Privacy policy

We respect the right to privacy of persons using the oliviahome.com Website (hereinafter “Users”) and make every effort to ensure that the personal data of our Users is processed in accordance with applicable laws, including the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons in regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter the “Regulation”).

The use of the functionalities available on oliviahome.com (hereinafter the “Service”) may involve the processing of your personal data by us.

Our Privacy Policy (hereinafter the “Policy”) was drafted to inform Users who the controller of their personal data is, what personal data we process, for what purpose, on what basis and for how long, and to whom we share it, as well as what rights Users have as personal data subjects.

This Policy is reviewed on an ongoing basis and will be updated as necessary. If changes are made, we will publish an updated version of the Policy on the Website.

I. Personal data administrator

The administrator of the personal data of the Service Users is Olivia Home Limited Liability Company with a registered office in Gdańsk (80-251) at Stefana Batorego 16/1A, registered in the National Court Register by the District Court Gdańsk-Północ in Gdańsk, VII Economic Division of the National Court Register under KRS number 0000556584, NIP 95IP 95556584, REGON 361437480, having a share capital of PLN 5,000.00 (hereinafter “Service Provider”). Separate administrators of personal data (hereinafter “Separate Administrators”) are the entities designated as Separate Administrators in the following section of the Policy. The Separate Administrators shall process Users’ personal data in accordance with the privacy and personal data processing rules adopted by them.

II. Obtaining information regarding the processing of personal data

In all matters concerning the processing of personal data, the User should get in touch using the following contact details: Olivia Home Ltd., Stefana Batorego 16/1A, 80-251 Gdańsk, e-mail address: info@oliviahome.com.

III. Scope of processed personal data and information

The Service Provider processes personal data and information related to the use of the Website, which the User provides or leaves while using the Service, including electronic forms or stored in cookies, which may be, in particular: first name, last name, e-mail address, telephone number, date of birth, IP address, information about the User’s terminal device, User’s browser or operating system, URL of the previously visited website, language, city, activity, and time of User’s involvement in the Service. In any case, the scope of personal data and information processed by the Service Provider depends on the extent of the User’s use of the functionalities available on the Service.

In order to ensure security in the process of using the functionalities available on the Service and the confidentiality and integrity of data transmission, the Service Provider uses encryption technologies, in particular in the form of SSL protocol.

IV. Purpose and legal basis for processing personal data

The Service Provider may process the User’s personal data for the following purposes:

a) marketing, including those forms related to the marketing of the Administrator’s own products or services and those of others when the User has given his/her consent, based on Article 6(1)(a) of the Regulation, whereby the execution of marketing purposes may include, in particular, the sending and delivery by the Administrator, on its own behalf or on behalf of others, of commercial information by e-mail or telephone,

b) to fulfil the Service Provider’s legal obligations, in particular, to maintain and archive records or to comply with a lawful request from an authorized body with regard to the User’s personal data, based on Article 6(1)(c) of the Ordinance and relevant regulations concerning these obligations,

c) to establish, indemnify, or defend against claims made against the Service Provider, based on the Service Provider’s legitimate interest in being able to establish, indemnify, defend against claims, based on Article 6(1)(f) of the Regulation,

d) for analytical and statistical measurements and surveys of the level of satisfaction with the services provided by the Service Provider, based on the Service Provider’s legitimate interest, consisting in the following to be able to conduct customer satisfaction surveys and to create statistics, reports, analyses, statistical, analytical, and performance measurements regarding the use of the Service, the use of the services provided by the Service Provider and the activity of Users, in particular, to improve the quality, improvement, or development of the services provided by the Service Provider, to adjust the websites of the Service to the habits of Users, based on Article 6(1)(f) of the Regulation,

e) to carry out correspondence, based on Article 6(1)(c) of the Regulation and relevant regulations (in the event that the correspondence is the fulfillment of a legal obligation of the Service Provider), the Service Provider’s legitimate interest in being able to respond to correspondence, based on Article 6(1)(f) of the Regulation, or the User’s consent, based on Article 6(1)(a) of the Regulation (where correspondence is sent on the basis of the consent to send it),

f) for the purpose specified in the User’s consent granted to the Service Provider for the processing of their personal data, with the legal basis for the processing of the User’s personal data in such a case being Article 6(1)(a) of the Regulation.

V. Sharing of personal data (recipients of personal data)

User’s personal data may be shared by the Service Provider with entities that process personal data on behalf of the Service Provider, including, but not limited to, entities that the Service Provider uses or to which the Service Provider has entrusted the performance of activities within the scope of its business, entities that provide tax services, accounting services for the Service Provider, legal, technical, or IT services.

The User’s personal data may be made available by the Service Provider to entities that process personal data on their own behalf (Separate Administrators), including, but not limited to, entities providing courier, postal, banking, or insurance services, authorized entities or bodies to which the Service Provider is entitled or obliged to make personal data available on the basis of the laws in force in the territory of the Republic of Poland, developers with whom the Service Provider cooperates.

VI. Transfer of data outside the EEA

VII. Processing time of personal data

The Service Provider allows the possibility of cooperation with partners who are based in countries outside the European Economic Area (EEA). The Service Provider will transfer personal data outside the EEA only when necessary and with a high level of protection of such data, in particular by applying the standard contractual clauses adopted by the European Commission for the transfer of personal data to entities established outside the EEA.

