§ 1
GENERAL PROVISIONS
1. The administrator of personal data collected via the online store www.mrberry.pl is MIRATIVE
SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ entered into the Register of
Entrepreneurs by the District Court for Łódź Śródmieście in Łódź, 20th Commercial
Division of the National Court Register under KRS number: 0001002247, place of
business and address delivery: ul. Piotrkowska 157A, 90-270 Łódź, NIP:
7252325337, REGON: 523658513, e-mail address: sklep@MRBERRY.pl telephone
number: +48 505976126, hereinafter referred to as the Administrator and also the
Service Provider .
2. Personal data collected by the Administrator via the website are processed in accordance
with the Regulation (EU) 2016/679 of the European Parliament and of the Council of
27 April 2016 on the protection of natural persons with regard to the processing of
personal data and on the free movement of such data, and repealing Directive 95/46/
EC (General Data Protection Regulation), hereinafter referred to as GDPR.
3. Any words or expressions written in this Privacy Policy with a capital letter should be
understood in accordance with their definition contained in the Regulations of the
Online Store www.MRBERRY.pl
§ 2
TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA
COLLECTION PURPOSE OF PROCESSING AND LEGAL BASIS.
4. The Administrator processes personal data of Service Recipients of the www.MRBERRY.pl
Store in the case of:
5. registering an Account in the Store in order to create an individual account and manage this
Account pursuant to Art. 6 section 1 letter b) GDPR (performance of the contract for
the provision of electronic services in accordance with the Store Regulations),
6. placing an Order in the Store in order to execute the Sales Agreement pursuant to Art. 6
section 1 letter b) GDPR (performance of the sales contract),
7. subscribing to the Newsletter in order to send commercial information electronically. Personal
data are processed after giving separate consent, pursuant to Art. 6 section 1 letter a)
GDPR,
8. use the Opinion System to enable the Customer to express his or her opinion about the
Product purchased in the Store and the Sales Agreement concluded with the Seller
pursuant to Art. 6 section 1 letter f) GDPR (legitimate interest of the entrepreneur),
9. using the Chat to send a message to the Administrator pursuant to Art. 6 section 1 letter f)
GDPR (legitimate interest of the entrepreneur).
10.TYPE OF PERSONAL DATA PROCESSED. The service recipient provides in the case of:
11.Accounts: email address,
12.Orders: name and surname, address, Tax Identification Number, e-mail address, telephone
number,
13.Newsletter: e-mail address,
14.Chat: name and surname.
15.PERSONAL DATA ARCHIVING PERIOD. Personal data of Service Recipients are stored by
the Administrator:
16.if the basis for data processing is the performance of the contract, for as long as it is
necessary to perform the contract, and after that time for a period corresponding to
the limitation period for claims. Unless a specific provision provides otherwise, the
limitation period is six years, and for claims for periodic benefits and claims related to
running a business - three years,
17.if the basis for data processing is consent, until the consent is revoked, and after the consent
is revoked, for a period of time corresponding to the limitation period for claims that
may be raised by the Administrator and that may be raised against him. Unless a
specific provision provides otherwise, the limitation period is six years, and for claims
for periodic benefits and claims related to running a business - three years.
18.When using the Store, additional information may be collected, in particular: the IP address
assigned to the Service User s computer or the external IP address of the Internet
provider, domain name, browser type, access time, operating system type.
19.After expressing separate consent pursuant to Art. 6 section 1 letter a) GDPR, data may also
be processed for the purpose of sending commercial information electronically or
making telephone calls for direct marketing purposes - in connection with Art. 10
section 2 of the Act of July 18, 2002 on the provision of electronic services or Art.
172 section 1 of the Act of July 16, 2004 - Telecommunications Law, including those
directed as a result of profiling, provided that the Service Recipient has given
appropriate consent.
20.Navigational data may also be collected from Service Users, including information about links
and references they decide to click or other activities undertaken in the Store. The
legal basis for this type of activity is the legitimate interest of the Administrator (Article
6(1)(f) of the GDPR), which consists in facilitating the use of services provided
electronically and in improving the functionality of these services.
21.Providing personal data by the Service Recipient is voluntary.
22.The Administrator takes special care to protect the interests of data subjects and in particular
ensures that the data is collected
23.given by him are:
24.processed in accordance with the law,
25.collected for specified, lawful purposes and not subjected to further processing incompatible
with these purposes,
26.substantively correct and adequate in relation to the purposes for which they are processed
and stored in a form enabling identification of the persons concerned, no longer than
is necessary to achieve the purpose of processing.
§ 3
SHARING PERSONAL DATA
27.The personal data of Service Recipients are transferred to service providers used by the
Administrator to run the Store, in particular to:
• entities delivering the Products,
• payment system providers,
• providers of opinion survey systems,
• accounting office,
• hosting providers,
• suppliers of software enabling business operations,
• entities providing the mailing system,
• supplier of software needed to run an online store.
28.Service providers (referred to in point 1 of this paragraph) to whom personal data are
transferred - depending on contractual arrangements and circumstances - are either
subject to the Administrator s instructions regarding the purposes and methods of
processing this data (processing entities) or independently determine the purposes
and methods of processing them. processing (administrators).
29.The personal data of Service Recipients are stored only in the European Economic Area
(EEA), subject to § 5 point 5 and § 6 of the Privacy Policy.
§ 4
THE RIGHT TO CONTROL, ACCESS AND CORRECT YOUR OWN DATA
30.The data subject has the right to access his or her personal data and the right to rectify,
delete, limit processing, the right to transfer data, the right to object, the right to
withdraw consent at any time without affecting the lawfulness of the processing
carried out on the basis of based on consent before its withdrawal.
