Privacy policy

§ 1. General provisions

1. The Privacy and Cookies Policy of the website https://casualauthentic.com (hereinafter: “Policy”) was created and adopted by Casual Authentic - Maciej Twardziński.

2. The terms used in the Policy mean:

1) Website: the website https://casualauthentic.com;

2) User: an entity using the publicly available Website;

3) Owner: Casual Authentic - Maciej Twardziński, Modzelewskiego 23/330, 02-679 Warsaw, 5213750199;

4) Cookies: text files sent by the Website and stored on the User’s end device, used while browsing web pages. The files contain information necessary for the proper functioning of the Website. Cookies usually contain the name of the domain of the website they come from, the time they are stored on the end device, and a number;

3. The purpose of the Policy is in particular to:

1) provide Users with information on the use of Cookies on the Website, as required by law, including Telecommunications Law;

2) ensure User privacy protection in accordance with standards and requirements set out in applicable legal regulations.

4. The Owner limits the collection and use of User information to the necessary minimum required to provide services.

5. To gain full access to the content and services offered by the Owner via the Website, it is recommended to accept the rules arising from the Policy. Acceptance may be expressed via the settings of the software installed on the User’s device or configuration of the service.

6. The following legal acts apply, among others:

1) Act of 16 July 2004 Telecommunications Law (Journal of Laws 2017.1907 consolidated text as amended);

2) Act of 18 July 2002 on electronic services (Journal of Laws 2017.1219 consolidated text as amended);

3) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR) (OJ L 119 of 4.5.2016) along with Polish data protection regulations;

4) Act of 10 May 2018 on the protection of personal data (Journal of Laws 2019 item 1781 consolidated text).

§ 2. Privacy and personal data protection

User data is processed by the Owner in accordance with the law. Personal data obtained by the Owner is processed on the basis of the User’s consent or another legal ground under applicable regulations, in particular GDPR.

2. The Owner takes special care to protect the interests of individuals whose data is processed, ensuring in particular that the data is:

1) processed lawfully, fairly and in a transparent manner for Clients and other data subjects;

2) collected for specific, explicit and legitimate purposes and not further processed in a way incompatible with those purposes;

3) adequate, relevant and limited to what is necessary for the purposes for which it is processed;

4) accurate and, where necessary, kept up to date;

5) stored in a form permitting identification of the data subject for no longer than necessary for the purposes for which it is processed;

6) processed in a manner ensuring appropriate security, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organizational measures.

3. The Owner applies appropriate technical and organizational measures ensuring protection of processed personal data adequate to the nature, scope, context and purposes of processing, as well as the risk to the rights and freedoms of individuals.

4. The Owner strives to systematically update IT, technical and organizational security measures, in particular by providing updates of IT security measures against viruses, unauthorized access and other threats arising from the functioning of IT systems and telecommunication networks.

5. The Owner may – apart from other cases provided by law – process the following Client personal data necessary to establish, shape the content of, amend or terminate a contract:

1) Client’s first and last name;

2) permanent residence address;

3) correspondence address, if different from the residence address;

4) right to object to processing or to restrict processing;

5) Client’s email addresses;

6) telephone number.

6. With the Client’s consent, the Owner may also process data for advertising, market research and customer behavior and preference analysis for the purpose of improving the quality of services.

7. Each User who has provided their data to the Owner is guaranteed access to their data and the exercise of other rights under applicable law, including:

1) the right to withdraw consent to data processing;

2) the right to information about their personal data;

3) the right to control processing, including supplementation, updating, rectification, deletion;

4) the right to object to processing or to restrict processing;

5) the right to lodge a complaint with the supervisory authority and to use other legal remedies.

8. The Owner may process personal data automatically, including profiling, under GDPR. The purpose of such processing is marketing or personalization of messages sent to Users. The User has the right to object to such processing by sending a message to the Owner’s address.

9. Persons having access to personal data process it only on the basis of the Owner’s authorization or a data processing agreement and only at the Owner’s instruction.

10. In connection with the Website’s operation, the Owner uses services of other entities, including to perform contracts with Users. User personal data may be transferred to:

1) hosting company,

2) website software provider,

3) internet service provider,

4) courier or postal companies,

5) electronic payment platform provider,

6) invoicing software provider,

7) accounting service providers,

8) marketing or advertising service providers.

§ 3. Cookies

1. Cookies identify the User, allowing the Website content to be tailored to their needs. By remembering preferences, they enable proper adjustment of content, including ads. The Owner uses Cookies to ensure the proper comfort of the Website, and the collected data is used internally for optimization purposes.

2. Cookies are used to:

1) adjust Website content to User preferences;

2) optimize Website use, in particular by recognizing the User’s device;

3) create statistics;

4) maintain User sessions;

5) provide advertising content.

3. The Owner processes statistical information about Website use, including session information, IP number, time spent on pages, use of functionalities, device and browser information. This data is processed under Article 6(1)(f) GDPR in the legitimate interest of the administrator. Data is not used for additional purposes.

4. Data is processed within ongoing Owner activities but no longer than 60 days from receipt. After that, the Owner may process general statistical data without user-identifying information.

5. Note that in some cases, software installed on the User’s device (e.g., browser) by default allows Cookies storage. Users can change Cookie settings at any time, e.g., to block automatic Cookies handling or to notify about placing Cookies on the device. Details are available in browser settings and instructions.

6. Users can disable or restore the option of Cookies collection at any time by changing device and browser settings.

7. Changing settings constitutes an objection, which may cause difficulties in using the Website in the future. Disabling Cookies entirely will not prevent browsing Website content, except for content requiring login.

8. Failure to change settings means data will be stored on the User’s device (using the Website automatically places Cookies).

9. Cookies are stored on User devices for no longer than 12 months.

10. Stored data does not cause configuration changes to the User’s device or software.

11. Information on Cookies also applies to other similar technologies used on the Website.

§ 4. Complaints

1. Complaints can be submitted to the Owner electronically at maciej@casualauthentic.com.

2. Out-of-court complaint resolution and redress options available to Consumers include:

1) electronic dispute resolution via the ODR platform available at https://ec.europa.eu/consumers/odr/main/index.cfm?event=main.home2.show&lng=EN;

2) amicable proceedings before a common court or other authorities.

3. The Owner undertakes to review a complaint within 14 days.

4. If the complaint is accepted, the Owner will take appropriate action.

5. For complaint handling purposes, the Owner processes User data, including email address, name, complaint content, circumstances of the event causing the complaint, and information gathered during complaint handling. This data is processed under Article 6(1)(b) GDPR and stored for the time necessary to process the complaint and later for archiving and defense against possible claims.

6. In the case of explanatory proceedings regarding possible violations of the Terms, Policy, law or good practices, the Owner may process personal data until the end of such proceedings and until the expiry of claim limitation periods (usually 3 years). Data may then be processed and disclosed under Article 6(1)(f) GDPR – in the legitimate interest of the administrator to pursue claims against the User.

§ 5. Final provisions

1. The Policy was adopted by order of the Owner and enters into force on 14.04.2020. Amendments may be made in the same manner.

2. Any deviations from the Policy require written form under pain of nullity.

3. The governing law for the Policy is the law of the Republic of Poland.

4. In matters not regulated by the Policy, relevant legal provisions apply.