Privacy and Cookie Policy

In fulfilling the information obligation imposed under Article 13 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons in relation to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Data Controller hereby informs:

  1. This Privacy Policy (hereinafter referred to as the "Policy") is addressed to Users and Customers using the website available at the domain https://mojawoda.com(referred to hereinafter as the "Online Store") and defines the type, scope, and purposes of data processing. The policy is informational in nature and constitutes an integral part of the Terms and Conditions of the Online Store. All terms used in the Policy with a capital letter have the same meaning as assigned to them in the Terms and Conditions of the Online Store, unless otherwise stated in this Policy.

  2. The administrator of personal data obtained from individuals using the online store is the Seller, i.e. WODARO Sp. z o.o. with its registered office at: ul. Głubczycka 57, 43-130 Kietrz, entered into the register of entrepreneurs of the National Court Register by the District Court in Opole, VIII Economic Division of the National Court Register under KRS number 0000925164, NIP: 7481590414, REGON 520119046, e-mail:biuro@mojawoda.com, contact phone: +48 774 854 586 or 505 020 040, every weekday from 8:00 AM to 4:00 PM (call charges according to the operator's tariff used by the User); (hereinafter also referred to as the "Personal Data Administrator" or "Seller").

  3. By placing an Order in the Online Store without registering a Customer Account, and/or registering a Customer Account, and/or subscribing to the newsletter, and/or contacting the Seller (via email, phone, or contact form) and/or using other services provided by the Seller electronically available inIn the online store (password reminder for the Customer Account, posting a review of the Product, recommending the Product on a social media platform) - the User provides the Seller with their personal data (first and last name, address, email address, phone number, possibly company name, business address, VAT number, IP address of the computer used by the User while using the online store).

  4. Purposes and activities of personal data processing:

    • placing an Order without registering a Customer Account – providing data is voluntary, but necessary for the execution of the Sales Agreement. The data provided during the Order placement is used to fulfill the Sales Agreement concluded with the User, and the legal basis forthe processing is based on Article 6(1)(b) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "GDPR"). The data will be processed by the Data Controller for the period necessary to fulfill the Sales Agreement, howeverThe personal data administrator will continue to store the User's data in order to defend against potential claims related to possible withdrawal from the Sales Agreement, to handle complaints, for tax settlement purposes, which constitutes a legitimate interest of the personal data administrator referred to in Article 6(1)(f) of the GDPR;

    • registrationCustomer Account – The User can register a Customer Account to avoid providing personal data with each subsequent Order. Providing data is voluntary but necessary for the registration of the Customer Account. The data provided during registration is used to manage the Customer Account and to fulfill the Sales Agreements entered into by the Customer, while the legal basis for their processing is the consent given by the User during the registration of the Customer Account.(according to Article 6(1)(a) of the GDPR Regulation). The data will be processed by the Seller for the duration of the Customer Account, unless the User of the online store resigns from having it earlier. However, resigning from the Customer Account does not lead to the deletion of data from the database. The personal data administrator will continue to store the User's data for the purpose of defending against any claims related to the operation of the Customer Account, in particular forthe need to demonstrate the User's consent to registration, which constitutes a legitimate interest of the Personal Data Administrator referred to in Article 6(1)(f) of the GDPR;

    • the User's contact with the Personal Data Administrator through the online store - by contacting via email, by phone, or by using the formthe contact information provided in the CONTACT tab of the Online Store, the User provides the Data Administrator with their email address as the sender's address, their first and last name, contact phone number, and address. Providing this information is voluntary but necessary for the Data Administrator to be able to contact the User of the Online Store. The User's data is processed in this case for the purpose of communication based on actions requested and initiated byThe User, and the legal basis for processing is Article 6(1)(b) of the GDPR Regulation. The legal basis for processing data after the contact has ended is a legitimate purpose in the form of archiving correspondence for the purpose of demonstrating its course in the future (Article 6(1)(f) of the GDPR Regulation). The content of the correspondence may be subject to archiving; the Data Controller cannot definitively determine when the correspondence will be deleted. The User of the StoreThe internet user has the right to request a history of correspondence conducted with the Personal Data Administrator (if it was subject to archiving), as well as to demand its deletion, unless the archiving is justified due to the overriding interest of the Personal Data Administrator, e.g., defense against potential claims from the Online Store User;

    • using the remaining services provided by the Seller electronically (password reminder for the Customer Account, posting a review of the Product, recommending the Product on a social media platform) - providing data is voluntary but necessary for the execution of the electronic service agreement by the Seller regarding the service selected by the User, and the legal basis for their processing is the performance of the contract concluded withThe User, in accordance with Article 6(1)(b) of the GDPR Regulation. The data will be processed by the Data Controller for the period necessary to fulfill the contract for the provision of services electronically. After the contract is fulfilled, the Data Controller will continue to store the User's data in order to defend against potential claims regarding the services provided by the Seller electronically, handling complaints, which constitutes a legitimate interest of the Data Controller.personal data referred to in Article 6(1)(f) of the GDPR Regulation;

