Terms and conditions of use

Privacy policy

The controller responsible for the processing of personal data is:
CUZO Jolanta Ledwoń,

12 Uczniowska Street,

Częstochowa 42-280

NIP: 5732627534

cuzo@cuzo.eu

 

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below you will find detailed information on the handling of your data.

1. Access data and hosting

You can visit our website without providing any personal data. Each time a page is called up, the server automatically saves only the so-called server logs, e.g. the name of the requested file, your IP address, the date and time of the call-up, the amount of data transferred and the requesting Internet service provider (so-called access logs) and documents the call-up.

This data is analysed exclusively to ensure the proper functioning of our website and to improve our offer. The above serves, in accordance with Article 6(1)(f) of the DPA, to safeguard our legitimate interest in the optimal, correct presentation of our website and offer. All access data is deleted within seven days of the end of your visit to the website.

Hosting

The website hosting and display services are partly provided on our behalf by our service providers under a data processing entrustment. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You will find our contact details under "Our contact details and your rights".

2. Collection and processing of data for contract processing, contact and customer account creation purposes

We only collect personal data if you provide it to us voluntarily by placing your order or by contacting us (e.g. via the contact form or by e-mail). Mandatory fields are marked as such because the data they contain are necessary for the performance of the contract or the processing of the matter on which you are contacting us. Without their provision, you cannot complete your order or contact us. What data is collected is a direct result of the forms into which the data is entered. We use the data you have provided in accordance with Article 6(1)(b) of the RODO in order to fulfil the contract and respond to your requests. In addition, if, pursuant to Article 6(1)(a) RODO, you provide your consent to set up a customer account - we will process your personal data necessary for this purpose. You will find further information regarding the processing of your data, in particular with regard to the transfer of data to our service providers for order processing, payment and dispatch, in the following sections of this privacy policy.

After the complete fulfilment of the contract or the deletion of your customer account, the processing of your data will be restricted and, after the expiry of the retention periods stipulated by tax law and the Accounting Act, the data will be deleted (Art. 6(1)(c) DPA), unless you expressly consent (Art. 6(1)(a) DPA) to the continued use of the data or, in accordance with the applicable legal provisions, we reserve the right to continue using the data for guilty purposes, in which case we inform you of this privacy policy. Your customer account can be deleted at any time. To do so, please send a message to our contact address indicated under "Our contact details and your rights" or use the corresponding function in the settings of your customer account.

3. Transfer of data for delivery

In order to fulfil the contract (Art. 6(1)(b) RODO), we pass on your data to the shipping company selected by you during the ordering process and commissioned to deliver the ordered products.

4. Data processing for payment processing

In order to process payments in our online shop, we cooperate with third-party service providers handling electronic online payments and pass on your data to the payment processing company selected by you during the ordering process. The above is for the purpose of fulfilling the contract (Art. 6(1)(b) RODO).

Data processing for fraud prevention and payment optimisation

In certain situations, we may pass on additional information to our service providers, which may be used by them together with the information necessary to process payments. These service providers then act on our behalf as processors and provide us with services for fraud prevention and optimisation of payment processes (e.g. invoicing, analysis of disputed payments, accounting support). In accordance with Article 6(1)(f) of the DPA, this serves our legitimate interests in terms of protection against fraud and abuse and in terms of efficient payment management.

5. Marketing channels: e-mail (e.g. newsletter), telephone contact

Advertising sent by e-mail after subscribing to a newsletter

If you subscribe to our newsletter, then we will use the data you have provided to us necessary for the purpose of sending you our newsletter electronically on a regular basis on the basis of the consent you have given us (Article 6(1)(a) RODO). You can unsubscribe from the newsletter at any time by sending us a message to our contact address indicated under "Our contact details and your rights" or by using the relevant link provided in the newsletter. Once you have unsubscribed, we will delete your e-mail address unless you expressly consent to the continued use of your data for other purposes or we reserve the right to continue using your data in statutorily permitted cases, in which case we inform you of this privacy policy.

