Privacy Policy

This Privacy Policy is an integral part of the Regulations of the Online Store www.mastertattoo.pl

General information clause

In accordance with art. 13 sec. 1-2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1) – hereinafter referred to as GDPR – we inform you that:

Personal data administrator

MASTER TATTOO SZYMON STAWICKI with its registered office in UPHAGENA 12, 80-237 GDAŃSK is the Administrator of your personal data. Contact with the Personal Data Administrator can take place by e-mail: shop@mastertattoo.pl

Where do we get your data from?

We received them from you when you created your account, via the contact form or in connection with processed orders.

Purposes and basis of processing

As the administrator, we will process your data:

to set up an account on our website
to process the applications you send to us (e.g. via the contact form)
to send the newsletter based on your separate consent (basis under Article 6 paragraph 1 letter a of the GDPR):
to conclude a contract based on your interest in our offer and its proper implementation (basis under Article 6 paragraph 1 letter b of the GDPR);
to fulfill orders based on the contract, when we have concluded it (basis under Article 6 paragraph 1 letter b of the GDPR);
to process submitted complaints and returns
for tax purposes and in connection with other legal obligations of the administrator (basis under Article 6 paragraph 1 letter c of the GDPR);
for analytical purposes [better selection of services to the needs of our customers, general optimization of our products, optimization of service processes, building knowledge about our customers, financial analysis] which is the implementation of our legitimate interest in this (basis in art. 6 sec. 1 letter f of the GDPR);
for archival (evidence) purposes which is the implementation of our legitimate interest in securing information in the event of a legal need to prove facts (basis in art. 6 sec. 1 letter f of the GDPR);
for the purpose of determining, pursuing or defending against claims, which is the implementation of our legitimate interest in this (basis in art. 6 sec. 1 letter f of the GDPR);
for the purpose of customer satisfaction surveys which is the implementation of our legitimate interest in determining the quality of our service and the level of satisfaction of our customers with products and services (basis in art. 6 sec. 1 letter f of the GDPR);
in order for us to offer you products and services directly (direct marketing), which is our legitimate interest in this (basis in Article 6 paragraph 1 letter f of the GDPR);

Right to object

You have the right to withdraw your consent to the processing of your personal data at any time, but the withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of your consent before its withdrawal.
Providing personal data is voluntary, but failure to consent to the processing of personal data marked as obligatory will prevent the Seller from performing services and fulfilling Sales Agreements.
You have the right to object to the processing of your data described above at any time. We will stop processing your data for these purposes, unless we can demonstrate that there are valid legally justified grounds for this data or the data will be necessary for us to determine, pursue or defend any claims.
You have the right to object to the processing of data for the purpose of conducting direct marketing at any time. If you exercise this right, we will stop processing your data for this purpose.

Data storage period

Your personal data will be processed by us for the entire period during which the contract is performed, as well as later for the purposes of:

pursuing any claims arising from the contract
fulfilling the 5-year archiving obligation
performing obligations arising from legal regulations, including in particular tax and accounting
statistical and archiving
preventing abuse and fraud
for a maximum period of 10 years from the date of completion of the contract

Recipients of data

The recipients of your personal data will be those entities to which we are obliged to transfer data under applicable law (e.g. offices, administrative bodies, police), as well as entities providing accounting, HR, warehousing, payment, IT, transport, courier and postal services to us, or our subcontractors or distributors.

Rights of data subjects:

In accordance with the GDPR, you have:

the right to access your data and receive a copy of it;
the right to rectify (correct) your data;
the right to delete data, limit data processing;
the right to object to data processing;
the right to transfer data;
the right to lodge a complaint with the supervisory authority.

Where applicable, you have the right to withdraw your consent to the processing of personal data at any time without affecting the lawfulness of the processing carried out on the basis of consent expressed before its withdrawal.

Information on the requirement/voluntariness of providing data

Providing your data is voluntary, but providing some data may be necessary to conclude and perform the contract.

Automated decision-making

Your data will not be processed in an automated manner, including in the form of profiling.