If you’ve come here, it’s a sure sign that you value your privacy. We understand this perfectly, that’s why we give you a document in which you will find in one place the rules for processing personal data and the use of cookies and other tracking technologies in connection with the store https://www.heartfelt.pl
This privacy policy has been structured in the form of questions and answers. The choice of this form was dictated by the care for transparency and readability of the information presented to you. Below you will find the table of contents of this policy corresponding to each of the answered questions.
If you have any doubts related to the privacy policy, you can contact us at any time by sending a message to the address joanna@heartfelt.pl
Who is the administrator of your personal data on this website?
The administrator of your personal data on this website is Joanna Cuciti – HeartFelt PL – ul. Góralska 43E/8, Gdańsk, 80-292, Poland, VAT ID: PL 5842598124
Who can you contact regarding the processing of your personal data?
As part of the implementation of personal data protection in our organisation, we have decided not to appoint a personal data protection officer due to the fact that in our situation it is not mandatory. In matters related to the protection of personal data and broadly understood privacy, you can contact by email: joanna@heartfelt.pl
What information do we have about you?
Depending on the purpose, we may process the following information about you:
- first and last name
- address
- business address
- VAT identification number
- email address
- phone number
- data contained in the correspondence addressed to us
- bank account number
- IP address
The details and scope of processed data in relation to each processing purpose is being provided later in this policy.
Where do we get your personal data from?
In most cases you hand them to us. This happens when
- you are registering a user account
- you place an order in the store
- you send complaints or withdraw from the contract
- add a comment or product review
- you contact us
In addition, some information about you may be automatically collected by the tools we use:
- the shop platform collects your IP address and browser information
- the shop platform collects the information on which products you have viewed, the details of the order placed, including unfinished ones
- Google Analytics collects a range of information about how you use our store
Is your data safe?
We care about the security of your personal data. We analyzed the risks associated with the various processes of processing your data, and then implemented appropriate security measures and protection of personal data. We monitor the state of our technical infrastructure on an ongoing basis, train our staff, look at the procedures used, introduce necessary improvements. If you have any questions about your personal data, we are at your disposal at email address joanna@heartfelt.pl
For what purposes do we process your personal data?
There are more than one of these purposes. Below is a list of them followed by a more detailed discussion. We have also reference appropriate legal grounds for processing to individual purposes.
- registration and maintenance of a user account – art. 6 clause 1 point b GDPR
- order processing – art. 6 clause 1 point b GDPR
- service of complaints or withdrawal from the contract – art. 6 clause 1 point f GDPR
- service of comments or product opinions – art. 6 clause 1 point and GDPR
- supporting the correspondence – art. 6 clause 1 point f GDPR
- implementation of tax and accounting obligations – art. 6 clause 1 point c GDPR
- creating an archive for the eventual need to defend, establish or pursue claims, as well as to identify a returning customer – art. 6 clause 1 point f GDPR
- on-line marketing – art. 6 clause 1 point f GDPR
- analysis, statistics and optimization – art. 6 clause 1 point f GDPR
User Accounts
When creating a user account, you must provide the data necessary to set up an account: email address and password. Providing data is voluntary, but necessary to set up an account.
As part of editing the account data, you can provide your further data, in particular data that can be used when placing orders, such as name and surname, address of residence or address of business, tax identification number, phone number.
You can modify the information about you provided to us in connection with the registration of your user account at any time.
The data provided by you in connection with the creation of the account is processed in order to provide you with an electronic service consisting in giving you the opportunity to use a user account. This service is provided on the basis of a contract concluded on the terms described in the regulations, which means that in this respect the legal basis for the processing of your personal data is Art. 6 clause 1 point b GDPR.
The data will be stored for the duration of the user’s account. You can decide to delete your account at any time, but this will not delete information about your orders placed using the account from our database. Data about orders are stored in our archives throughout the entire period of the shop’s operation due to ensuring the possibility of identifying a returning customer, recreating his purchasing history, discounts granted, etc., which is our legitimate interest referred to in art. 6 clause 1 point f GDPR.