 

Sending an invitation to give feedback on a purchase

If you have given us your consent to do so during or after placing an order (Article 6(1)(a) of the DPA), then we will use your email address to send you an electronic invitation to rate your purchase made in our shop. The issuing of a review/rating takes place via the feedback system we use. You can withdraw the consent you have given us at any time by sending a corresponding message to our contact address indicated under "Our contact details and your rights" or by using the corresponding link provided in the message with the invitation to give a review.

Telephone advertising

If you have given us your consent during or after placing your order (Article 6(1)(a) RODO), we will use your data for our own advertising purposes, e.g. to inform you about our new products and promotions. You can withdraw your consent at any time by sending us a message to our contact address indicated under "Our contact details and your rights" or by making a verbal statement to this effect during a telephone call. Once you have withdrawn your consent, we will delete your telephone number unless you expressly consent to its further use for other purposes or we reserve the right to further use this data in statutorily permitted cases, in which case we will inform you of this privacy policy.

 

6. Cookies and similar technologies

General information

In order to make your visit to our website more attractive and to enable you to use its key functions, we use technological tools for this purpose, including so-called cookies. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted when your browser session ends, i.e. when you close your browser (so-called session cookies). Other cookies are stored on your terminal device and enable us to recognise your browser the next time you visit the website (so-called persistent cookies). We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. the shopping basket function). These technologies process data such as, for example, your IP address, the time of your visit to the website, device and browser information, as well as information about the use of our website (e.g. the contents of the shopping basket). This serves, in accordance with Article 6(1)(f) of the DPA, to fulfil our legitimate interest in optimally presenting our offer.

In addition, we also use technology tools to comply with legal obligations to which we are subject (e.g. to prove that we have received your consent to process your personal data), as well as for web analytics and online marketing purposes. Further information on this, including the relevant legal basis for processing your data, can be found in the following sections of this privacy policy.

In the help menu of your browser, you will find explanations on how to change your cookie settings. These are available under the following links:Microsoft Edge™/Safari™/Chrome™/Firefox™/Opera™  

Where consent has been given to us by you for the use of certain technological tools (Article 6(1)(a) RODO), this may be withdrawn by you at any time. To withdraw your consent, please contact us via the contact address indicated under "Our contact details and your rights".

7. Use of cookies and similar technological tools for web analytics and marketing purposes

Insofar as you have given your consent (Article 6(1)(a) of the RODO), we use the cookies and other similar technological tools of external service providers indicated below on our website. Once the purpose of the processing has been fulfilled and the use of the respective technology tool has ended, the data collected through the use of these tools will be deleted. The consent given may be withdrawn by you at any time. For details on the possibility to revoke consent and your right to object, please see "Cookies and similar technologies". You will find further information on the pages of the individual service providers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You will find contact details under "Our contact details and your rights".

Use of Google services

We use the technology tools indicated below from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information collected automatically by Google's technologies regarding the use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued a decision on the adequacy of data protection for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission. In the event that your IP address is processed as part of the use of Google's technology tools, your IP address is truncated before being stored on Google's servers thanks to the enabled IP anonymisation. Only in exceptional cases will the full IP address be transferred to a Google server and shortened there. Unless otherwise specified for the individual Google technologies described in this privacy policy, data processing takes place on the basis of a personal data co-management agreement with Google in accordance with Article 26 of the DPA. For further information on the processing of your data by Google, please seethe privacy policy on Google's website.

Google Analytics

For the purpose of analysing the use of our website, we use Google Analytics, a web analytics tool from Google, which automatically processes your data (IP address, time of visit, device and browser information, as well as information on the use of our website) for this purpose and creates pseudonymised user profiles on the basis of this data. Cookies may be used for this purpose. Your IP address is generally not combined with other data collected by Google. The processing of data within the scope of Google Analytics takes place on the basis of a data entrustment agreement with Google.

In order to optimise and make our website more attractive, we have also activated thedata sharing settings for "Google products and services". This allows Google to access the data collected and processed within the scope of the Google Analytics service and to use it to improve the products and services provided by Google. The provision of data to Google for this purpose is based on an additional agreement between the data controllers. We have no influence on the subsequent processing of the data by Google.

We also use a tool to create and perform A/B tests of our websiteGoogle Optimize, which is an extension of Google Analytics services.

