This document outlines the terms for the processing of personal data (hereinafter also referred to as “data”) and cookies within the scope of the website glutespriority.com, operated through the website available at the URL: glutespriority.com, hereinafter referred to as the “Service.”
TABLE OF CONTENTS
- HOW TO CONTACT THE DATA CONTROLLER
- THE BASIS FOR PROCESSING YOUR DATA
- INFORMATION ON THE PROCESSING OF DATA FOR THE PURPOSE OF ENTERING INTO AND EXECUTING CONTRACTS, POSSIBLE CLAIMS, AND DEFENDING AGAINST THEM
- INFORMATION ON THE PROCESSING OF DATA FOR SENDING NEWSLETTERS
- INFORMATION ON THE PROCESSING OF DATA FOR DIRECT MARKETING AND PROFILING
- INFORMATION ON THE PROCESSING OF DATA TO ENSURE SECURITY
- INFORMATION ON DATA RECIPIENTS
- INFORMATION ON TRANSFERRING DATA TO THIRD COUNTRIES
- ABSOLUTE RIGHTS OF THE INDIVIDUALS WHOSE DATA IS PROCESSED
- RELATIVE RIGHTS OF THE INDIVIDUALS WHOSE DATA IS PROCESSED
- COOKIES – INTRODUCTION
- COOKIES OF THE DATA CONTROLLER
- COOKIES OF THIRD PARTIES
- CONSENT TO THE USE OF COOKIES AND MANAGEMENT OF COOKIES
- CACHE MEMORY
- LINKS TO OTHER WEBSITES OR SOFTWARE
- CHANGES TO THE PRIVACY POLICY AND COOKIE POLICY
- HOW TO CONTACT THE DATA CONTROLLER
The controller of personal data processed within the scope of the Service is ANNA WOŹNIAKOWSKA, operating the company GORSETY FITNESS ANNA WOŹNIAKOWSKA, with the business address at ul. Zaborowska 1c/44, 01-462 Warsaw, and the delivery address at ul. Palisadowa 3, 01-940 Warsaw, NIP: 5222940893, REGON: 365045379. You can contact the data controller via email at info@glutespriority.com. - THE BASIS FOR PROCESSING YOUR DATA
When collecting personal data, we always inform you about the legal basis for its processing. This is based on the provisions of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC).
When we inform you about:
- Article 6(1)(a) or Article 9(2)(a) GDPR – this means that we process personal data based on the consent you have given.
- Article 6(1)(b) GDPR – this means that we process personal data because it is necessary to perform a contract or take steps prior to entering into a contract at your request.
- Article 6(1)(c) GDPR – this means that we process personal data to comply with a legal obligation.
- Article 6(1)(f) GDPR – this means that we process personal data in order to pursue legitimate interests.
- INFORMATION ON THE PROCESSING OF DATA FOR THE PURPOSE OF ENTERING INTO AND EXECUTING CONTRACTS, POSSIBLE CLAIMS, AND DEFENDING AGAINST THEM
We may process personal data necessary for the execution of the contract entered into with you. However, even before entering into the contract, we may process personal data necessary to take actions at your request. This data processing is based on Article 6(1)(b) of the GDPR.
In the course of providing services, we may process your personal data regarding your health condition. This data processing is based on Article 9(2)(a) of the GDPR, i.e., based on the consent you have provided.
For the execution of paid services contracts, we may process your data for accounting and tax obligations. This data processing is based on Article 6(1)(c) of the GDPR.
During and after the performance of the contract, we process personal data for the possible consideration of claims and their pursuit. Our legitimate interest may include responding to potential complaints, which we are obliged to do under separate civil law provisions. In such a case, we process personal data based on our legitimate interest, which is defense against potential claims or pursuing them. This data processing is based on Article 6(1)(f) of the GDPR.
We will store this data for the period necessary to achieve the specified purposes, no later than until the expiration of claims under applicable laws.
You have the right to access your data, correct it, delete it, limit its processing, transfer your data, as well as the right to file a complaint with the supervisory authority. In the case of data processing for the purpose specified in point 4, you also have the right to object to its processing. In the case of data processing for the purpose specified in point 2, you have the right to withdraw your consent at any time. However, withdrawing consent does not affect the legality of the processing carried out before the withdrawal.
Providing this data is voluntary, but failure to provide it will prevent the conclusion or execution of the contract.
The recipients of this data include: our hosting provider, email service provider, IT service provider, accounting service provider and invoice software provider, electronic payment service provider, legal, advisory, and debt collection service providers, as well as other service providers we use for the specified purpose.