Orders
When placing an order in the store, you must provide the data necessary to complete the order. Depending on the order details, the data catalog is different. For example, if you order physical products, we must know the address to which deliver the product. If you are asking for a VAT invoice for a company, we must know the tax identification number and business address. Providing data is voluntary, but necessary to place an order.
Each order is saved in our database, which means your personal data assigned to the order is also accompanied by information about the order, such as ordered products, selected payment method, selected delivery method, payment date.
The data collected in connection with the order is processed in order to perform the contract concluded by submitting the order (Article 6 (1) (b) of the GDPR), issuing an invoice (Article 6 (1) (c) of the GDPR in relation to provisions regulating issues issuing invoices), including an invoice in the accounting documentation and implementing other tax and accounting obligations (Article 6 (1) (c) of the GDPR in connection with the provisions regulating issues of tax and accounting obligations) and for archival purposes for the purposes of possible defense, establishing or pursuing claims, as well as identifying the returning customer, which is our legitimate interest (Article 6 (1) (f) of the GDPR).
Data on orders will be processed for the time necessary to complete the order, and then until the expiry of the limitation period for claims under the contract. In addition, after this period has expired, the data may still be processed by us for archival purposes for the eventual need to defend, establish or assert claims, as well as identify the returning customer. Also remember that we have an obligation to keep accounting records, which may contain your personal data, for the period required by law.
Complaints and withdrawal from the contract
By submitting a complaint or withdraw from the contract, you will provide personal data contained in the complaint or statement of withdrawal, which include your name, address, telephone number, e-mail address, bank account number. Providing data is voluntary, but it is subject to forwarding a complaint or withdraw from the contract.
The data provided to us in connection with the complaint or withdrawal from the contract is carried out in order to perform the complaint or withdrawal procedures, and then in archival proceedings, which is our legitimate interest (Article 6 paragraph 1 point f of the GDPR).
Data must be processed for the time necessary to complete the complaint or withdrawal procedure. Complaints are used until the validity period of the warranty has expired. Statements of withdrawal from the contract included with the accounting documentation for the period required by law.
Comments and opinions about products
When adding a comment or product review, you must provide at least the username that will be assigned to the comment or review (the name may contain personal data, such as your name) and email address. Providing this data is voluntary, but necessary to add a comment or opinion.
The data provided in connection with the addition of a comment or opinion will be processed in order to publish a comment or opinion on the website. The basis for processing is your consent (Article 6 (1) (a)) resulting from sending a form to publish a comment or opinion. You can withdraw your consent at any time by requesting removal of the comment or opinion.
Your comment or opinion will be publicly available on the site as long as it is available on the Internet, unless you request removal of the comment or opinion first. You can also modify the content of the comment at any time, as well as modify the data assigned to it as the person who added the comment or review.
Correspondence service
By contacting us, you naturally provide us with your personal data contained in the content of the correspondence, in particular the e-mail address and name. Providing data is voluntary, but necessary to make contact.
In this case, your data is processed in order to contact you, and the basis for processing is art. 6 clause 1 point f GDPR, i.e. our legitimate interest. The legal basis for processing after the contact is also our justified purpose in the form of archiving correspondence for the purpose of ensuring the possibility of demonstrating certain facts in the future (Article 6 paragraph 1 point f of the GDPR).
The content of correspondence may be archived and we are not able to clearly determine when it will be deleted. You have the right to request the history of correspondence with you (if it has been archived), as well as to request its deletion, unless its archiving is justified due to our overriding interests, e.g. defense against potential claims on your part.
Tax and accounting obligations
If we issue an invoice for you, it is included in the accounting records that will be kept for the period of time required by law. In this situation, your personal data is processed in order to fulfill our tax and accounting obligations (Article 6 (1) (c)) of the GDPR in connection with the provisions regulating issues of tax and accounting obligations).
Archive
In the description of the purposes of collected personal data, which is contained above, we indicate also for how long the data is retained. These terms are often associated with our archiving of the data, which we may need in the future to find facts, process customer relationship and review exchanged correspondence, defend, determine or assert claims. This is based on our legitimate interest referred to in art. 6 clause 1 point f GDPR.
