Cookie Policy - Victoria Crystal

Free delivery from 50 PLN

PRIVACY POLICY
Protecting our users' privacy is our priority. Our online store, operated by Victoria Crystal S.A., ensures the highest standards of personal data protection, in accordance with the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council). In light of the above, and in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement thereof, and the resolution concerning Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 2016.119.1 of 2016.05.04) (hereinafter referred to as the GDPR), Victoria Crystal S.A. has adopted this Privacy Policy to ensure the security of personal data. This Privacy Policy sets out the principles for the processing and protection of personal data provided by Users in connection with the use of the Online Store and other related websites, communications, and services. A User is any person whose data is processed and who uses the Online Store and other related websites, communications, and services (hereinafter referred to as the User). The controller of personal data collected in the Online Store is Victoria Crystal. To the extent necessary to perform the contract concluded between the User and the Controller, as well as for the Controller to take action at the User's request and to fulfill the Controller's legal obligations, the processing of the User's personal data is carried out pursuant to legal provisions, i.e. Article 6 paragraph 1 letters b) and c) of the GDPR, without the need for the User to consent to the processing of their personal data. In other cases, the provision of personal data by the User is voluntary. However, to the extent that consent to the processing of the User's personal data was granted solely for marketing purposes, providing such data is voluntary, and refusal or withdrawal of consent will prevent the Controller from informing the User about new offers and promotions.
I. USER CONSENT
To fully utilize our Online Store, Users have the ability to manage their consent to the processing of personal data. These consents may be withdrawn at any time without affecting the lawfulness of previous data processing. By using the Online Store, the User accepts that the Administrator collects, uses, and shares personal and non-personal data in accordance with this Privacy Policy. However, the User has control over the manner in which their data is used and shared, as described in detail in Chapter V of this Privacy Policy, "User Rights." Users can exercise their rights by contacting the Data Protection Officer (DPO) or using the form available in the 'My Account' section of the website. Additionally, marketing and profiling consents can be managed in the 'Privacy' tab. If personal data are processed based on the User's consent, the User has the right to withdraw their previously granted consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. If this Privacy Policy changes and the User continues to use the Online Store, such action will be deemed to constitute familiarization with the current content of the Privacy Policy.
II. PERSONAL DATA PROCESSED BY THE ADMINISTRATOR
Method of obtaining personal data
Personal data obtained directly from the User. The Administrator obtains personal data in two ways. The first method is to obtain personal data directly from the User, by:

sending a message by the User via the contact form provided in the Online Store,
the User creates a customer account in the Online Store,
placing an order for goods or services in the Online Store,
the User contacting the Administrator to obtain technical support, submit a complaint or for other purposes.

Personal data obtained from other sources
The Administrator also obtains personal data from sources other than directly from the User, i.e..:

by recording the User's use of the Online Store via cookies and other technologies and receiving error reports or usage data from the software running on the User's device,
from partners with whom the Administrator offers goods and services or conducts joint marketing activities.

Personal data processed by the Administrator

Login
Name and surname / company name / name and surname of the entrepreneur or names and surnames of entrepreneurs operating in the form of a civil partnership,
Correspondence address,
Phone number,
Email address,
NIP,
Computer IP,
Payment details if the User makes a purchase in the Online Store,
Information contained in Cookies and similar technologies regarding the User's interaction with the Administrator's Online Store.

Additionally, the Administrator collects data regarding the content of User files and messages when necessary to fulfill an order and provide the customer account service. In this regard, the Administrator collects: the subject and content of emails, text or other content of instant messages, audio and video recordings of messages, audio recordings, and transcripts of voice messages received by the User or text messages dictated by the User. The Administrator also collects information provided by the User, including opinions and ratings of products and services, as well as data provided for technical support purposes. Additionally, in the event of contact, the Administrator records the content of the messages.
III. DATA PROCESSING METHOD – PURPOSES OF PERSONAL DATA PROCESSING BY THE CONTROLLER
The manner in which the Administrator processes the User's personal data depends on the scope of the User's use of the Online Store.
Orders, customer account (performance of the contract)
If the User decides to place an order for goods or services offered in the Online Store, the Administrator will process the User's personal data to the extent necessary to conclude a sales or service agreement, as well as to ensure the proper performance of the agreement concluded with the User. If the User purchases a customer account in the Online Store, the Administrator will use the User's personal data for the proper performance of the contract for the provision of electronic services, including authentication and authorization of the User's access to the customer account.
Communication (performance of the contract, legally justified purpose pursued by the Administrator)
The Administrator uses Users' personal data to provide personalized communication. This communication includes sending emails, placing notifications on websites, and using other means within the Online Store and the customer account service provided, including text messages and push notifications. The information provided to the User concerns the goods and services offered, such as service availability and how to use them, personal data security, online updates, reminders, and suggested offers from the Administrator. Communication with the User also concerns User service. Personal data is used to assist the User, resolve issues, and respond to complaints. The Administrator also uses Users' personal data to allow them to comment on the Online Store's activities, services, and products of the Administrator.
Advertising (User consent, legally justified purpose pursued by the Administrator)
The Administrator uses Users' personal data to offer them tailored advertisements if the User has consented to such actions or if a business relationship has developed between the Administrator and the User. These advertisements refer to the Administrator's product offerings. Ads presented to Users are individually tailored to each User (so-called "profiling") only with the User's consent.

