Privacy policy (GDPR)

GENERAL PROVISIONS

This Privacy Policy (hereinafter referred to as the " Privacy Policy ") sets out the rules for the processing of personal data obtained via the website https://scale23.eu(hereinafter referred to as the "Online Store") and is addressed to users of the Online Store. The owner of the Online Store and at the same time the data administrator is /, address: , registration data Natural person running a business: entered into CEIDG under the number 32.40.Z, NIP: , REGON: , e-mail address: contact@scale23.eu, telephone number contact number: (charge as for a standard call - according to the relevant operator's price list), (hereinafter referred to as: "Administrator"). Contact with the Administrator is possible by letter, telephone or e-mail.

Personal data collected by the Administrator via the Online Store are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").

The Administrator attaches great importance to protecting the privacy of Online Store users and the security of processing their personal data.

Capitalized terms used in this privacy policy have the meaning given to them in the Regulations of the Online Store available at https://scale23.eu.

PURPOSES, LEGAL BASIS OF PROCESSING, CATEGORIES OF PERSONAL DATA
1. CONSENT
  The administrator processes your data based on your consent.
  The Administrator processes your data on the basis of consent also if you consent to the use of cookies other than those necessary to provide the service provided electronically, including the installation of cookies by third parties and the transfer of the above-mentioned. entities of data collected via these cookies. You can at any time withdraw your consent to the installation of cookies other than those necessary to provide the service provided electronically, in the web browser settings on the device you are using or from the Online Store level in the footer of the website by clicking on the "Change privacy settings" link. Withdrawal of consent does not affect the legality of the processing of data collected via cookies until the consent is withdrawn. More information on the processing of personal data collected via the Administrator's own cookies and installed by third parties based on consent, as well as the possibility of withdrawing consent, can be found in the Cookie Policy of Scale23 - For The Modellers.
  We use tools that allow us to display personalized ads, such as ads in the Google search engine, remarketing, ads displayed on YouTube and on social media. Dedicated ads will be displayed if the phrase you entered in the search engine matches the list of phrases we set in the campaign; and also if the Google algorithm matches you based on the so-called targeting based on the websites you visit, videos you watch on YouTube, etc. You can withdraw your consent to our use of the above. tools, including the Google Marketing Platform from cookies. You can do this on the Google Marketing Platform opt-out page or on the Network Advertising Initiative opt-out page.
2. CONCLUSION AND PERFORMANCE OF A CONTRACT
  The Administrator processes your personal data in order to take actions at your request aimed at concluding a contract with the Administrator or when it is necessary to perform an already concluded contract (Article 6(1)(b) of the GDPR), including, among others, . when necessary for:

concluding contracts with the Administrator for the provision of services by electronic means, referred to in the Regulations of the Online Store, related to the creation of an Account in the Online Store and its implementation,
concluding a Goods Sales Agreement with the Administrator and its implementation,
sending notifications to the Administrator via e-mail or contact forms available on the Website.

LEGAL OBLIGATION
The Administrator processes your personal data in order to fulfill the legal obligation imposed on the Administrator (Article 6(1)(c) of the GDPR).
In practice, this means the need to process your personal data in connection with the fulfillment of obligations arising from legal provisions, in particular obligations arising from tax regulations, the Accounting Act, the Act on the provision of electronic services, the Civil Code, the Act on Consumer Rights. LEGITIMATE INTEREST OF THE ADMINISTRATOR OR A THIRD PARTY
The Administrator may process your personal data if it is necessary for the purposes of the legitimate interests pursued by the Administrator or by a third party (Article 6(1)(f) of the GDPR), including, among others, . in the following cases:

Customer relationship management
For internal purposes, the Administrator analyzes the current cooperation with you in order to prepare summaries of analyzes and sales statistics. Based on the above information The Administrator obtains knowledge that is helpful in preparing offers, establishing price lists, better matching the offer to your interests, undertaking better targeted marketing activities and improving the quality level of the services provided.
Pursuing claims by the Administrator and defending against claims against the Administrator.
In the event of non-performance or improper performance of the contract concluded with the Administrator, the Administrator may pursue claims from you under applicable law, e.g. demand payment for the goods sold.
If you submit claims against the Administrator, the Administrator processes your personal data in order to defend against such claims.
Enabling customers to make payments via payment services
If you choose the online payment method, the Administrator transfers your personal data to the payment service provider in order to enable you to make a payment using the method you selected (payment card or transfer).
Contacting the Administrator
You can contact the Administrator via e-mail or online contact forms available on the Website. In such a case, we may process your personal data in order to communicate with you and consider the matter initiated by you.
Storing data to ensure accountability, i.e.
to prove compliance with the regulations regarding the processing of personal data.
Operation of the Website
The Administrator uses necessary cookies for the proper operation of the Website. The use of necessary cookies may involve the processing of your personal data based on the Administrator's legitimate interest in operating the website.
Creating recipient databases
If you are a logged in Customer, your e-mail address stored in the Administrator's mailing database may be sent to Facebook Ireland Ltd. in order to create a group of advertising recipients using this e-mail address. When using this feature, the email address is hashed before being sent to Facebook and Instagram to create an audience. The email address will be used in the matching process conducted by Facebook and Instagram. Facebook and Instagram do not share your email address with third parties or other advertisers and delete your email address immediately after the matching process is completed. Facebook and Instagram have implemented processes and procedures to ensure the confidentiality and security of the e-mail address sent to it and the set of Facebook user identifiers constituting the recipient group created using the e-mail address, including by using technical and physical security measures.
Profiling
Based on the information about you collected in the course of previous cooperation (i.e. information on the history of purchases in the Online Store, the history of your activities in the Online Store, the Administrator displays personalized information to you on the Online Store website https://scale23.eu ads.
Marketing of products and services offered by the Administrator
The Administrator sends you marketing information regarding goods and services offered by the Administrator, provided that you have previously consented on the website to telephone contact (SMS messages) or to contact via e-mail for direct marketing purposes.
The administrator does not send spam, i.e. unsolicited commercial information.
The Administrator does not provide any personal data, in particular e-mail addresses or telephone numbers, to third parties in order to enable them to undertake direct marketing activities regarding goods and services.