Analysis, statistics, optimization
We collect statistical information on user behavior when browsing our websites, such as clicking on links, transition between subpages, time spent on individual pages, etc. We analyze this information to optimize our pages in terms of user experience, efficiency and conversion. In most cases, the information processed in this way is not personal. The exception is when you are a registered user. Then we can compare this information with your other data collected in the user’s account. We implement the activities described above based on our legitimate interest referred to in art. 6 clause 1 point f GDPR based on the optimization of our websites.
How long will we keep your personal data?
Data storage periods have been indicated separately for each processing purpose. You will find this information as part of the details dedicated to each separate processing purpose.
Who are the recipients of your personal data?
We will venture to say that modern business cannot do without services provided by third parties. We also use such services. Some of these services involve the processing of your personal data. External service providers who participate in the processing of your personal data are:
- cloud computing service provider which owns the hosts on which the data is store
- cloud computing service provider in which backups that may contain your personal data are stored
- an accounting office that processes your data visible on invoices
- courier companies that process your data to the extent necessary to deliver the order to you
- a law firm that gains access to data if it is necessary to provide legal assistance to us
- an entity providing technical maintenance services, who obtains access to data only if the technical work carried out concerns areas in which personal data are located
- other subcontractors who gain access to data if the scope of their activities requires such access
Your personal data may also be transferred to tax offices to the extent necessary to fulfill tax and accounting obligations. In particular, all declarations, reports and other accounting documents that contain your personal data.
In addition, if necessary, your personal data may be disclosed to entities, third parties or institutions authorized to gain access to data on the basis of legal provisions, such as police, security services, courts, prosecutors.
What’s more, we use tools that collect about you a number of information related to the use of our store. This is in particular the following information:
- information about the operating system and the web browser you are using
- viewed subpages
- time spent on the site
- transitions between individual subpages
- clicks on individual links
- sources from which you arrive to our site
- the age range you’re in
- your gender
- your approximate location limited to the city
- your interested determined on the basis of your online activity.
In our opinion, this information is not personal in nature. Because this information is collected by external tools that we use, this information is also processed by tool providers under the terms of their regulations and privacy policies. Basically, this information is used to provide and improve services, manage them, develop new services, measure the effectiveness of ads, protect against fraud and abuse, as well as personalize the content and ads displayed on individual services, sites and applications. We have tried to describe the details in this part of this policy as part of explanations on specific tools.
Do we transfer your data to Member States or international organizations?
Yes, some operations involving the use of personal data may involve their use to the third countries.
We transfer your personal data to third countries regarding the use of tools that support personal data on servers located in the USA. Providers of these tools guaranteeing an adequate level of personal data protection through appropriate mechanisms compatible by the GDPR, when using the services of the Privacy Shield program or applications with standard contractual clauses.
To collect personal data on a server located in third countries comes under the following tools:
- Google services as part of the G-Suite package, whose provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – in the scope of all data processed as part of Google services, including those data contained in files synchronized with Google Drive
Google Ireland Limited provides an adequate level of personal data protection by applying compliance mechanisms provided by the GDPR, in particular by joining the Privacy Shield program. Below are links to confirmations of participation in the Privacy Shield program, where you can read information about the processing of personal data by these entities.
We also remind you here that we use external tools that may collect anonymous information about you. We have already mentioned this several times as part of this policy, including in the answer to the previous question. Suppliers of these tools often use servers located around the world to store the collected information, in particular in the United States of America (USA).
Do we use profiling? Do we make automated decisions based on your personal data?
We do not make decisions based on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you.