data provided directly by the User,
data collected when the User uses the Online Store,
information provided by third parties,
data from advertising technologies, such as cookies,
web beacons, pixels, ad tags, and mobile identifiers.

The Administrator does not share the User's personal data with third-party advertisers or advertising networks without the User's consent.
Improving the Online Store (User consent)
The Administrator uses the User's personal data to conduct analytical and statistical activities in order to constantly improve the Online Store, goods and services offered by the Administrator, provide better solutions, add new functions and possibilities. Personal data regarding Users are also used by the Administrator in the field of market research, public opinion research and economic analysis in order to constantly improve the Online Store. If appropriate consent is given, the User's personal data will also be processed in order to examine opinions on the level of satisfaction with purchases made in the Victoria Crystal.pl store by CENEO.PL sp. z o. o. with its registered office in Wrocław, ul. Legnicka 48A and OPINEO sp. z o. o. based in Wrocław, ul. Maria Curie-Skłodowska 12
Security (legitimate interest of the Administrator)
The Administrator uses Users' personal data to monitor, prevent, detect, and combat fraud and abuse, to protect other Users from such abuse, and to ensure network and information security. If there is reasonable suspicion of a crime, Users' personal data will be used to investigate possible criminal activity or other violations of this Privacy Policy.
Pursuing claims (legitimate interest of the Administrator)
If the User decides to use the Online Store, in particular by creating a customer account or placing an order for goods or services through it, the Administrator may process the User's personal data to the extent necessary to pursue any claims arising from the business activity conducted, as well as to analyze potential violations of the rules of use of the Online Store.
Tax documentation (fulfilment of statutory obligation)
If the User places an order for goods or services via the Online Store, the Administrator will process the User's personal data to the extent necessary to maintain tax documentation and settlements for completed orders.
IV. SHARING/PROVIDING PERSONAL DATA BY THE ADMINISTRATOR 
When transferring personal data outside the European Economic Area (EEA), the Controller uses standard contractual clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection. User personal data is or may be transferred, under appropriate agreements or in accordance with legal provisions, to the following categories of recipients:

entities providing certain services in the sales process, i.e. courier/postal/telecommunications service providers, payment institutions intermediating in making payments by Users for placed orders for goods or services;
advertising or marketing service providers, in the case of achieving the purpose of direct marketing of the Administrator's own products and services;
providers of legal, accounting, advisory and support services for the Controller in specific areas of its business, including the pursuit of due claims (in particular law firms and debt collection companies);
entities processing personal data on behalf of the Administrator, e.g. technical service providers supporting the technical infrastructure needed to run the Online Store;
entities authorized to obtain data under applicable law, e.g. courts or law enforcement authorities, when they make a request based on an appropriate legal basis.

V. USER RIGHTS
Users can exercise their rights by contacting the Data Protection Officer (DPO) or using the form available in the 'My Account' section of the website. Additionally, marketing consents and profiling can be managed in the 'Privacy' tab. To exercise their rights, users can contact our Data Protection Officer by email: iodo@victoriacrystal.pl. We provide the ability to exercise the rights of access, rectification, erasure, and restriction of processing of personal data. Users have the right to control their personal data by making choices regarding the disclosure of individual personal data, including privacy settings. However, in such a situation, the User must be aware that they will not be able to fully utilize some of the functionalities of the Online Store or the services offered by the Controller. If the User wishes to exercise their rights as a personal data subject, they can contact the Controller by email at office@victoriacrystal.pl. Users can exercise some of their rights as personal data subjects through their customer account in the Online Store. The Administrator has appointed a Data Protection Supervisor in the person of Krzysztof Jankowski, who can be contacted at: iodo@victoriacrystal.pl

