Szkoła Stawiania Baniek · Dr Smirnov cupping glasses
← Back to the order form Privacy

PRIVACY AND COOKIES POLICY

This is an English translation of our Polish privacy policy, prepared for the order form at nld.sklepzbankami.pl. The Polish version published at sklepzbankami.pl remains the original.

The privacy of the people who use the nld.sklepzbankami.pl service is essential to us, which is why FizjoManufaktura Szkolenia sp. z o.o., the owner of the service, makes every effort to protect it. In order to present the rules of personal data processing clearly and fairly, we provide this document, which we call the Privacy Policy. In it you will find both the rights you have and the obligations we follow in order to guarantee that personal data is processed lawfully.

Definitions

So that it is clear what we are talking about, we have defined the terms we use:

The controller of your personal data

The controller of your personal data in connection with the use of the Service is: FizjoManufaktura Szkolenia sp. z o.o., registered at Gryfińska 1, 60-192 Poznań, Poland, VAT ID (NIP): 7792560763, company register (KRS): 0001062420, statistical number (REGON): 526617041 — the owner of https://nld.sklepzbankami.pl.

Contacting the data controller

If you have any questions about the processing of your personal data, including the rights you have, please contact us:

What personal data do we process?

FizjoManufaktura Szkolenia sp. z o.o. processes the personal data of Users/Participants provided in the order form. This is the following data: first name, last name, address, phone number and e-mail address, and in the case of a business also the VAT number and the company name. Where a user wishes the parcel to be sent to an address other than the one given in their details, also the delivery address. The scope of the personal data of the User/Participant processed by us is the same. The data above is necessary to perform the contract and to provide the service.

For what purpose, on what legal basis and for how long do we process personal data?

The personal data of the User/Participant obtained in connection with the use of FizjoManufaktura Szkolenia sp. z o.o. is used for various purposes, to various extents and on various legal bases set out in the GDPR, namely:

a) Creating an account and authenticating the User in the Service

Scope of data: for this purpose we process the personal data you provide in the registration form of the Service, that is your e-mail address and the password you set. Purpose: performance of the contract. Legal basis — necessity for the performance of the contract for the provision of the service (Article 6(1)(b) GDPR).

b) Sale and delivery of the ordered goods

Scope of data: the personal data necessary to perform the contract: first name, last name, residential address, phone number, e-mail address, and in the case of a business also the VAT number, the name under which the business operates, the correspondence address, and where delivery is to be made to a different address — the delivery address indicated. Purpose: performance of the contract. Legal basis — necessity for the performance of the contract for the provision of the service (Article 6(1)(b) GDPR).

c) Handling complaints, grievances and requests, answering questions

Scope of data: for this purpose we may process some of the personal data you have provided in your profile, as well as data concerning the use of our services that is the reason for the grievance or request, and data contained in the documents attached to the grievance or request. Purpose: handling the complaint, grievance, request or enquiry. Legal basis: our legitimate interest (Article 6(1)(f) GDPR), consisting in improving the functionality of the services provided electronically and in building positive relationships with Users and non-logged-in Users, based on integrity and loyalty.

d) Settlements

Scope of data: the data necessary to carry out settlements, including: first name, last name, the name under which the business operates, address, VAT number. Purpose: fulfilling settlement obligations. Legal basis: compliance with a legal obligation to which the controller is subject, under Article 6(1)(c) GDPR.

e) Statistics on the use of individual features of the Services

Scope of data: for these purposes we process personal data concerning your activity in the Services, such as: the pages and subpages of the Services visited and the amount of time spent on each of them, as well as data concerning your search history, your IP address, location, device ID and data concerning your browser and operating system. Purpose: improving and streamlining the operation of the Service. Legal basis: our legitimate interest (Article 6(1)(f) GDPR), consisting in making the use of the services provided electronically easier and in improving the functionality of those services.

f) Establishing, pursuing and enforcing claims

Scope of data: for this purpose we may process some of the personal data you have provided in your profile, or when placing an order without creating a profile, such as: first name, last name, address, VAT number, data concerning the use of our services if the claims arise from the way in which you use our services, and other data necessary to prove the existence of a claim, including the extent of the damage suffered. Purpose: making it possible to establish, pursue and enforce claims. Legal basis: our legitimate interest (Article 6(1)(f) GDPR), consisting in establishing, pursuing and enforcing claims and in defending against claims in proceedings before the courts and other state authorities.

