Taking care of the data of Users/Buyers who use the website www.fabrykarchitektury.pl, this privacy policy defines the scope and method of personal data processing by Fabryka Architektury Ewa Czerwińska.
1. DEFINITIONS
1.1. Administrator/Seller – Fabryka Architektury Ewa Czerwińska, headquartered in Szamotuły (64-500), ul. Dworcowa 39, unit 204 (place of personal data processing); NIP (Tax Identification Number): 693-196-28-62; REGON (Business Identification Number): 022118150; email: kontakt@fabrykarchitektury.pl; phone: +48 607990201
1.2. Website – the website www.fabrykarchitektury.pl
1.3. Store – the online store operating at www.fabrykarchitektury.pl and managed by the Administrator
1.4. User/Buyer – an individual, legal entity, or organizational unit without legal personality, using the Store
1.5. Consumer – an individual entering into a contract with the Seller that is unrelated to their business or professional activities, as well as an individual running a business but using a Service or Product in a manner unrelated to the professional nature of their business activities
1.6. Service:
1.6.1. Consultations – services related to consultations and advice in the fields of architecture, urban planning, renovation and conservation of monuments, shaping and organizing space, landscape architecture, interior design and arrangement, analysis of regulations, norms, acts, and ordinances, as well as education in spatial composition, painting, drawing, greenery, and the history of architecture and urban planning, offered and delivered both online and in person
1.6.2. Training – services related to delivering lectures and presentations in the fields of architecture, urban planning, renovation and conservation of monuments, shaping and organizing space, landscape architecture, interior design and arrangement, and education in spatial composition, painting, drawing, greenery, and the history of architecture and urban planning, offered and delivered both online and in person
1.6.3. Workshops – services involving practical activities in the fields of architecture, urban planning, renovation and conservation of monuments, shaping and organizing space, landscape architecture, interior design and arrangement, and education in spatial composition, painting, drawing, greenery, and the history of architecture and urban planning, offered and delivered both online and in person
1.7. Product:
1.7.1. Intellectual creation – an original book, guide, brochure, graphic, photograph, sketch, drawing, or painting
1.7.2. Digital file – digital content, whether stored on a physical medium or not, such as an e-book, audiobook, video course, podcast, online training, online workshops, or original graphics offered by the Administrator/Seller via the Store
1.7.3. Voucher – a promotional voucher offered digitally or in print, covering promotional discounts on Services and Products, as well as a gift voucher for a specified value applicable to a designated Service or Product, in line with the current Store offer
1.8. Online Calendar – an online calendar provided to the User/Buyer for scheduling consultations with the Administrator/Seller
1.9. Privacy Policy – this privacy policy defining the scope and method of personal data processing by Fabryka Architektury Ewa Czerwińska
1.10. Server – the hosting location of the domain fabrykarchitektury.pl and the Website www.fabrykarchitektury.pl, owned and managed by cyber_Folks S.A., located at Franklina Roosevelta 22, 60-829 Poznań. Using the Website involves sending queries to the server where the Website is hosted. Each query sent to the server is logged. Logs include the User’s/Buyer’s IP address, server date and time, information about the web browser, and the operating system used by the User/Buyer. Logs are saved and stored on the server. Server logs serve only as auxiliary material for website administration, and their content is not disclosed to anyone other than individuals authorized to manage the server.
1.11 Supervisory Authority – The President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw
1.12 Personal Data – information about an identified or identifiable User/Buyer processed by the Administrator for the purpose of enabling the use of the Website and conducting sales or providing services, including name, surname, mailing address, email address, phone number, and the IP address of the telecommunication device.
2. PROCESSING OF PERSONAL DATA IN CONNECTION WITH WEBSITE BROWSING
2.1. PURPOSES OF PROCESSING, LEGAL BASES, AND RETENTION
User/Buyer data is processed for the following purposes:
- Allowing website browsing – the legal basis for processing is the performance of actions necessary prior to entering into a contract at the request of the User/Buyer and the necessity for proper contract execution, as well as the User/Buyer’s consent.
- Enabling the provision of Services and ordering Products – the legal basis for processing is the necessity for proper contract execution.
- Improving the quality of services provided and website functionality – the legal basis is the legitimate interest of the Administrator/Seller to enhance their services.
- Pursuing or defending against potential claims – the legal basis is the legitimate interest of the Administrator/Seller to protect their economic interests.