RECIPIENTS OF PERSONAL DATA
In connection with the processing of your personal data, for the purposes referred to in section I Privacy Policy The Administrator may share your data with the following recipients or categories of recipients:

Entities providing services: transport, postal, logistics, payment, banks where the Administrator has a bank account in connection with transferring amounts to your account through it in the event of return of goods, complaints, overpayments, legal representatives representing the Administrator, entities responsible for delivering files cookies - detailed information on this subject can be found in the Cookie Policy of Scale23 - For The Modellers.

PLANNED DATA STORAGE PERIOD
Personal data is stored for the period necessary to achieve the purposes indicated in section And this Privacy Policy.

In the case of data processed on the basis of consent (applies to cookies) until its withdrawal or the expiry of the storage periods of individual cookies indicated in the Scale23 - For The Modellers Cookie Policy if it occurs before the consent is withdrawn.
In the case of data processed for the purpose of concluding and performing a contract (part I.2 of the Privacy Policy), the Administrator processes personal data until the expiry of the limitation period for civil claims arising therefrom.
In the case of data processed for the purpose of fulfilling a legal obligation (part I.3 of the Privacy Policy), the data processing period results from legal provisions.
In the case of data processed to pursue the legitimate interest of the Administrator or a third party (part I.4 of the Privacy Policy), the personal data storage period varies depending on the specific purpose of processing:

In the case of data processing for the purpose of managing customer relations, the data is processed until you raise an objection pursuant to Art. 21 section 1 of the GDPR in connection with your particular situation, but no longer than you use the services of the Administrator or remain in commercial relations with the Administrator;
In the case of processing personal data for the purpose of pursuing claims by the Administrator or in order to defend against claims against the Administrator, the Administrator processes personal data for this purpose until the asserted claim is enforced or the claims expire, depending on which event occurs first.
In the case of processing personal data in order to secure claims related to the sale of goods, the Administrator processes personal data for an indefinite period of time, as long as you remain in commercial relations with the Administrator or there are unsatisfied claims of the Administrator against you.
In the case of processing personal data for accountability purposes, the Administrator processes personal data for the time necessary to document the fulfillment of legal requirements and enable control of their fulfillment by authorized public authorities.
In the case of data processing for profiling purposes, the data is processed until you raise an objection pursuant to Art. 21 section 2 of the GDPR, but no longer than you use the Administrator's services or remain in business relations with the Administrator.
In the case of processing personal data for the purpose of marketing products and services offered by the Administrator, the Administrator processes personal data for this purpose until you withdraw your consent to sending commercial information to you via e-mail, SMS or object to the processing of personal data.

RIGHTS OF THE DATA SUBJECT

RIGHT TO ACCESS DATA
You have the right to access your data, including the right to obtain a copy of the data, including electronically.
RIGHT TO CORRECTION OF DATA
You have the right to request the rectification of incorrect data. personal data. You have the right to request that incomplete information be completed. personal data.
RIGHT TO DELETE DATA
You have the right to request that the Administrator delete your personal data if:

the data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
you object, due to your special situation, to the processing of your personal data by the Administrator based on the legitimate interest of the Administrator or a third party and there are no overriding legitimate grounds for processing.
you will object to the processing of your data for direct marketing purposes
Your personal data was processed unlawfully;
personal data must be deleted in order to fulfill the legal obligation provided for in European Union law or Polish law to which the Administrator is subject. However, the Administrator points out that this right is subject to significant limitations. The administrator will not be able to fulfill your request if further processing is necessary for:
the Administrator's fulfillment of a legal obligation requiring processing under EU or national law (e.g. the limitation period for tax liabilities related to the contract concluded between the Administrator and you has not yet expired, the period for storing accounting documents issued in connection with the contract concluded between the Administrator has not yet expired and you);
establishing, investigating or defending against claims.

