Privacy policy and cookies - Olimp Born In the Gym

Thank you for your interest in our online store. Protecting your privacy is very important to us. In this privacy policy you will find detailed information on how we handle your data.

General Provisions

The administrator of your data is: Olimp Laboratories sp. z o. o., Pustynia 84F, 39-200, Dębica, [email protected]

Your personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR).

The personal data administrator takes special care to protect your rights and in particular ensures that your data is:

(a) processed lawfully, fairly and in a transparent manner (“lawfulness, fairness and transparency”);

(b) collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;

(c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimisation”);

(d) accurate and, where necessary, kept up to date; all reasonable steps are taken to ensure that personal data that are inaccurate with regard to the purposes for which they are processed are immediately erased or rectified;

(e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed;

f) processed in a way that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organisational measures.

Scope of data collection and data recipients.

The Administrator may process the following categories of your personal data:

a) name;

b) surname;

c) delivery address;

d) telephone number;

e) e-mail address;

f) company name;

g) numbers: NIP, REGON, KRS

h) delivery address;

i) device IP;

j) Information collected by Cookies: Language, region, product preferences for the purpose of presenting advertising content

Basis for data processing

Each time, the purpose and scope of data processed by the Administrator results from the actions undertaken by you on the Website and is based on legal provisions.

Providing your personal data is voluntary, although in many circumstances it is necessary to perform the contract, contact or other request. The Administrator processes the obtained data on the basis indicated below:

a) Article 6, paragraph 1, letter b of the GDPR – for the purpose of concluding and performing a sales contract and a contract for the provision of services by electronic means (registration and maintaining an account in the online store);

b) Article 6, section 1, letter c of the GDPR – processing is necessary to fulfil legal obligations resulting from legal provisions, e.g. the Accounting Act or the Tax Ordinance;

c) Article 6(1)(f) of the GDPR – processing is necessary for the purposes of the legitimate interests pursued by the controller, which is direct marketing of its own products and services; as well as pursuing and defending claims and improving the presentation of products, services and the efficiency of the website.

Data sources

We collect personal data only when you voluntarily provide it to us by placing your order, contacting us (e.g. via the contact form or e-mail) or by creating a customer account in the online store as well as through Cookies (the principles of using cookies are described below).

Data storage period

Data retention periods depend on the processes in which personal data are processed.

a) in the case of opening an account in the online store – until the Customer terminates the agreement for the provision of services by electronic means (deletion of the account).

b) in the case of purchases – for the period resulting from accounting and tax obligations – resulting from legal provisions, e.g. the Accounting Act or the Tax Ordinance; as well as for the limitation period for claims resulting from the Civil Code.

c) in the case of direct marketing – until you object.

Data transfer

The personal data administrator reserves that, in accordance with the provisions of the GDPR and the Personal Data Protection Act, he may make your personal data available to other entities providing services in the field of hosting, administration, sending newsletters, maintaining and managing websites, fulfilling orders in online stores, pursuing and determining claims and explaining the circumstances of unauthorized or unlawful use of services provided electronically, organizing sports events and other events promoting a healthy lifestyle, as well as companies from the capital group of the Administrator, including Nutrifarm sp. z o. o.

As part of the data processing entrustment [https://gsuite.google.com/terms/dpa_terms.html] – an external service provider performs services for us in the field of hosting and presentation of websites on our behalf. All data that – in the manner described in this privacy policy – has been collected as part of the use of our website or in the forms provided for this purpose in the online shop are stored on the servers of this service provider. Processing on other servers takes place only to the extent specified in this privacy policy.

In order to fulfil the contract, we pass on your data to the courier company responsible for the delivery, provided this is necessary for the delivery of the ordered goods. Depending on which payment service provider you select in the ordering process, for the purpose of payment processing we pass on the payment data collected for this purpose to the credit or payment institution handling the payment and possibly to the payment service provider selected by us or by you. Some payment service providers collect data themselves if you set up an account with them. In such cases, you must log in to the payment service provider by providing your access data as part of the order. The privacy policy of the respective payment service provider also applies.

Newsletter

If you subscribe to our newsletter, we will use the data required for this purpose or provided to us separately by you to regularly send you our newsletter by electronic means.

You can unsubscribe from the newsletter at any time by sending us a message with the appropriate information or by using the appropriate link in the newsletter. After unsubscribing, we will delete your e-mail address, unless you expressly consent to the further use of your data for other purposes or we reserve the right to continue using the data in legally permitted cases, about which – in such a case we inform you in this declaration.

The newsletter is sent as part of the data processing entrusted to us by a service provider to whom we provide your e-mail address for this purpose.

The processing of personal data for the purpose of sending the newsletter is based on the legal basis of the legitimate interest of the administrator – marketing of own products and services. The consent that you indicate when signing up for the newsletter results from the Act on the provision of services by electronic means and the Telecommunications Law and concerns the desire to receive commercial materials and consent to the use of terminal equipment such as telephone or email. This consent is necessary to receive our newsletter, but it can be withdrawn at any time.

