Privacy policy

Light of Hummingbird privacy policy

In the interests of the security of the data entrusted to us, we have developed internal procedures and recommendations to prevent disclosure of data to unauthorized persons. We control their performance and constantly check their compliance with the relevant legal acts - the Act on the Protection of Personal Data, the Act on the provision of electronic services, as well as all kinds of executive acts and acts of Community law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - hereinafter referred to as GDPR).

Rights related to the processing of personal data

You have the following rights in connection with the processing of your personal data by the Administrator:

• The right to access your data, including obtaining a copy of the data.
• The right to request rectification of data.
• The right to delete data (in certain situations).
• The right to lodge a complaint with the supervisory body dealing with the protection of personal data.
• The right to limit data processing.

If your data is processed on the basis of consent, you can additionally exercise the following rights:

• The right to withdraw consent to the extent they are processed on this basis. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. If your data is processed on the basis of consent or as part of the service provided (data is necessary to provide the service), you can additionally exercise the following rights:
  
  
• The right to transfer personal data, i.e. to receive your personal data from the administrator, in a structured, commonly used machine-readable format. You can send this data to another data controller. In order to exercise the above rights, please contact the Administrator.

Subscription to free newsletters

1. Subscribing to electronic and free newsletters belonging to the Administrator requires providing your name and e-mail address in the appropriate form. These fields are mandatory.
   
   
2. The data obtained in this way is added to the newsletter mailing list. The e-mail address is necessary to send a newsletter (course) to a given User. The name allows the Administrator to address readers by name.
   
   
3. The data provided by the User at the time of subscription will not be used in any other way than specified in point 2 above.

Transfer of data to third parties

1. The Administrator will not sell Customers' personal data to other entities. In progress and in order to provide services to the Customers, the Customers' personal data may be transferred to other entities with which the Administrator is bound by relevant agreements. This will not affect the security of your personal data.
   
   
2. Customer data may be made available to entities authorized to receive them under applicable law, including judicial authorities.
   
   
3. We store the collected personal data in the European Economic Area ("EEA"), but they can also be sent to a country outside this area and processed there. Each operation of transferring personal data is performed in accordance with applicable law.

Cookies Policy:

1. The Administrator's website uses "cookies". No changes to the browser settings on the part of the user is tantamount to consent to their use.
   
   
2. The installation of "cookies" is necessary for the proper provision of services by the Administrator.
   
   
3. Three types of "cookies" are used: "session", "permanent" and "analytical".

• "Session" cookies are temporary files that are stored on the user's end device until logging out.
  
  
• "Permanent" "cookies" are stored in the user's end device for the time specified in the parameters of "cookies" or until they are deleted by the user.
  
  
• "Analytical" cookies collect information on how the user uses the Administrator's website, the type of website from which the user was redirected, and the number of visits and time of the user's visit to the website. This information does not record specific personal data of the user, but is used to compile statistics.
  
  
• The user has the right to decide on the access of "cookies" to his computer by selecting them in advance in his browser window. Detailed information on the possibilities and ways of handling "cookies" are available in the software (web browser) settings.

Data storage period

We store your personal data only for as long as it is usually necessary for the purposes for which they were collected or as required by applicable law.

The right to lodge a complaint with the supervisory authority

If you believe that the Administrator processes your personal data in an inappropriate way, you can contact us. You also have the right to lodge a complaint with the supervisory authority.

Final Provisions

1. The administrator uses technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of data protected, and in particular protects data against unauthorized access, removal by an unauthorized person, processing in violation of applicable regulations and change, loss, damage or destruction.
   
   
2. In matters not covered by this Privacy Policy, the provisions of the Regulations of the www.lightofhummingbird.com Store, the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and in on the free movement of such data and repealing Directive 95/46/EC (GDPR) and other relevant provisions of Polish law.
   
   
3. The provisions of this Privacy Policy come into force on November 3, 2019.

General provisions

1. The administrator of Customers' personal data is Aleksandra Grotha - owner and administrator of the Website, Aleksandra Grotha's Light of Hummingbird, NIP: 9580936118, REGON: 384455013, address: 40-353 Katowice, ul. Sosnowiecka 15, Poland, hereinafter referred to as the Administrator, who conducts business activity, registered in the Central Register and Information on Economic Activity, e-mail address: shop@lightofhummingbird.com.
   
   
2. Personal data will be processed in order to:

•  Arising from legitimate interests pursued by the Administrator. Data for these purposes will be processed on the basis of art. 6 sec. 1 lit. f) GDPR. This basis for processing includes, among others, the need to ensure the security of the Light of Hummingbird service, perform statistical measurements, improve our services and adapt them to the needs and convenience of users (e.g. personalizing content in the service) as well as marketing and promoting the Administrator's own products and services.
  
  
• Conclusion or performance of a contract to which you are a party pursuant to art. 6 sec. 1 lit. b) GDPR. The contract is, in our case, the terms and conditions of the Light of Hummingbird service. Therefore, if you set up a user account with us, the contract for providing this account authorizes us to process the data necessary to provide it. Without this possibility, we would not be able to provide you with the service, and you would not be able to use it.
  
  
• After expressing a separate consent, pursuant to art. 6 sec. 1 lit. a) GDPR, data may also be processed for the purpose of sending text information electronically for direct marketing, including the promotion of our content - in connection with art. 10 sec. 2 of the Act of July 18, 2002 on the provision of electronic services.   

    4. The Administrator reserves the right to make changes to the Privacy Policy. We will inform you about any changes in a visible and understandable way.

    5. The administrator takes special care to protect the interests of data subjects, and in particular ensures that the data collected by him are:

• processed in accordance with the law
  
  
• collected for specified, lawful purposes and not subjected to further processing inconsistent with these purposes
  
  
• factually correct and adequate in relation to the purposes for which they are processed and stored in a form that allows identification of the persons they concern, no longer than it is necessary to achieve the purpose of processing.

Personal data

1. The Administrator processes the personal data of users for the purpose of proper performance of contracts covering the Administrator's Products and services and for the purposes of direct marketing of the Administrator's Products and services and the Administrator's business partners’ Products and services, provided that the Customer agrees to this type of marketing.
   
   
2. The administrator requires only the data that is necessary for the proper operation of the website and the provision of services. Failure to provide the required data will make it impossible to perform the activity to which the data pertained.
   
   
3. The scope of the processed data includes: name, surname, e-mail address, mobile phone number, address, IP address.
   
   
4. The personal data provided is controlled by the Administrator. It also protects your data under the relevant legal provisions on the protection of personal data.