g) Our own statistics

Scope of data: for this purpose we process your personal data comprising: first name, last name, address, order history. Purpose: preparing and analysing statistics concerning sales parameters and sales results. Legal basis: our legitimate interest (Article 6(1)(f) GDPR), consisting in analysing sales results, geographical distribution, forecasts and the development of our business.

h) Contact with FizjoManufaktura Szkolenia sp. z o.o.

Scope of data: for this purpose we may process some of the personal data you have provided in your profile, as well as data concerning the use of our services that is the reason for the contact, and data contained in the documents attached to the enquiry. Contact may take place by chat or by e-mail. Purpose: answering the enquiry. Legal basis: our legitimate interest (Article 6(1)(f) GDPR), creating and maintaining relationships with current and future clients, and depending on the content of the correspondence — taking action at your request, including before a possible contract is concluded.

i) Direct marketing

Scope of data: first name, last name, address, e-mail address. Purpose: sending commercial information and marketing materials by e-mail or by post, granting discounts and other benefits. Legal basis: our legitimate interest (Article 6(1)(f) GDPR), activities aimed at obtaining new orders.

j) Newsletter

When you subscribe to the newsletter, you provide us with your e-mail address and your first name through the newsletter subscription form. Providing this data is voluntary, but it is necessary in order to subscribe to the newsletter.

This data is used in order to send you the newsletter, and the legal basis for processing it is your consent. The data will be processed for as long as the newsletter operates, unless you unsubscribe earlier, which will result in your data being deleted from the database.

At any time you can correct the data stored in our newsletter database, and you can also request its deletion by unsubscribing from the newsletter.

How long do we keep your personal data?

We keep your personal data for the period during which you hold an Account in the Service, for the purposes of providing the service and for marketing purposes. After the Account is deleted your data will be anonymised, with the exception of the following data: first name, last name, e-mail address, application history and information about the consents given (we will keep this data for a further period of 3 years from the deletion of the Account, for the purposes of handling grievances and claims connected with the use of our services). In addition, we keep Users’ personal data for a period corresponding to the life cycle of the cookie files saved on their devices. Details of how we use cookies can be found in the Cookies Policy below.

Who do we share your personal data with?

We pass your personal data to the following categories of recipients:

a) Service providers

The service providers to whom we pass your personal data either, depending on the contractual arrangements and the circumstances, follow our instructions as to the purposes and means of processing that data (processors), or determine the purposes and means of processing it independently (controllers).

b) Processors

We use, or plan to use, providers who process your personal data solely on our instruction. They provide us with hosting, with systems for sending e-mail messages and with the specific features of the service. The entities to whom we entrust the processing of data are:

And entities providing advisory, accounting or consulting services.

c) Other controllers, processing data in their own name

d) State authorities

We share your personal data if authorised state authorities request it from us, in particular the organisational units of the public prosecutor’s office, the Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications. We do not transfer your data outside the European Economic Area, that is to third countries. We do not use automated decision-making.

Your rights

In connection with our processing of your personal data you have a number of rights, which we are obliged to make it possible for you to exercise. You can exercise your rights by submitting your request to us in writing or to the e-mail address: kontakt@fizjomanufaktura.pl

Please remember that you have the right to:

a) Access to your data

In exercising this right you have in particular the right to obtain confirmation from us as to whether we process your personal data, and if that is the case, you have the right to:

Legal basis: Article 15 GDPR.

b) Requesting the rectification of your data

You have the right to have the personal data you have provided rectified and completed. If you are a logged-in User you can also do this yourself in your Profile settings. As regards the remaining personal data, you have the right to ask us to rectify that data (if it is incorrect) and to complete it (if it is incomplete). Legal basis: Article 16 GDPR.

c) Requesting the erasure of data

You have the right to request the erasure of all or some of your personal data. We will treat a request for the erasure of all personal data as a request to delete your Account in the Service. You have the right to request the erasure of personal data if:

