PRIVACY AND COOKIES
Kingmedic.pl (hereinafter referred to as "we") takes personal data protection very seriously. In this document, we provide information on what data of our buyers is processed and for what purpose, regardless of whether the data processed is based on the buyer's consent or on a legal basis.
What personal data do we process?
If you use our services, we collect various types of data, such as contact information and other information. We track the type of products you browsed in our online store, which device you used to connect to the store and which of our email offers you showed interest in. Based on the data collected, we can develop more personalized offers, improve our services and online sales. If you make a purchase from us, we also process your name and other personal data that we need to conclude the contract and deliver your order.
We process the following personal data:
identification data, in particular name and surname;
contact details, which include personal data via which we can contact you, in particular e-mail address, telephone number, delivery address, billing address;
information about orders, in particular information about the items ordered and the method of payment, including the account number and information about complaints:
information about your internet browsing habits, including when browsing the web via our mobile application, in particular information about the articles and services you search for, the links you click, the searches and scrolling on our website, as well as data about the device from which you access the internet, such as your IP address and related location, your device identifier, its technical parameters (operating system, version, screen resolution), the browser you select and its version, and data from cookies and similar technologies that identify your device;
information about the user’s behavior in connection with reading the messages we send, in particular the time needed to open the message and data about the devices from which the user accesses the network, such as the IP address and related location, device identifier, its technical parameters (operating system, version, screen resolution), selected browser and its version;
derived data, including personal data relating to your settings, information about items you have purchased, information about your online habits and your behaviour in reading the messages we send you; this is mainly information about your gender, age, consumption habits and attitudes towards various items and services;
data related to the use of the call centre, including in particular records of telephone calls in the call centre, identification of messages sent to us, including identification of the user's IP address.
Why do we process personal data and why do we have the right to do so?
We process your personal data in various situations and for various purposes. If you visit our online stores where we use cookies, we will use your data primarily to determine the number of visitors and improve our services. If you make purchases with us, we will use your data to process orders, protect our legal claims and fulfill our legal obligations. We can also use your contact details and other information to display and send personalized offers. With your consent, we pass on information to third parties to present offers on other websites and to provide you with access to certain additional services. We are entitled to process your personal data based on the preparation or performance of a contract with you, the fulfillment of legal obligations, our legal claims or your consent.
As part of our activities, we process personal data for various purposes and to various extents, namely:
Without your consent based on the performance of a contract, our legitimate interests or for the fulfillment of legal or contractual obligations.
Based on user consent.
The type of data processing that can be carried out without your consent depends on the purpose for which the processing is related and on the relationship you have with us, regardless of whether you are just a visitor to our online store or a buyer. Your data may be processed if you are a recipient of goods or services ordered from us, you contact us or you visit our collection point.
Use of cookies and other technologies, transfer of data to advertising agencies and social networks.
If you visit our online store, we save and consequently read small files from your device, such as cookies. A so-called cookie is a small collection of letters and numbers that we store in your browser or on your computer's hard drive. Some cookies allow us to interact with your actions while browsing our pages from the moment you open your browser window to the moment you close it. Once you close your browser window, any associated cookies are deleted. Some cookies remain on your device for a certain period of time and are activated each time you visit websites that are associated with cookies. We also use web beacons (also known as web beacons). These are small images that have a similar function to cookies. Compared to cookies that are stored on your computer's hard drive, web beacons are an integral part of the website. For simplicity, all of these technologies will be referred to as cookies in this document. In the rest of this document, we will discuss storage space only for the sake of simplicity.
Some cookies are stored directly on your device by our websites. These cookies help us to:
identify you when you switch between different web pages of our domain and on new visits. This ensures that products placed in your shopping cart are not deleted and we can also save which version of our website should be displayed if multiple versions are available at the same time;
determine whether you have given us consent as set out in this document or whether, for example, you have chosen to participate in a particular search;
ensure security, e.g. we can check whether your connection to our internet domain has not been misused and whether someone is not carrying out any activities using your data;
detect, investigate and correct errors and faults on our websites.
These cookies and other files are essential for the operation of our online store. If you disable cookies in your browser, our sites may not function properly and we will not be able to offer our products and services.
