PRIVACY POLICY for the website motherearth.store
1. PREAMBLE
1.1. This Privacy Policy sets out the rules for the processing of personal data of users of the Online Store available at motherearth.store, as well as the rules for the use of cookies and similar technologies.
1.2. The protection of privacy and personal data of Online Store users is important to the Administrator. Personal data is processed in accordance with applicable laws, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR").
1.3. The Privacy Policy contains information regarding, in particular, the purposes and legal grounds for processing personal data, their storage period, data recipients, the rights of data subjects, as well as the use of cookies and analytical and marketing tools.
2. DATA ADMINISTRATION
2.1. The administrator of the personal data of Online Store users and Customers is Aleks Nowicki, conducting business under the business name "Alex" Aleks Nowicki, with the place of business address: ul. Andrzeja Szomańskiego 26E lok. 1, 02-495 Warsaw, Tax Identification Number (NIP): 5222840217, REGON: 142713260, hereinafter referred to as the "Administrator".
2.2. The Administrator can be contacted via email at: online@motherearth.store or in writing at the address indicated in point 2.1.
2.3. Providing personal data is voluntary; however, in cases where the data is necessary for the conclusion or performance of a contract, execution of an Order, creation and maintenance of an Account, or fulfillment of the Administrator's legal obligations, failure to provide it may prevent the use of a given service or the execution of an Order.
3. PURPOSES AND LEGAL GROUNDS FOR DATA PROCESSING
3.1. The Administrator processes the personal data of Users and Customers for the following purposes:
a) conclusion and performance of a sales contract, including acceptance and execution of an Order, payment processing, and delivery – based on Article 6(1)(b) of the GDPR;
b) provision of electronic services, including maintaining and servicing an Account and providing the functionality of the Online Store – based on Article 6(1)(b) of the GDPR;
c) fulfillment of legal obligations incumbent on the Administrator, in particular tax, accounting, and consumer rights handling obligations – based on Article 6(1)(c) of the GDPR;
d) handling complaints, returns, and other notifications related to the concluded contract – based on Article 6(1)(b) and (c) of the GDPR, respectively;
e) establishing, pursuing, or defending against claims – based on the legitimate interest of the Administrator, in accordance with Article 6(1)(f) of the GDPR;
f) conducting analyses and statistics regarding the operation of the Online Store and its use by Users – based on consent, if the use of cookies or similar technologies for this purpose requires obtaining it;
g) conducting marketing and advertising activities, including measuring the effectiveness of advertisements and – where appropriate – personalizing advertising content, based on the User's consent, if required by applicable law;
h) sending a Newsletter and commercial information by electronic means – based on the User's consent and in accordance with applicable electronic communication regulations;
i) maintaining the Administrator's profiles on social media and communicating with users of these services – based on the Administrator's legitimate interest, in accordance with Article 6(1)(f) of the GDPR.
3.2. The scope of processed data depends on how the Online Store is used and may include, in particular: first and last name, email address, phone number, delivery address and billing data, data concerning Orders and payments, as well as information regarding the use of the Online Store collected via cookies and similar technologies.
3.3. If the processing of personal data is based on consent, the User may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
3.4. For analytical or marketing activities, the Administrator may use information regarding the User's activity in the Online Store to analyze the use of the Store, measure the effectiveness of marketing activities, and – if the User has given appropriate consent – tailor advertising content.
4. DATA SECURITY
4.1. The Administrator applies appropriate technical and organizational measures to ensure the security of processed personal data, proportionate to the nature, scope, and purposes of processing and the risk of infringing the rights or freedoms of natural persons.
4.2. The Administrator uses, in particular, solutions to protect data against unauthorized access, loss, destruction, accidental modification, or unauthorized disclosure.
4.3. Access to personal data is granted only to persons authorized by the Administrator and entities processing data on his behalf to the extent necessary to perform their assigned tasks.
5. ENTRUSTMENT OF DATA PROCESSING
5.1. The Administrator may use the services of external entities that process personal data on his behalf and upon his instruction, in particular providers of IT services, e-commerce platforms, hosting services, email systems, marketing and analytical tools, and other services necessary for running the Online Store.
