Privacy Policy

Dear User,

This document defines the principles by which the personal data of persons using the website are protected. NOBONOBO (next: „Service”).

The Privacy Policy describes the type of Personal Data collected from the Website User, the method of collecting, using, storing and possibly sharing them, and also describes what rights you have in relation to the processing of personal data.

The Administrator is committed to protecting the privacy of Website Users. To this end, the Administrator makes every effort to ensure the protection of personal data provided by Website Users in connection with their use of the Website, making purchases in the online store, and using its functionalities, including the Professional Zone.

Administrator Yours personal data Is:

KAZA DESIGN limited liability company with its registered office in Łodygowice, address: Żywiecka 212, 34-325 Łodygowice, KRS: 0000381485, NIP: 5532486891, REGON: 241808110

PURPOSES AND BASES OF PROCESSING

1. Agreement

In the event of contact for the purpose of concluding a contract for the provision of services electronically or a contract for the sale of products via the Website, we process your data in order to take on Your request for action before concluding a contract, in particular, creating a user account, presenting information about the functionalities of the Website, or enabling the use of its services (basis under Article 6 paragraph 1 letter b of the GDPR). The data will be processed for the period necessary to take action at your request. If the contract is not concluded, the data will be deleted after this period, whereas if the contract is concluded, the data will be processed for the duration of the contract and the limitation period for claims arising from the contract on the basis of the Controller's legitimate interest in defending and pursuing claims (Article 6 paragraph 1 letters b and f of the GDPR).

In the event of concluding a contract with you, your data will be processed:

and) for the purpose of its conclusion and execution – including maintaining a user account, enabling the use of the Website’s functionalities, making purchases in the online store, using the Professional Zone and contact related to the performance of the contract (basis of Article 6 paragraph 1 letter b of the GDPR);

b) in order to provide the service electronically (basis under Article 6(1)(b) of the GDPR);

c) in order to carry out the complaint process regarding the services provided by the Administrator and ensuring proper user service (basis under Article 6 paragraph 1 letter b and c of the GDPR);

d) in order to fulfill the legal obligations incumbent on the Administrator including tax obligations arising from the provisions of the Civil Code, GDPR, compliance with the information obligation (basis of Art. 6 sec. 1 letter c of the GDPR);

e) for archival (evidence) purposes to secure information in the event of a legal need to prove facts, based on the legitimate interest of the Controller (basis in Art. 6 sec. 1 letter f of the GDPR), which is the archiving of documentation,

f) in order to determine, pursue or defend against any claimsand, on the basis of the legitimate interest of the Controller (basis under Article 6 paragraph 1 letter f of the GDPR), which is the establishment, pursuit and defense against claims,

g) for the purpose of direct marketing of own services on the basis of the legitimate interest of the Controller (basis in Article 6 paragraph 1 letter f of the GDPR), which is direct marketing of own services,

h) in order to match advertising and marketing content to user preferences based on your consent and the legitimate interest of the Controller (basis under Article 6 paragraph 1 letters a and f of the GDPR), which is to adapt the categories of offers or individual offers based on your activity.

2. Commercial information

If you have given your consent, your personal data will be processed to send commercial information regarding services, promotions and offers based on your consent and the legitimate interest of the Controller, which is the direct marketing of its own services (basis of Article 6 paragraph 1 letters a and f of the GDPR).

3. Contact form

We process the data you provide in the contact form in order to process the application and answer the question, based on our legitimate interest (basis under Article 6 paragraph 1 letter f of the GDPR), which is to correspond with users of the Website and provide them with answers to questions.

4. Conducting traditional and e-mail correspondence

If you send e-mail or traditional correspondence to the Administrator, which is not related to the provision of services or the performance of another contract, the personal data contained therein are processed in order to process a request or inquiry submitted in correspondence.

In such a case, the basis for processing is the Controller's legitimate interest (Article 6, paragraph 1, letter f of the GDPR), which consists in conducting correspondence and handling requests and inquiries in connection with the business activity performed. Providing personal data required to process the request is mandatory.

5. Telephone contact

In the event of your contact by telephone, in matters that are not related to the provision of services to you or the performance of another contract, the personal data provided by you are processed in order to process a request or inquiry submitted.

The basis for processing in such a case is the Controller's legitimate interest (Article 6, paragraph 1, letter f of the GDPR), which consists in handling requests and inquiries in connection with the performance of business activities. The Controller may request that you provide the data necessary to process the request; in such case, the provision of such data is mandatory for the processing of the request.

6. Employee contact, Customer or a third party

If you contact us by phone or email in connection with a contract concluded between the Controller and your employer, the entrepreneur you represent or another entity, or in connection with activities undertaken at their request before concluding such a contract, we process the data obtained in this way. in order to perform the concluded contract and take actions at his request before concluding the contract (basis under Article 6(1)(b) of the GDPR), as well as for the purpose of pursuing and defending against claims, which constitutes the legitimate interest of the Controller consisting in the protection of its rights (basis in Article 6 paragraph 1 letter f of the GDPR).

If you contact us on a matter other than the concluded contract, for example to obtain information on the functioning of the Website, services provided, cooperation or other issues related to the Controller's activities, we process your data in order to answer a question or resolve a matter, with which you contact us. The basis for processing is the Controller's legitimate interest in providing an answer to a question or resolving a matter in connection with its business activities (basis under Article 6(1)(f) of the GDPR).

7. Other processing bases

Your data may also be processed for analytical and statistical research purposes satisfaction, which constitutes the legitimate interest of the Controller (basis: Art. 6 sec. 1 letter f of the GDPR).

