Privacy Policy

Privacy Policy

Privacy Policy of the CORNERO store

1. Data Controller

The Controller, through the Website and other forms of communication, collects and processes the following personal data of Users provided during the registration process on the Website: first and last name, home address, e-mail address, phone number.

2. Purpose and Duration of Data Processing

Purpose: Processing your personal data allows us to provide services, including maintaining your account, fulfilling orders, communication related to contract performance, as well as sending marketing information (including the newsletter).

Duration: Personal data will be stored for the duration of the contract and for a period consistent with applicable regulations, taking into account the statute of limitations for claims and tax obligations. Personal data for which you have given consent for processing will be stored until you withdraw your consent.

3. Right to View, Correct, and Delete Data

The User has the right at any time to access and change their personal data, as well as to request the Controller to promptly delete it (the "right to be forgotten").

4. Requests Regarding Personal Data

Requests concerning the processing of personal data may be submitted by e-mail to the Controller's address: biuro@cornero.pl

5. Transfer of Personal Data

Your personal data may be transferred to the payment operator and the courier company.

6. Confidentiality Obligation

The Controller undertakes to make every effort to properly secure the Customer's personal data.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with the supervisory authority responsible for personal data protection – the President of the Personal Data Protection Office.

8. Data Security

We process personal data provided to us by Customers in accordance with the scope of consent granted by Customers and legal requirements, in particular in accordance with the Act of August 29, 1997 on the Protection of Personal Data (Journal of Laws No. 133, item 883, as amended). Customers' personal data is stored on servers that ensure full security. Only authorized Store employees have access to the database.

Every Customer who has provided us with their personal data has full access to their data for the purpose of verification, modification, or requesting deletion.

The Store does not transfer, sell, or lend the collected personal data of Customers to third parties, unless this is done with the explicit consent or at the request of the Customer, or at the request of state authorities authorized by law in connection with ongoing proceedings.

9. Cookies

Our Store also uses so-called cookies. These files are saved on the Customer's computer by our server and provide statistical data on the Customer's activity, in order to tailor our offer to their individual needs and preferences. The Customer can disable the cookie acceptance option in their web browser at any time, although they should be aware that in some cases disabling these files may make it difficult to use our Store's offer.

Cookies store information about:

  • User session
  • Recently viewed products
  • Poll votes cast

10. Links to Third-Party Websites

We would like to draw your attention to the fact that if our Store's website contains links leading to other websites not administered by us, we cannot be held responsible for either the content of those websites or the level of privacy protection implemented by the administrators of those websites. When deciding to visit such websites, the Customer does so at their own risk. We also encourage you to review the privacy policy implemented by those websites before the Customer shares their personal data with them.

11. Newsletter and Marketing Materials

We send advertising and promotional materials to Customers only if they have given their consent. This applies in particular to the newsletter sent to the Customer, if they explicitly confirm the link we provide containing acceptance to receive the newsletter about current promotions, discounts, and new products in our Store. These materials relate exclusively to our Store's offer.

12. Contact

All questions, requests, and suggestions regarding the protection of your privacy, in particular personal data, should be submitted:

Detailed Provisions

§ 1 - Definitions

The term Buyer used in this document may refer, depending on the context, to a customer or an internet user visiting the Store.

§ 2 - Legal Basis

Pursuant to Article 20(1) of the Act of July 18, 2002 on the provision of electronic services and Article 173 of the Act of July 16, 2004 – Telecommunications Law – the seller introduces this privacy policy, hereinafter referred to as the Policy.

§ 3 - Personal Data

  • To use the services offered by the store www.cornero.pl, the Buyer must fill out the appropriate form, which requires the provision of certain personal data.
  • Providing personal data in the form is voluntary, but necessary for the Seller to be able to provide services to the Buyer through the Store.
  • All data entered by the Buyer into the registration form / order form or provided in correspondence with the seller is processed in accordance with the requirements set out by Polish law, primarily in accordance with the Act of August 29, 1997 on the Protection of Personal Data and the Act of July 18, 2002 on the provision of electronic services. As of May 25, 2018, personal data will be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as GDPR.

