecting the lawfulness of the processing carried out before the withdrawal of consent.
3. If the User considers that personal data is processed in violation of the applicable legislation, the User has the right to lodge a complaint with the President of the Personal Data Protection Office.
4. If you have any questions or to exercise your rights regarding your personal data, please send your request to the Administrators' e-mail address: customercare@boca-cabo.com

1. COOKIES

1. Administrators use cookies through the Store.

1. Cookies are computer data, in particular text files stored on the User's terminal equipment (computer, smartphone, tablet), intended for the use of the Store's websites. Cookies typically contain the name of the website from which they originate, storage time on the device and a unique number. You can find out more about cookies here: https://pl.wikipedia.org/wiki/HTTP_cookie. 

1. Cookies are used to:

1. adapt the content of the Store to the User's preferences and optimising the use of the Store; in particular, this allows the Store to be recognised and displayed on the User's device, adjusted to the User's individual preferences;

1. create statistics which support the observation of the use of the Store by the User, which helps to improve its structure and content.

1. The Store uses two basic types of cookies: session cookies and persistent cookies.

1. "Session" cookies - temporary files that are stored on the User's device until the User logs out, leaves the Store or switches off the software;
2. “persistent” cookies are stored in the end-user devices for the time specified in the parameters of cookies or until their removal by the user.

1. The following types of proprietary cookies may be used within the Store:

1. files which ensure the proper use of the Store, e.g. maintaining the contents of a shopping cart until an order is processed;

1. used for security purposes, e.g. used to detect misuse of authentication within the Store;

1. files that allow the collection of anonymous information on the use of the Store, improving its content structure;

1. cookies that enable retention of user-selected settings and personalisation of the user interface, e.g. with respect to language, font size, website layout, etc.

1. The Store may also use cookies from third parties such as Google LLC, Meta Platform, Inc., Pinterest, Inc, TikTok Technology Limited. 

1. The use of cookies is based on the User's consent, except when it is necessary for the proper functioning of the Store or the provision of electronic services. You can give your consent during your first visit to the Store, when a banner is displayed allowing you to give your consent and manage your cookie settings. 

1. Notwithstanding the above, web browsers usually allow cookies to be stored on the User's terminal device by default. The user can make changes to their cookie settings at any time, in particular limit or deactivate access to cookies or delete previously saved cookies or site data. Detailed information on the possibilities and ways of handling cookies are available in the settings of a given web browser. If you disable or restrict the use of cookies, you will still be able to use the Store, but this may affect some of the Store's functionality.

1. SECURITY

1. The administrators have implemented appropriate measures to ensure the protection of the personal data processed. 

1. The administrators only allow access to the Customer Account by providing an individual login and password and, in the event of loss of access to the Customer Account, allow a new password to be generated 

1. The administrators use an SSL certificate issued by: Shopify.com

1. FINAL PROVISIONS

1. Date of last modification 10.06.2023
2. Administrators have the right to amend this Privacy Policy. Users are informed in advance of any changes to the Privacy Policy by e-mail to the address provided in the Customer Account or on the Store website.
3. Links to other websites may appear on the Store. Such websites operate independently of the Administrators and are not supervised by them in any way. These sites may have their own privacy policies and regulations, which you should familiarise yourself with.

Please send questions, comments and requests relating to this Privacy Policy by email to: customercare@boca-cabo.com