Privacy policy

1. This Privacy Policy of the Internet Shop (hereinafter referred to as the "Policy") is for information purposes only, which means that it is not a source of obligations for the Customers of the Internet Shop (it is not a contract or regulations).
2. Any words, expressions and abbreviations appearing on this page and beginning with a capital letter (e.g. "Seller, Internet Shop") shall be understood in accordance with their definition contained in the Rules and Regulations of the Internet Shop available at
3. Seller, Online Shop) shall be understood in accordance with their definition contained in the Rules and Regulations of the Online Shop available in the Online Shop at www.mon-cheri.pl
3. In the event of any doubts or contradictions between the Policy and the consents given by a given person, regardless of the provisions of the Policy, the basis for undertaking and determining the scope of activities by the Administrator shall always be the voluntarily given consents or the provisions of law. In the case of such a contradiction between the Policy and the content of information clauses provided by the Administrator when collecting personal data (usually under forms in the Internet Shop), the information that should be followed by the Customer is the one provided to him/her under the said information clauses.
Who is the Administrator of your Data?

Who is the Administrator of your Data?

The administrator of personal data collected:
1.
through the Internet Shop (including the use of cookies or similar technology) or other channels of communication with the Customer;
obtained on the basis of the Customer's activity on the Internet in front of pages, subsites and profiles belonging to mon-cheri.pl
is Mon Cheri Malinowska Marta, ul. Rzemieślnicza 35/B/158, 95-030 Rzgów, Poland, NIP 9820367508 email: kontakt@mon-cheri.pl.
further referred to as the "Administrator" and being at the same time the Seller.
You can contact our Data Protection Officer via email: kontakt@mon-cheri.pl
When you give additional consent, the controllers of the data obtained on the basis of your online activity using technologies such as cookies may also be our partners.

How do we take care of your data?
Customer's personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (Official Journal of the EU.L No. 119, p. 1) (hereinafter also: "RODO") and other currently applicable, i.e. for the entire period of processing of certain data, data protection legislation. Personal Data means information about an identified or identifiable natural person (hereinafter also: "Personal Data"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.

The controller shall take special care to protect the interests of data subjects, and in particular shall ensure that the data it collects are:
1.
processed lawfully, fairly and in a transparent manner for the data subject;
collected for specific, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;
adequate, relevant and limited to what is necessary for the purposes for which they are processed;
correct and updated as necessary;
stored in a form which permits identification of the data subject for no longer than is necessary for the purposes for which the data are processed;
processed in a manner which ensures adequate security of the Personal Data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by means of appropriate technical or organisational measures.
Conscious of the importance of Customers' privacy, the Administrator protects not only visitors to the Online Shop, but also Customers who have provided the Administrator with their Personal Data using other channels of communication, i.e.:
1.
website https://www.facebook.com and any other websites branded or co-branded with Facebook (including sub-domains, international versions, widgets and mobile versions), the rules of operation of which are based on the regulations made available in particular at https://www.facebook.com/legal/terms, provided respectively by Facebook Inc. or Facebook Ireland Limited (hereinafter also: "Facebook Service"), including by means of Facebook Lead Ads function aimed at direct marketing of the Administrator's own products or services. The rules for the protection and use of Personal Data by the Facebook Service are made available, for example, at: https://www.facebook.com/policy.php. The Administrator has no influence on the content of Facebook regulations, including those concerning Personal Data.
Applications enabling the Administrator to run advertising campaigns, including competitions, within Facebook.
For what purposes information about you is used?
The purpose and scope of data processed by the Administrator result from the Customer's consent or legal regulations, and are further specified as a result of actions taken by the Customer in the Online Shop or within other channels of communication with the Customer. For example: (I) the Customer's Personal Data may be processed for the purpose of granting, presenting or granting dedicated offers and promotions to the Customer, to the extent possible adapted to the Customer's preferences only if the Customer has given his/her consent (not available to persons who have not given such consent); (II) if the Customer decides not to make a purchase via the Online Shop, but only to make a Booking of selected Products via the Online Shop, his/her Personal Data will not be made available to the carrier carrying out shipments on behalf of the Administrator.

Possible purposes of processing the Customer's Personal Data are determined by the Customer's consent or the law.

