Privacy Policy

I General provisions

1.The words in capital letters and the following definitions are given the meaning as in the Terms of Service available at: https://cowboykid.eu/terms-and-conditions.html.

2.This document defines the rules for processing and protecting personal data of the Service Clients available at http://cowboykid.eu. (Privacy Policy).

3.The data administrator (Personal Data) of Clients – The Service is a Cowboy Sp.z o.o. with its registered office in Warsaw, at ul.Solec 81B/73A, 00-382 Warszawa, e-mail: daneosobowe@cowboykid.pl, telephone: 536 593 816, entered in the register of entrepreneurs of the National Court Register kept by the District Court for Warsaw, Warsaw, Department XII Economic of the National Court Register under number KRS 0000940596, number NIP 7011068092, number REGON 520968868, with share capital of 5 000 PLN.

4. Personal data referred to in the Privacy Policy are information about the identified or identifiable natural person concerned, including one that can be identified directly or indirectly, in particular on the basis of a characteristic such as: name, identification number, data o location, Internet identifier or one or more features defining the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person.

5.The Service Provider processes Personal Data, persons concerned in accordance with applicable regulations, in particular Polish law and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on freedom of movement the flow of such data and repeal of Directive 95/46/EC (General Data Protection Regulation, GDPR).

6.Processing, within the meaning of the Privacy Policy, means an operation or set of operations performed on Personal Data or Personal Data sets in an automated or non-automatic manner, such as collecting, recording, organizing, arranging, storing, adapting or modifying, download, browse.

II Scope and purpose of data collection

7. Personal data are processed by the Administrator in the Service in order to enable the use of the functionality of the Service, including automatically when using the Service, includingfor the purpose of:

registration on the Website;

to conclude contracts through or available in the Service, in particular to submit and execute the Order/Reservation;
the efficient operation and operation of the Service, including the Online Store and ensuring the safety of use of them, including for disclosure of abuses and analysis;
compliance with the obligations of the Service Provider, in particular complaints concerning the contracts contained in the Service or through the Service and the functioning of the Service;
preparing and presenting tailored to the interests and needs of persons whose Personal Data concerns advertising and offers and receiving commercial information, in particular sending the Service Provider to the e-mail address of the ordered Newsletter, as indicated by the Customer;
for the publication of Content.

8.for the purpose of:

registration on the Website – the following Personal Data are processed - first and last name, email address, Password, IP address, cookies;
conclusion of contracts through or available in the Service, in particular the submission and execution of the Order/Reservation – The following Personal Data are processed - in the case of Order - name, address (street, house number, town with postal code), contact phone number, order number, IP address, cookies or other data provided by the Service Provider on the Website or during contact with the Client;
efficient operation and operation of the Service, including the Online Store and ensuring the safety of use of them, including for disclosure of fraud, reporting and analysis, including statistics on the viewing of the website – the following Personal Data is processed – listed in point 8(b);
compliance with the obligations of the Service Provider, in particular complaints concerning the contracts contained in the Service or through the Service and the functioning of the Service – the following Personal Data is processed – name, email, telephone, address (street, house number, town with postcode), IP address, cookies, bank account number;
preparing and presenting tailored to the interests and needs of persons whose Personal Data concerns advertising and offers and receiving commercial information, in particular sending the Service Provider to the e-mail address of the ordered Newsletter indicated by the Customer – Personal data are processed: name, surname, PESEL, gender, date of birth, marital status, e-mail, telephone, address (street, house number, town with postal code), type of income, net earnings, number of persons in the household, date of conclusion of the contract, number of credit instalments, IP address, cookies, number Contracts/Reservations;
for publication Content – The following Personal Data is processed: first name, last name, email, nickname, IP address, cookies.

III Legal basis for processing Personal Data

10.The legal basis for processing Personal Data is:

the consent of the person to whom Personal Data relates to their processing;
the need to perform contracts concluded on the Service or through the Service, or to take action requested by the person to whom Personal Data relates before the conclusion of the contract;
the necessity to comply with the legal obligation on the Service Provider;
legitimate interests pursued by the Service Provider or by a third party, which are electronic payment operators or others, in connection with the functionality of the Service, and this basis for processing Personal Data does not apply to children.

