Privacy Policy

PRIVACY POLICY

 

Introduction

This privacy policy is directed at Users of the online store mass-zone.eu. This document describes, among other things, the sources, principles, and methods of collecting and using Users' Personal Data.

The mass-zone.eu store makes every effort to ensure respect for your privacy and protection of the personal information provided while using and shopping within the Store, and for this purpose takes all necessary actions.

For any questions or concerns related to this privacy policy, please contact:

• e-mail: [email protected],
• tel. 668 207 098,

mass-zone team

 

 

1. DEFINITIONS

1. Administrator - GlobalSell sp. z o.o. with its registered office in Bolesławiec (ul. Chopina 19, 59-700 Bolesławiec), entered in the register of entrepreneurs of the National Court Register kept by the District Court for Wrocław-Fabryczna in Wrocław, IX Economic Division of the National Court Register under the KRS number 0001055286, NIP: 6121872334, share capital: 50,000.00 PLN, email: [email protected].
2. Personal Data - information about an identified or identifiable natural person through one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity, including the IP address of the device, online identifier and information collected through cookies files or other similar technology.
3. Privacy Policy - this privacy policy.
4. Profiling - the process of analyzing Users' Personal Data, consisting in creating digital profiles of Users that help the Administrator understand their preferences, behaviors and needs.
5. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
6. Store - an online trading platform operated by the Administrator, available at the domain https://mass-zone.eu.
7. User - a natural person, legal person or organizational unit without legal personality, which, according to the law, has legal capacity and uses the Store.

 

2. GENERAL PROVISIONS

1. In connection with the User's use of the Store, the Administrator collects data necessary to provide services and protect the Administrator's interests. This data is processed in accordance with this Privacy Policy.
2. Providing Personal Data is voluntary, but necessary, among other things, for the correct use of some functionalities of the Store's website and for entering into sales agreements for products available in the Store.
3. Users who provide data to the Administrator, including Personal Data of third parties, are also bound by applicable laws in the field of personal data protection.
4. In matters related to the processing of your data by the Administrator, you can contact using the contact details of the Administrator provided at the beginning of Privacy Policy (Introduction).

 

3. SCOPE AND CATEGORIES OF PROCESSED PERSONAL DATA

1. Within the Store, the following scope and categories of Personal Data are processed or may be processed:

a. User Personal Data

• identification data, such as name and surname, email address, contact phone number, company data, residential address, delivery address,
• financial data, such as bank account number and payment-related information.

b. Login and activity data

• login data, such as IP addresses, internet browsers, login dates and times, and activities in the Store, including consent checkboxes and checkboxes (for security purposes and Store activity analysis),
• information about user preferences and behaviors in the Store (for the purpose of customizing content, services, or products to user preferences and needs).


 

4. SOURCES OF COLLECTED PERSONAL DATA

1. Personal data is collected by the Administrator through:

a. the order form available on the Store's website,
b. the account registration form, Newsletter,
c. direct submission (e.g. during a phone call, SMS, email, contact form) by a specified entity, including their Personal Data and other entities,
d. a complaint, application, request, or other message sent to the Administrator containing Personal Data,
e. cookies, pixels, and other data collecting technologies used by the Store or other cookie providers that are used within the Store's website.


 

5. OBJECTIVES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

1. User data may be processed for the following purposes:

a. placing orders for products available in the Store, concluding and executing sales agreements, registering and managing a virtual Account - based on the necessity of processing to perform a contract or take action at the request of the data subject (art. 6 para. 1 lit. b GDPR),
b. statistical analysis to optimize and improve the operation of the Administrator and the Store - based on the legitimate interest of the Administrator (art. 6 para. 1 lit. f GDPR),
c. analysis of network traffic, ensuring security within the Store, archiving documents - based on the necessity of processing to fulfill the legal obligations of the Administrator (art. 6 para. 1 lit. c GDPR),
d. customizing the content and offered products and services of the Administrator to the needs and choices of Users - based on the consent of the User (art. 6 para. 1 lit. a GDPR),
e. responding to inquiries, complaints, requests, conducting correspondence with the User to resolve any issues, fulfilling User requests - based on the necessity of processing to perform a contract or take action at the request of the data subject, or based on the User's consent (art. 6 para. 1 lit. a and b GDPR),
f. sending ordered commercial information and other marketing content via electronic channels such as email, SMS, phone calls with the prior consent of the User (e.g. newsletter) - based on the legitimate interest of the Administrator (art. 6 para. 1 lit. f GDPR),
g. conducting marketing activities for products and services of the Administrator without the use of electronic communication means - based on the legitimate interest of the Administrator (art. 6 para. 1 lit. f GDPR),
h. for the purpose of establishing and pursuing claims of the Administrator or defending against claims of Users and third parties - the legal basis for processing is the legitimate interest of the Administrator (art. 6 para. 1 lit. f GDPR).