Possible purposes for the processing of Customers' Personal Data by the Administrator are in particular:
1. To conclude and perform a Service Agreement (Account) or to take action at the request of a future Customer prior to its conclusion (we process your data in order to maintain your Account so that you can enjoy the benefits it offers, e.g. placing orders without having to fill in forms each time, accessing your purchase history, managing your consents on the site etc. and to enable you to use other services available on our website);
conclusion and performance of the Sales Agreement or to take action at the request of a future customer prior to its conclusion (we need your personal data to process your order and perform the concluded agreement - in particular to confirm its placement and to reserve or send the selected product to you, as well as to contact you about it, if necessary);
receiving and processing complaints;
conducting a competition, in particular, the selection of competition winners and the fulfilment of prizes;
presenting advertisements, offers or promotions (discounts) concerning the Administrator's products or services and its services.
presenting advertisements, offers or promotions (discounts) concerning the Administrator's and its partners' products or services (the current list of which is available in the Internet Shop) to all recipients, including sending advertisements by e-mail;
evaluating and analysing customer activity and information, including through automated processing of Personal Data (profiling), in order to present general advertisements, offers or promotions (discounts) concerning the Administrator's and its partners' products or services.

Fulfilling legal obligations resulting from regulations, e.g. tax and accounting regulations, especially in the case of paid agreements;
conducting correspondence with Customers, including replying to Customers' messages.

For the purpose of processing information about the Customer, including automated processing of Personal Data (profiling), in order to present general advertisements, offers or promotions (discounts) concerning the Administrator's products or services and its partners, in a manner tailored to the interests of a given Customer (without, however, significantly influencing his/her decisions), as well as market and statistical analyses;
conducting claims and defending against claims, including those of third parties - in the case of using the majority of the functionalities of the Internet Shop and Application;
fulfilling legal obligations resulting from regulations, e.g. tax and accounting, especially in the case of paid agreements;
conducting correspondence with Customers, including replying to Customers' messages.

What information do we use about you?"
The Administrator may process in particular the following Personal Data of Customers:
1.
Using the Online Shop:
Personal Data provided in the form when registering an Account, placing Orders in the Online Shop (in particular: name and surname; e-mail address; contact telephone number; address [street, house number, premises number, postal code, town, country], residence/business/site address [if different from the delivery address], bank account number, company name and tax identification number [NIP]) and other data collected during the use of the Online Shop;
Personal data provided for the purpose of participating in contests;
other data, in particular, obtained on the basis of the Customer's activity on the Internet, in mobile applications belonging to the Administrator, including those obtained through the Internet Shop or other channels of communication with the Customer, using cookies and similar technologies,
by completing the data contained in the Facebook Lead Ads form, the User provides the Administrator each time with the Personal Data indicated in the form, which may include, in particular: name, surname, e-mail address, telephone number;

Are you obliged to provide us with your data and what are the possible consequences of failing to do so?
Providing Personal Data by the Customer in the Online Shop is voluntary, but it is necessary to use certain functionalities of our shop, for example, to place an Order by the Customer and to settle it (to conclude and execute the Sales Agreement), to register an Account or to make a Reservation.
Each time the scope of data required to conclude a respective agreement is indicated beforehand in the Online Shop (we mark the data whose submission is necessary to conclude an agreement/use a particular functionality), within other channels of communication with the Customer or in the Terms and Conditions. The consequence of failing to provide Personal Data may be the inability to effectively perform the above activities.

On what legal basis do we use your information?
The basis for processing the Customer's Personal Data is primarily the need to perform a contract to which the Customer is a party or the need to take steps at the Customer's request prior to entering into a contract (Article 6(1)(b) RODO). This applies primarily to the Personal Data provided in the form when registering, placing an Order and concluding a Sales Agreement or making a Booking on the Online Shop. Also, in the case of Personal Data provided to us in connection with a Customer complaint, the legal basis for its processing is the necessity to perform / service the Sales Agreement of the advertised goods.

In the case of processing operations for the aforementioned marketing purposes, the basis for such processing is the fulfilment of the purposes arising from the legitimate interests pursued by the Administrator or by its partners (Article 6(1)(f) RODO), in which case the partners are not involved in the processing of the Customer's data. On the other hand, to the extent that the Administrator's partners may also have direct access to this information - the legal basis for such processing is the voluntary consent given by the Customer (Article 6(1)(a) RODO). On the other hand, the presentation, creation, granting and implementation of advertisements, offers or promotions (discounts) dedicated to a given Customer, which are based exclusively on automated processing, including profiling, to the greatest possible extent tailored to the Customer's preferences, which may significantly influence the Customer's decisions, has as its basis the voluntary consent expressed by the Customer (Art. 6(1)(a), Art. 22(2)(c) RODO). However, this applies only to adult Customers.
For other (other) purposes, the Customer's Personal Data may be processed on the basis of:
1.
voluntarily expressed consents - e.g. persons entering competitions (art. 6(1)(a) RODO);
binding legal provisions - when processing is necessary to fulfil a legal obligation incumbent on the Administrator, e.g. when, on the basis of tax or accounting regulations, the Administrator settles concluded sales agreements (art. 6(1)(c) RODO);
necessary for purposes other than those mentioned above arising from the legitimate interests pursued by the Administrator or by a third party, in particular for the establishment, investigation or defence of claims, correspondence with Customers, also via contact forms (including replies to Customers' messages), market analyses and statistics (art. 6(1)(f) RODO).