31.Legal basis for the Service Recipient s request:
• access to data – art. 15 GDPR,
• rectification of data – art. 16 GDPR,
• deletion of data (so-called right to be forgotten) – art. 17 GDPR,
• restriction of processing – art. 18 GDPR,
• data transfer – art. 20 GDPR,
• objection – art. 21 GDPR,
• withdrawal of consent – art. 7 section 3 GDPR.
32.In order to exercise the rights referred to in point 2, you can send an appropriate e-mail to the
following address: shop@mrberry.pl
33.If the Service User exercises the rights arising from the above rights, the Administrator
complies with the request or refuses to comply with it immediately, but no later than
within one month after receiving it. However, if - due to the complicated nature of the
request or the number of requests - the Administrator is unable to meet the request
within a month, he will meet it within the next two months by informing the Service
User within one month of receiving the request - about the intended extension of the
deadline and its reasons.
34.If it is found that the processing of personal data violates the provisions of the GDPR, the
data subject has the right to lodge a complaint with the President of the Office for
Personal Data Protection.
§ 5
COOKIES FILES
35.The Administrator s website uses cookies .
36.The installation of cookies is necessary for the proper provision of services on the Store s
website. Cookies files contain information necessary for the proper functioning of the
website, and they also enable the development of general statistics of website visits.
37.The website uses two types of cookies: session and persistent .
38. Session cookies are temporary files that are stored on the Service User s end device until
logging out (leaving the website),
39. Permanent cookie files are stored on the Service Recipient s end device for the time
specified in the cookie file parameters or until they are deleted by the Service
Recipient.
40.The Administrator uses its own cookies to better understand how Service Users interact with
the website content. The files collect information about how the Service User uses the
website, the type of website from which the Service User was redirected, and the
number of visits and duration of the Service User s visit to the website. This
information does not record specific personal data of the Service User, but is used to
develop website use statistics.
41.The administrator also uses external cookies to collect general and anonymous static data via
Google Analytics analytical tools (external cookie administrator: Google LLC. based in
the USA).
42.Cookies may also be used by advertising networks (in particular the Google network) to
display advertisements tailored to the way in which the Service User uses the Store.
For this purpose, they may retain information about the Service User s navigation path
or the time spent on a given website.
43.The service recipient has the right to decide on access to cookies files to his computer by:
44.selection of the types of cookies to which you consent immediately after entering the website
and the appearance of a message regarding cookies,
45.changing the settings in your browser window. Detailed information about the possibilities
and methods of handling cookies is also available in the software (web browser)
settings.
§ 6
ADDITIONAL SERVICES RELATED TO USER ACTIVITY IN THE STORE
46.The Store uses the so-called social plug-ins (“plug-ins”) of social networking sites. By
displaying the website www.mrberry.pl containing such a plug-in, the Service
Recipient s browser will establish a direct connection to the Facebook, Instagram,
TikTok, Google and YouTube servers.
47.The content of the plug-in is transferred by a given service provider directly to the Service
User s browser and integrated with the website. Thanks to this integration, service
providers receive information that the Service User s browser has displayed the
website www.mrberry.pl, even if the Service User does not have a profile with a given
service provider or is not currently logged in to it. Such information (along with the
Service User s IP address) is sent by the browser directly to the server of a given
service provider (some servers are located in the USA) and stored there.
48.If the Service User logs in to one of the above social networking sites, the service provider
will be able to directly assign the visit to the website www.mrberry.pl to the Service
User s profile in a given social networking site.
49.If the Service User uses a given plug-in, e.g. by clicking the Like or Share button, the
appropriate information will also be sent directly to the server of the given service
provider and stored there.
50.The purpose and scope of data collection and its further processing and use by service
providers, as well as the possibility of contact and the rights of the Service User in this
regard and the possibility of making settings to protect the Service User s privacy are
described in the service providers privacy policy:
• https: www.facebook.com/policy.php
• https: help.instagram.com/519522125107875?helpref=page_content
• https: www.tiktok.com/legal/page/eea/privacy-policy/pl-PL
• https: policies.google.com/privacy?hl=pl&gl=ZZ.
51.If the Service Recipient does not want social networking sites to assign data collected during
visits to the website www.mrberry.pl directly to his or her profile on a given website, he
or she must log out of the website before visiting the website www.mrberry.pl. The
service user can also completely prevent the loading of plug-ins on the website by
using appropriate browser extensions, e.g. blocking scripts using NoScript .
52.The administrator uses re-marketing tools on his website, i.e. Google Ads. Their use involves
the use of Google LLC cookies. regarding the Google Ads service. As part of the
mechanism for managing cookie settings, the Service User has the opportunity to
decide whether the Service Provider will be able to use Google Ads (external cookie
administrator: Google LLC. based in the USA) in relation to him.
§ 7
FINAL PROVISIONS
53.The Administrator applies technical and organizational measures to ensure protection of
processed personal data appropriate to the threats and categories of data protected,
and in particular protects the data against disclosure to unauthorized persons,
removal by an unauthorized person, processing in violation of applicable regulations
and change, loss, damage or destruction.
54.The Administrator provides appropriate technical measures to prevent unauthorized persons
from obtaining and modifying personal data sent electronically.
55.In matters not regulated by this Privacy Policy, the provisions of the GDPR and other relevant
provisions of Polish law shall apply accordingly.