IV Personal Data retention period

10. Personal data collected on the Service will be stored for billing purposes for a maximum period of 5 years, counting from the end of the calendar year in which the deadline for payment of tax related to the agreement concluded on the Service or via the Service expired. Personal data will be stored as long as there is a legal basis for their processing, unless the applicable laws require a longer period of storage, for example, for use in proceedings concerning the operation of the Service. anonymised

V Voluntary administration of Personal Data

11.The Service's Personal Data is voluntary, but necessary for the purpose of one or more purposes of processing Personal Data defined in paragraph 7 above, which the Service Provider will not be able to perform in the event of failure to provide Personal Data in the Service, for one or more of the purposes respectively or more than the quantities defined in paragraph 7 above.

VI Personal Data profiling

12. Personal data will be processed in an automated manner, including profiled for which information on purchases, activities in sales channels of the Service Provider (IP of the computer, cookies, preferred ways of purchase), sociodemographic data (e.g. gender, age, income, place of residence) is used) to ensure that adapting marketing information to individual preferences.

VII Cookies

13.The Service Provider informs that when using the Service Personal Data is collected automatically in the system logs of the Service, by cookies

14.The Service Provider informs that from the moment of the connection of the Client to the Service, the Service's system logs contain information about the number (including IP) and the type of terminal device the Client connects to the Service.The Service Provider informs that it processes data concerning the number (including the number) according to law. IP) and the type of terminal device of the Client, as well as the time of connection of the Client to the Service and other operational data concerning the Client's activity in the Service.The data described are processed for technical purposes for the purpose of adapting the Service to the needs of the Clients and for collecting general statistical information concerning the functioning of the Service.

15.The Service Provider uses cookies to collect information related to the use of the Service by the Client.Cookies are information about the information, in particular small text files, stored and stored on devices through which the Customer uses the Service, which allow:

maintenance of the Client session (after logging in), which means that the Client does not have to re-enter Login and Password on every subpage of the Service,
adaptation and optimization of the Service to the needs of the Clients,
personalization of marketing communications,
ensuring the safety and reliability of the Service.

16.The Service uses session cookies, which are deleted after the internet browser window is closed, as well as permanent Cookies, stored for a certain time in the devices through which the Customer uses the Service.

17.The Client can change the settings for Cookies by himself and at any time, specifying the conditions for storage and access by Cookies to the Customer Device.The Customer may change the settings referred to in the previous sentence by means of the settings of the web browser or by using the settings of the internet browser. These settings can be changed in particular to block the automatic operation of cookies in the settings of the web browser or to inform about each time cookies are placed on the Customer's Device.Detailed information on the possibilities and ways of handling Cookies Cookies are available in the client's software settings (web browser).

18.The customer can delete cookies at any time using the available features in the web browser he uses.

19.Limiting the use of Cookies may affect some of the functionalities available on the Service.

20.The Service also uses Cookies posted by the Service Provider's partners, enabling personalization of advertising activities and accounting for their effects.Privacy policy does not regulate the use of Cookies by third parties.For more information about them, please contact the different pages of the Service Provider's partners.

VIII Rights and obligations of the Service Provider

21.The Service Provider reserves the right to disclose the selected Personal Data to the competent authorities or third parties who request such information, on the basis of an appropriate legal basis, in accordance with the applicable law.

22.The Service Provider declares that it entrusts the processing of Personal Data, on the basis of a written agreement concluded in accordance with applicable regulations to entities providing hosting, administration, maintenance and management services to the Service Provider, as well as services in the field of optimization of the transmission and managing promotional campaigns.