For web analytics purposes, we also use a toolGoogle Signals, google Analytics, which is an extension of Google Analytics and enables so-called "cross-device tracking". This means that if your internet-enabled devices are connected to your Google Account and you have activated the "personalised advertising" option in your Google Account, Google can generate reports on the use of our website (in particular on the number of users on different devices), even if you change devices. We do not process any personal data about you in this respect; we only receive statistics based on Google Signals functions and technologies.

For the purpose of analysing the use of our website and advertising, we also use a so-called Google Analystics file as part of Google AnalysticsDoubleClick-Cookie, which allows your browser to be recognised when you use other websites. Google will use this information to compile a report on your activities on our website and to provide other services relating to website usage.

Google AdSense

Our website promotes the advertising space of other providers and advertising networks via Google AdSense. These advertisements are displayed to you in various places on our website.As part of the integration of the Google AdSense service, when you visit our website, a so-called Google DoubleClick cookie will be stored on your terminal device, which enables the display of advertisements based on your interests and processes your data for this purpose (IP address, time of visit, device and browser information, as well as information on the use of our website) and automatically assigns a pseudonymised user identifier (UserID) to you.

Google Ads

With the help of Google Ads, we promote our website in search results and on third-party websites. For this purpose, a file is automatically stored on your device when you visit our websiteremarketing cookieGoogle uses a pseudonymised identifier (ID) to process your data (IP address, time of visit, device and browser information, as well as information regarding the use of our website) on the basis of the pages you have visited. Further data processing only takes place if you have activated the option to personalise advertisements in your Google account settings. In this case - if you are logged into Google at the same time during your visit to our website, Google will use your data together with the data collected from Google Analytics to create and define so-called target group lists for remarketing purposes on different devices.

For web analytics purposes, we use a toolGoogle Ads Conversion Tracking, in order to measure and analyse your behaviour when you have visited our website via an advertisement within the Google Ads tool. Cookies may be used for this purpose and data such as your IP address, the time of your visit, device and browser information, as well as information about your use of our website, e.g. your visit to the website or your registration for the newsletter, may be processed. Pseudonymised user profiles are then created from this data.

Google Maps

In order to visually present geographic information, Google Maps will store and process information about your use of the maps and individual features, including, for example, your IP address and location data. We have no influence over the above data processing by Google.

Google reCAPTCHA

In order to prevent spam and abuse and misuse of our web forms (e.g. by malicious bots), we have integrated the Google reCAPTCHA tool into our website, which processes your data (IP address, time of visit, device and browser information, as well as information regarding the use of our website) and uses this information to analyse your use of our website by means of JavaScript and cookies. The personal data you enter in the individual form fields on our pages will not be read or saved.

Google Fonts

In order to ensure consistent presentation of the content on our websites, a script called "Google Fonts" is integrated into our website, which processes your data (IP address, time of visit, device and browser information, as well as information regarding the use of our website). We have no influence over the above data processing by Google.

YouTube Video Plugin

In order to integrate third-party content via the YouTube video plug-in - the following data is processed by Google when the video is played: IP address, time of visit, information about the user's device and browser.

Use of Facebook services

Facebook Pixel

We use the Facebook Pixel tool provided byFacebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The scope of functionality used by us for the Facebook Pixel tool is indicated below. The Facebook Pixel automatically collects and saves data (your IP address, the time of your visit to the website, device and browser information, as well as information about your use of our website, e.g. your visit to the website or your registration for the newsletter). From this data, pseudonymised user profiles are then created.
As part of the so-called extended data comparison in Facebook Analytics - for comparison purposes - hacked information with which individuals can be identified (e.g. names, email addresses and telephone numbers) is also collected and stored.
To this end, when you visit our website, the Facebook Pixel stores a cookie on your device which, by means of a pseudonymised Cookie-ID, enables your browser to be automatically recognised when you visit other websites. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services relating to your use of the websites, in particular for the purposes of personalising advertising. The information automatically collected by Facebook technologies regarding your use of our website is usually sent to a server of Facebook, Inc. 1601 Willow Road, Menlo Park, California 94025, USA and stored there. In relation to the USA, the European Commission has not issued a decision stating an adequate level of data protection. Our cooperation is based on the standard data protection clauses adopted by the European Commission. Data processing is carried out in accordance with Article 26 of the RODO on the basis of joint arrangements between the joint controllers. To the extent that the transfer of data to the US is our responsibility, our cooperation is based on the standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in thefacebook's privacy policy.