If you are a member of the Administrator's bodies, we process your data in for the purpose of exercising code and statutory rights and obligations in the field of supervision and control (basis under Article 6 paragraph 1 letter c of the GDPR), and for the proper functioning of the company on the basis of the legitimate interest of the Controller (basis in Article 6 paragraph 1 letter f of the GDPR), which is the proper functioning of the company.

DATA RECIPIENTS

1. Entrusting data processing and data sharing

We may share your personal data with entities whose services we use to process them, in particular companies providing e.g. legal, accounting, IT and hosting services, handling processes necessary for sending notifications, entities providing postal, courier, payment (including Autopay), analytical and marketing services (including Google and Meta), as well as entities handling debt settlements.

The Administrator will also share your data when it is necessary due to a legal obligation.

In connection with the fulfillment of orders placed through the Website, the Administrator may share your personal data with entities responsible for payment processing and the delivery of ordered products, to the extent necessary for the proper performance of the sales contract. Entities to which the GDPR applies, after obtaining the personal data of Website users, are obligated to fulfill their obligations under the GDPR and other generally applicable laws, including ensuring the rights of data subjects.

2. Transfer of data to third countries

The Administrator may entrust the processing of personal data to a third country and send them to external entities cooperating with the Administrator and acting on behalf of the Administrator for the purposes described above.

DATA STORAGE PERIOD

The period for which we may process your personal data depends on the legal basis that constitutes the legal basis for processing personal data by the Controller. We will never process personal data for a period longer than required by the aforementioned legal basis. Therefore, we hereby inform you that:

1) if the Controller processes personal data based on consent, the processing period lasts until you withdraw your consent,

2) if the Controller processes your personal data obtained on the basis of your request for the Controller to take action before concluding a contract or other specific actions, the processing period lasts for the time necessary to take action at your request,

3) if the Controller processes personal data because it is necessary to perform the contract concluded with the Controller, the processing period lasts for the duration of the contract and then, to the extent necessary to establish, pursue or defend against claims, until the expiry of the limitation period,

4) if the Controller processes personal data on the basis of the Controller's legitimate interest, the processing period lasts until the aforementioned interest ceases (e.g. the limitation period for civil claims) or until the data subject objects to further processing – in situations where such an objection is legally possible,

5) if the Controller processes personal data because it is necessary due to applicable legal provisions, the periods of data processing for this purpose are specified in these provisions,

6) in the event of deletion of a user account, including an account in the Professional Zone, personal data will be deleted in accordance with applicable law and the principles set out in this Policy, except for data whose further processing is necessary to fulfill the legal obligations of the Controller or to establish, pursue or defend against claims.

RIGHT

We would like to inform you that you are entitled to:

and) right of access to your data and receive a copy of it

b) law to be corrected (correct) your data

c) law to delete data.

If you believe there is no basis for us to process your data, you can request that we delete it.

d) processing restrictions data

You can request that we limit the processing of your personal data only to storing it or performing activities agreed with you, if you believe we have incorrect data about you or we are processing it without justification; or you do not want us to delete it because you need it to establish, pursue or defend legal claims; or for the duration of your objection to data processing.

e) the right to object regarding data processing:

„Marketing” objection – you have the right to object to the processing of your data for direct marketing purposes. If you exercise this right, we will cease processing your data for this purpose.

Objection due to a specific situation – You have the right to object to the processing of your data based on a legitimate interest for purposes other than direct marketing, as well as when processing is necessary for us to perform a task carried out in the public interest or to exercise official authority vested in us. You should then indicate the specific situation that, in your opinion, justifies us discontinuing the processing covered by your objection. We will cease processing your data for these purposes unless we demonstrate that the grounds for processing your data override your rights or that your data is necessary for us to establish, pursue, or defend legal claims.

f) the right to data portability:

You have the right to receive your personal data that you provided to us under a contract or consent in a structured, commonly used, and machine-readable format (e.g., .csv format). You can also request that we transmit this data directly to another entity.

g) the right to lodge a complaint with the supervisory authority

If you believe that we are processing your data unlawfully, you may file a complaint with the President of the Personal Data Protection Office.

h) the right to withdraw consent to the processing of personal data

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing consent will not affect the lawfulness of processing based on your consent before its withdrawal.

If you wish to exercise the above rights, please contact us in person, by post or e-mail using the following details:

KAZA DESIGN limited liability company with its registered office in Łodygowice, address: Żywiecka 212, 34-325 Łodygowice
e-mail: sprzedaz@nobonobo.pl
tel. 663 856 151

VOLUNTARY PROVISION OF PERSONAL DATA

Providing data in connection with the handling of the request and submitted inquiry, presented by telephone, traditional correspondence or e-mail, is necessary to handle the question and answer it and to resolve the matter, and failure to provide such data will result in the inability to send a response or resolve the matter.

If you contact us to ask a question or to raise a matter that needs to be resolved, providing your contact details is voluntary, but necessary to answer the question or resolve the matter.

Providing the data indicated as mandatory in the contact form is necessary to process and answer the question, and failure to provide it will result in the inability to send the inquiry.

Providing data in connection with the conclusion, implementation, and performance of a contract for the provision of electronic services is voluntary, but necessary to create a user account and use the Website's functionalities. Failure to provide this data will result in the inability to conclude a contract with the Administrator and use the services provided electronically.

We may also request that you provide your data if it is necessary to comply with our legal obligations. In such cases, providing your data is mandatory.

Providing the data required to send commercial information regarding services, promotions, and offers is voluntary, but necessary to send such information. Failure to provide this data will prevent the sending of commercial information regarding products, services, promotions, and offers.

AUTOMATED DECISION MAKING

We do not make automated decisions about you and you are not subject to profiling.