Privacy Policy of the BluLou Store
https://blulou.pl
(the "Store")
Dear User!
We care about your privacy and want you to feel comfortable while using our services. Below we present the most important information about the principles governing our processing of your personal data and the cookies used by our Store. This information has been prepared in compliance with the GDPR, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
DATA CONTROLLER
FARO GROUP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office at ul. Marcina 11, 40-854 Katowice, entered in the National Court Register – Register of Entrepreneurs by the DISTRICT COURT KATOWICE-EAST IN KATOWICE, 8TH COMMERCIAL DIVISION OF THE NATIONAL COURT REGISTER, under KRS number 0000926127, VAT No. (NIP) 9542829567, REGON 38960370200000, share capital PLN 100,000.00, paid-up capital PLN 100,000.00.
If you wish to contact us regarding the processing of your personal data, please write to us at: shop@blulou.pl.
YOUR RIGHTS
You have the right to request:
- access to your personal data, including obtaining a copy of your data (Art. 15 GDPR or – where applicable – Art. 13(1)(f) GDPR),
- rectification of your data (Art. 16 GDPR),
- erasure of your data (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability to another controller (Art. 20 GDPR).
You also have the right to:
- object at any time to the processing of your data:
- on grounds relating to your particular situation – where processing of your personal data is based on Art. 6(1)(f) GDPR (i.e. our legitimate interests), including profiling (Art. 21(1) GDPR);
- where personal data are processed for direct marketing purposes, including profiling, to the extent that processing is related to such direct marketing (Art. 21(2) GDPR).
Please contact us if you wish to exercise your rights. You may object to our use of cookies (described below) in particular through your browser settings.
If you consider that your data are being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (UODO).
PERSONAL DATA AND PRIVACY
Below you will find detailed information about the processing of your data depending on the actions you take.
1. Placing an order in the Store – Part 1
| Purpose | |
|---|---|
| fulfilment of your order | |
| Legal basis | |
| contract of sale (Art. 6(1)(b) GDPR) | legal obligation, relating in particular to accounting, product safety and compliance with legal requirements, obliging us to process your personal data (Art. 6(1)(c) GDPR) |
| Duration | |
| for the duration of the above-mentioned contract | until our legal obligations expire |
| in addition, your data will be processed until the expiry of the limitation period for claims – by you or by us (further details can be found in the last table of this section) |
|
| What happens if you do not provide data? | |
| you will not be able to place an order | |
2. Placing an order in the Store – Part 2
| Purpose |
|---|
| improving the quality of our services on the basis of reviews submitted by Users via a satisfaction survey service |
| Legal basis |
| our legitimate interest in processing your data for the purpose of conducting satisfaction surveys regarding our services (Art. 6(1)(f) GDPR) |
| Duration |
| if you do not submit a review – for 7 days from the date of your purchase or until we act on your objection to processing; if you do submit a review – until it is deleted or until we act on your objection to processing* |
| in addition, your data will be processed until the expiry of the limitation period for claims – by you or by us (further details can be found in the last table of this section) |
| What happens if you do not provide data? |
| your review of our services will not be taken into account in our further development work |
3. Creating an account in the Store
| Purpose |
|---|
| performance of the contract for the provision of Store account services |
| Legal basis |
| contract for the provision of services (Art. 6(1)(b) GDPR) |
| Duration |
| for the duration of the above-mentioned contract |
| in addition, your data will be processed until the expiry of the limitation period for claims – by you or by us (further details can be found in the last table of this section) |
| What happens if you do not provide data? |
| you will not be able to create an account or use its features, such as viewing your order history or checking your order status |
4. Contacting us (e.g. to ask a question)
| Purpose | |
|---|---|
| handling your enquiries or requests | |
| Legal basis | |
| contract or pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) – where your enquiry or request relates to a contract to which we are or may be a party | our legitimate interest in processing your data for the purpose of communicating with you (Art. 6(1)(f) GDPR) – where your enquiry or request is not related to a contract |
| Duration | |
| for the duration of the contract between us or – if no contract is concluded – until the expiry of the limitation period for claims – see the last table of this section* | until the expiry of the limitation period for claims – see the last table of this section – or until we act on your objection to processing* |