Facebook Analytics

Within the scope of Facebook Analytics - user activity statistics are created on the basis of the data collected by the Facebook Pixel tool regarding your use of our website. Data processing by Facebook takes place on the basis of a data entrustment agreement. The analysis of the data (usage statistics) serves to optimise our website and make it more attractive.

Facebook Ads

Facebook Ads enables us to advertise our website on Facebook and other platforms. We set the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation and in particular for the decision to display the respective ad to individual users. Unless otherwise specified for individual functions and tools, the processing of data takes place on the basis of a personal data co-management agreement in accordance with Article 26 of the DPA. The joint responsibility is limited to the collection of data and its transfer to Facebook Ireland. This does not include the subsequent processing of the data by Facebook Ireland.

On the basis of the statistics generated by the Facebook Pixel tool on the activity of users visiting our websites, we conduct, via the functionFacebook Custom AudienceTo broadcast advertisements to the relevant audience, specifying the profile/characteristics of the target group in question. Within the scope of the extended data comparison function (see above), Facebook is the data processor on our behalf.

On the basis of the pseudonymised Cookie-ID stored by the Facebook Pixel and the information collected about user activity on our website, we create via the functionFacebook Pixel RemarketingPersonalised advertising.

For the purposes of web analytics and the optimisation of our offering - using theFacebook Pixel ConversionsWe analyse the activity of users who visit our website via Facebook Ads. Data processing by Facebook takes place on the basis of a data entrustment agreement.

Other providers of analytical and marketing tools

Using Hotjar for web analytics

For the purpose of analysing the use of our website - by means of a web analytics toolHotjarLtd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta ("Hotjar"), when you visit our website, data is automatically collected and stored (your IP address, time of visit, device and browser information, as well as information regarding the use of our website) from which pseudonymised user profiles are created. Cookies may be used for this purpose. Without giving separate, explicit consent - pseudonymised user profiles are not combined with the personal data of the pseudonymised subject. Data processing in connection with the services provided by Hotjar takes place within the framework of a concluded data entrustment agreement.

Use of Adobe Fonts for the presentation of content on the website

In order to ensure optimal and consistent presentation of the content on our websites, we use the "Adobe Fonts" script from the companyAdobe, Inc., 345 Park Avenue San Jose, CA 95110-2704, USA (hereinafter "Adobe"), which processes the data (your IP address, time of visit, device and browser information). We have no influence over the processing of this data. In relation to the USA, the European Commission has not issued a decision finding an adequate level of data protection. Our cooperation is based on the standard data protection clauses adopted by the European Commission. Data processing is carried out in accordance with Article 26 of the RODO on the basis of joint arrangements between the joint controllers.

8. Social media

Social media plugins: Facebook, Twitter, Instagram, Pinterest

So-called social network plug-ins (buttons) are used on our website. These plug-ins are accessible via an HTML link, which ensures that when you visit our website containing such plug-ins (buttons), no automatic, direct connection to the servers of the operator of the respective social network is established. When you click on one of the buttons (plug-ins), a new window will open in your browser displaying the page of the respective social network where you can approve the use of the respective button, e.g. "Like" or "Share".

Our activity on social media: Facebook, Twitter, Instagram, Youtube, Pinterest

If you have given your consent to the respective social network in this regard (Article 6(1)(a) RODO), when you visit our account/profile on the aforementioned social networks, your data will be automatically collected and stored for web analytics and marketing purposes. From this data, pseudonymised user profiles are created. These can be used, for example, to place so-called personalised advertisements within and outside the social networks, which are likely to correspond to your interests. Cookies are usually used for this purpose.
Detailed information regarding the processing and use of your data by the individual social networks, as well as information regarding your rights and the possibility to configure your privacy settings, as well as contact details for making an enquiry are described in the privacy policies of the individual social networks linked below. Should you require assistance in this regard, you may also contact us.