- 4. INFORMATION ON THE PROCESSING OF DATA FOR SENDING THE NEWSLETTER
- We provide the option to subscribe to the recipient list of our newsletter. If you have used this functionality, we process your personal data for the purpose of sending the newsletter.
- The newsletter may contain advertising, commercial, or marketing content.
- The processing of this data is based on your consent and therefore Article 6(1)(a) of the GDPR.
- You have the right to withdraw your consent at any time. However, withdrawing consent does not affect the lawfulness of the processing carried out before the withdrawal.
- We will store your data until you withdraw your consent. If you never withdraw it, we will process your data until we stop sending the newsletter.
- You have the right to access your data, rectify it, delete it, restrict its processing, transfer your data, and also the right to lodge a complaint with the supervisory authority.
- Providing this data is voluntary, but failure to provide it will prevent us from sending the newsletter.
- The recipients of this data are: our hosting provider, IT service provider, and email service provider.
- 5. INFORMATION ON THE PROCESSING OF DATA FOR DIRECT MARKETING AND PROFILING
- We may process your personal data for direct marketing purposes. This occurs, for example, when we respond to your message by providing details of our offer.
- For direct marketing, we may use profiling, which involves automated decision-making regarding the display of advertisements to you. This decision is made based on your actions on the Service, particularly on contracts entered into or pages viewed. In practice, profiling helps the usability of our Service by presenting content that might be of interest to you.
- The processing of this data is based on Article 6(1)(f) of the GDPR.
- We will store your data for the duration necessary to fulfill the purpose.
- You have the right to access your data, rectify it, delete it, restrict its processing, transfer your data, object to its processing, and also the right to lodge a complaint with the supervisory authority.
- You have the right not to be subject to profiling unless you have consented to it. If you have given consent, the basis for processing your data will be the consent provided (Article 6(1)(a) of the GDPR), which you can withdraw at any time. In such cases, your data will be processed until the withdrawal of consent.
- Providing this data is voluntary, but failure to provide it will prevent us from carrying out direct marketing activities.
- The recipients of this data are: our hosting provider, IT service provider, email service provider, and advertising service provider.
- 6. INFORMATION ON THE PROCESSING OF DATA FOR SECURITY PURPOSES
- From the moment you access our website, we process data to ensure the security of our services, such as:
- the public IP address of the device from which the request was made,
- the type and language of the browser,
- the date and time of the request,
- the number of bytes sent by the server,
- the URL of the previously visited page, if the visit occurred via this link,
- error information related to the request.
2. Our legitimate interest in processing this data is to maintain server event logs and protect the Service from potential hacking attempts and other abuses. This includes the ability to determine the IP address of a person performing an unauthorized action in the Service area, such as attempting to break security, publishing prohibited content, or attempting unauthorized actions using our servers.
3. The processing of this data is based on Article 6(1)(f) of the GDPR.
We will store this data for the period necessary to fulfill the specified purposes, no later than until the expiration of claims under separate legal provisions.
4. You have the right to access your data, correct it, delete it, restrict its processing, object to its processing, and also the right to file a complaint with the supervisory authority.
5. Providing this data is a condition for using the Service. Failure to provide this data will prevent the use of the Service.
6. The recipients of this data are our hosting provider and IT service provider.
- 7. INFORMATION ON DATA RECIPIENTSIn the process of personal data processing, we use external services. Therefore, third parties may be recipients of your personal data. When collecting personal data, we always inform you about these recipients, but for the sake of clarity, we provide this information briefly. Therefore, we explain here that when we mention specific categories of recipients, they include the following entities:
- IT service provider: Kylos Sp. z o.o., ul. Wróblewskiego 18, 93-578 Łódź.
- Transport service provider: InPost S.A., ul. Wielicka 28, 30-552 Kraków; DHL Parcel Polska Sp. z o.o., ul. Osmańska 2, 02-823 Warszawa; Polish Post S.A., ul. Rodziny Hiszpańskich 8, 00-940 Warszawa; FedEx Express International B.V., Attn: Legal Department, Taurusavenue 111, 2132 LS Hoofddorp (Netherlands).
- Hosting provider: Kylos Sp. z o.o., ul. Wróblewskiego 18, 93-578 Łódź.
- Email service provider: Kylos Sp. z o.o., ul. Wróblewskiego 18, 93-578 Łódź.
- Advertising service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.
- Accounting service provider: AMET Usługi Księgowe Ewa Leszczyńska, ul. Ficowskiego 15, 01-747 Warszawa.
- Invoice management software provider: Fakturownia sp. z o.o., ul. Juliana Smulikowskiego 6/8, 00-389 Warszawa.
