Privacy Policy
1. General provisions
1.1. This Privacy Policy sets out the principles of processing and protecting the personal data of Customers of the online watch store, available at www.celestiwatches.com.
1.2. The personal data controller is Michał Wielgus running a business unregistered celestiwatches.com with its registered office in Pilotów 63, 31-462, Kraków, hereinafter referred to as the "Administrator".
1.3. Contact with the Administrator is possible via:
- e-mail address: michal@greg.pl
- phone: 514 533 997
2. Scope of collected data
2.1. The Administrator processes Customers' personal data necessary to fulfill the order, including:
– name and surname,
– delivery address,
– email address,
– telephone number,
– invoice details (NIP, company address – if applicable).
2.2. Other data may also be processed that the Customer voluntarily provides when contacting the Administrator, in particular via the contact forms available on the store's website.
3. Purposes of data processing
3.1. Customers' personal data are processed for the following purposes:
– fulfillment of orders placed in the online store,
– contacting the Customer regarding the execution of the order,
– handling complaints and returns,
– issuing invoices and accounting documents,
– conducting marketing activities (with the Client’s consent),
– analytics and statistics,
– ensuring transaction security.
4. Legal basis for data processing
4.1. Personal data are processed on the basis of:
– Article 6 paragraph 1 letter b of the GDPR – for the purpose of performing the sales contract,
– Article 6, paragraph 1, letter c of the GDPR – in order to fulfil the legal obligations incumbent on the Controller,
– Article 6, paragraph 1, letter a of the GDPR – based on the Customer's consent for marketing purposes,
– Article 6 paragraph 1 letter f of the GDPR – in order to pursue the legitimate interests of the Controller (e.g. analytics, statistics, security).
5. Data storage
5.1. Customers' personal data are stored for the period necessary to complete the order and fulfill the Administrator's legal obligations, as well as until the statute of limitations for claims arising from the contract expires.
5.2. Data processed on the basis of the Customer's consent are stored until such consent is withdrawn.
6. Customer Rights
6.1. Customers have the right to:
– access to your personal data,
– rectification of data,
– deletion of data (right to be forgotten),
– processing restrictions,
– data transfer,
– object to processing,
– withdraw consent to data processing at any time (which does not affect the lawfulness of processing carried out before its withdrawal).
6.2. Customers may exercise their rights by contacting the Administrator at the following e-mail address: [e-mail address].
7. Data Sharing
7.1. Customers' personal data may be shared with third parties only to the extent necessary to fulfill the order – e.g. courier companies, payment operators, accounting firms.
7.2. The Administrator does not transfer personal data to third countries or international organizations.
8. Data security
8.1. The Administrator uses appropriate technical and organizational measures to protect Customers' personal data against unauthorized access, loss or destruction.
9. Cookies
9.1. The online store uses cookies to ensure the proper operation of the website and improve its functionality.
9.2. The customer can manage cookies through their web browser settings.
10. Changes to the Privacy Policy
10.1. The Administrator reserves the right to make changes to the Privacy Policy. The current version will be published on the online store's website.
10.2. Customers will be informed of significant changes by email.
11. Contact
11.1. If you have any questions regarding the Privacy Policy, please contact the Administrator via e-mail: michal@greg.pl.