23.The Service Provider declares that it entrusts the processing of Personal Data of the Client to entities providing services to the Service Provider or directly to the Client to the extent necessary to use the Service, including the execution of contracts, in particular Contracts/Reservation, Complaints and the use of financial services available in the Online Store, on the basis of a written agreement concluded in accordance with applicable regulations. Personal data of the Clients may be entrusted in particular to the Suppliers of Products, Banks, Insurers, Financial and Insurance Institutions.

IX Processing of Personal Data by Processors

24.The processor within the meaning of the Privacy Policy is the entities referred to in point 23 and point 24 which, on behalf of the Service Provider, process Personal Data.

25.The processor is authorized and entitled to process Personal Data only for the purposes and in the scope specified in the Privacy Policy.

26. Personal data may be processed only in Poland, a Member State of the European Union (EU) or in the territory of the signatory of the European Economic Area Agreement (EEA).

27.The processor shall process the personal data entrusted in accordance with applicable law, in particular the Processing:

apply the legal technical and organisational measures, in particular as regards the security of the processing of Personal Data.
(ii) the ability to quickly restore and access the availability of personal data in the event of a physical or technical incident; and assessing the effectiveness of technical and organisational measures to ensure the safety of processing.
apply personal data protection measures at a level not lower than that applied by the Service Provider.

28.The Processor may modify, delete or block the Personal Data processed only at the request of the Data Administrator.If the Person to whom the Personal Data relates directly to the Processor requests the Changer or delete his Personal Data, The Processing shall immediately, within no later than 5 days. the working, transmits such a request to the Service Provider.

29.The processor should not process Personal Data for purposes other than the performance of obligations specified in the Privacy Policy.The processor shall not disclose Personal Data to third parties.

30.The processor shall be responsible to the person to whom Personal Data relates for the damage which the person may suffer as a result of the act and omission of the Processor.

X Rights and obligations of the person to whom Personal Data relates

31.Every customer has the right:

access to, correct, delete and request the restriction of processing.
object to the processing of Personal Data, revoke consent to the processing of Personal Data in one or more of the purposes for which it was granted, at any time without affecting the legality of the processing carried out on the basis of consent before its withdrawal, and the right to transfer its Personal Data.

32.For the purpose of exercising the powers referred to in point 32 (a) above, please send an e-mail to: bok@cowboykid.pl, call 536 593 816.

33.For the purpose of exercising the powers referred to in point 32(b) above, please send an email to: bok@cowboykid.pl entering a word in the title „objection” or „withdrawal of consent”, call 536 593 816 and inform you of objection or withdrawal of consent, click on the link causing withdrawal of consent contained in the commercial information or send written notice of withdrawal of consent to receive commercial information to the Service Provider: Cowboy Sp.z o.o., ul.Solec 81B/73A; 00-382 Warsaw, with the addition of PERSONAL DATA.

34.If the Customer places any personal data on the Service of other persons (including their name, address, telephone or e-mail number), he may do so only if the laws and personal rights of those persons are not infringed.

35.The Customer is entitled to use Personal Data and content provided by other persons on the Service solely in connection with the use of the Service and with their consent in accordance with the applicable law, unless he obtains consent from those other persons to process their Personal Data and their content in the scope or purpose of the Privacy Policy and beyond the use of the Service.

36.Every Customer has the right to lodge a complaint with the supervisory authority for the processing of Personal Data.

XI Personal Data security

37.The Service Provider declares that he is making efforts to ensure a high level of security for the Clients in the use of the Service and for this purpose:

apply the legal technical and organisational measures required, in particular as regards the security of the processing of Personal Data;
(ii) the ability to quickly restore and access the availability of Personal Data in the event of a physical or technical incident; and assessing the effectiveness of technical and organisational measures to ensure the safety of processing.

38.Any events affecting the security of information, data, including suspected sharing of files containing viruses and other files of a similar nature or nature, than destructive mechanisms files, should be reported to the Service Provider via e-mail: bok@cowboykid.pl.

XII Final provisions

39.In matters not regulated in the Privacy Policy, the law applies to the processing of Personal Data, including GDPR.