FULL PRIVACY POLICY
Valid from June 27, 2024
§ 1 GENERAL INFORMATION
At Wonna Run, accessible at wonnarun.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by Wonna Run and how we use it.
The privacy policy of the wonnarun.com website and online store does not constitute a source of obligations for the website Users. It is for informational purposes only and does not constitute a contract or regulations.
In the event of any discrepancies between this Privacy Policy and consents to the processing of personal data granted by a natural person, the legal basis for determining the scope of the Administrator’s activities are voluntarily expressed consents or legal provisions that apply to a given factual situation.
§ 2 PERSONAL DATA ADMINISTRATOR
The administrator of your personal data is Szymon Koncewicz, conducting a project under the name Wonna Run.
In all matters related to the protection of personal data, please contact me at the above address or via the e-mail address: contact@wonnarun.com.
You can also send to the above address a request to provide information about what data I have about you and for what purposes I process it.
The Administrator informs that it stores correspondence for statistical purposes and to improve the help system in the field of GDPR, as well as in the field of complaint resolution. Addresses and data collected in this way will not be used for communication for purposes other than processing the notification, in particular they will not be used for marketing purposes or passed on to third parties.
In the event of contact with the Administrator in order to perform specific activities (e.g. submitting a complaint, making a return), the Administrator may again ask the person to provide data, including personal data, e.g. name, surname, residential address, e-mail address. -mail, in order to confirm her identity and enable return contact in a given matter and perform the requested action. Providing this data is not obligatory, but may be necessary to perform activities or obtain information that interests a given person.
If you have given additional consent to the use of cookie technology, my trusted partners may also be the administrators of data obtained on the basis of your activity on the Internet.
§ 3 OBTAINING DATA AND THE PURPOSE OF THEIR PROCESSING
I process personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, ( hereinafter referred to as: GDPR) and other provisions of the law on the protection of personal data currently in force at the time of processing of specific data.
Pursuant to the content of the indicated legal acts, personal data is considered to be information about an identified or identifiable natural person (hereinafter: “Personal Data”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, the economic, cultural or social identity of the individual.
I assure you that the data obtained from you is confidential, secure and processed only when necessary. I process data in accordance with the law, in a reliable and transparent manner for the person affected by this process. I process only such data and only the content that is necessary for a legally justified purpose, i.e. the reason for processing. Personal data is collected with due care and adequately protected against access by unauthorized persons. I use appropriate and adequate security measures to protect personal data against accidental loss and unauthorized access, use, change or disclosure. I store personal data in a way that allows identification of the data subject for no longer than necessary for the purposes for which the data are processed.
The Administrator obtains information about Users’ personal data in the following way:
a) by making a purchase in the Online Store by the Customer;
b) by registering a Customer Account;
c) by voluntary subscription to the newsletter service;
d) by posting an opinion about the product;
e) by entering a comment on the Website;
f) by voluntarily entering information in the contact form or e-mail;
g) by sending a complaint, application, inquiry or other letter;
h) by voluntarily entering information in an e-mail sent in connection with the desire to establish cooperation;
i) through cookies, pixels or similar internet technologies.
I would like to inform you that the purpose and scope of data processed by the Administrator results from the consent of the Website Visitor or legal provisions and, in selected cases, is clarified as a result of actions taken by these persons on the website or within other communication channels.
Providing personal data is voluntary, but necessary in order to use certain functionalities of the website (e.g. make a purchase, subscribe to the newsletter or use contact forms).
Your personal data is obtained by the Administrator for the following purposes:
(Purpose of processing – Legal basis – Legitimate purpose, if any)
Keeping statistics – art. 6 section 1 letter f GDPR – Having information about the statistics of our activities, which allows us to improve our business activities.
Conducting marketing activities of own products and services without the use of electronic means of communication – Art. 6 section 1 letter f GDPR – Conducting marketing activities to promote the business.
Conducting marketing activities of own products and services using electronic means of communication. – art. 6 section 1 letter f GDPR, however, due to other applicable regulations, in particular the Telecommunications Law and the Act on the provision of electronic services, these activities are carried out only on the basis of consents (Article 6(1)(a) of the GDPR). – Conducting marketing activities promoting the business using e-mail addresses.
Handling notifications sent using the contact form, e-mail messages, complaints and other requests. – art. 6 section 1 letter a GDPR, – art. 6 section 1 letter c GDPR – Replying to reports and inquiries sent using the contact form or in another form, including storing sensitive applications and answers provided in order to maintain the principle of accountability. Handling applications, responding to consumer complaints. Pursuing and defending claims, including from third parties.
Posting a comment or opinion by a user of the Website – Art. 6 section 1 letter a GDPR – Establishing a dialogue with the user, consumer opinion research.
