Collection and use of personal data

1. ALD Studio ul. Wrocławska 80/73, 30-017 Kraków NIP: 5130202638 (hereinafter the Administrator) limits the collection or use of Users' data to a minimum in order to correctly display and use the Services. In accordance with the provisions, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of data, and repealing Directive 95/46 / EC (hereinafter GDPR) .
2. The administrator is not obliged to appoint a Personal Data Inspector. If such an obligation arises in the future - we will inform you immediately.

Purposes of processing personal data

1. Personal Data means information about an identified or identifiable natural person (hereinafter referred to as: "Personal Data").
2. The data controller processes Personal Data in order to provide the following services:
  1. Providing ALD Studio software through which you can sell online.
  2. Designing and implementing individual graphic creations of your products.
  3. Design and implementation of modification and development of www software.
  4. Brokerage and legal protection.
  5. Mediation of marketing, positioning and promotion.
3. Personal Data may be used for direct marketing in order to adapt advertising content. The data controller does not make automated decisions in relation to the Customer, referred to in Article 22 (1) and (4) of the GDPR Regulation.
4. The administrators of personal data entrusted for processing, in particular data entrusted by customers running online stores via the ALD Studio software, are individual customers.
5. All data provided by the Customer are considered confidential. The data collected via contact forms are used for commercial purposes.
The administrator takes special care to protect the interests of data subjects, and in particular ensures that the data collected by him are:
  1. Processed lawfully for the data subject.
  2. Collected for specific purposes and not further processed in a manner inconsistent with those purposes.
  3. Kept in an identifiable form.
  4. Processed in a manner ensuring appropriate security of Personal Data, including protection against unauthorized or unlawful processing and accidental loss.

Legal basis for the processing of personal data

1.The Customer's Personal Data are processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / WE (Journal of Laws UE.L. No. 119, p. 1) (hereinafter referred to as: "Ordinance GDPR ").
2. The transfer of data is voluntary in order to conclude a contract with ALD Studio, to receive a commercial offer or promotional and marketing materials.
3. The customer has the right to:
  1. Transferring Personal Data that has been provided to the Administrator and which are processed in an automated manner, and the processing is based on consent or on the basis of a contract, e.g. to another administrator.
  2. Access to Personal Data.
  3. Request for rectification and processing restrictions.
  4. Withdrawal of any consent given to the Administrator at any time, but the withdrawal of consent does not affect the processing carried out by the Administrator in accordance with the law before its withdrawal.
  5. To object to the processing of Personal Data concerning him, carried out in order to implement the legitimate interests of the Administrator or a third party, including in particular processing for marketing purposes.
4. The basic basis for processing customer data is:
  1. Concluded contract for the provision of services or taking action at the request of the data subject, before concluding this contract (Article 6 (1) (b) of the GDPR Regulation).
  2. Accounting regulations and related legal obligations (Article 6 (1) (c) of the GDPR).
  3. Legally legitimate interest in profiling customers for marketing purposes (Article 6 (1) (f) of the GDPR Regulation).
  4. A legitimate interest consisting in recording calls with our customer service office for evidence purposes and to improve the quality of services provided (Article 6 (1) (f) of the GDPR Regulation),
  5. A legitimate interest in collecting data for statistical and analytical purposes, which allows us to optimize our website and the services we provide (Article 6 (1) (f) of the GDPR Regulation).

Period of personal data storage

1. Personal Data may be stored for the period of using our services, or when:
  1. The legal obligation that obliges us to process your Personal Data ceases to bind us.
  2. In the case of marketing activities - until the Customer objects.
  3. If the processing of Personal Data depends on the consent of the Client, Personal Data may be processed until it is withdrawn.
  4. The possibility of pursuing any claims related to our cooperation by either party will cease.
  5. We will store Personal Data longer in the event that the Customer has any claims against the Administrator, in order to pursue claims by the Administrator, or to assert or defend against claims of third parties, for the period of limitation specified by law, in particular the Civil Code.
2. Depending on the scope of Personal Data and the purposes of their processing, they may be stored for a different period. In each case, the longer period of storage of Personal Data is decisive.

Personal data protection

1. The administrator, taking into account the context and purposes of processing, applies appropriate technical and organizational measures. Providing information on the technical and organizational measures used to ensure the protection of Personal Data processing outside.
2. The Administrator provides appropriate technical measures to prevent the acquisition and modification of Personal Data sent electronically by unauthorized persons:
  1. Securing the data set against unauthorized access.
  2. SSL certificate on all pages created by ALD STUDIO, where Personal Data is provided.
  3. Encryption of data used to authorize a person using the functionality of the ALD STUDIO administration panel

Sharing and entrusting the processing of personal data

1. The administrator performs the duties in accordance with the requirements set out in the GDPR and applicable provisions of national law.
2. The controller is responsible for and must be able to demonstrate compliance with the personal data processing rules ("accountability"). Including in particular:
  1. Taking into account the nature, scope, context and purposes of processing as well as the risk of violating the rights or freedoms of natural persons with different probability and seriousness of the threat.
  2. The administrator implements appropriate technical and organizational measures to ensure that the processing takes place in accordance with the GDPR;
  3. Implements an appropriate personal data protection policy.
  4. Designates the Data Protection Officer, if such a requirement arises in accordance with Art. 37 GDPR.
3. Personal Data Personal data must be:
  1. Processed lawfully and in a transparent manner for the data subject.
  2. Collected for specific, explicit and legitimate purposes.
  3. Collected adequately, according to what is necessary to achieve the goals.
  4. Stored in a form that permits identification of the data subject for no longer than is necessary for the purposes for which the data are processed.
  5. Processed in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing as well as accidental loss, destruction or damage.