Whether your data are subject to processing is determined by the data subject's legal provisions.

Whether your data is subject to profiling and what does this mean for you?
Administrator, for the purpose of presenting general advertisements, offers or promotions (discounts) intended for all Customers, in a manner tailored to the interests of the respective Customer, may learn about the Customer's preferences, e.g. by analysing how often he or she visits the Online Shop and whether and which products he or she buys or reserves in the Online Shop. This allows for a better understanding of the Customer's expectations and adaptation to his or her needs, without, however, significantly influencing his or her decisions. Thanks to the Administrator's use of advanced technologies, the above actions will often be performed by the system in an automated manner, so that the content sent will be the most up-to-date and the Customer will be able to consult it quickly.
In the case of adult Customers, the aforementioned analysis of interests or preferences will also serve the purpose of creating, granting, implementing dedicated and, to the extent possible, tailored advertisements, offers or promotions (discounts), in an automated manner, which may produce legal effects towards him or her or in a similar manner significantly affect him or her, potentially limiting access to other Customers (an option not available to Customers who are not of age and who have not given their consent to such actions by the Administrator). From simple "profiling" (i.e., e.g., tailoring our communications, banners to your interests), such activities of ours are distinguished by the fact that their outcome may materially affect your choices as a consumer, i.e., e.g., their outcome may be a highly beneficial, temporary offer targeted exclusively to you based on your purchase history and behaviour on our website, to which our other Customers will not have access. The more often a given Customer uses the Administrator's services and purchases its products, the better promotions and surprises will be able to be prepared for them.

To whom we may transfer your data?
Each time, the catalogue of recipients of Personal Data processed by the Administrator results primarily from the scope of services used by the Customer.
The catalogue of data recipients also results from the Customer's consent, or from the provisions of the law, and is further specified as a result of the actions taken by the Customer in the Online Shop or the Application.
Partners of the Administrator may be involved in the processing of Personal Data to a limited extent, in particular those who technically assist in the efficient running of the Online Shop, or the Application, including communication with our Customers (e.g. They support us in sending e-mails and, in the case of advertising activities, also in marketing campaigns), providers of hosting or data communication services, carriers or intermediaries carrying out the shipment of Orders, entities handling electronic payments or payment card payments in the Online Shop, companies that service software, support the Administrator in marketing campaigns, as well as providers of legal and advisory services.
As part of its marketing (advertising) activities, the Administrator uses the services of third parties who use cookies in the Online Shop / Application.
Whether your data is also transferred to third countries (outside the European Economic Area)?
When the Administrator uses tools to support its day-to-day operations provided, for example, by by Google, the Customer's Personal Data may be transferred to a country outside the European Economic Area, in particular to the United States of America (USA) or any other country in which an entity cooperating with it maintains tools for the processing of Personal Data in cooperation with the Administrator.
Adequate safeguards for the transferred Personal Data have been ensured through the Administrator by applying standard data protection clauses adopted by a decision of the European Commission and data entrustment agreements for processing that meet the requirements of the RODO. In the case of data transfers from Europe to the USA, certain entities located there may additionally provide an adequate level of data protection in the dams of the so-called Privacy Shield programme (more information on this subject is available at: https://www.privacyshield.gov/).
Customer has the right to obtain a copy of the safeguards applied by the Controller regarding the transfer of Personal Data to a third country by contacting us.