Customer Account Service – Art. 6 section 1 letter a GDPR, – concluding and implementing the Service Provision Agreement (Account) or taking action at the request of a future Customer before concluding it.
Conclusion and implementation of the Sales Agreement or the Digital Content Supply Agreement – Art. 6 section 1 letter b GDPR, – concluding and implementing the Agreement or taking action at the request of a future Customer before concluding it.
Archiving sales documents. – Art. 6 section 1 letter c GDPR – Fulfillment of legal obligations arising from regulations, e.g. tax and accounting, especially in the case of paid contracts.
E-mail contact. When contacting me via e-mail, including sending an inquiry via the contact form, you provide me with your e-mail address as the address of the sender of the message. In addition, you can also include other personal data in the message, such as your name and surname. Providing data is voluntary, but necessary to contact me.
In this case, your data is processed for the purpose of contacting you, and the basis for processing is Art. 6 section 1 letter a GDPR, i.e. your consent resulting from the desire to contact us. The legal basis for processing after the end of contact is the justified purpose of archiving correspondence for internal purposes (Article 6(1)(c) of the GDPR).
The content of the correspondence may be archived and I cannot clearly determine when it will be deleted. You have the right to request the history of your correspondence with me (if it was archived), as well as to request its deletion, unless its archiving is justified due to my overriding interests.
Newsletter – free. If you want to subscribe to the free newsletter, please provide the required data. Providing data is voluntary, but necessary to use the newsletter service.
The data provided when subscribing to the newsletter is used to send you a newsletter in which we inform you about information regarding online courses and webinars, interesting promotions and discounts, information regarding e-commerce, and current company activities. The legal basis for their processing is your voluntary consent expressed when subscribing to the newsletter.
In this case, your data is processed for the purpose of periodic sending of the newsletter, and the basis for processing is Art. 6 section 1 letter a GDPR, i.e. your consent resulting from your willingness to receive the service.
The data will be processed for the duration of the newsletter, unless you unsubscribe from receiving it earlier, which will result in permanent deletion of your data from the database. Moreover, you can correct your data saved in the newsletter database at any time, as well as request their removal by unsubscribing from the newsletter. You also have the right to transfer the data contained in Art. 20 GDPR.
The newsletter database is appropriately secured by the Administrator. The newsletter as a database is operated by an external entity. E-mail messages may contain links to hidden images (so-called tracking pixels), e.g. for e-mail opening statistics.
Opinions. If you want to add your opinion about a product on our website, you must complete the form and provide your e-mail address and name. Providing data is voluntary, but necessary to add a review. In this case, your data is processed to enable the process of posting an opinion, and the basis for processing is Art. 6 section 1 letter a GDPR, i.e. your consent resulting from the desire to place it on the Website.
The data will be processed for the duration of the opinion’s existence on the blog, unless you previously request the opinion to be deleted, which will result in your data being deleted from the database.
You can correct your data assigned to the review at any time, as well as request its deletion. You also have the right to transfer the data contained in Art. 20 GDPR.
§ 4 CATEGORIES OF PERSONAL DATA
The personal data administrator may process the following categories of personal data:
a) personal data provided for the purpose of using the newsletter, provided when using the contact form, sent via e-mail; whether provided when submitting complaints, grievances or requests, in particular: name and surname; e-mail adress; contact telephone number; address [street, house number, apartment number, postal code, city, country], bank account number;
b) personal data provided for the purpose of posting an opinion about the product: name and surname, e-mail address;
c) personal data provided to participate in competitions: name and surname; e-mail adress; contact telephone number; residential address [street, house number, apartment number, postal code, city, country];
d) other data, in particular obtained based on the Customer’s activity on the Internet, including those obtained via the Online Store or other communication channels with the Customer, using cookies and similar technologies.
§ 5 RECIPIENTS OF PERSONAL DATA
1. Your personal data may be processed by our partners and subcontractors, i.e. entities whose services we use to process data and provide services to you. To the best of our knowledge, all entities to which we entrust the processing of personal data guarantee the use of appropriate personal data protection and security measures required by law.
2. Your personal data The Administrator may transfer:
a) state authorities or other entities authorized under the law, in order to fulfill our obligations (Tax Office, ZUS, GIODO, Police, prosecutor’s office, President of the Office of Competition and Consumer Protection – if they request it from the Administrator);
b) in addition, the Administrator’s partners may participate in the processing of personal data to a limited extent, in particular those who technically help run the Online Store efficiently (e.g. they support us in sending e-mails, and in the case of advertising activities – also in marketing campaigns), service providers hosting or ICT services, entities handling electronic payments or payment card payments in the Online Store, companies that service software, support the Administrator in marketing campaigns, as well as providers of legal and advisory services and external accounting;
c) in addition, we may share fully anonymized data (data that cannot identify you) with entities with which we cooperate.
