Version valid as of 01.05.2022

PRIVACY POLICY OF THE BLOND SURF STORE

Detailed information on data processing

Who is the Controller of your personal data?

Blond Surf Magdalena Moszko

running online store at https://blondsurf.com

E-mail: magdalena@blondsurf.com

For what purposes are your personal data processed?

Your personal data is processed in order to fulfill your orders. The data may also be processed in order to provide additional services by the Controller or to organize and conduct competitions by the Controller.

Your personal data may also be processed in order to handle any complaints or other claims against the Data Controller. They can also be processed in the event of any claims of the Controller related to the contract against you.

With your voluntary consent, the data can also be processed for marketing purposes (newsletter).

Your personal data is processed in order to make bookings for the camps, workshops and retreats organized by the Controller. It can be passed on to the partners if necessary for realization of the process. Your image during the activities at the retreats can be used for marketing purposes, unless stated otherwise in writing by the participant.

In addition, your data may also be processed in order to adjust the Controller’s store to your needs, as well as to detect bots and frauds as well as for statistical surveys and improvement of the Controller’s services.

How long will your personal data be stored?

Personal data provided for registration purposes will be processed as long as you do not cancel your registration.

With regard to the sale of products or organization of a competition or consideration of your complaints or other claims against the Controller or vice versa, your data will be processed for the period necessary to comply with the contract or to consider a complaint or claim and, after this period, only if consent was given or if required in light of applicable law, e.g. processing for statistical or bookkeeping and accounting purposes.

The data will be processed for marketing purposes, provided that such consent was given, until you withdraw your consent to such processing.

When it comes to tailoring the store to your needs, as well as detecting bots and frauds, and statistical surveys and improving the service, your data will be processed for these purposes until you express your opposition or until you finish using our store’s services.

What is the legal basis for the processing of your personal data?

The legal basis for the processing of personal data of clients in the scope of data necessary to execute orders and handling of complaints or other claims or participants of the competition by the Controller is art. 6 para. 1 b) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (”GDPR”) (this is necessary for the performance of the contract to which the data subject is a party).

The legal basis for sending commercial information by e-mail (newsletter) is your voluntary consent.

When it comes to tailoring the store to your needs, and detection of bots and frauds as well as statistical surveys and improvement of the service, your data will be processed pursuant to art. 6 para. 1 f) of the GDPR (legitimate interest of the controller). A legitimate interest of the controller is adjusting the store to your needs, ensuring its security, as well as its continuous improvement.

Requirement to provide data

Providing personal data for order processing is completely voluntary, but it is necessary that the orders can be fulfilled. Similarly to providing data in order to participate in the competition, it is also completely voluntary, but necessary to participate in a given competition.

However, if you wish to receive commercial information by e-mail (newsletter), a separate consent is required.

To which recipients will your personal data be disclosed?

Your data may be made available to the courier company and entities processing personal data at the request of the controller, e.g. IT service providers – where such entities process data on the basis of a contract with the controller and only in accordance with the controller’s instructions.

Your data may also be disclosed to entities authorized to obtain it pursuant to applicable law, e.g. law enforcement authorities in the event of a request being made by the authority on the relevant legal basis (e.g. for the needs of pending criminal proceedings).

In regards to the retreats, workshops and camps your data will be disclosed to necessary entities in order to proceed with the booking of accommodation, transportation, classes, excursions etc.

Will your data be transferred outside of the European Economic Area?

No, your personal data will not be transferred to third countries outside of the European Economic Area, unless the retreat is organized elsewhere and it’s clear to the Data Owner.

What are your rights related to the processing of personal data?

You have the following rights in relation to the processing of your personal data by us:

•      the right to access your data, including obtaining a copy of the data,
•      the right to demand correction of data,
•      the right to delete data (in certain situations),
•      the right to lodge a complaint with the supervisory body dealing with the protection of personal data,
•      the right to limit data processing.

To the extent that your data is processed on the basis of a contract or consent, you can also use the following rights:

•      the right to withdraw consent to the extent that your data is processed on the basis of such consent withdrawal of consent does not affect the lawfulness of the processing that was made on the basis of consent before its withdrawal.
•      the right to transfer personal data, i.e. to receive from the controller your personal data, in a structured, commonly used machine-readable format (xml, json, csv). You can send this data to another data controller.

Information on “Cookies”

Your web browser can store text files ( “Cookies”) on your computer’s hard drive. The “Cookies” files contain information necessary for the proper functioning of the store, in particular those requiring authorization.

The Controller’s store stores cookies on users’ computers in order to:

•                maintain the user’s session, in order to, e.g., stay logged-in after switching to the next page, keep the shopping cart updated and to continue shopping;
•                better match the store to the needs of users;

Due to the lifetime of cookies and other similar technologies, we use two basic types of these files:

session cookies – temporary files stored on the user’s end device until logging out, leaving the website and application or disabling the software (web browser);

persistent cookies- stored on the user’s end device for the time specified in the cookie file parameters or until the user deletes them.

Due to the purpose of cookies and other similar technologies, we use the following types:

•          necessary for the store to operate – e.g. allowing the use of the basket;
•          files used to ensure security, e.g. used to detect fraud in the field of authentication;
•          performance-related – allowing to collect information about the manner of using the store;
•          functional – allowing to “remember” the selected settings, to personalize your interface, e.g. the language or country you have selected;
•          statistical – used to count statistics on the website.

It is possible to configure your internet browser so that the possibility of storing cookies on your computer’s hard drive will be completely disabled. Keep in mind that the effect of such a change may be the loss of the ability to use some of the store’s functions (login, cart, etc.).

Additional information about cookies and other technologies can be found, e.g. in the Help section in the browser menu.

Miscellaneous provisions

The so-called social plugins for social media, such as Facebook, Instagram, Pinterest may be used on the store and store blog pages. Using the functionalities provided by these plugins, you can recommend individual content or share it in a given social network. Keep in mind that using these plugins you exchange data between you and the social network. We do not process this data and we do not know what data is collected by these websites. Therefore, we encourage you to read the rules and privacy policies of the owners of these social networking sites before using the plugin.