We also store cookies from our website on your device that enable us to:
tracking the number of visits to our websites or individual content, creating statistics and reviews, and measuring the effectiveness of advertising;
display various aspects of our websites if we are testing new features;
tailor the content of our site to your needs, such as prioritizing previously searched items and displaying different offers based on your preferences on our websites;
Storing cookies for other websites may be used to
(a) collecting information about user behavior on our or other websites;
(b) displaying personalised offers and advertisements on social networks and other sites outside our domain.
In order to display personalized offers and advertisements on social networks and other sites outside our domain, we also share information about your online behavior with our social media and advertising partners. We do not share information that identifies you with such partners. The list of social media and advertising networks we use is listed in the section "Who manages your personal data and with whom do we share it?".
How do we monitor cookies?
You can manage and control cookies in various ways. Please note that deleting or blocking cookies may negatively impact your user experience and the availability of some pages of our online store.
Most browsers automatically accept cookies, but you can also control whether or not to accept cookies through your browser settings, which are usually found in your browser's Tools or Preferences menu. For more information on how to change your browser settings or how to block, manage or filter cookies, visit: www.allaboutcookies.org.
Use of personal information of website visitors
If you visit our online store, we process your data based on our legitimate interest (i.e. without your consent) for the following purposes:
creating statistics and overviews, in particular tracking the number of visits to our websites or individual contents and measuring the effectiveness of advertising. Our legitimate interest is to measure the effectiveness of our websites and advertising costs. For this purpose, through your online behavior, we may obtain and use other derived data, or we may transfer derived data to our partners as described in the section "Who processes your personal data and with whom do we share it?".
testing new features and applications before distribution to avoid malfunctions that could affect a purchase made by the user on our site. Our legitimate interest here is the flawless functioning of our services for the user.
Taking measures to prevent attacks on our websites and their compromise and to ensure the security of your information; our legitimate interest in this case is the flawless operation of our services for you and the security of your information
Information about user behavior on the web is not only collected via cookies, but is supplemented by the following information:
- the IP address of the user's device (the address of the device through which the user communicates with other devices on the Internet);
- your device's operating system, version, and language settings;
- the browser used on the device, its version and language settings;
- the URL of the page from which you accessed our site.
- For this purpose, we use personal data for a maximum period of 38 months. The data is stored in pseudonymous form.
Data regarding user behavior on the websites are also processed on the basis of our legitimate interest (i.e. without the user's consent) in order to prepare personalized offers and personalized advertisements that we publish online. In this case, our legitimate interest is to offer promotions that suit the user. The collected data is then analyzed. Based on this data, we can classify our users into groups and prepare offers that are closest to their interests. If purchases are subsequently made, the data received with the order will be used for this purpose.
We use personal data for the above purpose for 1 month.
If you make a purchase from us
To make a purchase from us, you must visit our online store, and the steps described can be found in the section "If you visit our websites". If a purchase is made on our website, the data processing will be extended as follows:
a) Processing based on the performance of a contract
If a purchase is made by a natural person, we process the information received solely for the purpose of fulfilling the order received. This includes identification, contact and order data.
If the purchase is made as a legal person and the contract is concluded between us and a representative of the company, we process the data in the same way based on the conclusion and performance of the contract with the person representing the company.
Using your data to fulfil your order means that we use your data separately for the following purposes:
the ability to complete an online order, e.g. not removing items added to the shopping cart or information from an order being prepared;
communication possibilities, e.g. as shipping confirmation;
necessity to pay for goods;
deliveries; in this respect, we may also transfer your data to our transport partners, solely for the purpose of delivering such goods as described in the section "Who processes your personal data and with whom do we share it?";
in connection with claims relating to goods or services ordered; in this respect, we may transfer your data to a goods supplier or service centre as described in the section "Who processes your personal data and with whom do we share it?";
in connection with other requests communicated to us through our call center, as described in the section "When you communicate with us through different channels."
For this purpose, we use personal data for the time necessary to process an order or consider a complaint.
b) Processing based on legitimate interest
If you make a purchase from us, we store your identification, contact details and order information based on legitimate interest (without your consent) for the protection of legal claims and for the maintenance of internal records and controls. Our legitimate interest in this case is the protection of legal claims and overseeing the smooth provision of our services.