3. As part of marketing (advertising) activities, the Administrator uses the services of third parties who use cookies, pixels or marketing functions similar to cookies in the Online Store. The catalog of these entities is detailed in our Cookie Policy.
§ 6 ARCHIVING PERSONAL DATA
1. The Administrator will store your personal data only for as long as necessary for the purposes set out in this Privacy Policy and/or to meet legal and regulatory requirements. After this period, the Administrator will safely delete your personal data.
2. We store data for the periods indicated below:
Data related to the sales procedure, digital content supply contract: 8 years
Data for marketing purposes: In the case of data processing based on consent – until it is withdrawn. In the case of data processing on the basis of a legitimate purpose – until an objection is raised.
Data transferred using the contact form, e-mail: For a period of 3 years in order to maintain the principle of accountability.
Data contained in comments: In the case of data processing based on consent – until it is withdrawn. In the case of data processing on the basis of a legitimate purpose – until an objection is raised.
Data contained in opinions: In the case of data processing based on consent – until it is withdrawn. In the case of data processing on the basis of a legitimate purpose – until an objection is raised.
Personal data related to cookies and similar functions: Until these files are deleted using the website / browser / device settings (however, deleting files is not always the same as deleting Personal Data obtained through these files – then personal data will be deleted until an objection is raised )
Data provided during the complaint procedure and other procedures related to the Customer’s claims: 8 years
The remaining data category (except for data from cookies, more about which in our Cookie Policy): 5 years
3. In each case, personal data will also be stored when legal provisions (e.g. accounting or tax) oblige the Administrator to process them; we will store personal data longer in case the Customer has any claims against the Administrator, in order to pursue claims by the Administrator, or in order to pursue or defend against claims of third parties, for the limitation period specified by law, in particular the Civil Code.
4. Depending on the scope of personal data and the purposes of their processing, they may be stored for different periods. In each case, the longer period of storage of personal data is decisive.
§ 7 ACCESSING AND UPDATING PERSONAL DATA, COMPLAINTS
Pursuant to Art. 15 GDPR, you have the right to obtain information from the Personal Data Administrator whether your personal data is being processed.
If the Administrator processes your personal data, you have the right to:
a) access to personal data;
b) obtain information about the purposes of processing, categories of personal data processed, about the recipients or categories of recipients of this data, the planned period of storage of your data or about the criteria for determining this period, about your rights under the GDPR and about the right to lodge a complaint with the supervisory authority, about the source of this data, on automated decision-making, including profiling, and on the safeguards used in connection with the transfer of this data outside the European Union;
c) obtain a copy of your personal data.
In addition, you can request the correction of your personal data (Article 16 GDPR), the deletion of your personal data (Article 17 GDPR), object to the processing of your personal data (Article 21 GDPR) and, if technically feasible, request the transfer of your personal data. personal data of another organization (Article 20 of the GDPR).
Due to the right to be forgotten, the Administrator will update or delete your data, unless he or she has a legal obligation to retain it for the purposes of conducting business or complying with the law. In some cases, you have the right to request the restriction of the processing of your personal data (Article 18 of the GDPR). You can also contact the Administrator if you have any reservations regarding the method of collecting, storing or using personal data.
The Administrator tries to immediately consider all requests regarding the above-mentioned operations on personal data, but no later than within 30 days from receiving the request. Due to the complicated nature of the request, the Administrator has the right to consider your request within a period exceeding 30 days, of which he will inform you in advance.
The Controller aims to resolve complaints definitively, but if you are still dissatisfied with the response, you may submit a complaint to the data protection supervisory authority of your local data protection authority. In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office, who replaced the GIODO on May 25, 2018.
§ 8 AUTOMATED PROCESSING OF PERSONAL DATA
My website, like almost all other websites, uses cookies.
Cookies are small text information stored on your end device, e.g. computer, tablet or mobile phone, which can be read by my IT system (own cookies) or the IT system of third parties (third-party cookies).
I use cookies to observe and analyze traffic on the website.
Consent to cookies. When you first visit my website, you are shown information about my use of cookies. You can agree to them or not. Moreover, you can always change cookie settings in your browser or delete cookies altogether. Browsers usually manage cookie settings in different ways. In the auxiliary menu of your web browser you will find explanations on how to change cookie settings. However, it should be borne in mind that disabling or limiting the use of cookies may cause difficulties in using the website, as well as many other websites that use cookies.
If you want to additionally manage your privacy, here is a list of tools that may be helpful:
1. cookie settings in the web browser;
2. browser plug-ins supporting cookie management, e.g. ghostery,
3. additional software managing cookies,
4. incognito mode in the web browser,
5. Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout ,
6. Google Ads Settings: https://adssettings.google.com/
Own cookies. I use my own cookies to ensure the proper functioning of the website.