Advertisements sent by traditional mail and your right to object

In addition, we reserve the right to process your data: name and surname and postal address for our own advertising purposes regarding our products, e.g. sending the latest offers and information about our products by post. The above serves to secure our legitimate interest in contacting customers for advertising purposes.

Advertising mailings are delivered as part of the entrustment of data processing on our behalf by a service provider to whom we transfer your data for this purpose. You can object to the storage and use of your data at any time by sending a message to our contact address: [please enter address].

Rights of data subjects in connection with the processing of personal data

You have the right to obtain from the controller confirmation as to whether your personal data are being processed and, if so, to obtain access to such data.

You have the right to demand that the administrator immediately rectify personal data that is incorrect. Taking into account the purposes of processing, you have the right to demand that incomplete personal data be supplemented, including by submitting an additional statement.

You have the right to demand that the controller immediately delete your personal data, and the controller is obliged to delete personal data without undue delay if the circumstances indicated in Article 17 paragraph 1 of the GDPR occur.

You have the right to request that the administrator restrict the processing of your personal data.

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format, and you have the right to transmit this personal data to another controller without hindrance.

You have the right to object to the processing of your personal data. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing.

Once you have exercised your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests and rights, or the processing is for the purpose of asserting, exercising or defending legal claims.

This does not apply where the data is processed for direct marketing purposes. In such a case, we will not continue to process your personal data for this purpose.

In order to exercise the rights referred to above, you may contact the Data Protection Officer of the Administrator by sending an appropriate message in writing or by e-mail. You can also exercise your rights by logging into your user account and changing your data.

Please contact the Data Protection Officer of the Administrator at the following address: E-mail address: [email protected] ; Correspondence address: Pustynia 84G, 39-200 Dębica Contact telephone number: 14 684 17 78, in case of any questions, comments or requests regarding your rights.

The right to lodge a complaint with the competent data protection authority.

You have the right to lodge a complaint with the relevant supervisory authority if you believe that any personal data concerning you is being processed in a manner that violates the GDPR. The authority competent for personal data protection in Poland is the President of the Office for Personal Data Protection.

Cookies and Internet tools.

In order to make our website more attractive and to enable the use of certain functions in order to display appropriate products or for market research purposes, we use so-called Cookies on our pages. The above – as part of the analysis and assessment of interests – serves to protect our legitimate interest in the optimal presentation of our offer. Cookies are small text files that are automatically saved on your end device.

Cookies are used to collect information related to the use of the Service by the User. Cookies enable in particular:

maintaining the Service User’s session (after logging in), thanks to which the User does not have to re-enter their login and password on each subpage of the Service;
adapting the content of the Service’s web pages to the User’s preferences and optimizing the use of the web pages; in particular, these files enable the Service User’s device to be recognized and the web page to be properly displayed, tailored to their individual needs;
creating statistics that help understand how Service Users use websites, which enables improving their structure and content.

The Service uses two basic types of cookies: “session cookies” and “persistent cookies”. “Session” cookies are temporary files that are stored on the User’s end device until logging out, leaving the website or disabling the software (internet browser). “Persistent” cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.

The following types of cookies are used within the Service:

“essential” cookies, enabling the use of services available on the Website, e.g. authentication cookies used for services that require authentication on the Website;
“performance” cookies, enabling the collection of information on how the Service’s web pages are used;
“functional” cookies, enabling “remembering” the settings selected by the User and personalizing the User interface.

The storage time is specified in the Cookie settings of your web browser. You can configure your browser to receive information about the use of Cookies and to be able to decide whether to accept or reject them in certain cases or completely. Browsers manage Cookie settings in different ways. In the help menu of your web browser you will find explanations on how to change Cookie settings. They are available at the following links:

Internet Explorer™: https://support.microsoft.com/pl-pl/help/17442/windows-internet-explorer-delete-manage-Cookies

Safari™: http://safari.helpmax.net/pl/ochrona-i-prywatnosc/usuwanie-plikow-cookie/

Chrome™: https://support.google.com/chrome/answer/95647?hl=pl&hlrm=en

Firefox™: https://support.mozilla.org/pl/kb/usuwanie-ciasteczek

Opera™: http://help.opera.com/Windows/12.10/pl/Cookies.html

If you do not consent to the use of cookies, the functionality of our website may be limited.

This website also uses so-called DoubleClick Cookies within Google Analytics (see below), which enable your browser to be recognized when you visit other websites. The information generated automatically by the Cookies about your use of this website is transferred to a Google server in the United States and stored there. Due to the IP anonymization activated on this website, your IP address is shortened before transmission within the Member States of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the United States and shortened there. The anonymized IP address transmitted by your browser within Google Analytics is not combined with other Google data.

Google will use this information to compile a report on website activity and to provide other services related to website use. This serves to protect our legitimate interest in the optimal and effective operation of our website on the market as part of the analysis and evaluation of interests. Google will transfer this information to third parties if required by law or if third parties process this data on Google’s behalf.