    • newsletter - The User of the Online Store who wishes to subscribe to the newsletter to receive commercial information from the Data Controller via email must check the appropriate check-box with consent when placing an Order or registering an Account. Providing data is voluntary,but necessary to subscribe to the newsletter. The data provided during the newsletter subscription is used to send the User the newsletter, and the legal basis for processing this data is the consent given by the User when subscribing to the newsletter (in accordance with Article 6(1)(a) of the GDPR. The data will be processed by the Data Controller for the duration of the newsletter's operation, unless the User of the online store withdraws their consent beforehand.receiving. However, opting out of receiving the newsletter does not lead to the deletion of data from the database. The data controller will continue to store the User's data in the mailing system to defend against any potential claims related to the sending of the newsletter, particularly for the purpose of demonstrating that the User has consented to receive the newsletter, which constitutes a legitimate interest of the data controller as referred to in Article 6(1)(f).GDPR regulations. The User may correct their data stored in the newsletter database at any time. The User also has the right to data portability as referred to in Article 20 of the GDPR.

  5. The Seller may also use the personal data of the Online Store User for the purpose of fulfillment by others.as the data controller, for example, for the purpose of pursuing claims arising from Sales Agreements concluded through the Online Store, based on Article 6(1)(f) and Article 9(2)(h) of the GDPR - for the limitation periods of claims specified in the provisions of law.

  6. The data controller informs,that the User of the Online Store has the right to data portability at any time, the right to access the content of personal data, and the ability to rectify, amend, or object to the processing of data, and the consent granted for data processing may be withdrawn by the User at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The data controller may refuse to delete the data.of the user's personal data, if there are grounds arising from legal provisions. The user also has the right to file a complaint regarding the processing of personal data with the President of the Personal Data Protection Office. The rights indicated in this point for the User of the online store are not absolute and will not apply to all actions of processing their personal data. The data of the Users of the online store will not be subject to automated decision-making.decisions, including profiling. Data is not transferred outside the European Economic Area.

  7. The rules related to the exercise of the User's rights are described in detail in Articles 15 – 21 of the GDPR Regulation:

    1. right to erasuredata - the so-called "right to be forgotten" (Article 17 of the GDPR):
      The User has the right to request the deletion of all or some personal data if:
      a) the personal data are no longer necessary for the purposes for which they were collected or processed,
      b) the personal data are processed unlawfully,
      c) the personal data must be deleted to comply with a legal obligation under Union law.of the European or almost a member state to which the Data Controller is subject,
      d) personal data was collected in connection with the provision of information society services. Despite the request for deletion of personal data in connection with the objection raised, the Data Controller may retain certain personal data to the extent that processing is necessary for the establishment, exercise, or defense of claims, as well as to comply with a legal obligation.requiring processing under the law. This particularly concerns personal data including: first name, last name, email address, which data is retained for the purposes of handling complaints and claims related to the use of the services of the data controller.

    2. right to restrict data processing (Article 18 of the GDPR):
      The user has the right to request the restriction of processing their personal data. Submitting a request, until it is resolved, prevents the use of certain functionalities or services that involve the processing of data covered by the request. The user has the right to request the restriction of the use of personal data in the following cases:
      a) when they contest the accuracy of their personal data – then the Data Administratorlimits their use to the time necessary to verify the accuracy of the data, but no longer than 7 days,
      b) when the processing of data is unlawful, and instead of deleting the data, the User requests a restriction on their use,
      c) when personal data is no longer necessary for the purposes for which it was collected or used but is needed by the User for the establishment, exercise, or defense of claims,
      d) when he has submittedobjection to the use of his data – in this case, the restriction lasts for the time necessary to consider whether, due to the special situation, the protection of the User's interests, rights, and freedoms outweighs the interests pursued by the Data Controller in processing the User's personal data.

    3. right of access to data (Article 15 of the GDPR):
      The User has the right to obtain from the Personal Data Administrator confirmation as to whether personal data is being processed, and if so, the User has the right to:
      a) access their personal data;
      b) obtain information about the purposes of processing, categories of processed personal data, recipients or categories of recipients of such data, the planned retention period for the User's data or the criteria used to determine that period (when the specificationthe planned data processing period is not possible), about the rights granted to the User under the GDPR Regulation and the right to lodge a complaint with a supervisory authority, about the source of this data, about automated decision-making, including profiling, and about the safeguards applied in connection with the transfer of this data outside the European Union;
      c) obtain a copy of their personal data.