Despite a request for the erasure of personal data in connection with an objection being raised, we may retain certain personal data to the extent necessary for the purposes of establishing, pursuing or defending claims. This concerns in particular personal data comprising: first name, last name, e-mail address and application history, which we retain for the purposes of handling grievances and claims connected with the use of our services. Legal basis: Article 17 GDPR.

d) Requesting the restriction of the processing of your data

You have the right to request the restriction of the processing of your personal data. If you submit such a request, then until it has been considered we will prevent you from using the specific features or services whose use would involve the processing of the data covered by the request. We will also not send you any messages, including marketing messages. You have the right to request the restriction of the use of your personal data in the following cases:

Legal basis: Article 18 GDPR.

e) Objecting to the processing of your data

You have the right to object at any time to the use of your personal data where we process your data on the basis of our legitimate interest, for example in connection with the marketing of our products and services and those of our clients, or compiling statistics on the use of individual features of the Service. If your objection proves justified and we have no other legal basis for processing your personal data, we will erase the data to the use of which you have objected. Legal basis: Article 21 GDPR.

f) The right to data portability

You have the right to receive the personal data you have provided to us and then to transmit it to another controller of your choice, for example to another operator of similar services. You also have the right to request that the personal data be transmitted by us directly to such another controller, insofar as this is technically possible. We will send your personal data as a file in CSV format. The CSV format is a commonly used, machine-readable format which makes it possible to transmit the data received to another controller. Legal basis: Article 20 GDPR.

g) Lodging a complaint with the supervisory authority

If you consider that your right to the protection of personal data or other rights granted to you under the GDPR have been infringed, you have the right to lodge a complaint with the President of the Personal Data Protection Office. Legal basis: Article 77 GDPR.

Within what time do we fulfil your request?

If, in exercising the rights listed above, you submit a request to us, we fulfil that request or refuse to fulfil it without undue delay, and in any event within one month of receiving it. If, however, because of the complex nature of the request or the number of requests, we are unable to fulfil your request within one month, we will fulfil it within the following two months, having informed you in advance of the intended extension of the deadline.

How do we look after the security of your personal data?

The security of your data is important to us, which is why we make every effort to meet appropriately high standards. The Service uses encrypted data transmission (SSL), which protects the data that identifies you and makes it significantly more difficult for unauthorised systems or persons to intercept access to your data.

Cookies

Cookies are items of computer data stored on your end device. The website uses two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files which are stored on the user’s end device until they log out, leave the website or close the software (the web browser). Persistent cookies are stored on your end device for the time specified in the cookie parameters or until you delete them.

Cookie settings can be changed, in particular in such a way as to block the automatic handling of cookies in the web browser settings, or to be informed each time cookies are placed on your device. Detailed information about the possibilities and the ways of handling cookies is available in the settings of your web browser software. Please remember that disabling or limiting the handling of cookies may make it difficult to use our website.

We use our own cookies in order to:

On this website we do not use the cookies of any third party, and we do not use analytics or advertising tools. We only use the cookies listed above, which are necessary for the order form to work.

Changes to the privacy and cookies policy

We reserve the right to make changes to the privacy policy. Changes will be introduced if the applicable law requires it or if the technological conditions in which our website operates change. The current text of the privacy policy, together with archived versions, will always be available on our website.

Information clause on the protection of personal data processed under joint controllership

Who are the Joint Controllers of your personal data?

The Joint Controllers of your personal data are:

FizjoManufaktura spółka z ograniczoną odpowiedzialnością, with its registered office in Plewiska at ulica Gryfińska 1, 60-192 Poznań, entered in the register of entrepreneurs of the National Court Register under KRS number: 0000998140, REGON: 521192683, NIP: 7773396357, hereinafter Joint Controller 1.

and

FizjoManufaktura Szkolenia spółka z ograniczoną odpowiedzialnością, with its registered office in Poznań at ulica Gryfińska 1, 60-192 Poznań, entered in the register of entrepreneurs of the National Court Register under KRS number: 0001062420, REGON: 526617041, NIP: 7792560763, represented by Krzysztof Konik, member of the management board, hereinafter Joint Controller 2.