The right to access data
The User is entitled to obtain confirmation from the Controller as to whether his or her personal data are being processed, and if so, he or she is entitled to access information regarding the details of the processing of his or her data, including in particular information on the purpose of processing and the categories of data being processed.
The right to rectify data
The User has the right to rectify personal data that is inaccurate. They have the right to request the replacement, supplementation, or deletion of errors, faults, and misleading information in the entire data set concerning them. Personal data that is incorrect cannot be subject to supplementation, i.e., the User cannot request the replacement or supplementation of existing data with incorrect data. If the personal data being processed is incomplete, the User may submit an additional declaration to supplement it. Such a declaration may be submitted in any form, including electronically. The right to rectification is also exercised in relation to Users with an account in the Online Store by allowing them to edit their data in the "My Account" section, "Personal Data" tab..
The right to delete data (the right to be forgotten)
The User has the right to request the deletion of his or her personal data if one of the following circumstances occurs:

The User's personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
The User has withdrawn the consent on which the processing is based and there is no other legal basis for the processing;
The User objects to the processing of their personal data;
The personal data have been processed unlawfully;
The personal data must be erased to comply with a legal obligation under Union or Member State law to which the Controller is subject;
The personal data have been collected in connection with the provision of information society services.

To delete an account created in the Online Store, please send a message with the subject "Resignation from Account" to: sklep@Victoria Crystal.pl. The message must be sent from the email address associated with your Victoria Crystal.pl account. Resignation does not constitute deletion of personal data. Account deletion can also be accomplished via an interactive link provided in correspondence between the Controller and the data subject. The right to be forgotten applies only to the User who exercises their right to have their personal data deleted and only if the Controller has made their personal data public.

The right to restrict processing
The user has the right to restrict the processing of his or her personal data in the following cases:

The User contests the accuracy of the personal data – for a period enabling the Controller to verify the accuracy of such data;
The processing is unlawful, and the User objects to the erasure of the personal data, requesting instead the restriction of their use;
The Controller no longer needs the User's personal data for processing purposes, but the User requires them to establish, pursue, or defend legal claims;
The User has objected to the processing – pending a determination whether the Controller's legitimate grounds override the User's grounds for objection.

In the event of restriction of processing, the Administrator may process personal data, with the exception of storage, only:

with the User's consent or
for the establishment, exercise or defense of legal claims, or
to protect the rights of another natural or legal person, or
for important reasons of public interest of the Union or a Member State.

The right to data portability
The User has the right to receive the personal data concerning them that they have provided to the Controller in a structured, commonly used format and has the right to transmit this data to another controller. The User also has the right to request that their personal data be transmitted by the Controller directly to another controller, if technically feasible.
The right to object
The User has the right to object at any time, for reasons related to his/her particular situation, to the processing of his/her personal data.:

in the public interest, in the exercise of public authority entrusted to the Administrator
in relation to processing for direct marketing purposes, including profiling, insofar as it is related to such direct marketing,
for the legitimate purpose of the Administrator.

The objection procedure and all communication are free of charge, and it is also possible to submit an objection electronically..
The right to file a complaint
The User has the right to lodge a complaint with the Personal Data Protection Authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement.
VI. COOKIES AND OTHER TECHNOLOGIES USED BY THE ADMINISTRATOR
Our Online Store uses cookies to improve functionality, personalize content, and analyze website traffic. Users can manage cookie settings through their browser. We use cookies to improve efficiency and offer users improved Online Store functionality and more tailored content. Cookies are snippets of code, which are text files that respond to HTTP requests sent to our server. These files are saved by every browser used to visit our Online Store. Information contained in cookies helps us understand how users use our Online Store. The Online Store uses two types of cookies.:

Session cookies – these are temporary files that remain on the user's device until they leave the Online Store or close their web browser. In such a case, the information stored in session cookies is automatically deleted..
Permanent cookies – these are files that remain on the User's device for the period specified in the cookie file parameters, also after leaving the Online Store, or until they are manually deleted..