5.2. Entrusting the processing of personal data is carried out in accordance with applicable laws, in particular Article 28 of the GDPR. The Administrator uses the services of processors who provide sufficient guarantees for implementing appropriate technical and organizational measures to ensure the protection of personal data.
5.3. Entities processing personal data on behalf of the Administrator are authorized to process it only to the extent and for the purpose resulting from their assigned tasks and in accordance with applicable laws.
6. DATA RECIPIENTS
6.1. Personal data may be transferred to entities cooperating with the Administrator to the extent necessary for running the Online Store, executing Orders, and providing services to Users and Customers.
6.2. Recipients of personal data may include, in particular:
a) providers of e-commerce platforms, hosting, and IT services;
b) payment operators and entities providing payment services;
c) courier companies, carriers, collection point operators, and entities involved in delivery and returns;
d) entities providing warehousing and logistics services;
e) providers of email, Newsletter, and customer communication systems;
f) providers of analytical, marketing, and advertising tools – to the extent consistent with the choices made by the User regarding cookies and consents;
g) entities providing accounting, tax, legal, or advisory services to the Administrator.
6.3. Personal data may also be disclosed to authorized authorities or other entities if the obligation to disclose them results from applicable law.
6.4. The Administrator does not sell the personal data of Users and Customers.
7. DATA STORAGE PERIOD
7.1. Personal data is stored for the period necessary to fulfill the purpose for which it was collected, and subsequently for the period required by applicable law or necessary to establish, pursue, or defend against claims.
7.2. Data related to the execution of Orders and sales contracts are stored for the period necessary to perform the contract, and subsequently for the period required by law, in particular tax and accounting regulations, and for the statute of limitations period for any claims.
7.3. Data processed in connection with maintaining an Account is stored for the period of using the Account, and after its deletion – to the extent that further storage of data is required by law or justified by the necessity to establish, pursue, or defend against claims.
7.4. Data processed based on consent, in particular in connection with the Newsletter or marketing activities, is processed until the consent is withdrawn or until the purpose of processing ceases, unless further storage of data is required by law.
7.5. Data processed based on the Administrator's legitimate interest is stored until this interest ceases or a valid objection is raised, provided that, in accordance with the GDPR, the objection results in the necessity to cease processing.
7.6. Data related to cookies and similar technologies is stored for a period resulting from the type of the given cookie, the choices made by the User, and the settings of the tools used.
8. COOKIES AND SIMILAR TECHNOLOGIES
8.1. The Online Store uses cookies and similar technologies, i.e., small pieces of information saved or read on the User's device while using the Online Store.
8.2. Cookies may be used in particular to:
a) ensure the proper and secure operation of the Online Store and its basic functionalities;
b) remember the User's settings and preferences;
c) conduct analyses and statistics regarding the use of the Online Store;
d) measure the effectiveness of marketing and advertising activities;
e) personalize content and advertisements – if the User has given appropriate consent.
8.3. Cookies necessary for the proper functioning of the Online Store may be used without the User's separate consent to the extent permitted by applicable law. Other cookies, in particular analytical and marketing ones, are used after obtaining the User's consent, if such consent is required.
8.4. Upon the first visit to the Online Store, the User may make a choice regarding the use of specific categories of cookies using the provided consent management mechanism. The User may also change their settings or withdraw their consent at a later time.
8.5. Withdrawal of consent does not affect the lawfulness of actions taken on its basis before its withdrawal.
8.6. The User may also manage cookies using their web browser settings. Limiting the use of necessary cookies may, however, affect the proper functioning of some functionalities of the Online Store.
8.7. Cookies may come both from the Administrator and from third parties providing services to the Administrator related in particular to analytics, advertising, payment processing, e-commerce platform operation, and integration with external services.
8.8. Information regarding the categories of cookies used, their purposes, and duration is available in the cookie consent management mechanism provided in the Online Store.
9. ANALYTICAL AND MARKETING TOOLS
9.1. The Administrator may use external analytical and marketing tools to analyze how the Online Store is used, keep statistics, measure the effectiveness of advertising activities, and conduct and optimize marketing campaigns.
9.2. As part of the Online Store, tools provided by Google, including Google Analytics and Google Ads, as well as tools provided by Meta Platforms, including Meta Pixel, may be used. These tools may use cookies or similar technologies and process information regarding the User's activity in the Online Store.