§ 4 - Data Controller

  • The controller of personal data is the Seller, i.e. Cornero SP. z o.o.
  • The Seller may entrust the processing of collected Buyers' personal data to other entities under a data processing agreement.
  • Personal data will be transferred by the Seller to the following categories of data recipients:
    • couriers for the purpose of delivering purchased goods (InPost)
    • payment operators (Szybkie płatności; in the case of a traditional bank transfer – the bank; Przelewy24)
    • entities providing hosting of personal data for the controller
    • personal data will be transferred to Google LLC, which operates the Google Analytics analytical tool that monitors activity in the Store
    • personal data may be transferred to Microsoft Corporation, which operates the Microsoft Clarity analytical tool used to analyze user behavior in the Store (session recordings, heatmaps)

§ 5 - User Rights

  • The Buyer has the right to access their personal data and may verify or correct it, as well as have it deleted, by submitting an appropriate request to the seller.
  • In accordance with the GDPR, the user also has the right to restrict processing and the right to data portability; if personal data is processed in violation of legal requirements, the user will be able to lodge a complaint with the supervisory authority.
  • In accordance with the GDPR, the user also has the right to object to the processing of personal data.

§ 6 - Purpose of Data Processing

  • The Seller processes Buyers' personal data and uses it exclusively to the extent necessary to provide services through the Store, including handling complaints.
  • The controller's legitimate interest is conducting marketing of its own services. Based on additional and optional consent that the Buyer may give, the seller has the right to send marketing information to the provided e-mail addresses and phone numbers. If the Buyer has given such consent, they may withdraw it at any time. In the case of giving such consent, the legal basis will also be Article 10 of the Act of July 18, 2002 on the provision of electronic services and Article 172 of the Act of July 16, 2004 – Telecommunications Law.

§ 7 - Transfer of Data to State Authorities

Personal data collected by the seller may be transferred to state authorities authorized under applicable legal regulations.

§ 8 - Technical Security

The Seller applies technical measures required by current personal data protection regulations to prevent unauthorized persons from acquiring and modifying personal data transmitted electronically.

§ 9 - Anonymity

The User does not have the option to use the services offered through the Store anonymously or under a pseudonym.

§ 10 - Data Retention Period

The period for storing personal data after consent for further processing has expired will be set at 5 years, which corresponds to the limitation period for claims that the controller may be subject to.

Detailed Information About Cookies

§ 1 - Use of Cookies

  • The Store uses cookies, i.e. small text information stored on the Buyer's device, which may subsequently be read by the Seller.
  • Cookies are used to maintain the Buyer's session, thanks to which the Buyer does not have to re-enter their login and password on every subpage of the Store, as well as to remember the contents of the cart.

§ 2 - Deleting Cookies

The Seller indicates that cookies saved by the Seller may be deleted by the Buyer through the appropriate functions of the web browser, programs designed for this purpose, or the use of appropriate tools within the operating system used by the Buyer.

§ 3 - Functional Limitations

The Seller informs Buyers that changing the web browser configuration to prevent or restrict the storage of cookies on the Buyer's device may cause limitations in the functionality of the services provided. Deleting cookies during the provision of a service may lead to similar effects. This may result in the inability to log in to the Store or interruption of the session after logging in.

§ 4 - Google Analytics

Cookies placed on the Buyer's device may also be used by the Google Analytics analytical program for the purpose of studying traffic and preferences in the Store.

§ 5 - Microsoft Clarity

  • The Store uses the Microsoft Clarity tool, which, by means of cookies and similar technologies, records the way Buyers use the Store, including cursor movements, clicks, and page scrolling (session recordings and heatmaps).
  • This data is used exclusively to improve the functionality and usability of the Store.
  • The operator of the tool is Microsoft Corporation. More information on how Microsoft processes data can be found at: Microsoft Privacy Statement.

§ 6 - Transfer of Cookies

The Store does not transfer cookies to third parties other than those listed in §4 and §5.

Scope of Personal Data Processing

  • Scope of stored data: First name, last name, phone number, e-mail, home address
  • Duration of personal data processing: In accordance with Article 5(1)(e) of the GDPR, personal data may be stored only for the period necessary to fulfill the purposes for which it was collected. This data is measured until the closure of the business. In the event of the closure of business by Cornero SP. z o.o., all data will be deleted. At the customer's request, it is possible to remove them from the database.
  • Confidentiality obligation: The Seller undertakes to maintain confidentiality related to personal data and to properly secure it. Personal data left on the site will not be sold or shared with third parties, in accordance with the provisions of the Personal Data Protection Act.

Final Provisions

In matters not regulated by these regulations, the provisions of the Civil Code and relevant Polish laws, as well as European Union law, in particular the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC), shall apply.