 

6. RECIPIENTS OF PERSONAL DATA

1. In connection with the operation of the Store by the Administrator, Personal Data will be transferred to external entities for the proper execution of sales agreements or the use of the Store, in particular to employees, service providers, including IT and hosting service providers, legal services, accounting services, payment service providers (in particular payment operators providing services within the Store), postal operators, and companies handling complaints. The Administrator requires these entities to adhere to appropriate data protection standards.
2. In addition to the above, the Administrator may transfer your Personal Data to competent authorities or third parties who request such information based on a specific and sufficient legal basis.
3. The Administrator reserves the right to transfer your Personal Data to third parties other than those specified in the previous paragraphs of this section, but anonymized to the extent that identification of a specific individual is impossible.
4. In the course of marketing activities, the Administrator uses services of third parties who use cookies, pixels or other features on the Store or their websites, as well as marketing technologies similar to cookies. The catalog of these entities is detailed in this Privacy Policy.
5. Furthermore, the data provided by you may be transferred to other entities to assess satisfaction levels with the purchase made with your consent, which you can express during the ordering process. You can withdraw your consent at any time using the contact form on the mass-zone.eu website or by sending an email to: [email protected].
6. The Administrator informs that they use the following tracking technologies to track the actions taken by the User on the Store's website: tracking codes from Edrone sp. z o.o. - for the analysis of website statistics and for marketing purposes solely for email, SMS, social media campaigns initiated or indicated by the Administrator through the Edrone system. Below is the information about the recipient of personal data Edrone sp. z o.o. as a subprocessor of personal data:

a. Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Krakow, NIP: 676-248-20-64, KRS: 0000537197 - for the use of the edrone.me mailing system for sending newsletters,
b. Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Krakow, NIP: 676-248-20-64, KRS: 0000537197 - for marketing purposes solely for email, SMS, social media campaigns initiated or indicated by the Administrator through the Edrone system.



 

7. DATA PROCESSING PERIOD

1. The period of processing Personal Data by the Administrator depends on the type of service provided and the purpose of processing. As a rule, data is processed for 5 years, the time necessary to achieve the goals indicated in § 5 of the Privacy Policy or to fulfill legal obligations. After the processing period, the data is irreversibly deleted or anonymized.
2. In addition to the above paragraph, data:

a. permitted for processing based on separate laws or agreements between the Administrator and the User will be processed until the time specified in a specific law or agreement,
b. for marketing purposes, in the case of data processed on the basis of the legitimate interest of the Administrator, will be processed until the consent is withdrawn or objections are raised,
c. processed in connection with the investigation of potential claims will be processed for a maximum period of 6 years from the realization of the Agreement, unless the law stipulates a longer claim investigation period,
d. processed for settlement purposes will be processed for a period of 5 years from the end of the financial year in which the last accounting document was issued, unless the law imposes on the Administrator the obligation to keep accounting documents for a longer period,
e. related to network traffic analysis, collected through cookies or similar technologies, may be stored until the cookies or similar technologies are deleted from the User's device. Some Personal Data is not deleted when cookies are deleted - in this case, the data will be processed until objections are raised for the Administrator.


 

8. RIGHTS OF DATA SUBJECTS

1. The user has the right to:

a. request from the Administrator access to their Personal Data stored by the Administrator, as well as to receive a copy of them (art. 15 GDPR),
b. request the Administrator to correct or rectify their Personal Data (art. 16 GDPR) - in relation to the request for rectification of data, when the user notices that the data is incorrect or incomplete,
c. obtain information contained in the Privacy Policy, including, among others, the source and purposes of processing, categories of processed data, processing period, recipients of Personal Data, as well as your rights under the GDPR, the right to object, Administrator's safeguards regarding Personal Data in case of transfers outside the European Union, technologies used by the Administrator to collect and process Personal Data,
d. request the Administrator to erase their Personal Data (art. 17 GDPR),
e. request the Administrator to limit the processing (art. 18 GDPR) of their Personal Data - e.g. when the user notices that the data is incorrect – the user may request a restriction of processing for a period allowing the Administrator to verify the accuracy of this data,
f. express objection to the processing of their Personal Data,
g. request the transfer of their Personal Data to another organization,
h. lodge a complaint related to the processing of the user's Personal Data by the Administrator to the President of the Office for Personal Data Protection,
i. to the extent that the user's data is processed based on consent, this consent may be withdrawn at any time by contacting the Administrator via email at [email protected]. Withdrawal of consent may hinder or prevent, among other things, contact with the user, use of the Store, order fulfillment, settlement between the user and the administrator.

2. The Administrator shall promptly consider the requests indicated in the previous paragraph regarding operations and actions on Personal Data.