In addition, based on our legitimate interest (i.e. without your consent), we process your identification and contact details, settings and order information (if you purchase at a later date) for the purposes of:
Creating personalized offers and personalized advertising that we display on our websites, as described in the section "If you visit our websites". We also use information about your order.
Your satisfaction with our services is measured by the NPS survey that we send to you via email as part of the Judge.me program. We send the survey to randomly selected users who made a purchase in the previous month. The survey results are used solely for our personal use.
Using your contact details and other information, we can display and send personalized offers. In order to protect legal claims and store data for internal audits, we process data for a period of 3 years and another year for claims filed before the limitation period has expired. In the event of legal, administrative or other proceedings, we process your personal data for the period necessary for the duration of such proceedings and for the remaining limitation period after their termination.
For other purposes, we use personal data for a maximum of 6 months.
You may object to this type of processing which is carried out on the basis of our legitimate interest.
c) Processing based on compliance with legal obligations
We also need to comply with certain legal obligations. If we process data for the above-mentioned purposes, we do not need your consent. On this legal basis, we process identification and contact data and order data, in order to take into account the regulations in force at the time of drawing up this memorandum, in particular these are:
Mandatory Code
Consumer Protection Act
Act on Goods and Services Tax
Act on Tax Certification of Accounts
Accounting Act
Electronic Communications Act
Act on the Prevention of Money Laundering and Terrorist Financing.
For this purpose, we use personal data for a maximum of 10 years (plus the current year) based on the last issued order-related document.
If you are the recipient of goods or services ordered by us
If you are a recipient of goods or services ordered by us, we process your identification and contact data:
Based on our legitimate interest, in order to prepare, conclude and execute a contract with our client. The execution of this contract is also our legitimate interest.
Based on our legitimate interest in obtaining information that will allow us to improve our services in the future and to prepare internal statistics and reviews, our goal is to improve the quality of the services provided to our customers.
In order to fulfill our actual obligations, in particular in accordance with the applicable legal provisions listed in the previous paragraph of the relevant memorandum.
In order to protect legal claims and our internal records and controls, our legitimate interest is to ensure the protection of legal claims and to supervise the proper performance of our services.
In order to prepare, conclude and execute the contract with our customer, we use personal data for the period strictly necessary to execute the order. After this period, the data will be stored on the basis of our legitimate interest in order to protect legal claims and to maintain internal records and controls for a limitation period of 5 years and, if necessary, for an additional year after its expiry if the application is filed at the end of the limitation period. In the event that we initiate legal, administrative or other proceedings, we process your personal data for as long as absolutely necessary to carry out these proceedings and until the remainder of the limitation period has expired after their conclusion. Our legitimate interest in this case is to protect legal claims and monitor the proper provision of our services. In order to ensure compliance with legal obligations, we use personal data for a maximum of 10 years for each order
If you communicate with us through different channels
If you communicate with us through various channels, such as call centers, email, chat or social networks, your identification and contact data and records of these communications are processed on the basis of our legitimate interest (i.e. without your consent) for the purpose of:
processing user submissions; in the case of a purchase, if the submission concerns an order, we process it on the basis of the performance of the contract;
logging requests to monitor their regular and timely completion;
to prove that we have received and processed your request, e.g. when ordering goods or making a complaint;
analysis of requirements in order to improve the quality of our services.
For this purpose, we store your personal data for a period of 3 months. If you place an order through one of our channels, we may store your data to protect legal claims for the limitation period of 5 years, and for an additional year after its expiry for claims made at the end of the limitation period. In the event of legal, administrative or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings and for the remaining limitation period after their termination.
Who processes your personal data and who do we share it with?
In most cases, we process your data as a data controller for our own purposes. In this case, your data is transferred to our partners for the purpose of payment, shipping and other matters related to your order. We also pass on information to our analysts who process it in accordance with our instructions. With your consent, we may also transfer information to advertisers and social networks to display personalized advertising on other websites.
