Privacy policy & cookies

 

 

Hello!

Since you’ve made your way over here, it’s a surefire sign that you value your privacy. That’s perfectly understandable, and it’s why we’ve put together this document for you, in which you will find the rules for processing personal data and using cookie files in connection with using the website www.crafteo.shop.

Some formal information for starters – the administrator of the website is Maciej Nowak, sole proprietor doing business as “CRAFTEO STUDIO Maciej Nowak” at the following address: ul. Krakowska 56, 32-080 Zabierzów, Poland, NIP (tax identification number): 5130196197.

If you have any doubts related to the privacy policy, you can always contact us by sending an email to contact@crafteo.studio.

 

Short version – the most important information

We not only care about your privacy, but also about your time. That's why we've prepared a short version of the most important rules related to the protection of privacy for you.

  1. By subscribing to the newsletter, adding a comment on the blog or simply contacting us, you provide us with your personal information, and we guarantee that your data will remain confidential, safe and will not be shared with any third parties without your express consent.
  2. We entrust the processing of personal data only to verified and trusted entities providing services related to the processing of personal data.
  3. We use Google Analytics analytical tools that collect information about your website visits, such as the subpages that you have viewed, the time you spent on the website, and the transitions between individual subpages. For this purpose, Google LLC cookie files for the Google Analytics service are used.
  4. We use the Google AdWords tool to run remarketing campaigns. For this purpose, Google LLC cookie files for the Google AdWords service are used. In your cookie settings, you can object to the use of this type of cookies.
  5. We use marketing tools, such as Facebook Pixel, to send personalized ads to you on Facebook. This involves the use of Facebook cookies. In your cookie settings, you can object to the use of this type of cookies.   
  6. We provide the opportunity to use social media-related functions, such as sharing content on social networks and subscribing to a social media profile. Using these functions may involve the use of cookies for social network administrators such as Facebook, Instagram, YouTube, Twitter, Google+ and/or LinkedIN.
  7. We embed YouTube videos on the website. For this purpose, Google LLC cookie files for the YouTube service are used. The cookies only load when the video is being played.
  8. We use our own cookies to make the site work properly.

If the above information is not enough for you, you will find further details below.

 

Personal data

The Controller of your personal data within the meaning of the provisions on the protection of personal data is Maciej Nowak, sole proprietor doing business as “CRAFTEO STUDIO Maciej Nowak” at the following address: ul. Krakowska 56, 32-080 Zabierzów, Poland, NIP (tax identification number): 5130196197.

The purposes, legal bases and personal data processing periods are indicated separately for each purpose of* data processing (see the description of the individual purposes of personal data processing below).

Rights. The GDPR grants you the following potential rights associated with the processing of your personal data:

  1. the right to access the personal data,
  2. the right to correct the personal data,
  3. the right to delete the personal data,
  4. the right to limit the processing of the personal data,
  5. the right to object to the processing of the personal data,
  6. the right to transfer the data,
  7. the right to file a complaint to the supervisory authority,
  8. the right to withdraw consent to the processing of the personal data, if such consent has been given.

The rules associated with the implementation of the indicated rights are described in detail in art. 16-21 of the GDPR. We encourage you to read these regulations. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and you will not be entitled to them in relation to all activities of processing your personal data. For your convenience, we have made every effort to indicate the rights to which you are entitled as part of the description of individual data processing operations.

 

We would like to emphasize that you are always entitled to one of the above rights – if you believe that we have violated the provisions on the protection of personal data when processing your personal data, you can file a complaint to the supervisory authority (the President of the Office for Personal Data Protection).

You can also always ask us to provide you with information about which of your data we are in possession of and for what purposes we are processing it. Just send a message to the following address: contact@crafteo.studio. However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. You can also use the e-mail address indicated above if you have any questions associated with the processing of your personal data.

Security. We guarantee the confidentiality of all personal data provided to us. We ensure that all security and personal data protection measures required by the personal data protection regulations are taken. Personal data is collected with due diligence and properly protected against access by unauthorized persons.

Data recipients. Your data can be processed by our subcontractors, i.e. entities, whole services we use while processing data and providing services to you or processing orders in the online store.

  1. the hosting provider – for the purpose of storing personal data on the server,
  2. entities providing IT services – for the purpose of using IT support, managing websites, in relation to which the entity providing support may have access to your personal data collected on the website or in the store,
  3. the mailing system provider – for the purpose of using the mailing system in which your data is processed if you subscribe to the newsletter.

All entities we entrust with the processing of personal data guarantee the use of appropriate personal data protection and security measures required by law.

Due to the use of an American mailing system, your data is transferred to the US for storage on US servers. No worries, the MailChimp system provider has joined the Privacy Shield program, thus guaranteeing adequate personal data protection.

Purposes and processing activities

 

Newsletter. If you would like to subscribe to the newsletter, you have to give us your e-mail address via the newsletter subscription form. Providing data is voluntary, but necessary to subscribe to the newsletter.