and

FizjoManufaktura Edukacja spółka z ograniczoną odpowiedzialnością, with its registered office in Poznań at ulica Gryfińska 1, 60-192 Poznań, entered in the register of entrepreneurs of the National Court Register under KRS number: 0001106954, REGON: 528702584, NIP: 7792571407, represented by Krzysztof Konik, member of the management board, hereinafter Joint Controller 3.

and

Stawianie Baniek spółka z ograniczoną odpowiedzialnością, with its registered office in Poznań at ulica Marcelińska 98/14, 60-324 Poznań, entered in the register of entrepreneurs of the National Court Register under KRS number: 0001137584, REGON: 540158585, NIP: 7792579202, represented by Krzysztof Konik, member of the management board, hereinafter Joint Controller 4.

who have jointly established common purposes and rules for the processing of personal data, which were set out in the agreement on the joint controllership of personal data concluded on 6 October 2023, on 17 June 2024 and on 13 November 2024, which agreement was concluded in connection with the Joint Controllers carrying out their cooperation arrangements concerning the promotion of the training services offered through this Service.

Joint arrangements between the Joint Controllers

Under the joint controllership agreement concluded between the Joint Controllers we have agreed the scope of our respective responsibility for fulfilling the obligations arising from the GDPR, and in particular we have agreed that:

Joint Controller 1 is responsible for ensuring that the person to whom the personal data relates can exercise their rights under the GDPR, and for providing information in accordance with Articles 13 and 14 GDPR, including informing the persons to whom the personal data relates of any breaches of their personal data. Irrespective of this arrangement, such a person may also exercise their rights towards Joint Controller 2, Joint Controller 3 and Joint Controller 4. In such a case Joint Controller 2, Joint Controller 3 and Joint Controller 4 will immediately pass the request of the person to whom the personal data relates to Joint Controller 1, who will fulfil that person’s request.

Joint Controller 2, Joint Controller 3 and Joint Controller 4 are responsible for providing, at the request of Joint Controller 1, information concerning the processing of personal data immediately after receiving such a request, and also for reporting every breach to Joint Controller 1 within 24 hours of identifying such a breach, and for providing Joint Controller 1 with all the information necessary to discharge the obligation to notify a personal data breach, and for supporting Joint Controller 1 in discharging the obligation to respond to the requests of the persons to whom the data relates as regards the exercise of their rights set out in Chapter III GDPR, including the right of access to data.

Irrespective of these arrangements, you may also exercise your rights towards each of the Joint Controllers. In such a case your requests will be passed to Joint Controller 1, who will fulfil them.

How can the Joint Controllers be contacted?

On matters of personal data protection the Joint Controllers can be contacted:

For what purpose, for how long and what personal data do the Joint Controllers process?

Direct marketing:

Newsletter:

Settlements:

Contact with FizjoManufaktura Sp. z o.o., FizjoManufaktura Szkolenia Sp. z o.o., FizjoManufaktura Edukacja sp. z o.o. and Stawianie Baniek sp. z o.o.:

Handling complaints, grievances and requests, and answering enquiries concerning training services:

Your personal data will be processed by the Joint Controllers until they cease to carry out marketing activities and the promotion of the training services provided by the Joint Controllers on the basis of the arrangement concluded between them on 6 October 2023, on 17 June 2024 and on 13 November 2024 concerning cooperation in the promotion of training services.

In addition, if your personal data is processed by the Joint Controllers on the basis of the consent given, then you have the right to withdraw the consent given at any time. The withdrawal of consent will not affect the lawfulness of the processing of personal data which took place before it was withdrawn. Consent may be withdrawn through any channel of contact with each of the Joint Controllers.

Who may obtain access to your personal data?

Personal data may be disclosed to public authorities to the extent and for the purposes which arise from the provisions of generally applicable law, and also to the entities which process personal data on the basis of the relevant agreements signed with the Joint Controllers:

Do the Joint Controllers transfer personal data to third countries?

We do not transfer your data outside the European Economic Area, that is to third countries. We do not use automated decision-making.

What rights may the person whose personal data the Controllers process exercise?

At any time you may submit a request to each of the Joint Controllers to exercise your rights to:

Is providing personal data obligatory?

Providing personal data is entirely voluntary.

← Back to the order form