Yes, we use tools that can take specific actions depending on the information collected under the tracking mechanisms, but we believe that these actions do not have a significant impact on you, because they do not differentiate your situation as a customer, they do not affect the terms of the contract that you can conclude with us etc. By using certain tools, we can, for example, direct to you personalized ads based on previous actions taken by you on our site or suggest products that may interest you. We are talking here about behavioural advertising. We encourage you to deepen your knowledge of behavioural advertising, in particular regarding privacy issues. Detailed information, along with the ability to manage settings for behavioural advertising, can be found here: https://www.youronlinechoices.com
We emphasize that as part of the tools we use, we do not have access to information that would allow your identification. The information we are talking about here is, in particular:
- information about the operating system and the web browser you are using
- viewed subpages
- time spent on the site
- transitions between individual subpages
- source from which you go to our site
- the age range you’re in
- your gender
- your approximate location limited to the city
- your interests determined on the basis of online activity
We do not combine the information indicated above with your personal data, which are in our databases. This information is anonymous and does not allow us to identify you. This information is stored on the servers of the suppliers of individual tools, and these servers can most often be located all over the world.
What rights do you have regarding the processing of your personal data?
The GDPR grants you the following potential rights related to the processing of your personal data:
- the right to access your data and receive a copy thereof
- the right to rectify (correct) your data
- the right to delete data (if you think there are no grounds for us to process your data, you can request that we delete it)
- the right to limit data processing (you can request that we limit the processing of data only to their storage or performance of activities agreed with you, if in your opinion we have incorrect data or we process it unreasonably)
- the right to object to the processing of data (you have the right to object to the processing of data on the basis of a legitimate interest; you should indicate the specific situation that you think justifies our cessation of the objection processing; we will stop processing your data for these purposes, unless we show that the grounds for processing data by us take precedence over your rights or that your data is necessary for us to determine, assert or defend claims)
- the right to transfer data (you have the right to receive from us in a structured, commonly used machine-readable format personal data that you provided to us under a contract or your consent; you can order us to send this data directly to another entity)
- the right to withdraw consent to the processing of personal data, if you have previously given such consent
- the right to lodge a complaint with the supervisory body (if you find that we are processing data unlawfully, you can file a complaint to the Polish President of the Office for Personal Data Protection or other competent supervisory body)
The rules related to the implementation of the abovementioned rights are described in detail in art. 16 – 21 GDPR. We encourage you to read these regulations. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and you will not be entitled to all the processing of your personal data.
We emphasize that you always have one of the rights indicated above – if you believe that during the processing of your personal data we have violated the provisions on the protection of personal data, you have the possibility to fill a complaint to the supervisory body (the Polish President of the Office for Personal Data Protection).
You can also always ask us to provide you with information about what data we have about you and for what purposes we process it. All you have to do is send a message to joanna@heartfelt.pl. However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. The e-mail address provided above can also be used for any questions related to the processing of your personal data.
Do we use cookies? and what are they?
Our store, like almost all other websites, uses cookies.
Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone) that can be read by our ICT system (own cookies) or ICT systems of third parties (third parties cookies). Specific information may be saved and stored in cookies, which then can be accessed by ICT systems for specific purposes.
Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you visit the site (persistent cookies).
If you want to learn more about cookies as such, you can read, for example, this material: https://en.wikipedia.org/wiki/HTTP_cookie
On what basis do we use cookies?
We use cookies based on your consent, except when cookies are necessary for the proper provision of services by electronic means.
Cookies that are not necessary for the proper provision of the service electronically remain blocked until you agree to our use of cookies. During your first visit to our website, we display a message asking you for your consent, together with the option of managing cookies, i.e. deciding which cookies you agree to and which you want to block.
In terms of your consent to cookies, we accept the variant according to which you consent by setting your web browser or additional software supporting the management of cookies. We assume that you agree to all cookies we use that are not blocked by your browser or additional software that you use.
Remember that disabling or limiting the use of cookies may prevent you from using some of the functions available in our store and cause difficulties in using our store, as well as from many other websites that use cookies. For example, if you block cookies from social plugins, buttons, widgets and social features implemented in our store may not be available to you.
Can you disable cookies?
Yes, you can manage cookie settings in your web browser. You can block all or selected cookies. You can also block cookies of specific websites. You can also delete previously saved cookies and other website and plug-in data.
Web browsers also offer the option of using incognito mode. You can use it if you do not want information about pages visited and downloaded files to be saved in your browsing and download history. Cookies created in incognito mode are deleted when all windows of this mode are closed.