The Online Store also uses other available technologies that allow information to be saved in the browser in appropriate data stores (Session Storage, Local Storage). These technologies are also embedded in code fragments of analytical tools provided by other providers, which enable cookies to be saved in the domains of these services. More detailed information about the cookies we use, their storage times, and the current list of our Trusted Partners whose services we use or whose technologies we include in the Online Store can be found in the tables below.:
Cookie list
A cookie is a small piece of data (text file) that a website—when you visit it—asks your browser to save on your device to remember information about you, such as your preferred language or login information. These cookies are set by us and are called first-party cookies. For advertising and marketing purposes, we also use third-party cookies—those from a domain different from the website you're visiting. More specifically, we use cookies and other tracking technologies for the following purposes:
Technical cookies
PURPOSES OF USING COOKIES AND SIMILAR TECHNOLOGIES 
We use cookies and other similar technologies to recognize users during their visits to our Online Store, remember their preferences, and display relevant, customized content, including targeted advertisements. These solutions make user interactions with us faster and more effective. Furthermore, these technologies enable us to present users with content tailored to their needs, without the need for surveys. The individual categories for which cookies and similar technologies are used in our Online Store are described below: Technical cookies – these are necessary for the website to function properly, including for user authentication, i.e., recognizing the user in our Online Store. These cookies allow users to navigate between pages on the website without having to log in again on each page. If a user is recognized, they are presented with relevant information based on their preferences. Wykorzystujemy je w celu:

Ensuring the security of your purchases
Maintaining your session when you visit and log in to your customer account
Ensuring the appropriate display of the website – depending on the device you are using
Adapting our services to your choices that are technically relevant to the operation of our store
Remembering whether you consent to the display of certain content.

Analytical cookies – these are necessary to bill our Trusted Partners, measure the effectiveness of our marketing activities without identifying personal data, and improve the functioning of our website. We conduct analytical and statistical activities to continuously improve the products and services we offer, provide better solutions, and add new features and capabilities. We use them to:

Analyzing website traffic statistics and verifying traffic sources (redirection directions),
Detecting various types of abuse, e.g., artificial internet traffic (bots), DDoS attacks,
Restricting undesirable marketing activities,
Measuring the effectiveness of marketing campaigns conducted on behalf of the Store, e.g., in the Google Display Network, in affiliate programs, and on external websites,
Billing Trusted Partners for advertising services based on user activity, e.g., clicks.

Marketing cookies – used when the User consents. We use them to: Display advertisements that are relevant and interesting to a specific User. These cookies are used to profile advertisements displayed both on external websites and on the Online Store website, based on user preferences regarding product selection, based on data held by the Store, including user behavior in the Online Store. By accessing the Online Store website, the User may refuse the use of analytical and marketing cookies. In this case, we will not be able to compile detailed statistics and tailor our advertisements based on information collected in our Online Store. However, general advertisements will still be displayed both on the Online Store website and on other websites. We use technologies provided by Google and Facebook to display advertisements online. Therefore, please ensure that you consent to the profiling of advertisements on the Internet and on Facebook using technologies used by Google (which you can do here) and via Facebook (which you can do here). VII. DISABLING COOKIES AND OTHER TECHNOLOGIES
Users can also refer to the instructions available on the support pages of Polish-language web browsers. The Administrator recommends familiarizing themselves with local privacy settings. Web browsers allow cookies by default. If the User does not wish to receive any cookies, they can change the browser settings on their computer or other device used to access our Online Store. By continuing to use our Online Store without changing these settings, the User consents to receiving technical cookies in our Online Store, which, as indicated, are necessary for the proper functioning of the website. Most web browsers have a function that allows the User to view and delete cookies, including cookies in our Online Store. However, it should be emphasized that the inability to save or read cookies through our Online Store website may prevent the full and correct use of our Store. If the User uses different devices to access and browse our Online Store (e.g., computer, smartphone, tablet), they should ensure that each browser on each device is adjusted to their cookie preferences. The method for disabling cookies depends on the browser you are using. Below, you can disable cookies in Google Chrome, Firefox, Safari, Opera, and Edge.
Disabling cookies in Google Chrome
Users can also refer to the instructions available on the support pages of Polish-language web browsers. The Administrator recommends familiarizing themselves with local privacy settings..

In the upper right corner of the Google Chrome address bar, select Customize Google Chrome (three horizontal lines)
Select Settings.
In the Privacy and Security section, click the Content Settings button.
In the Cookies and other website data section you can change the following cookie settings::

Block all cookies
Block third-party cookies – select the Sites cannot use cookies to track your activity checkbox.

More information about Google browser settings
Chrome: https://support.google.com/chrome/#topic=7438008
Disabling cookies in Firefox
Users can also refer to the instructions available on the support pages of Polish-language web browsers. The Administrator recommends familiarizing themselves with local privacy settings.