RIGHT TO RESTRICT PROCESSING
You have the right to request restriction of the processing of your personal data if:

you question the accuracy of your personal data - for a period enabling the Administrator to check the accuracy of this data;
the processing is unlawful and you object to the deletion of the personal data and instead request the restriction of their use;
The administrator no longer needs personal data for processing purposes, but you need them to establish, pursue or defend claims;
you have objected, due to your special situation, to the processing of your personal data by the Administrator based on the legally justified purpose of the Administrator or a third party - until it is determined whether the legally justified grounds on the part of the Administrator override the grounds for the objection raised by you.

RIGHT TO TRANSFER DATA
You have the right to receive, in the form of a file in a commonly used format readable by computer programs, data provided by you, which the Administrator processes in an automated manner on the basis of a contract concluded with you or on the basis of your consent. You also have the right to request the abovementioned. file to another data administrator, if technically possible. RIGHT TO OBJECT
You have the right to object at any time - for reasons related to your particular situation - to the processing of your personal data based on the legally justified purpose of the Administrator or a third party (part I.4 of this Privacy Policy).
The administrator has the right to refuse to stop processing your data if he demonstrates:

the existence of compelling legitimate grounds for processing which override your interests or rights and freedoms or
existence of grounds for establishing, pursuing or defending claims

You have the right to object at any time if the Administrator processes your data for direct marketing purposes, including profiling.
The administrator, while respecting your right to privacy, gives you the opportunity to decide on your own about the scope of profiling applied to you in terms of displaying personalized advertisements. After logging in to your Account in the Online Store, in the "Privacy" tab, you can uncheck the "check-box", which will stop the Administrator from processing your data for this purpose. You can check the above again at any time. checkbox. COMPLAINT TO THE SUPERVISORY AUTHORITY
You have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw). VOLUNTARY PROVISION OF DATA

If you create an account in the Online Store as a consumer, it is necessary to provide the following data, i.e. e-mail address, account login password, name and surname, telephone number, street, house number, postal code, city. Providing the above data is voluntary, however, refusing to provide it makes it impossible to create an Account in the Online Store.
If you are creating an account in the Online Store as an entrepreneur (COMPANY), it is necessary to provide the following data, i.e. e-mail address, account login password, name and surname, telephone number, NIP number, name under which you run your business (Field: name companies), street, house number, postal code, city. Providing the above data is voluntary, however, refusing to provide it makes it impossible to create an Account in the Online Store.
When concluding a contract for the sale of goods, you can additionally provide a different delivery address than during registration. Providing the above data is voluntary.
If you agree to receive VAT invoices electronically, the Administrator will send them to the address provided when registering an account in the Online Store, but you can provide a different e-mail address at the stage of placing an order in the Online Store. Providing the above data is voluntary, however, refusing to provide it will result in invoices being sent by default to the e-mail address provided when creating an account in the Online Store.
If you place an order via the Online Store to collect the returned goods from you, the Administrator processes your data to the extent necessary to complete this contract, i.e. name, surname, telephone number, e-mail address, invoice or receipt number to which the returned goods relate, identification of the returned goods. goods, address from which the returned goods should be collected. You can also provide the bank account number to which the refund for the returned goods will be made. Providing the above data is voluntary, however, refusing to provide it makes it impossible to place an order and collect the returned goods from you via the returns form on the Online Store website.
If you want to submit a complaint related to the goods, you must provide the following personal data via the complaint form available in the Online Store: name, surname, company name (if applicable), correspondence address, contact telephone number, e-mail address, invoice number or receipt regarding the goods being complained about, marking of the goods being complained about. You can also provide the bank account number to which the refund will be made. Providing the above data is voluntary, however, refusing to provide it makes it impossible to submit a complaint via the complaint form on the Online Store website.
If you want to receive information about promotions, new products and discounts regarding the Administrator's offer by e-mail, you must consent to telephone contact and to sending commercial information to the telephone number within the meaning of Art. 2 points 2 of the Act of July 18, 2002 on the provision of electronic services for direct marketing purposes. Providing the above data is voluntary, however, refusing to provide it prevents the Administrator from contacting you by e-mail, .

SOURCES OF OBTAINING DATA
The administrator obtains your personal data directly from you. TRANSFER OF DATA TO THIRD COUNTRIES
If you accept cookies installed on the Website by third parties, data collected via these cookies may be transferred to third countries in accordance with the information provided in the Cookie Policy of Scale23 - For The Modellers COOKIES AND OTHER TRACKING TECHNOLOGIES
Detailed information about the Administrator's use of cookies can be found in the Cookie Policy of Scale23 - For The Modellers SECURITY OF PERSONAL DATA

The Administrator uses technical and organizational measures to protect personal data against disclosure to unauthorized persons, loss or damage, appropriate to the identified risk associated with data processing.
In order to prevent unauthorized persons from obtaining and modifying personal data sent by you during registration and logging in to your account in the Online Store, the Administrator ensures encryption of the connection to the Administrator's server using an SSL certificate.
The actions taken by the Administrator may turn out to be insufficient if you do not follow the security rules yourself. In particular, you should keep the login and password to the account in the Online Store confidential and not share them with third parties. The administrator will not ask you to provide them, except when logging in.
In order to prevent unauthorized persons from using your Account, you should log out each time you finish using the Online Store.
The privacy policy is valid from June 8, 2024.