Browser plugins are also available to control cookies, such as Ghostery (https://www.ghostery.com). The option of control over cookie files can also be provided by additional software, in particular anti-virus packages, etc.
In addition, tools are available on the Internet to control some types of cookies, in particular to collectively manage behavioural advertising settings (e.g. www.youronlinechoices.com, www.networkadvertising.org/choices).
Remember that disabling or limiting the use of cookies may prevent you from using some of the functions available in our store and cause difficulties in using our store, as well as from many other websites that use cookies. For example, if you block cookies from social plugins, buttons, widgets and social features implemented in our store may not be available to you.
For what purposes do we use our own cookies?
Own cookies are used to ensure the proper functioning of individual store mechanisms, such as maintaining sessions after logging into the account, remembering recently viewed products and products added to the basket.
What third parties cookies are used?
Our store has the following third parties cookies:
- Google Analytics
- Google Tag Manager
- Google AdWords
- Google AdSense
- Facebook Custom Audience
- Social Tools
- YouTube
Details of individual third-party cookies are described below.
Google Analytics
We use the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We carry out activities in this area, based on our legitimate interest, consisting in the production of statistics and their analysis in order to optimize our websites. In order to use Google Analytics, we have implemented a special Google Analytics tracking code in the code of our website. The tracking code uses Google LLC cookies for the Google Analytics service. You can block Google Analytics tracking code at any time by installing the browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout
Google Analytics automatically collects information about your use of our site. The information collected in this way is most often transmitted to Google servers, which can be located all over the world and stored there.
Due to the IP anonymization that we have activated, your IP address is shortened before forwarding. Only in exceptional cases is the full IP address transmitted to Google servers and shortened there. The anonymized IP address provided by your browser as part of Google Analytics is generally not combined with other Google data.
We emphasize that as part of Google Analytics, we do not collect any data that would allow you to be identified. Therefore, the data collected as part of Google Analytics are not personal data for us. The information we have access to as part of Google Analytics is, in particular:
- information about the operating system and the web browser you are using
- subpages that you browse as part of our store
- time spent in our store and on its subpages
- transitions between individual subpages
- source from which you go to our store
In addition, we use the following Advertising Functions as part of Google Analytics:
- demographics and interests reports
- remarketing
- advertising reporting functions, user-ID
As part of Advertising Features, we also do not collect personal data. The information to which we have access is, in particular:
- the age range you’re in
- your gender
- your approximate location limited to the city
- your interests determined on the basis of online activity
Google Analytics and Google Analytics 360 services have been certified by the independent security standard ISO 27001. ISO 27001 is one of the most widely recognized standards in the world and confirms compliance with the relevant requirements by systems supporting Google Analytics and Google Analytics 360.
If you are interested in details related to Google’s use of data from websites and applications that use Google services, we encourage you to read this information: https://policies.google.com/technologies/partner-sites.
Google TagManager
We use the Google Tag Manager tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA for enabling tags management, i.e. small pieces of code, thanks to which we are able to control user traffic and behaviour, collect information on ad performance and take action to improve our store.
Google Tag Manager does not collect any information that personally identifies you, however, this tool triggers other tags, which in turn may collect data.
Google AdWords
We use remarketing functions available as part of the Google AdWords system operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We implement activities in this area, based on our legitimate interest, consisting in marketing our own products or services.
When you visit our website, a Google remarketing cookie file is automatically left on your device, which collects information about your activity in our store. Thanks to the information collected in this way, we are able to display you ads within the Google network depending on your behaviour in our store.
For example, if you display a product, information about this fact will be recorded by the cookie remarketing file, which means that we will be able to direct you an advertisement about this product or any other that we consider appropriate. This ad will appear to you as part of the Google network when you use the Internet, browse other websites, etc.
We emphasize that we, when using Google Ads, do not collect any data that would allow your identification. The possible compilation of data in such a way that they acquire the nature of personal data can be made by Google, but in this respect we are no longer responsible for this, because Google performs these activities on the basis of a contract concluded with you as a user of Google services.
We, using Google AdWords, are only able to define the target groups to which we would like our ads to reach. On this basis, Google decides when and how it will present our advertisement to you.