Third party cookies. My website uses third-party cookies to optimize its functioning
Google Analytics. I use Google Analytics, provided by Google Ireland Limited (registered number: 368047) with its registered office at: Gordon House, Barrow Street, Dublin 4, Ireland. Thanks to this, I create statistics and analyzes to improve the operation of the website.
Google Analytics automatically collects information about the use of my website. I have IP annomination turned on – I do not send personal data to the USA.
If you are interested in details related to data processing within Google Analytics, we encourage you to read the document developed by Google: https://support.google.com/analytics/answer/6004245 .
Google Ads – conversion and remarketing. We use the Google Ads tool provided by Google Ireland Limited (registered number: 368047) with its registered office at: Gordon House, Barrow Street, Dublin 4, Ireland. This allows us to draw attention to our content and offers through advertising materials on external websites. We analyze data from advertising campaigns in order to optimize advertising activities. Advertising materials are delivered by Google using the so-called “Ad Servers”. For this purpose, we use server cookies by means of which certain parameters for measuring the success of reaching recipients, such as the placement of advertisements or user clicks, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your device. For these cookies, for value analysis purposes, the following are usually stored: a unique cookie identifier, the number of impressions per ad placement (frequency), the last impression (relevant for conversion after display) and opt-out information (marking that the user does not wish to to be further included). Cookies allow Google to recognize your web browser. We do not collect or process any personal data on the basis of the above-mentioned advertising measures. We do not obtain other data and cannot identify users based on the information obtained. Due to the marketing tools used, your browser automatically establishes a connection to the Google server. Even if you are not registered with any Google service or are not logged in, it is possible that network providers may collect and store your IP address.
We also use the remarketing tool in Google Ads, which allows us to present users of our website with advertisements based on their interests from other websites belonging to the Google advertising network. For this purpose, Google stores cookies in the browsers of users who visit specific Google services or websites in the Google Display Network to uniquely identify the web browser on a specific device.
We encourage you to read the documents regarding GDPR and Google Ads: https://ads.google.com/intl/pl_pl/home/faq/gdpr/ .
Facebook Pixel. We also use marketing tools available on Facebook and provided by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. As part of these tools, we direct ads to you on Facebook. We carry out activities in this area based on your consent to advertising cookies.
In order to target you with advertisements personalized in terms of your behavior on our Website, we use Pixel Facebook, which automatically collects information about your use of our Website in terms of pages viewed.
We do not provide personal data. The information collected as part of Facebook Pixel is anonymous, i.e. it does not allow us to identify you. They only allow us to obtain information about what actions have been taken on our Website. However, we would like to point out that Facebook may combine this information with other information about you collected as part of your use of the Facebook website and use it for its own purposes, including marketing. Currently, Facebook Pixel also affects Instagram data. Such Facebook activities are no longer dependent on us, and you can find information about them directly in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation . You can also manage your privacy settings from your Facebook account.
Social tools. The website uses plug-ins and other social tools provided by social networking sites such as Facebook, Instagram, Twitter, LinkedIn, YouTube and TikTok.
By displaying a page containing such a plug-in, your browser will establish a direct connection to the servers of social networking site administrators (service providers). The content of the plug-in is transferred by the given service provider directly to your browser and integrated with the website. Thanks to this integration, service providers receive information that your browser has displayed my website, even if you do not have a profile with a given service provider or are not currently logged in to it.
If you have logged in to one of the social networking sites, the service provider will be able to directly assign your visit to my website to your profile on a given social networking site.
The purpose and scope of data collection and its further processing and use by service providers, including the possibility of contact and your rights in this regard and the possibility of making settings to protect your privacy, are described in the privacy policy of individual service providers.
Facebook – https://www.facebook.com/legal/FB_Work_Privacy
Twitter – https://twitter.com/en/privacy
YouTube – https://support.google.com/youtube/answer/2801895?hl=pl
Instagram – https://help.instagram.com/519522125107875?helpref=page_content
TikTok – https://www.tiktok.com/legal/privacy-policy
LinkedIn – https://www.linkedin.com/legal/privacy-policy
If you do not want social networking sites to assign the data collected during your visit to my website directly to your profile on a given website, you must log out of this website before visiting my website. You can also completely prevent plug-ins from being loaded on the website by using appropriate extensions for your browser, e.g. script blocking.
§ 9 CHANGES TO THE PRIVACY POLICY
This Privacy Policy version 1.0 is effective from June 27, 2024.
The Administrator declares that he has the right to make changes to this document. The Administrator undertakes to inform Users about any changes in advance, allowing them to read the content of the amended document, e.g. by placing the uniform text of the Privacy Policy on the main page of the Website.