- Legal / advisory / debt recovery service providers: These service providers are appointed individually as needed.
- Electronic payment service providers: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg; PayPro S.A., ul. Kanclerska 15, 60-327 Poznań.
- 8.INFORMATION ON TRANSFERRING DATA TO THIRD COUNTRIES
- Due to our use of services from other providers, your personal data may be transferred outside the European Economic Area (EEA), specifically to the United States of America (USA).
- The European Commission has determined that certain countries outside the EEA adequately protect personal data.
- Since the country to which we transfer personal data has not been deemed a secure country, the data transfer takes place based on a contract containing standard data protection clauses adopted by the European Commission.
- 9. ABSOLUTE RIGHTS OF DATA SUBJECTSWhen we refer to rights related to the processing of your personal data, we are referring to the rights described below. The ability to exercise the following rights is independent of the legal basis for the processing of personal data.
Right of Access to Data
You have the right to obtain confirmation from us whether we are processing your personal data. If so, you have the right to access this data, as well as to receive additional information about:- The purposes of processing,
- The categories of the relevant data,
- The recipients or categories of recipients to whom the data has been or will be disclosed, particularly regarding recipients in third countries or international organizations,
- The planned retention period of the data, or if not possible, the criteria used to determine this period,
- The right to request rectification, deletion, or restriction of processing, the right to object to such processing, and the right to lodge a complaint with the supervisory authority,
- The source of the data, if your data was not collected from you,
- Automated decision-making, including profiling, and the rules behind it, as well as the significance and the anticipated consequences of such processing for you.
After receiving such a request, we are obliged to provide a copy of the personal data being processed. If the request is submitted electronically, and we do not receive any other instructions, we will also provide the information electronically.
Right to Rectify Data
You have the right to request the immediate rectification of inaccurate personal data concerning you. Considering the purposes of processing, you also have the right to request the completion of incomplete personal data, including by providing an additional statement.Right to Erasure of Data (Right to be Forgotten)
You have the right to request the immediate erasure of personal data concerning you. We are then obliged to erase personal data without undue delay if one of the following circumstances applies:- You have withdrawn your consent to the processing of your personal data, and we have no other legal grounds for processing,
- You have made a valid objection to the processing of your personal data,
- Your personal data has been processed unlawfully,
- Your personal data needs to be erased to comply with a legal obligation,
- Your data was collected in connection with the provision of information society services.
Right to Restrict Processing
You have the right to request us to restrict the processing in the following cases:- When you contest the accuracy of the data – for a period allowing us to verify its accuracy,
- When processing is unlawful, and you oppose the erasure of data, requesting instead the restriction of its use,
- We no longer need the personal data for processing purposes, but you need it for the establishment, exercise, or defense of legal claims,
- You have objected to the processing of your data – until it is determined whether our legitimate grounds override your objections.
Automated Decisions, Including Profiling
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you. This right does not apply if the decision:- Is necessary for the conclusion or performance of a contract between you and us,
- Is permitted by EU law or Polish law and provides adequate safeguards for your rights, freedoms, and legitimate interests, or
- Is based on your explicit consent.
Right to Lodge a Complaint
You have the right to lodge a complaint regarding the processing of your personal data with the supervisory authority:
President of the Personal Data Protection Office (PUODO),
ul. Stawki 2, 00-193 Warszawa,
tel. 22 531 03 00, fax: 22 531 03 01,
e-mail: kancelaria@uodo.gov.pl.
- 10. RELATIVE RIGHTS OF DATA SUBJECTSWhen we refer to the rights related to the processing of your personal data, we are referring to the following rights. The ability to exercise them depends on the legal basis for the processing of personal data.
Right to Withdraw Consent for Processing
If we process your personal data based on your consent, you have the right to withdraw your consent at any time. Naturally, withdrawing your consent does not affect the lawfulness of the processing that took place prior to the withdrawal of consent.Right to Data Portability
You have the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this personal data to another controller without hindrance from our side, provided that the processing is:- Based on consent or a contract, and
- Done in an automated manner.
When exercising the right to data portability, you have the right to request that the personal data be transmitted directly to another controller, where technically feasible. This right should not adversely affect the rights and freedoms of others.
Right to Object
If we process your personal data based on Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data on grounds related to your particular situation. In such a case, we may no longer process your personal data unless we demonstrate the existence of:- Important, legitimate grounds for processing that override your interests, rights, and freedoms, or
- Grounds for the establishment, exercise, or defense of legal claims.