User/Buyer data will be processed for the duration of the visit to the website, the period related to the purchased Service, and the duration of the Administrator’s/Seller’s legitimate interest unless the User/Buyer effectively objects to such processing. The processing period also includes the limitation period for any claims of the Administrator/Seller and the User/Buyer.
2.2. DATA RECIPIENTS
The Administrator/Seller shares User/Buyer data only with trusted recipients, such as IT service providers necessary for the proper functioning of the Website, Store, IT support, payment processing, and contract execution, as well as their employees/associates, lawyers, and accountants.
2.3. USER/BUYER RIGHTS
The User has the right to:
- Request access to their personal data,
- Request rectification of their personal data,
- Request deletion of their data (this right is excluded when the Administrator/Seller must fulfill a legal obligation or in the case of establishing, pursuing, or defending claims of either party),
- Request restriction of their data processing,
- Object to data processing based on legitimate interest,
- Lodge a complaint with the supervisory authority (President of the Personal Data Protection Office).
The User/Buyer’s personal data is not processed in an automated manner under any contract. The User/Buyer does not have the right to data portability. Personal data will not be transferred to a third country.
Providing data is voluntary but necessary for browsing the Administrator’s/Seller’s website and using the Store. Without providing data, it is not possible to establish a connection or access the content of the website at www.fabrykarchitektury.pl.
3. PROCESSING OF PERSONAL DATA IN RELATION TO COMMUNICATION
3.1. PURPOSES OF PROCESSING, LEGAL BASES, AND RETENTION
The User’s data is processed for the following purposes:
- Conducting communication – the legal basis for processing is the legitimate interest of the Administrator/Seller in maintaining communication with individuals who contact us for the purpose of providing services or sales, as well as the consent of the User/Buyer.
- Pursuing or defending against potential claims – the legal basis is the legitimate interest of the Administrator/Seller in protecting their economic interests.
The User’s data will be processed for the duration of the legitimate interest of the Administrator/Seller unless the User/Buyer submits a valid objection to such processing. The processing period also includes the limitation period for potential claims of both the Administrator/Seller and the User/Buyer.
3.2. DATA RECIPIENTS
The Administrator/Seller shares the User’s/Buyer’s data only with trusted recipients, such as IT service providers necessary for the proper functioning of the Website, Store, IT infrastructure, payment services, and contract execution. Data may also be shared with employees/associates, lawyers, and accountants.
3.3. USER/BUYER RIGHTS
The User/Buyer has the right to:
- Request access to their personal data.
- Request correction of their personal data.
- Request deletion of their personal data (this right is excluded if the Administrator/Seller is legally required to retain the data or needs it to establish, pursue, or defend claims of their own or those of the User/Buyer).
- Restrict the processing of their personal data.
- Lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office.
- Object to the processing of their personal data.
The User’s/Buyer’s personal data is not processed in an automated manner, nor are they entitled to data portability. Personal data will not be transferred to third countries. Providing data is voluntary but necessary for communication purposes. Without providing data, communication cannot take place.
4. PROCESSING OF PERSONAL DATA IN RELATION TO THE NEWSLETTER SERVICE
4.1. PURPOSES OF PROCESSING, LEGAL BASES, AND RETENTION
The User’s data is processed for the following purposes:
- Using the newsletter service – the legal basis for processing is the necessity to perform the contract and the User’s/Buyer’s explicit consent.
- Pursuing or defending against potential claims – the legal basis is the legitimate interest of the Administrator/Seller in protecting their economic interests.
The User’s/Buyer’s data will be processed for the duration of the contract, until the subscription to the newsletter is canceled, and for the duration of the legitimate interest of the Administrator/Seller unless the User/Buyer submits a valid objection to such processing. The processing period also includes the limitation period for potential claims of both the Administrator/Seller and the User/Buyer.
4.2. DATA RECIPIENTS
The Administrator/Seller shares the User’s/Buyer’s data only with trusted recipients, such as IT service providers necessary for the proper functioning of the Website, Store, IT infrastructure, payment services, and contract execution. Data may also be shared with employees/associates, lawyers, and accountants.
4.3. USER/BUYER RIGHTS
The User/Buyer has the right to:
- Request access to their personal data.
- Request correction of their personal data.
- Request deletion of their personal data (this right is excluded if the Administrator/Seller is legally required to retain the data or needs it to establish, pursue, or defend claims of their own or those of the User/Buyer).
- Restrict the processing of their personal data.