9.3. Analytical and marketing tools requiring access to information saved on the User's device or saving such information are activated after obtaining the User's appropriate consent, if such consent is required by applicable law.
9.4. The User may change their choices regarding cookies and analytical or marketing tools at any time using the consent management mechanism available in the Online Store.
9.5. Providers of analytical and marketing tools may process data in accordance with their own privacy policies. Detailed information regarding individual tools, cookie categories, and their duration may be available in the cookie consent management mechanism.
10. RIGHTS OF DATA SUBJECTS
10.1. A person whose personal data is processed by the Administrator has the right – in cases specified in the GDPR – to:
a) access their personal data and receive a copy of it;
b) rectify their personal data;
c) delete personal data;
d) restrict the processing of personal data;
e) transfer personal data;
f) object to the processing of personal data based on the Administrator's legitimate interest;
g) withdraw consent at any time, if processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal.
10.2. To exercise the rights to which you are entitled, you may contact the Administrator via email at: online@motherearth.store or in writing to the address indicated in point 2.1 of the Privacy Policy.
10.3. The data subject also has the right to lodge a complaint with the supervisory authority responsible for personal data protection – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) – if they believe that the processing of their personal data violates GDPR provisions.
10.4. In the case of processing personal data for direct marketing purposes, the data subject has the right to object to such processing at any time. After an objection is raised, personal data will no longer be processed for direct marketing purposes.
11. COMMERCIAL INFORMATION AND MARKETING
11.1. The Administrator may send the User commercial and marketing information regarding Mother Earth products, services, promotions, and activities if the User has given appropriate consent, in cases where such consent is required by applicable law.
11.2. Commercial information may be sent in particular via email, including as part of the Newsletter service.
11.3. The User may opt out of receiving commercial and marketing information at any time, in particular by using the unsubscribe link located in the email or by contacting the Administrator at: online@motherearth.store.
11.4. Withdrawal of consent is free and does not affect the lawfulness of actions taken on the basis of consent before its withdrawal.
12. MINORS
12.1. The Online Store is primarily intended for adults.
12.2. Minors may use the Online Store to the extent permitted by applicable law, and in cases where it is required, with the consent or participation of their legal representative.
12.3. The Administrator does not carry out activities aimed at knowingly collecting personal data of children in violation of applicable law.
13. LINKS TO EXTERNAL WEBSITES
13.1. The Online Store may contain links to websites or services of third parties.
13.2. Upon navigating to an external website, the User is subject to the terms of use and privacy policy applicable to that entity. The Administrator has no influence on the content, personal data processing rules, or the use of cookies by independent third-party websites.
13.3. The Administrator recommends familiarizing yourself with the privacy policy and rules regarding cookies applicable on visited external websites.
14. DATA TRANSFER OUTSIDE THE EUROPEAN ECONOMIC AREA
14.1. In connection with the Administrator's use of services from technological, IT, analytical, or marketing providers, personal data may be transferred or processed outside the European Economic Area (EEA).
14.2. In the case of transferring personal data to countries for which the European Commission has issued an adequacy decision, the transfer of data is carried out on the basis of such a decision.
14.3. In other cases, the Administrator ensures the application of appropriate safeguards required by applicable personal data protection regulations, in particular standard contractual clauses approved by the European Commission, where applicable.
14.4. The User may obtain additional information regarding the safeguards applied in connection with the transfer of data outside the EEA by contacting the Administrator at the following address: online@motherearth.store
15. FINAL PROVISIONS
15.1. This Privacy Policy is for information purposes and sets out the rules for the processing of personal data and the use of cookies and similar technologies in connection with the use of the Online Store.
15.2. Any questions regarding the processing of personal data and this Privacy Policy may be directed to the Administrator via email at: online@motherearth.store or in writing to the address indicated in section 2.1 of the Privacy Policy.
15.3. The Administrator may make changes to this Privacy Policy, in particular in the event of changes in legal regulations, the method of personal data processing, the technologies used, or the functionalities of the Online Store.
15.4. The current version of the Privacy Policy is published on the Online Store. Changes to the Privacy Policy are effective from the date indicated upon its publication, subject to the rights of data subjects under applicable law.