Additionally, if you object to the processing of your personal data for direct marketing purposes, we will no longer process your data for such purposes.
- 11. COOKIES – INTRODUCTIONThe website of the Service uses cookies. These are small files containing a sequence of characters that are commonly used and sent to the end device (e.g., computer, laptop, tablet, smartphone) when visiting the Service’s website. These pieces of information are stored in the memory of the browser used, which sends them back when you visit the website again.
Cookies can be categorized in three ways:
- Essential cookies – These cookies are necessary for the proper functioning of the website and its functionalities, such as authentication or security cookies. Without these cookies being stored on your device, it will not be possible to use the website.
- Analytical cookies – These cookies allow us to monitor the pages visited, traffic sources, and time spent on the website. Without them, using the website’s functionalities will not be restricted.
- Advertising cookies – These cookies allow us to display personalized advertisements on the website or elsewhere. Their absence does not limit the use of the website’s functionalities.
- Social media cookies – These cookies allow the display of the page on social media platforms, as well as liking it. Without them, using the website’s functionalities will not be limited.
- YouTube cookies – These cookies allow embedded video files to be displayed. Without them, viewing video files will not be possible.
Cookies can also be categorized based on their validity:
- Session cookies – These exist until the end of the session.
- Persistent cookies – These exist after the session ends.
Finally, cookies can be distinguished based on the entity managing the cookies:
- Our cookies
- Third-party cookies
- 12. COOKIES ADMINISTERED BY THE DATA CONTROLLERThe cookies administered by us allow for:
- Authentication of access – Ensuring secure login to the website.
- Session management – Maintaining the session after logging in.
- Securing the Service – Protecting the website from hacking attempts.
- Remembering form field content (optional) – Storing the data entered in forms by the user, making it easier to fill out forms on subsequent visits.
- Remembering cart items – Storing the items added to the shopping cart, making the shopping experience more convenient.
These cookies help make using the Service’s functionalities easier and more enjoyable.
- 13.COOKIES OF THIRD PARTIESWe use cookies administered by Google Inc. (1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA) as part of the following services:
- Google Ads – Advertising cookies used to manage and evaluate the quality of advertising campaigns carried out using the Google Ads service.
- Google Analytics – Analytical cookies used to track user behavior and website traffic, as well as generate traffic statistics.
- YouTube – These cookies allow embedded YouTube video files to be displayed on the site. They are anonymous and aggregate, meaning they do not contain identifying information (personal data) of the users.
Through these services, we collect data such as the sources of user acquisition, user behavior on the site, device and browser information, IP address, domain, demographic data (age, gender), interests, and geographic data. For more information on this, visit Google Cookie Policy.
We also use cookies managed by Facebook Inc. (1 Hacker Way, Menlo Park, CA 94025, USA) for:
- Facebook Pixel – A tool used to track user activity on the website and measure advertising effectiveness. This is done by placing pixel tags in digital content.
You can manage the Facebook Pixel tag through Facebook’s user panel. For more information, visit Facebook CookiePolicy.
We also use cookies from Instagram (Facebook Inc.) to:
- Connect your Instagram account to the website’s store (if such a feature is provided).
- Display personalized ads through Instagram.
To learn about how to object to the processing of your personal data in this context, visit Instagram Help.
- 14. CONSENT TO THE USE OF COOKIES AND MANAGEMENT OF THEMWith the exception of essential cookies, the processing of cookies is based on the user’s consent. Consent to the processing of cookies is voluntary and can be withdrawn at any time. However, it is important to note that failure to consent to the use of certain cookies may result in restrictions in using the Service and its functionality, or even prevent the use of the Service.
Consent for the processing of cookies can be provided in the following ways:
- Through the settings of the software installed on the user’s device.
- By using a button that includes a statement of consent to the processing of cookies or by confirming the understanding of their terms.
- Through settings available on the website.
If you withdraw your consent, certain features of the website might not function as intended.
- 15.CACHE MEMORY
- 16. LINKS TO OTHER WEBSITES OR SOFTWAREThe Service may contain links to other websites or software. We are not responsible for the privacy policies or cookie practices of these external sites or software. We recommend reviewing the privacy policy and cookie practices of these sites or software upon visiting or before installing them.
- 17. CHANGES TO THE PRIVACY POLICY AND COOKIE POLICYThe Privacy Policy and Cookie Policy come into effect on the date of publication on the Service’s website. Any changes to the Privacy Policy and Cookie Policy are made by publishing a new version of the policy on the Service’s website. Information about changes to the Privacy Policy and Cookie Policy will be published on the Service’s website no later than 3 days before the new version takes effect.