| in addition, your data will be processed until the expiry of the limitation period for claims – by you or by us (further details can be found in the last table of this section) |
|
| What happens if you do not provide data? | |
| we will not be able to respond to your enquiry or request | |
5. Browser settings or similar action permitting marketing activities
| Purpose |
|---|
| direct marketing consisting in displaying personalised advertisements (further details can be found in the "Profiling" and "Cookies" sections of the Privacy Policy) |
| Legal basis |
| our legitimate interest in processing data for the purpose stated above (Art. 6(1)(f) GDPR) |
| Duration |
| until the marketing cookies expire or are deleted by you* |
| What happens if you do not provide data? |
| you will not receive suggestions for products or services you may be interested in |
6. Browser settings or similar action permitting analytical activities
| Purpose |
|---|
| analysing how you use and navigate the Store website in order to improve its functionality (further details can be found in the "Analytical Activities" and "Cookies" sections of the Privacy Policy) |
| Legal basis |
| our legitimate interest in processing data for the purpose stated above (Art. 6(1)(f) GDPR) |
| Duration |
| until the analytical cookies expire or are deleted by you* |
| What happens if you do not provide data? |
| the way you use and navigate the Store website will not be taken into account in our development work |
7. Giving consent to receive marketing content from us (e.g. information about special offers)
| Purpose | |
|---|---|
| sending marketing communications, especially special offers | analysing the effectiveness of our communications in order to establish general principles for effective messaging in our business (further details can be found in the "Analytical Activities" section of the Privacy Policy) |
| Legal basis | |
| your consent to our marketing activities (Art. 6(1)(a) GDPR) | our legitimate interest in processing data for the purpose stated above (Art. 6(1)(f) GDPR) |
| Duration | |
| until you withdraw your consent – please note you may withdraw your consent at any time. Processing of data up to the point of withdrawal remains lawful. | until we act on your objection to processing |
| in addition, your data will be processed until the expiry of the limitation period for claims – by you or by us (further details can be found in the last table of this section) |
|
| What happens if you do not provide data? | |
| you will not receive our marketing materials, including information about our special offers | |
8. Subscribing to the newsletter
| Purpose | |
|---|---|
| sending the newsletter | analysing the effectiveness of our content in order to establish general principles for effective messaging in our business (further details can be found in the "Analytical Activities" section of the Privacy Policy) |
| Legal basis | |
| contract for the newsletter delivery service (Art. 6(1)(b) GDPR) | our legitimate interest in processing data for the purpose stated above (Art. 6(1)(f) GDPR) |
| Duration | |
| until you unsubscribe from our newsletter | until we act on your objection to processing |
| in addition, your data will be processed until the expiry of the limitation period for claims – by you or by us (further details can be found in the last table of this section) |
|
| What happens if you do not provide data? | |
| you will not be able to receive information about the Store and our services | |
9. Using services (other than those listed above), such as browsing our website or using other available features – where data processing is required
| Purpose |
|---|
| performance of the contract concluded between us |
| Legal basis |
| contract for the provision of services (Art. 6(1)(b) GDPR) |
| Duration |
| for the duration of the above-mentioned contract |
| in addition, your data will be processed until the expiry of the limitation period for claims – by you or by us (further details can be found in the last table of this section) |
| What happens if you do not provide data? |
| you will not be able to use those features that require data processing |
10. Taking an action or omission that may give rise to claims related to the Store or our services
| Purpose |
|---|
| establishing, pursuing or defending potential claims related to the concluded contract or services provided |
| Legal basis |
| our legitimate interest in processing personal data for the purpose stated above (Art. 6(1)(f) GDPR) |
| Duration |
| until the limitation period for claims expires or until we act on your objection to processing* |
| What happens if you do not provide data? |
| it will not be possible to establish, pursue or defend claims |
PROFILING
We carry out profiling within the Store – this will apply to you if you consent to such activities. Profiling consists of automated assessment of what products or services you may be interested in, based on information about the content you view. As a result, advertisements for products or services displayed within the online services you use will be better tailored to you and your needs.