 

9. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES (OUTSIDE THE EUROPEAN ECONOMIC AREA)

1. User data will generally not be transferred to third countries or international organizations.
2. However, the Administrator may transfer Personal Data outside the EEA, but only when necessary and with appropriate safeguards, primarily through:

a. cooperation with entities processing Personal Data in countries for which the European Commission has issued a decision on the adequacy of data protection,
b. using standard contractual clauses issued by the European Commission,
c. implementing binding corporate rules approved by the competent supervisory authority.

2.The Administrator always informs about the intention to transfer Personal Data outside the EEA at the stage of their collection.



 

10. FILES COOKIES AND SIMILAR TECHNOLOGIES

1. The Administrator and cookies providers for the Store collect and process information or Personal Data via cookies (Administrator - own cookies, cookies providers - third-party cookies) and similar technologies. Cookies are small pieces of text that the Administrator or other cookies providers send to the User's browser, which the browser sends back upon subsequent visits to the Store or third-party websites. These tools are used, among other things, to remember User's decisions (choice of Store's graphic settings, acceptance of cookie settings, etc.), maintain User's session (e.g. after logging in), remember passwords (with consent), collect information about the User's device and visit for security purposes, as well as for visit analysis and content customization.
2. In many cases, web browsing software (web browser) defaults to allowing cookies to be stored on the User's end device. You can change cookie settings at any time. These settings can be changed, in particular, to block automatic cookie handling in the web browser settings or to be informed of their placement in your device each time. Detailed information on the possibilities and ways of handling cookies is available in the software settings (web browser). The Store informs that restricting the use of cookies may affect some functionalities available on the Store websites. More information about cookies is available in the "Help" section of the web browser menu.
3. Information obtained via cookies and similar technologies is not combined with other User data, nor is it used to identify Users by the Administrator.
4. The following types of cookies are used within the Store for specific purposes:

a. necessary cookies - necessary for the functioning of the Store website, disabling them will result in the system not working properly,
b. persistent cookies - provide optimization and selected settings of the Store website,
c. session cookies - temporarily stored until the end of the browser session, which are necessary for the proper functioning of the Store website,
d. analytical cookies - allow measuring visits and collecting information about traffic on the Store website, collected to improve the quality and operation of the Store website.
e. functional cookies - allow customization of marketing activities to the User's needs and preferences,
f. advertising cookies - for promoting goods or services of the Administrator, also on other websites in accordance with User's relevance and preferences, and prevent duplicate ads. Cookies also prevent the reappearance of the same ads.

5.The Store uses the following cookies or other similar technologies from cookies providers:

a. Google Analytics

Services within Google Analytics are provided by Google Ireland Limited (registered under number: 368047), with its headquarters at Gordon House, Barrow Street, Dublin 4, Ireland. These tools are used to generate analyses and statistics aimed at improving the functioning of the service. Google Analytics automatically collects data regarding User's usage of the service. The Administrator has activated IP address anonymization, which means no personal data is sent to the United States. For more information on data processing within Google Analytics, the Administrator recommends reviewing the materials prepared by Google at: https://support.google.com/analytics/answer/6004245.

b. Google Ads

Google Ads, provided by Google Ireland Limited, based in Dublin, are used by the Administrator to attract interest to the Administrator's content and offers through advertising materials on other websites. Advertising campaign data is analyzed in order to optimize promotional activities. Advertising materials are delivered by Google through "Ad Servers." The Administrator uses server-side cookies to measure specific campaign performance indicators, such as ad views or clicks. When accessing the Administrator's site through a Google ad, Google Ads places a cookie on the User's device. The Administrator does not collect or process any personal data based on these marketing tools. Due to the tools used, the User's browser automatically connects to the Google server. The Administrator also uses remarketing features in Google Ads, allowing for displaying ads based on User interests from other sites within the Google advertising network. The Administrator recommends reviewing the documents posted at: https://ads.google.com/intl/pl_pl/home/faq/gdpr/.

c. Facebook Pixel

These are marketing tools offered by Facebook Ireland Ltd, based in Dublin, through which ads are targeted to Users on Facebook, based on their consent to advertising cookies. The Administrator uses Facebook Pixel, which automatically collects data on User's Platform usage and serves solely to collect information on actions taken on the Platform. This data is anonymous and does not allow identification of the User. However, it should be noted that Facebook may link this information with other User data collected when using the Facebook service and use it for its own marketing purposes. Facebook Pixel also interacts with data from the Instagram service. For more information, the Administrator recommends reviewing the documents posted on the Facebook website, especially the privacy policy: https://www.facebook.com/privacy/explanation.