What rights do you have?
Each Customer has the right at any time to:
1.
File a complaint with the President of the Personal Data Protection Authority;
transfer Personal Data which they have provided to the Administrator and which is processed by automated means and the processing is carried out on the basis of consent or on a contractual basis, e.g. to another Administrator;
access to Personal Data (including, e.g., to receive information as to which Personal Data is being processed);
request rectification and restriction of processing (e.g., where Personal Data is incorrect) or deletion of Personal Data (e.g. where it has been processed unlawfully);
to withdraw any consent given to the Administrator at any time, whereby withdrawal of consent shall not affect processing carried out by the Administrator lawfully prior to its withdrawal.
to object to the processing of Personal Data concerning him/her being carried out for the purposes of the Administrator's or a third party's legitimate interests, including, in particular, processing for marketing purposes, including profiling (where there are no other valid legitimate grounds for processing overriding the Client's interests).
For how long will we keep your data?
Personal Data may be stored for the duration of the use of the Online Shop (whereby it may be deleted three years after the last activity of the Customer within the Online Shop), in the case of marketing activities - until the Customer objects, and if related to cookies and similar technology, depending on technical issues, until the deletion of these files using the settings of the browser / device (whereby the deletion of files is not always the same as the deletion of Personal Data obtained through these files, hence the possibility to object).
If the processing of Personal Data is dependent on the Customer's consent, Personal Data may be processed until such consent is withdrawn.
In any case:
1.
Personal Data will also be stored if legislation (e.g. accounting or taxation) will oblige the Administrator to process them;
We will keep Personal Data longer in case the Customer has any claims against the Administrator, in order for the Administrator to assert claims, or in order to assert or defend against third-party claims, for the period of limitation prescribed by law, in particular the Civil Code.
Depending on the scope of the Personal Data and the purposes of its processing, it may therefore be kept for different periods.
In each case, the longer period of storage of Personal Data is decisive.
Will commercial information be sent to you (e.g. to your e-mail address)?
The Administrator has the technical possibility of communicating with the Customer remotely (e.g. by e-mail).
Commercial information related to the Administrator's or its cooperating entities' commercial activities may be sent only on the basis of the Customer's expressed consent.

Commercial information related to the Administrator's or its cooperating entities' commercial activities may be sent only on the basis of the Customer's expressed consent.

Cookie files"
1.
Who are cookies applied to?
In view of the fact that the cookie technology (or cookie-like functionality) used by the Administrator collects information about each person visiting the Online Shop, including within the Application, the following provisions of the Policy apply to persons who use the Online Shop and the Application, regardless of whether they remain its Customers (place Orders, reserve Products or have an Account) (hereinafter also "Visitor").
What technology do we use?
The Online Shop uses technology that stores and accesses information on a computer or other device connected to the network (in particular using cookies or related solutions) in order to provide maximum comfort during the use of the Online Shop, including for statistical purposes and to adapt the presented advertising content of the Administrator, its partners and advertisers to the Visitor's interests. During a visit to the Online Shop, including within the Application, data on the Visitor's online activity may be automatically collected.
In connection with the fact that the Administrator may use solutions with functionality similar to cookies - the following provisions of the Policy should also refer to these technologies accordingly.
How to delete / block cookies?
1.
The cookies used are primarily intended to make it easier for the Visitor to use the Online Shop and the Application, for example, by "remembering" the information provided once so that the Visitor does not have to provide it each time, as well as to adapt their content, including the advertisements presented, to the Visitor's preferences. Cookies are also used to enhance the usability and personalisation of the content of the Online Shop and the Application, including the presentation, creation, granting and execution of advertisements, offers or promotions (discounts) dedicated to a given Visitor according to his/her interests (applicable only if he/she is of age and has given his/her consent to such action).
How to delete / block cookies?
The Visitor can change the use of cookies by managing the consents given as part of the privacy settings on our website or through the browser or App, including blocking or deleting those from the Online Shop (and other websites). To do this, you will need to change your browser or App settings. The method of deletion varies depending on the browser you use. Information on how to delete cookies should be found in the "Help" tab of the selected web browser. Deletion of cookies is not the same as deletion of Personal Data by the Administrator of Personal Data obtained through cookies.
What consequences will deletion or blocking of "cookies" have?
Restricting the use of cookies on a given device prevents or significantly impedes the proper use of the Online Shop, for example, it may involve the inability to maintain a login session.
How can you contact us?
You can contact the Administrator at any time by sending a message by post or e-mail to the Administrator's address indicated at the beginning of this Policy, or by telephone at the telephone number indicated at the beginning of this Policy.
How do we secure your data?

The Administrator, taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of the processing and the risk of violation of the rights or freedoms of natural persons with different probability of occurrence and severity of the threat, shall apply appropriate technical and organisational measures to ensure the protection of the processed Personal Data appropriate to the threats and the category of data under protection and, in particular, shall protect the data from being accessed by unauthorised persons, from being taken by an unauthorised person, from being processed in violation of the applicable regulations and from being altered, lost, damaged or destroyed. External disclosure of information on the technical and organisational measures in place to ensure the protection of processing may weaken their effectiveness by jeopardising the proper protection of Personal Data.
The Administrator accordingly provides, for example, the following technical measures to prevent unauthorised persons from acquiring and modifying Personal Data sent electronically:
1.
Protection of the data set against unauthorised access.
SLS certificate on the pages of the Online Shop where Personal Data is provided.
Encryption of data used to authorise the person using the functionality of the Online Shop.
From when is this version of the Policy effective?
This version of the Policy is effective as of 23.05.2018.
I hereby declare that I have read the information.