The data provided to us when subscribing to the newsletter is used for the purpose of sending you the newsletter, and the legal basis for its processing is your consent (art. 6 par. 1 letter a of the GDPR) expressed while subscribing to the newsletter.

The data will be processed for as long as the newsletter will be issued unless you cancel your subscription earlier, which will result in the deletion of your data from the database.

You can correct your data stored in the newsletter database at any time, as well as request its deletion, canceling your subscription to the newsletter. You are also entitled to the right to transfer your data referred to in art. 20 of the GDPR.

Comments. If you would like to add a comment on the blog, you have to fill out the form and enter your email address and name in it. Providing the data is voluntary, but necessary to add a comment.

The data provided when adding a comment is used for the purpose of publishing a comment on the blog, and the legal basis for its processing is your consent (art. 6 par. 1 letter a of the GDPR) resulting from adding the comment.

The data will be processed for as long as the comments will function on the blog unless you ask for your comment to be deleted earlier, which will result in the deletion of your data from the database.

You can delete your data assigned to the comment at any time, as well as request its deletion. You are also entitled to the right to transfer your data referred to in art. 20 of the GDPR.

E-mail contact. By contacting us via e-mail, which also includes sending queries via the contact form, you naturally give us your e-mail address as the message sender's address. In addition, you can also include other personal information in the body of the message. Providing data is voluntary, but necessary to make contact.

In  this case, your data is processed for the purpose of contacting you and the basis for its processing is art. 6 par. 1 letter a of the GDPR, i.e. your consent resulting from initiating contact with us. The legal basis for post-contact processing is the legitimate purpose of archiving correspondence for internal needs (art. 6 par. 1 letter c of the GDPR).

The content of the correspondence can be archived and we cannot clearly determine when it will be deleted. You have the right to demand a record of the history of correspondence you have engaged in with us (if it was subject to archiving), as well as demand its deletion, unless its archiving is justified due to our overriding interests, e.g. protection against potential claims on your part.

 

Cookie files and other tracking technologies

Our website and store, like almost all other websites, uses cookie files.

Cookies are small text information files stored on your end device (e.g. computer, tablet or smartphone) that can be read by our ICT system (own cookies) or the ICT system of third parties (third party cookies).

Some of the cookies we use are deleted after the end of the web browser session, i.e. after it is closed (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you access the site (persistent cookies).

You can find more details below.

Consent to cookies. During your first visit to the website, you are shown information about the use of cookies. Thanks to a special tool, you can manage cookies via the website. In addition, you can always change the cookie settings in your browser or even delete the cookie files. Browsers manage cookie settings in various ways. You can find information about changing the cookie settings in your web browser’s help menu.

Remember that disabling or limiting the use of cookies may cause difficulties in using our website, as well as many other websites that use cookies.

Own cookies. We use our own cookies for the purpose of ensuring that the website works properly, especially the process of placing orders and logging into user accounts.

Third party cookies. Our website, like most of today's websites, uses functions provided by third parties, which, in turn, involves the use of cookies from third parties. The use of these types of cookies is described below.

Google Analytics. We use the Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We perform activities of this type based on our legally legitimate interest consisting of the creation of statistics and their analysis for the purpose of optimizing our websites.  

Google Analytics automatically collects information about your use of our site. The information collected in this way is usually transmitted to a Google server in the United States and stored there.

Due to the IP address anonymization we have activated, your IP address is shortened before being forwarded. Only in exceptional cases, the full IP address is forwarded to a Google server in the United States and shortened there. As a rule, the anonymized IP address provided by your browser via Google Analytics is not combined with other Google data.

Due to the fact that Google LLC has a registered office in the USA and utilizes a technical infrastructure located in the USA, it has joined the EU-US-Privacy Shield program in order to ensure adequate personal data protection required by European regulations. Under the agreement between the US and the European Commission, the latter has found that an adequate level of data protection is provided by Privacy Shield-certified companies.

You can prevent the data associated with your use of our website that is collected by cookie files from being stored by Google by installing the browser plug-in at the following address: https://tools.google.com/dlpage/gaoptout.

If you are interested in the details related to the processing of data within Google Analytics, we encourage you to read the following information prepared by Google: https://support.google.com/analytics/answer/6004245.  

Google Adwords. We use the Google AdWords marketing tools provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. With the help of Google Adwords, we promote our website in search results and on third party websites. We also use remarketing tools. We perform activities of this type based on our legally legitimate interest in the form of the marketing of our own products or services.  

When visiting our website, Google's remarketing cookie file will automatically be left on your device, and with the help of a pseudonymous identifier (ID) and based on the websites you visit, it allows for the display of ads based on your interests.

Further data processing is only performed if you have consented to Google connecting the browsing history with using the application with your account and to the use of information from your Google account for personalizing the ads displayed on websites. If, in such a case, you will be logged into Google while visiting our website, Google will use your data together with the Google Analytics data for the purpose of creating and defining lists of target groups for remarketing purposes on various devices. For this purpose, Google temporarily connects your personal data with Google Analytics data in order to create target groups.