Further processing of information only takes place if you have consented to Google to combine your browsing history with your account and to use information from your Google account to personalize the ads that are displayed on websites. In this case, Google will use your data to create and define target group lists for remarketing on different devices. To this end, Google temporarily combines the information collected with other data it has to create target groups.
If you don’t want to receive personalized ads, you can manage your ad settings directly on Google: https://adssettings.google.com/.
If you are interested in details of Google’s use of data from websites and applications that use Google services, we encourage you to read this information: https://policies.google.com/technologies/partner-sites.
Google AdSense
We display ads on our pages as part of the Google AdSense network operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We implement activities in this area, based on our legitimate interest, consisting in monetizing the content we publish.
Our site, in connection with the display of advertisements on it within the AdSense network, contains ad tags that instruct your web browser to send a request for advertising content from Google’s servers. Along with the advertising content, the server also sends a cookie. Cookies are used to display ads based on your previous visits to our website or other websites. AdSense also uses cookies to improve the quality of ads. Often applications include target ads based on topics that interest you, improve campaign performance reports, and skip the ads you’ve already seen.
We emphasize that we, when using Google AdSense, do not collect any data that would allow your identification. The possible compilation of data in such a way that they acquire the nature of personal data can be made by Google, but in this respect we are no longer responsible for this, because Google performs these activities on the basis of a contract concluded with you as a user of Google services.
Further processing of information only takes place if you have consented to Google to combine your browsing history with your account and to use information from your Google account to personalize ads that are displayed on websites. In this case, Google will use your data to create and define target group lists for remarketing on different devices. For this purpose, Google temporarily combines the information collected with other data it possesses to create target groups.
If you don’t want to receive personalized ads, you can manage your ad settings directly on Google.
If you are interested in details related to Google’s use of data from websites and applications that use Google services, we encourage you to read this information: https://policies.google.com/technologies/partner-sites.
Facebook Custom Audiences
As part of the Facebook Ads ad system provided by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, we use the function of Custom Audience Groups to target specific groups of users of targeted advertising messages. We implement activities in this area, based on our legitimate interest, consisting in marketing our own products or services.
In order to target you personalized ads in terms of your behavior in our store, we have implemented Facebook Pixel as part of our website, which automatically collects information about your use of our website. The information collected in this way is most often transmitted to Facebook servers, which may be located all over the world, in particular in the United States of America (USA).
The information collected as part of Facebook Pixel is anonymous, i.e. it does not allow us to identify you. Depending on your activity on our pages, you can reach a specific group of recipients, but in no way we identify individual people belonging to these groups.
However, we inform you that Facebook may combine the information collected with other information about you collected as part of your use of Facebook and use for its own purposes, including marketing. Such Facebook activities are no longer dependent on us, and you can search for information directly in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation.
At the level of your own Facebook account, you can also manage your privacy settings. At the following link you can find more information about it: https://www.facebook.com/ads/settings.
Social Tools
Our website uses plugins, buttons and other social tools, collectively referred to as “plugins”, shared by social networking sites such as Facebook, Instagram, Pinterest.
By displaying our website containing a plug-in for a given social website, your browser sends information about visits to the administrator of this social website. Because the plug-in is a fragment of a social networking site built into our site, the browser sends information about the request to download the content of the social networking site onto our site.
The plugins collect certain information about you, such as your user ID, website visited, date and time, and other information about your web browser.
Social network administrators use some of this information to personalize the viewing conditions on our site. For example, when you visit a page with a “Like” button, the administrator of the social network needs information about who you are to show you which of your friends also like our site.
Information collected by plugins can also be used by social network administrators for their own purposes, such as improving their own products, creating user profiles, analyzing and optimizing their own activities, targeting ads. We have no real impact on how the information collected by the plugins is then used by social network administrators. You can search for details in the regulations and privacy policies of individual social networking sites.
Social network plugins collect and transfer information to the administrators of these websites even when you browse our site without being logged in to your account on the social network. But then the browser sends a more limited set of information.
If you have logged in to one of the social networking sites, then the website administrator will be able to directly assign a visit to our website to your profile on the given social networking site.