- Object to the processing of their personal data based on legitimate interest.
- Lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office.
The User’s/Buyer’s personal data is not processed in an automated manner under the contract. They are not entitled to data portability, and personal data will not be transferred to third countries. Providing data is voluntary but necessary for receiving the newsletter. Without providing data, subscription to the newsletter is not possible.
5. PROCESSING OF PERSONAL DATA IN CONNECTION WITH ORDER (SALE) AND SERVICE FULFILLMENT
5.1. PURPOSES OF PROCESSING, LEGAL BASES, AND RETENTION
The User’s/Buyer’s data is processed for the following purposes:
- Order fulfillment in the Store – the legal basis for processing is the necessity to perform the contract, as well as the Buyer’s consent.
- Organization of training, consultations, or workshops – the legal basis for processing is the necessity to perform the contract, as well as the User’s consent.
- Compliance with legal obligations, in particular tax law and accounting regulations – the legal basis for processing is the necessity to fulfill legal obligations imposed on the Administrator/Seller.
- Marketing purposes – the legal basis for processing is the legitimate interest of the Administrator/Seller in conducting marketing activities and separately expressed consent by the User/Buyer.
- Claim pursuit or defense against potential claims – the legal basis is the legitimate interest of the Administrator in protecting its economic interests.
- Determining and pursuing User’s/Buyer’s claims – the legal basis is the necessity to perform the contract regarding the right to withdraw from the contract, the realization of warranty rights, quality guarantees (if applicable), and other complaint claims (if applicable).
The User’s/Buyer’s data will be processed for the duration of the contract and the legitimate interest of the Administrator/Seller or the User/Buyer. The processing period includes the limitation period for potential claims by the Administrator/Seller and the User/Buyer. After this period, personal data will be processed for the necessary archiving duration.
5.2. DATA RECIPIENTS
The Administrator/Seller will share the User’s/Buyer’s data only with trusted recipients, such as IT service providers, hosting services, mail, accounting, postal, courier, and legal services, who perform services on behalf of the Administrator/Seller.
5.3. USER RIGHTS
The User/Buyer has the right to:
- Request access to their personal data.
- Request the rectification of their personal data.
- Request the deletion of their personal data (this right is excluded when fulfilling the Administrator’s/Seller’s legal obligations or when determining, pursuing, or defending claims).
- Request the restriction of the processing of their personal data.
- Object to the processing of their personal data based on legitimate interests.
- Lodge a complaint with the supervisory authority (President of the Personal Data Protection Office).
The User’s/Buyer’s personal data is not processed automatically based on the contract. The User/Buyer has no right to data portability. The User’s/Buyer’s personal data will not be transferred to a third country.
Providing personal data is voluntary but necessary to fulfill orders and provide services. Without providing data, the order and service provision are not possible.
6. CONTACTING THE ADMINISTRATOR/SELLER
- The Administrator/Seller can be contacted via email at: kontakt@fabrykarchitektury.pl or in writing at the address: Fabryka Architektury Ewa Czerwińska, ul. Dworcowa 39 lok. 204, 64-500 Szamotuły.
- This Privacy Policy is reviewed and updated as needed, and changes come into effect upon publication on the Website.
7. PERSONAL DATA SECURITY
The Administrator uses all necessary technical and organizational measures to ensure the confidentiality, integrity, accountability, and continuity of personal data processing.
Appropriate safeguards include:
- Restricting access to rooms where personal data is processed or stored to Authorized Personnel (employees, contractors, processors) and ensuring these rooms are only accessible to third parties in the presence of Authorized Personnel or the Administrator.
- Locking data processing areas when unattended to prevent unauthorized access.
- Storing documents in locked cabinets, drawers, or safes.
- Using shredders to permanently destroy documents containing personal data.
- Securing local networks against external threats with firewalls and antivirus systems.
- Backing up data stored in the IT system.
- Securing access to devices through user authentication with IDs or passwords.
- Encrypting data during transmission.
8. BREACH OF PERSONAL DATA PROTECTION RULES
- If a breach of personal data protection occurs, the Administrator evaluates whether it could pose a risk to the rights or freedoms of third parties or individuals whose data is affected.
- If such a breach poses a risk, the Administrator notifies the supervisory authority without undue delay and no later than 72 hours after discovering the breach.
- If the risk to rights and freedoms is high, the Administrator also notifies the affected individual.
This Privacy Policy is effective from Jan 22nd, 2025.