d. Edrone

The Administrator uses tracking codes from edrone, provided by Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, NIP: 676-248-20-64, KRS: 0000537197. Within the cookies provided by edrone, they are used to promote products on the website, collecting information on which products or events were viewed by the User on the website, and then promoting related products and events. Edrone tracking codes can also be used for website statistic analysis, and also for marketing purposes solely for email campaigns, sms, social media campaigns initiated or indicated by the Administrator through the edrone system. Detailed information about the provider is available at https://edrone.me/pl.

e. Tradetracker

The Administrator uses tradetracker cookies, provided by Tradetracker Poland sp. z o.o., ul. Krakowskie Przedmieście 13, 00-071 Warsaw (Mazowieckie), KRS 0000372257, REGON 142717328, NIP 5213587865. Within tradetracker cookies, data is collected and processed for statistical purposes (Piwik Analytics), to analyze traffic on the Store website, as well as to track conversions after displaying an advertisement, registering from another source, analyzing promotional materials used, and potentially links set by the provider or administrator, as well as other information related to analysis of actions and traffic in the Store, however, no personal data enabling user identification is stored in these cookie files. Detailed information about the provider is available at https://tradetracker.com/pl.

f. Cookiebot

The Administrator uses cookiebot cookies, provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, company registration number DK34624607, Email: [email protected], Phone: + 45 50 333 777. CookieBot is one of the tools used to manage the consent mode, Consent Mode. Through cookiebot, the Store has the ability to store user consents for cookies for the current domain. These consents are obtained and stored by the Administrator for the purpose of optimizing the Store's operation and remembering user choices regarding consents. Detailed information about the provider is available at https://www.cookiebot.com.

6.Consent to cookies is divided into consent for all necessary cookies, preference cookies. The User can change consent to cookies or delete them from their end device at any time within the Store.
7. Using the Store without changing settings, i.e. with default acceptance of all cookies and similar technologies, implies consent to their use for purposes specified in the Privacy Policy.
8. Disabling or limiting the use of necessary cookies may prevent or hinder the use of some functionalities available in the Store, as well as other cookies providers used within the Store.
9. In addition to cookies, the online store may also collect data typically gathered by administrators of online systems through so-called logs or log files. Information contained in logs may include, among other things, your IP address, platform and web browser type, Internet service provider, and the address of the page from which you entered the Store.
10. Some subpages within the Store and other means of communication with you may contain so-called "web beacons" (electronic images). Web beacons allow to obtain information such as the IP address of the computer on which the page loaded with the web beacon was placed, the URL of the page on which the web beacon was placed, the time the page was loaded, the type of browser, as well as information contained in cookies, in order to evaluate the effectiveness of our ads. This data will be archived and used for statistical analysis and evaluation of the global traffic of Store Users. This data will not be combined with the personal data provided by you.


 

11. AUTOMATED DATA PROCESSING

1. In order to create User profiles that help the Administrator understand their preferences, behaviors, and needs, as part of the collection and processing of Personal Data by the Administrator, a process of analyzing User Personal Data may be used in conjunction with the development of the Store. Profiling also allows the Administrator to improve business activities, analyze trends, and customize the Store to provide the best possible experiences. Profiling may include an analysis of the history of products or services ordered in the Store, preferred product or service categories by Users, activities in the Store, and other available data.
2. Profiling is carried out based on collected Personal Data, including through the use of cookies or other technologies used by the Administrator, as further described in Section 10 of the Privacy Policy.
3. Processing of Personal Data for Profiling requires the consent of the User. The User has the right to give or refuse consent for Profiling, as well as to manage the consent at any time, including withdrawing the consent given.
4. Profiling does not affect the rights of Users or their access to the Store, however, the lack of consent for Profiling may affect personalized offers and product or service recommendations.

 

12. OTHER WEBSITES

1. Periodically, links to other websites may appear within the Store. These websites operate independently of the Store and are not supervised in any way by the Administrator. These websites may have their own privacy policies, which we recommend reviewing. The Store is not responsible for the data handling practices on these websites.

 

13. PERSONAL DATA SECURITY

1. The Administrator continuously conducts risk analysis to ensure that Personal Data processed by them is done so securely – ensuring that only authorized individuals have access to the data and only to the extent necessary for the tasks they perform. The Administrator ensures that all operations on Personal Data are recorded and carried out only by authorized employees and collaborators.
2. The Administrator emphasizes that no method of data transmission over the Internet or electronic storage is fully secure. Therefore, the Administrator does not guarantee absolute protection of data, including Personal Data, against unauthorized disclosure.

 

14. CHANGES TO THE PRIVACY POLICY

1. The Privacy Policy is regularly reviewed and updated as needed in relation to the development of the Store or changes in legal regulations.
2. The current version of the Privacy Policy was adopted and is effective from 01.04.2024.

The privacy policy was created by a company specializing in e-commerce law, Rulity Consulting Sp. z o.o., Dąbrowskiego Street 32/7, 60-843 Poznań.