Due to the fact that Google LLC has a registered office in the USA and utilizes a technical infrastructure located in the USA, it has joined the EU-US-Privacy Shield program in order to ensure adequate personal data protection required by European regulations. Under the agreement between the US and the European Commission, the latter has found that an adequate level of data protection is provided by Privacy Shield-certified companies.

You can deactivate cookies used for remarketing in your Google account settings: https://adssettings.google.com. In addition, you can disable the use of cookies for remarketing in the cookie settings on our website.

If you are interested in the details related to the processing of data within Google AdWords, we encourage you to read the Google privacy policy:   https://policies.google.com/privacy.

Facebook Pixel. We use marketing tools available on Facebook and provided by Facebook Inc., 1601 S. California Ave. Palo Alto, CA 94304, USA. Within the framework of these tools, we direct advertisements to you on Facebook. We perform activities of this type based on our legally legitimate interest in the form of the marketing of our own products or services.

For the purpose of directing advertisements to you that are personalized based on your behavior on our site, we’ve implemented Facebook Pixel on our website, which automatically collects information about your use of our website in terms of the pages viewed. The information collected in this way is usually forwarded to a Facebook server in the United States and stored there.

The information collected via Facebook Pixel is anonymous, i.e. it does not allow us to identify you. We only know what actions you have taken within our site. However, we would like to inform you that Facebook may connect this information with other information about you collected as part of your use of Facebook and use it for its own purposes, including marketing purposes. These types of actions taken by Facebook are no longer dependent on us, and you can search information about them directly in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation. You can also manage your privacy settings from your Facebook account.

Due to the fact that Facebook Inc. has a registered office in the USA and utilizes a technical infrastructure located in the USA, it has joined the EU-US-Privacy Shield program in order to ensure adequate personal data protection required by European regulations. Under the agreement between the US and the European Commission, the latter has found that an adequate level of data protection is provided by Privacy Shield-certified companies.

You can disable Facebook Pixel in the cookie settings on our website.

Social media tools. Our websites use plug-ins and other social media tools provided by social networks, such as Facebook, Twitter, Instagram, Google and LinkedIN. 

By displaying our website containing such a plugin, your browser will establish a direct connection to the social network administrators’ (the service providers’) servers. The content of the plugin is forwarded by a given service provider directly to your browser and integrated with the website. Thanks to this integration, the service providers receive information that your browser has displayed our website, even if you do not have a profile with  the given service provider or you are not logged in. This information (along with your IP address) is sent by your browser directly to the server of the given service provider (some servers are located in the USA) and stored there.

If you have logged in to one of the social networking sites, then this service provider will be able to directly assign a visit to our website to your profile in a given social network.

If you use a given plugin, for example by clicking on the "Like" or "Share" button, the relevant information will also be sent directly to the server of the given service provider and stored there.

In addition, this information will be published on the given social network and will be displayed to people added as your contacts. The purpose and scope of data collection and its further processing and use by service providers, as well as the possibility of contact and your rights in this area and the possibility to create settings that protect your privacy are described in the privacy policy of individual service providers. 

If you do not want social networking sites to assign data collected during the visit to our website directly to your profile on the a given social network, then log out of that network before your visit to our site. You can also completely prevent the plugins from being loaded on the site by using appropriate extensions for your browser, e.g. blocking scripts.

Video. We embed YouTube videos on the website. For this purpose, cookies from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA associated with the YouTube service are used. The cookies are loaded only when video is played. If you do not consent to the cookies loading, refrain from playing the video.

When playing the video, Google receives information about this fact even if you do not have a profile with the given service provider or if you are not currently logged into that profile. This information (along with your IP address) is sent by your browser directly to the server of the given service provider (some servers are located in the USA) and stored there.

If you have logged in to Google, the service provider will be able to directly assign a video playback on our site to your profile in the given social network. The purpose and scope of data collection and its further processing and use by service providers, as well as the possibility of contact and your rights in this area and the possibility to create settings that protect your privacy are described in Google’s privacy policy. 

If you do not want Google to assign data collected during the video playback on our website directly to your Google profile, you must log out of your Google account before visiting our site. You can also completely prevent the plugins from being loaded on the site by using appropriate extensions for your browser, e.g. blocking scripts.

We encourage you to read the details of Google's privacy policy (https://policies.google.com/privacy).

Server logs

Using the website involves sending queries to the server on which the page is stored. Each query sent to the server is saved in the server logs.

The logs include your IP address, the server date and time, and information about the web browser and operating system you’re using. The logs are saved and stored on the server.

The data stored in the server logs is not associated with specific persons using the site and are not used by us to identify you.

The server logs are only helping material used to administer the site, and their content is not disclosed to anyone except those authorized to administer the server.



 

Still questions? Email us at: contact@crafteo.studio