Google Double Click is an offer of Google LLC. (www.google.com).

Google LLC is headquartered in the USA and is certified for the EU-US-Privacy Shield. The current certificate is available at this link. As part of the agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can deactivate DoubleClick Cookies by clicking on the link . You can also find out more about the use of Cookies and the appropriate settings on the Digital Advertising Alliance website . You can also configure your browser to receive information about the use of Cookies and decide whether to accept or reject them in certain cases or completely. If you do not accept the use of Cookies, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analytics purposes

Our website uses Google (Universal) Analytics, a web analytics tool from Google Inc. (www.google.com). This serves to protect our legitimate interest in the optimal presentation of our offer within the framework of the analysis and evaluation of interests. Google (Universal) Analytics uses methods that enable an analysis of your use of the website – for example, cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the United States and stored there. Due to the IP anonymization activated on this website, your IP address is shortened before transmission within the Member States of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the United States and shortened there. The anonymized IP address transmitted by your browser within Google Analytics is generally not combined with other Google data.

You can prevent the collection of data generated by the cookie and related to your use of our website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, instead of installing the browser plug-in, you can also click on this link to disable the collection of data by Google Analytics on our website. An opt-out cookie will then be stored on your end device. If you delete your Cookies, you must click on the above link again.

Advertising with e-marketing tools

Google AdWords Remarketing

With the help of Google Adwords, we promote our website in search results and on third-party websites. For this purpose, when visiting our website, a so-called Google remarketing cookie is automatically left on the device of each visitor, which, with the help of a pseudonymous identifier (ID) and based on the pages you visit, enables the display of interest-based advertising. This – as part of the analysis and assessment of interests – serves to protect our legitimate interest in the optimal operation of our website on the market.

Further data processing only takes place if you have given Google permission to link your browsing and app usage history to your account and to use information from your Google account to personalize the ads you see on websites. If you are logged in to Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing purposes. For this purpose, Google temporarily links your personal data with Google Analytics data to create target groups.

The Google AdWords Remarketing service is an offer of Google LLC (www.google.pl). Google LLC is headquartered in the USA and is certified under the EU-US-Privacy Shield. The current certificate is available at the following link. As part of the agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can deactivate Cookies used for remarketing by clicking on this link. You can also find out more about the use of Cookies and the appropriate settings on the Digital Advertising Alliance website.

AdRoll Retargeting

With the help of our advertising partner AdRoll Advertising Limited, Level 6, 1, Burlington Plaza, Burlington Road, Dublin 4, Ireland, we promote our website in search results and on third-party websites. For this purpose, a cookie from such service providers or their partners is automatically placed on the visitor’s device when visiting our website, which enables the display of interest-based advertising with the help of a pseudonymous identifier (ID) and based on the pages you visit. This serves to protect our legitimate interest in the optimal operation of our website on the market as part of the analysis and assessment of interests.

You can deactivate Cookies used for retargeting by clicking on one of the following links: https://app.adroll.com/optout/safari

Alternatively, you can disable the use of Cookies by third-party providers by visiting the appropriate deactivation website (Network Advertising Initiative) .

Social media plugins

Use of social plugins

Our website uses so-called social plug-ins (“plug-ins”) from social networks.

When you display our website that contains such a plug-in, your browser will establish a direct connection to the Facebook, Google, Twitter or Instagram servers. The content of the plug-in is transmitted directly to your browser by the respective service provider and integrated into the page. Thanks to this integration, the service providers receive information that your browser has displayed our website, even if you do not have a profile with the respective service provider or are not currently logged in to it. This information (including your IP address) is sent by your browser directly to the server of the respective service provider (some servers are located in the USA) and stored there. If you have logged in to one of the social networking sites, the service provider will be able to directly assign the visit to our website to your profile on the respective social networking site. If you use the respective plug-in, e.g. click the “Like” button or the “Share” button, the corresponding information will also be sent directly to the server of the respective service provider and stored there. This information will also be published on the respective social networking site and will be displayed to the people you have added as your contacts.

The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the possibility of making settings to protect your privacy are described in the privacy policies of the service providers.

http://www.facebook.com/policy.php

https://twitter.com/privacy

https://help.instagram.com/155833707900388

If you do not want social media to directly associate the data collected during your visit to our website with your profile on that website, you must log out of that website before visiting our website. You can also completely prevent the plugins from loading on the website by using appropriate browser extensions for your browser, e.g. blocking scripts with “NoScript” (http://noscript.net/).”

Video plugins for YouTube

This website integrates content from other providers. The YouTube video plug-ins are provided by Google Inc. (“Provider”). YouTube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

For YouTube videos on our website, extended data protection has been activated. This means that YouTube does not collect or store information about website visitors unless they play the video.

The purpose and scope of data collection and their further processing and use by service providers as well as your rights in this regard and setting options to protect your privacy are described in Google’s privacy policy.