Facebookis a social networking service offered by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The automatically processed information regarding your activity and use of our Facebook fanpage is generally transmitted to the server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA and stored there. In relation to the USA, the European Commission has not issued a decision stating an adequate level of data protection. Our cooperation is based on the standard data protection clauses adopted by the European Commission. The processing of data in the context of visits to the Facebook fanpage is carried out in accordance with Article 26 RODO on the basis of the concluded joint arrangements of the joint controllers, which are availablehere. Further information regarding the processing of your personal data within the scope of your visit to the Facebook fanpage (information regarding the page statistics function) is availablehere.

Twitteris a social networking service offered by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("Twitter"). The automatically processed information regarding your activity and use of our Twitter profile is generally transmitted to the server of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 in the USA and stored there. In relation to the USA, the European Commission has not issued a decision stating an adequate level of data protection. Our cooperation is based on the standard data protection clauses adopted by the European Commission.

Instagramis a social networking service offered by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The automatically processed information regarding your activity and use of our fanpage account on Instagram is generally transmitted to the server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA and stored there. In relation to the USA, the European Commission has not issued a decision stating an adequate level of data protection. Our cooperation is based on the standard data protection clauses adopted by the European Commission. The processing of data in the context of visits to the fanpage account on Instagram is carried out in accordance with Article 26 of the RODO on the basis of the concluded joint arrangements of the joint controllers. Further information regarding the processing of your personal data in the context of your Facebook fanpage visit (information regarding the page statistics function) is availablehere.

YouTubeis a social networking service offered by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The automatically processed information regarding your activity and use of our YouTube profile is generally transmitted to and stored on the server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043 in the USA. In relation to the USA, the European Commission has not issued a decision stating an adequate level of data protection. Our cooperation is based on the standard data protection clauses adopted by the European Commission.

Pinterestis a social networking service offered by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). The automatically processed information regarding your activity and use of our profile on Pinterest is generally transmitted to the server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107 in the USA and stored there.

In relation to the US, the European Commission has not issued a decision finding an adequate level of data protection.

10. Our contact details and your rights

Data subjects have the following rights:

  • pursuant to Article 15 RODO: the right to be informed about the processing of your data to the extent set out in that Article;

  • in accordance with Article 16 of the DPA: the right to rectify your inaccurate or incomplete personal data;

  • in accordance with Article 17 RODO: the so-called "right to be forgotten", i.e. the right to delete your personal data stored with us, insofar as further processing is not necessary:

    • to exercise the right to freedom of expression and information;

    • to comply with a legal obligation;

    • on grounds of public interest;

    • to establish, assert or defend claims;

  • pursuant to Article 18 of the RODO: the right to restrict the processing of personal data, provided that:

    • the accuracy of this personal data is disputed by you;

    • processing is unlawful and you object to their deletion;

    • we no longer need your personal data, but you need them to establish, assert or defend your claims;

    • you have lodged an objection to the processing pursuant to Article 21;

  • in accordance with Article 20 of the RODO: the right to receive the data provided to us in a structured, commonly used machine-readable format and to have it sent to another controller;

  • pursuant to Article 77 RODO: the right to lodge a complaint with a supervisory authority (the President of the Office for the Protection of Personal Data "OPA").

If you have any questions regarding the collection, processing and use of your personal data, or if you wish to request information, rectification, restriction of processing or deletion of your data, or if you wish to revoke consents given or object to the use of certain data, please contact the data controller indicated at the beginning of this privacy policy directly.

 

Right to object
If we process personal data in the manner described in this privacy policy in order to safeguard our legitimate interests, then you may object to the processing of your data for this purpose-with effect for the future. If the processing takes place for direct marketing purposes, you may exercise your right to object at any time. If the processing takes place for other purposes, you only have the right to object for reasons arising from your specific situation.

Once you have exercised your right to object, we will not continue to process your personal data unless we can demonstrate that there are compelling legitimate grounds for the processing and these override your interests and rights, or where the processing is for the assertion, exercise or defence of legal claims.

The above sentence does not apply if the processing is carried out for direct marketing purposes. In this case, we will always stop further processing of your personal data once you have expressed your objection.