Your personal data is processed by us as a controller. This means that we determine the purposes defined above for which we collect your personal data and the methods for processing it, and we are responsible for the correct implementation of this information.
From what sources do we obtain personal data?
Personal data is collected directly from you via our online store or through communication with you. Some information may also be obtained from our partners, such as banks or transport companies.
We primarily process personal data that you provide directly when purchasing products and services, when creating and using an account, and when communicating with us, such as through a call center. We also collect personal data directly from you by tracking your online habits when you browse our online store or read our news.
If you make a purchase in our shop, we may receive additional information about your order from banks, our payment system partners and shipping partners. This may include, for example, information about your account number, payments made and delivery of goods, in connection with the execution of the sales contract.
Transferring data outside the EU
In some cases, we may transfer your personal data to countries outside the European Economic Area.
In the context of transfers to recipients listed in the section "Who processes your personal data and with whom we share it", data may be transferred to third countries that do not necessarily ensure an adequate level of protection for personal data. Such transfers only take place if the recipient undertakes to comply with standard contractual provisions issued by the European Commission, available at: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2004:385:0074:0084:CS:PDF.
The right to information
You have the right to know what information we collect, for what purpose and for how long, where your personal data comes from, to whom we transfer it, who processes it outside of us and what rights you have in relation to the processing of your personal data. For more information, see the section "Protection of personal data of customers". If you are not sure what personal data we collect about you, you can ask us to confirm whether such data is being collected. If so, you have the right to know this information. Under the right to information, you can also request a copy of the data being processed, and we will provide the first copy free of charge.
The right to rectify data
Anyone can make a mistake. If a user notices that their personal data is incorrect or incomplete, they have the right to request that it be corrected as soon as possible.
The right to delete data
In some cases, the user has the right to request the deletion of their personal data. The data will be deleted as soon as possible if one of the following conditions is met
We no longer need the data being processed.
The user has withdrawn consent to the processing of personal data for which consent was required and we have no other reason to continue processing that data.
You have exercised your right to object (see section below on your right to object) in relation to your personal data processed based on our legitimate interests.
Please note, however, that even if one of the conditions described is met, this does not automatically mean that all of your personal data will be deleted. The right to deletion does not apply if the processing of your personal data is still necessary to fulfill our legal obligations or to establish, exercise or defend our legal claims (see section "Why do we process personal data and why do we have the right to do so?").
The right to restrict data processing
In some cases, in addition to the right to erasure, you may exercise the right to restrict the processing of your personal data. This right allows you to request that your personal data be specifically marked and excluded from further processing. In this case, the restriction of processing is temporary (as opposed to permanent deletion). We must restrict the processing of your personal data in the following situations:
If you dispute the accuracy of personal information until we can determine what information is accurate.
If we process your personal data without an appropriate legal basis (e.g. after the processing purpose has expired) and instead of deleting them, we restrict their processing.
If we no longer need your personal information for the purposes for which it was collected.
If you object to the processing of your personal data (see section "Right to object to data processing").
The right to data portability
The user has the right to receive from us all of his personal data that he has provided to us and that are processed on the basis of the concluded contract. The user's personal data are transferred in a structured, coherent and readable format. Data transfer is carried out automatically from our electronic databases.
The right to object to data processing
For reasons relating to your particular situation, you have the right to object to the processing of your personal data on the basis of Article 6(1)(e) or (f) of Regulation (EU) 2016/679 and to object to the processing of your data for direct marketing purposes (see section "Why we process your personal data and why are we entitled to do so"). The processing of your data for marketing purposes will cease immediately. This procedure will also be used in other cases where you have raised an objection.
Right to appeal
The exercise of the above rights does not affect the user's right to lodge a complaint with the competent supervisory authority. The user may exercise this right if he or she believes that his or her personal data is being processed unlawfully or in violation of applicable law.
How can you exercise some of your rights?
To exercise the rights set out in this document, please contact us by e-mail at info@kingmedic.pl .
Your request will be processed as soon as possible, but no later than one month. In special cases, especially if the matter is more complex, we have the right to extend this period by an additional two months. In the event of an extension, we will inform you in writing, providing a written justification for the delay.