The profiling we carry out does not result in decisions producing legal effects concerning you or similarly significantly affecting you.
ANALYTICAL ACTIVITIES
We carry out analytical activities on the Store website in order to improve its intuitiveness and accessibility – this will apply to you if you consent to such activities. As part of the analysis, we will take into account how you navigate the Store – for example, how much time you spend on a given sub-page or which areas of the Store you click on. This allows us to optimise the layout, appearance and content of the Store during its development, in order to improve its functionality.
In addition, if you consent to receiving marketing messages or newsletters from us, we may analyse the effectiveness of our communications. For example, we may check whether and how they have influenced activity in our Store. Such actions will help us establish general principles for sending this type of message – for example, regarding optimal sending times or how to formulate effective content.
DATA SECURITY
When processing your personal data, we apply organisational and technical measures in accordance with applicable law, including encryption of the connection using an SSL/TLS certificate.
COOKIES
Our Store, like most websites, uses cookies. These files:
- are stored in the memory of your device (computer, phone, etc.);
- do not cause any changes to your device settings.
In this Store, cookies are used for the following purposes:
- remembering your session
- statistical purposes
- marketing purposes
To find out how to manage cookies, including how to disable them in your browser, you can use your browser's help file. You can access this information by pressing F1 in your browser. You can also find relevant guidance on the following pages, depending on the browser you use:
Below you will find information about the cookies we process and their validity period.
| Cookie name | Cookie validity period | Cookie function |
|---|---|---|
| _ga_LR3X9HCXEX | session duration | tracking Store traffic for statistical purposes |
| _ga | session duration | tracking Store traffic for statistical purposes |
| _gid | session duration | tracking Store traffic for statistical purposes |
Using the appropriate options in your browser, you can at any time:
- delete cookies,
- block the use of cookies in the future.
In such cases we will no longer process them.
EXTERNAL SERVICES / DATA RECIPIENTS
We use the services of external entities that support us in running our business. We entrust them with the processing of your data – these entities process data solely on our documented instructions.
Below you will find a list of recipients of your data:
| ACTIVITY | DATA RECIPIENTS | TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION |
|---|---|---|
| any activity in connection with the Store | hosting provider | does not occur |
| technical/IT support provider | does not occur | |
| persons cooperating with us under civil law agreements, supporting our day-to-day operations | does not occur | |
| sales software provider | does not occur | |
| browsing the Store website with settings permitting marketing activities | marketing services provider | does not occur |
| browsing the Store website with settings permitting analytical activities | provider enabling analytical activities on the website | does not occur |
| placing an order in the Store | payment provider | does not occur |
| business software provider (e.g. accounting software) | does not occur | |
| standard office software provider (including e-mail) | does not occur | |
| accounting office | does not occur | |
| instalment system provider | does not occur | |
| subscribing to the newsletter or consenting to receive marketing messages | newsletter or marketing message delivery provider | does not occur |
| Mailer Lite, TrustMate SA | does not occur | |
| using services provided to us in connection with the Store by social media platforms | social media platforms | does not occur |
| participating in a satisfaction survey regarding our services or products | entities enabling the submission and comparison of reviews of the Store or products | does not occur |
| Mailer Lite, TrustMate SA | does not occur | |
| contacting us (e.g. asking a question) | standard office software provider (including e-mail) | does not occur |
Furthermore:
relevant public authorities to the extent that we are required by law to disclose data to them.