The duration of the processing of personal data by the Service Provider depends on the legal basis and purpose of processing, taking into account the principle of accountability. With the above in mind, User’s personal data may be processed for a period of:

a) in the case of processing of personal data for the purpose of fulfilling the Service Provider’s legal obligations – for the time necessary to fulfil the obligation and the time during which the Service Provider may incur the legal consequences of non-fulfilment of this obligation,

b) in the case of processing of personal data for the purpose specified in point IV.c) of the Policy – for the time necessary to establish, secure, and assert claims by the Service Provider or defense against claims directed against the Service Provider, taking into account the limitation periods specified in applicable laws,

c) where the basis for the processing of personal data is the legitimate interest of the Service Provider – until an effective objection to the processing of personal data is raised at the latest, subject to the other provisions of Section VII of the Policy,

d) where the basis for the processing of personal data is the consent given for processing – until the consent is withdrawn at the latest.

In the case of personal data processed for different purposes or on different legal bases for processing, for which there are different processing periods, the total processing time will not be longer than the processing period that will expire last.

VIII. Rights available in respect of the processing of personal data

In connection with the Service Provider’s processing of the User’s personal data, the User has the following rights under the terms of the Regulation:

a) the right to access personal data,

b) the right to rectify personal data,

c) the right to delete personal data (right to be forgotten),

d) the right to restrict the processing of personal data,

e) the right to transfer personal data to another controller,

f) the right to object to the processing of personal data, including profiling,

g) the right to withdraw consent where the Service Provider processes the User’s personal data on the basis of consent, at any time, without affecting the legality of the processing performed on the basis of consent before its withdrawal,

h) the right to lodge a complaint with the President of the Personal Data Protection Office if the User considers that the processing of data violates the provisions of the Regulation.

IX. Automated decision-making

During the processing of the User’s personal data, there is no entirely automated decision-making that could produce legal effects or similarly materially affect the User.

X. Information regarding profiling

No profiling within the meaning of Article 22 of the Regulation takes place during the processing of the User’s personal data.

XI. Requirement to provide personal data

Providing personal data is necessary to respond to the correspondence of the User. The consequence of failure to provide personal data is the inability to respond to the User’s correspondence.

XII. Technologies enabling the gathering and storage of information on the User’s terminal equipment

The Service Provider uses cookies on the Website. Cookies are computer data stored in files, placed when browsing the Website, and stored on the User’s terminal device. Cookies do not cause any damage or configuration changes to the end device or its software. Cookies have a unique name and a specific storage time on the end device and store information related to the specific device used by the User. Cookies may store a unique number that identifies the User’s device (IP number), but the User’s identity is not established from it.

The Service may store a cookie in the User’s browser if the browser allows it.

The Service Provider can only access cookies placed by the Website of the Service Provider, and not to cookies placed by other websites.

The Service Provider may use cookies for the following purposes:

a) necessary (technical) cookies – for the proper operation, display, or use of the Website’s pages (for example, to ensure security),

b) functional cookies – in order to customize the Website to the User’s preferences (for example: remembering privacy preferences regarding cookies or actively making a choice of language or certain contents of the Website) and optimize the use of the Website (for example: recognizing the User’s device and displaying the website accordingly),

c) statistical and performance cookies – to create statistics, reports, measurements, and studies on the use of the Website, in particular in order to improve the quality, enhance, or develop the Website and the services provided on the Website, adapt the Website pages to the User’s habits.

The Service Provider uses its own cookies and those from third parties. For the purpose of monitoring traffic, creating statistics, reports, measurements, and research on the use of the Website, the Service Provider uses Google Analytics cookies, which place codes on the Users’ terminal devices that allow the collection of data about the Users. Google Analytics software provider, Google Ireland Limited, does not use the collected data to identify the User. Detailed information about the scope of data collection and processing in the Google Analytics service is contained in documents available on the websites at the addresses:

https://policies.google.com/?hl=pl and https://support.google.com/analytics/answer/6004245?hl=pl.

The Service Provider may use session (temporary) and permanent cookies. Session cookies are stored on the User’s end device only until the User leaves the Website or shuts down the browser. Permanent cookies are stored on the User’s end device for the time set in the parameters of these files or until they are deleted by the User.

The service provider does not identify the User’s identity on the basis of cookies. The legal basis for the use of functional, statistical, and performance cookies is the User’s consent. The legal basis for the use of essential cookies is the need to ensure the User’s uninterrupted and correct operation, display, and use of the Website.

The User may, at any time, delete cookies from the end device (clear the browser’s browsing history) or change the browser settings so that cookies are blocked. Information about cookie handling and possible configurations is available in the settings of the browser used by the User. The User may block the use of data by Google Analytics software at any time by downloading and installing the Google Analytics blocking browser add-on, available at https://tools.google.com/dlpage/gaoptout?hl=pl.

The Service Provider does not perform identification of the User on the basis of cookies. The legal basis for the use of functional, statistical, and performance cookies is the User’s consent. The legal basis for the use of essential cookies is the need to ensure the User’s uninterrupted and correct operation, display, and use of the Website.

Deleting, blocking, or changing the settings of cookies may affect the convenience of using the Service or result in the need to re-select the User’s preferences. The User’s consent to the use of cookies is also recorded via a cookie, so if the User removes cookies from their browser, they will have to re-select their privacy preferences regarding cookies.