If you do not want social networks to assign data collected during visits to our website directly to your profile on a given website, then before visiting our website you must log out of this website. You can also completely prevent the plugins from loading on the page using the appropriate extensions for your browser, e.g. script blocking.
In addition, the use of some plugins may involve the publication of certain information as part of your social media profiles. For example, information about clicks on the “Like” button may be available on your Facebook timeline. Of course, if you share any content on your social media using plug-ins embedded on our site, then this sharing will naturally be visible on your profile. As for the details related to the processing of information collected by plugins by the administrators of social networking sites, in particular the purpose and scope of data collection as well as their further processing and use by administrators, as well as the possibility of contact and your rights in this regard and the ability to make settings to protect your privacy, you will find everything in the privacy policies of individual service providers:
- Facebook: https://www.facebook.com/privacy/explanation
- Instagram: https://help.instagram.com/2482657248648591
- Pinterest: https://policy.pinterest.com/en/privacy-policy
YouTube
Our pages are embedded with YouTube widgets that allow you to play recordings available on YouTube directly from our pages. YouTube is operated by Google LLC.
The videos are embedded in the privacy protection mode. Based on information provided by YouTube, it means that no cookies are saved on your device or Google does not collect any information about you until you play the recording.
When you play a recording, YouTube stores cookies on your device and receives information that you have played the recording from a specific website, even if you do not have a Google account or are not currently logged in. If you have logged into your Google account, the service provider will be able to directly assign a visit to our website to your account. The purpose and scope of data collection and their further processing and use by Google, as well as the possibility of contact and your rights in this regard and the possibility of making settings that ensure the protection of your privacy are described in the Google privacy policy.
If you do not want Google to assign the data collected during video playback directly to your profile, you must log out of your account before playing the video. You can also completely prevent the plugins from loading on the page using the appropriate extensions for your browser, e.g. script blocking.
The information collected as part of cookies related to YouTube videos embedded on our pages is used by Google to ensure the correct and safe functioning of the widget, analysis and optimization in the field of services provided by YouTube, as well as for personalization and advertising.
Remember that by playing recordings available on YouTube, you use the services provided electronically by Google LLC. Google LLC is an independent entity independent of us providing electronic services to you. Details of YouTube’s terms of use, including privacy, can be found in documents shared directly by YouTube:
- terms of service: https://www.youtube.com/t/terms
- privacy policy: https://policies.google.com/privacy
Do we track your behavior in our store?
Yes, we use Google Analytics, Google AdWords and Facebook Custom Audiences tools, which are associated with collecting information about your activities in our store. These tools have been described in detail as part of the question about third parties cookies, so we will not repeat this information here.
Do we target you with targeted ads?
Yes, we use Facebook Ads and Google Ads, in which we can target ads to specific target groups defined on the basis of various criteria such as age, gender, interests, profession, work, activities previously undertaken in our store. These tools have been described in detail as part of the question about third parties cookies, so we will not repeat this information here.
How can you manage your privacy?
The answer to this question is found in many places of this privacy policy when describing individual tools, behavioural advertising, consent to cookies, etc. However, for your convenience, we have collected this information again in one place. Below you will find a list of options for managing your privacy.
- Cookie settings in your browser
- browser plugins supporting cookie file management, e.g. Ghostery
- additional cookie management software
- incognito mode in a web browser
- behavioral advertising settings, e.g. youronlinechoices.com
What are server logs?
Using the store involves sending queries to the server on which the store is hosted. Each query directed to the server is saved in server logs.
Logs include, among others your IP address, server date and time, information about the web browser and operating system you use. Logs are saved and stored on the server.
The data saved in the server logs are not associated with specific people using the site and are not used by us to identify you.
Server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone except persons authorized to administer the server.
Is there anything else you should know about?
As you can see, the subject of personal data processing, the use of cookies and management of privacy in general is quite complicated. We have made every effort to ensure that this document provides you with the widest possible knowledge in matters important to you. If anything is unclear to you, you want to learn more or just talk about your privacy, write to us at joanna@heartfelt.pl.