    4. right to rectification of data (Article 16 of the GDPR):
      The User has the right to request from the Personal Data Administrator the immediate rectification of their personal data that is inaccurate. Taking into account the purposes of processing, the User to whom the data relates has the right to request the completion of incomplete personal data, including by providing an additional statement, by directing the request toPersonal data administrator.

  8. The Seller hereby also informs that it never transfers, sells, or lends the collected personal data of the Users of the online store to third parties other than those specified in this Policy, unless with the explicit consent or at the request of the User, or at the requestauthorized under the law of state authorities in connection with ongoing proceedings (e.g., courts, law enforcement agencies, Trade Inspection).

  9. The data controller processes personal data provided by the User of the online store in accordance with the scope of consent granted by the User and the requirements of the law, including the provisions of the Regulation.GDPR, in particular, protects the personal data of Users of the online store from being disclosed to unauthorized persons, loss, or damage, also guaranteeing the confidentiality of all personal data provided to it.

  10. Personal data provided to the Seller will not be disclosed to third parties, other than those specified in the regulations of the online store.(np. bank executing the Customer's payments, supplier of the Order), without obtaining prior separate consent from the User.

  11. The online store uses "cookies" files, which are used for identifying the browser while using the online store, to know which page to display. Cookies do not contain any datapersonal. When entering the Online Store page on the User's computer, certain information may be placed, which may take the form of a "cookie" file. Detailed and most up-to-date information on this topic can be found directly on the manufacturer's website.http://www.google.pl/intl/pl/policies/technologies/types/

  12. Cookies are small files consisting of a string of letters and characters, saved on your computer by the internet while visiting a specificProduct pages presented in the Online Store. Cookies are used by the Online Store solely to better tailor the website to the individual preferences of the User. Additionally, cookies used in the Online Store may serve the following purposes:

    • ensuring the proper functioning and improving the functionality of the Store.internet - "cookies" files allow for the storage of information provided by the User, e.g. Login;

    • improvement of performance and optimization of the online store - "cookies" files allow for reading information about how Users navigate the website, thus helping to enhance itsaction;

    • targeting informational and promotional content - "cookies" are intended to automatically adjust the content of the Online Store to the needs of the User;

    • to prevent sendingThe information collected and generated by "cookies" in the Online Store does not allow for the personalization and identification of the User, and as a result of their use, no personal data of the Online Store User is stored.

    • The "cookies" used in the Online Store are safe and do not have a harmful effect on the User's computer. By using the Online Store, the User agrees to the use of "cookies" in accordance with this Policy. The User can change the way "cookies" are used by the browser at any time, including blocking or deleting those that come from the Online Store. In most browsersweb browsers, you can delete or remove "cookies" files from your computer's hard drive, block all incoming "cookies" files, or set a warning before saving such files on the disk. To do this, you should refer to the user manual or help topics of the web browser you are using. The process of managing and deleting "cookies" files may vary depending on the browser in use. Limiting the use of "cookies" may affect some functionalities available inIn the online store.

    • The seller uses statistical analysis of traffic on the site through Google Analytics (Google Inc. based in the USA). The seller does not provide personal data to the operator of this service, only anonymized information. The service is based on the use of cookies on the User's end device. Regarding information about preferencesUsers can view and edit information collected by the Google advertising network through the tool: https://www.google.com/ads/preferences/

    • The website https://mojawoda.com may also contain links to other websites not administered by the Personal Data Administrator (e.g., Facebook, Instagram), therefore it cannothis own responsibility and is advised to familiarize himself with the relevant privacy policy of that site before providing any personal data. By choosing to navigate to such sites and visit them, the User does so at their own risk.at their own responsibility.

    • The personal data administrator is entitled to make changes to this Policy for important reasons (e.g., changes in legal regulations, changes in the rules for placing Orders in the Online Store). In the event of changes, the User will be notified at least 14 days in advance of the date the changes come into effect -Appropriate information about changes to the Policy will be posted in the Online Store, and a User with a Customer Account and/or subscribed to the newsletter will also receive information about the change in the Policy via email. In case of non-acceptance of the amended Policy, the User of the Online Store has the right to terminate the Policy, and thus refuse to continue leaving their personal data.

    • The user is requested to promptly notify the Personal Data Administrator of any violations of security rules related to the use of the online store that they have identified. In case of any questions, comments, requests, or suggestions regarding this Policy, requests for information about the User, the Customer, or information regarding data about the User, the Customer in the StoreThe online service has a Data Controller and the purposes for which it processes data - The User or Customer is requested to contact the Data Controller via email: biuro@mojawoda.com or by phone: +48 774 854 586 or 505 020 040, daily on Daysworking hours 8:00 AM – 4:00 PM, connection fee according to the operator's tariff used by the User.