In the upper right corner of the Firefox window, click the Open menu (three horizontal lines) and select Options.
Then select the Privacy tab.
From the drop-down menu in the History section, select: Firefox will: Use custom settings.
Check Accept cookies to enable, uncheck to disable cookies.
Select the cookie storage period:

Store: until they expire - the cookie will be deleted once it reaches its expiration date, which is determined by the website sending the cookie.
Store: until Firefox is closed – cookies stored on your computer will be deleted when Firefox is closed.
Store: Ask each time - Each time a website tries to send a cookie, the browser will prompt you to decide whether to store the cookie.

Close the options window to save your settings. More information about Firefox settings: https://support.mozilla.org/pl/kb/wzmocniona-ochrona-przed-sledzeniem-firefox-desktop

Disabling cookies in Safari
Select Safari > Preferences, click Privacy, and then select one of the options next to Cookies and website data: Users can also refer to the instructions available on the support pages of Polish-language web browsers. The Administrator recommends reviewing your local privacy settings.

Prevent cross-site tracking
Block all cookies

More information about browser settings
Safari:https://support.apple.com/kb/PH19214?viewlocale=pl_PL&locale=pl_PL
Disabling cookies in the Opera browser
Users can also refer to the instructions available on the support pages of Polish-language web browsers. The Administrator recommends familiarizing themselves with local privacy settings.

In the upper right corner of the browser address bar, select Customization (three horizontal lines)
Select Go to full browser settings/Advanced
In the Privacy and Security section, click the Cookies and other site data button.
In the Cookies and other website data section you can change the following cookie settings::

Block all cookies
Block third-party cookies – check the box next to Sites cannot use cookies to track your activity..

More information about browser settings
Opera:http://help.opera.com/Windows/12.10/pl/cookies.html
Disabling cookies in the Edge browser
Users can also refer to the instructions available on the support pages of Polish-language web browsers. The Administrator recommends familiarizing themselves with local privacy settings..

In the upper right corner of the browser address bar, select Customization (three horizontal lines)
Select Settings
In the Cookies and site permissions section, click Manage and delete cookies and site data
Disable Allow sites to save and read cookie data

Learn more about Edge settings: Microsoft Edge Help and Training - Microsoft Support
VIII. OTHER IMPORTANT INFORMATION
Protection of personal data security
The Administrator implements various measures to ensure the security of Users' personal data. Safe use of the services offered is ensured by systems and procedures that protect against unauthorized access and disclosure of data. Furthermore, the systems and procedures used by the Administrator are regularly monitored to detect potential threats. Personal data obtained by the Administrator is stored in computer systems to which access is strictly limited.
Storage of personal data
The retention period for Users' personal data may vary due to the fact that different data processing purposes may be specified for the personal data of different Users. The Administrator retains personal data for the period necessary to achieve the specified purposes, i.e.: The retention periods for personal data are as follows: - Data for marketing purposes: retained for 5 years from the last contact with the user. - Data related to order fulfillment: retained for 6 years in accordance with accounting regulations. - Data for analytical purposes: retained for 3 years from the date of completion of the analysis.

For analytical and statistical purposes, for the period necessary to achieve the objectives related to the effective operation and development of the Online Store;
For the fulfillment of orders and the provision of services to the User, for the duration of the contract and the limitation period for claims;
For the period required by law for the purpose of maintaining tax documentation and settlements under the contracts;
For the processing of personal data for marketing purposes, for the duration of the business relationship with the User, unless the User objects to processing for these purposes;
In each of the above cases, after the necessary processing period has elapsed, data may be processed only to secure the pursuit or defense of claims, and after that time, only if and to the extent required by law.

Users' personal data is stored in the Administrator's database, which employs technical and organizational measures to ensure the protection of processed data in accordance with the requirements set forth in applicable law. Only the Administrator has access to the database. After the processing period expires, the data is irreversibly deleted or anonymized.
Privacy Policy Changes
In order to update the information contained in this Privacy Policy and ensure its compliance with applicable law, this Privacy Policy may be amended. Any changes to the document's content will also result in a change to the update date at the beginning of this Privacy Policy. Users will be notified of each change via a notice posted on the Online Store's website or directly. To learn more about how personal data is protected, the Administrator recommends that Users regularly review this Privacy Policy. Any changes to the Privacy Policy will be communicated to users via email and prominent notices on the website. We recommend checking for document updates regularly.
Contact information
In case of any doubts related to personal data protection issues or to obtain information regarding this Privacy Policy, the User may contact the Administrator via e-mail office@victoria crystal.pl and by post to the following address: {ul. Rewolucji 1905 roku 1905, 90-273 Łódź}.