PRIVACY POLICY

The Privacy Policy defines the rules of conduct and information regarding the processing of personal data of users using the Service. Each person using the Service remains anonymous until they decide to reveal their identity. The processing of shared personal data takes place solely on the basis and within the limits of legal regulations, and taking care of the security of user data, the Service Administrator selects technical means to ensure their fullest protection, including, first of all, against making them available to unauthorized persons and processing in violation of legal regulations.

I. PERSONAL DATA CONTROLLER

The controller of personal data is For Globe, a limited liability company with its registered office in Warsaw (01-001) at ul. Jana Pawła II 43a/37b, entered into the register of entrepreneurs maintained by the District Court for the capital city of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, under number 0000849471, with the Tax Identification Number (NIP) 5272931287 and the National Business Registry Number (REGON) 386522417, hereinafter referred to in the Privacy Policy and in the content on the website as the "Controller" or "For Globe".

II. SCOPE OF DATA PROCESSING

1. The personal data administrator collects and processes personal identifying data such as name, surname, date of birth, data on the business activity or place of employment, NIP (Taxpayer's Identification Number), REGON (National Business Registry Number) and contact data such as address, telephone number, e-mail address.
2. In addition, the Service also processes non-personal information about the device on which the user uses the Service, enabling the best and safest possible use of the Service - i.e. the IP address of the computer, information contained in cookies or other similar technologies, session data, web browser data, data regarding information on the pages, and if the user has given additional consent - also information about geolocation.

III. PURPOSE AND BASIS OF DATA PROCESSING

1. The user's personal data are processed in accordance with:
   • Act of 10 May 2018 on the protection of personal data,
   • Act of 18 July 2002 on the provision of services by electronic means,
   • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR),
   • The Act of 16 July 2014 – Telecommunications Law,
   • The Act of 23 April 1964 – the Civil Code.
2. In the event of a change in the regulations regarding the protection of personal data, the Administrator undertakes to comply with their new form in this Policy.
3. The user's personal data will be processed for the purpose of accepting and fulfilling the Order, concluding, executing and withdrawing from the Agreement, answering questions or providing other information expected by the user, handling complaints, for marketing and statistical purposes, as well as for the purpose of targeting content or advertising.

IV. DATA COLLECTION METHOD

Personal data is obtained directly from the user as a result of providing it via the Newsletter subscription form or Order Form. Other data that does not constitute personal data is sent automatically by the device used by the user when using the service.

V. DATA SHARING

1. The Administrator, on the basis of a specific authorization or an agreement between the Administrator and the entity processing personal data, may transfer user data:

• employees and associates of the Administrator,
• entities professionally providing legal, accounting or marketing services to the Administrator,
• Shopify platform operated by Shopify International Limited, a private company limited by shares, incorporated in Ireland under registration number 560279, with its registered offices located at 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, VAT number IE 3347697KH
• Woocommerce.com platform operated by Aut O'Mattic A8C Ireland Ltd based in Dublin, Ireland,
• Getresponse.pl platform operated by GetResponse sp. z o. o. with its registered office in Gdańsk,
• Google Analytics platform operated by Google LLC based in Menlo Park, California, USA
• Facebook, operated by Facebook Inc. based in Palo Alto, California, USA,
• payment operator, Polish ePayments, Tajęcina 113, 36-002 Jasionka
• payment operator, PayU SA, ul. Grunwaldzka 186, 60-166 Poznań
• other entities, on the basis of a data processing agreement, if it is necessary for the purposes of implementing the Agreement.

1. The transfer of the user's personal data may only occur if such a necessity arises in connection with the processing of the user's notification, order or inquiry via the contact form.
2. Given the fact that the entities listed in letters b) and c) are registered in countries outside the European Economic Area, the Administrator also informs that for statistical purposes, advertising optimization, and the possibility of social plugins operating, it shares data to a very limited extent with two entities meeting the criteria of a Third Country within the meaning of the GDPR. The headquarters of both entities is located in the United States and both entities have joined the Privacy Shield program, and the data is transferred on the basis of agreements containing clauses specified in the decision of the European Commission 2010/87/EU, and therefore the transfer of data to them is in accordance with the implementing decision of the European Commission of 12 July 2016, and the scope of the data transferred prevents the identification of a specific person.

VI. USER RIGHTS

The person whose personal data is processed by the Personal Data Administrator has the following rights:

1. The right to access your own personal data (Article 15 of the GDPR), including obtaining a copy of the data being processed, also in electronic form, obtaining information on the purposes of processing, the categories of personal data, the categories of recipients to whom the data may be disclosed, the planned period for which the personal data will be stored.
2. The right to rectify (amend) (Article 16 of the GDPR) your personal data if it is incorrect or incomplete.
3. The right to request the deletion of personal data (Article 17 of the GDPR) when:
   • are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
   • the data subject has withdrawn consent and there is no other legal basis for the processing;

• the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
  • personal data were processed unlawfully;
  • personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State to which the Controller is subject;
  • the personal data have been collected in connection with the provision of information society services;
• The right to request the restriction of data processing (Article 18 of the GDPR) when:
  • the data subject questions the accuracy of the personal data – for a period enabling the Controller to verify the accuracy of such data;
  • the processing is unlawful and the data subject opposes the deletion of the personal data, requesting instead the restriction of their use;
  • The controller no longer needs the personal data for the purposes of processing, but they are required by the data subject to establish, pursue or defend legal claims;
  • The data subject has objected to the processing – until it is determined whether the legitimate grounds on the part of the Controller override the grounds for objection of the data subject;
• The right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), Address: ul. Stawki 2, 00-193 Warsaw.
• In order to exercise the rights granted, the user should contact the Administrator by correspondence or electronically; the Administrator is obliged to provide information on the actions taken in connection with the request within 1 month; in particularly complex cases or due to a significant number of reports, this period may be extended to 3 months.

VII. DATA STORAGE PERIOD

In accordance with the applicable legal bases, the Administrator will store personal data for the duration of the legitimate interest of the Administrator, but no longer than the limitation period for the Administrator's claims against the data subject.

VIII. DATA SECURITY

The personal data administrator uses appropriate technical and organizational measures to fully protect the user's personal data - in particular, securing it against unauthorized access, loss or destruction. Data in electronic form is secured with appropriate certificates, passwords and security protocols, data in physical form is stored in a specially adapted place, inaccessible to unauthorized persons.

IX. COOKIES

A cookie is a small piece of text that a website sends to the browser and that the browser sends back on subsequent visits to the website. The use of cookies on the website, although legally related to the obligation to instruct the user on their use, does not significantly affect the processing of data itself, mainly serving the convenience of the website user, and partly - the development possibilities of its owner. Cookies are used to optimize the use of websites by giving them an individual character tailored to a given user, using, among other things:

1. identifying the computer and browser details used to browse websites – e.g. by determining whether a given computer has already visited the website;
2. adapting the display of the website to the user's preferences thanks to anonymous analysis of their online behavior;
3. remembered expectations for the site such as language, color, content layout;
4. enabling the operation of individual accounts on websites;
5. eliminating the need for cumbersome logging in to each separate subpage of the website;
6. "memory" of the advertisements presented, so as not to present the user with repetitive and uninteresting content.

Cookies never change the way devices work and are not harmful to them in any way; they do not change the configuration of browsers and are not shared with other services, advertisers, etc., except for the entities indicated above in § 5. On each page, the user has the option of accepting or blocking them, which may, however, make it difficult or impossible to access many of the options and functionalities of the service. Regardless of the choice made, each browser allows you to clear all cookies saved in it.

This Privacy Policy is effective from April 15, 2021.