Privacy policy

OF THE WWW.MEPMU.COM ONLINE STORE


§ 1 GENERAL PROVISIONS

  1. The controller of the personal data collected through the online store available at www.mepmu.com is Filip Drążkiewicz, conducting business under the business name Quantum Filip Drążkiewicz, entered into the Central Registration and Information on Business of the Republic of Poland (CEIDG), maintained by the minister responsible for the economy. The place of business and the correspondence address are: ul. Stawy 5, 02-467 Warsaw, Włochy District, VAT Identification Number (NIP): 6342370944, REGON: 146345912, e-mail address: contact@mepmu.com, telephone number: +48 502 196 912, hereinafter referred to as the "Controller", who is also the "Service Provider."
  2. Personal data collected by the Controller through the Website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the "GDPR."
  3. Any words or expressions written with initial capital letters in this Privacy Policy shall be understood in accordance with the definitions contained in the Terms and Conditions of the www.mepmu.com Online Store.

§ 2 TYPES OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION

1. PURPOSE OF PROCESSING AND LEGAL BASIS

The Controller processes the personal data of Users of the www.mepmu.com Store in the following cases:

1.1. Registration of an Account in the Store, for the purpose of creating an individual Account and managing that Account, pursuant to Article 6(1)(b) of the GDPR (performance of a contract for the provision of electronic services in accordance with the Store Terms and Conditions).

1.2. Placing an order in the Store, for the purpose of performing the Sales Agreement, pursuant to Article 6(1)(b) of the GDPR (performance of the Sales Agreement).

1.3. Using the Review System, for the purpose of obtaining the Customer's opinion regarding the Sales Agreement concluded with the Controller, pursuant to Article 6(1)(f) of the GDPR (the Controller's legitimate interest).

2. TYPES OF PERSONAL DATA PROCESSED

The User provides the following personal data, depending on the service used:

2.1. Account

  • First and last name
  • Residential address
  • E-mail address
  • Telephone number

2.2. Order

  • First and last name
  • Address
  • VAT Identification Number (NIP)
  • E-mail address
  • Telephone number

2.3. Review System

  • First and last name
  • E-mail address

3. PERSONAL DATA RETENTION PERIOD

The Controller stores Users' personal data:

3.1. Where the legal basis for processing is the performance of a contract, for as long as necessary to perform the contract and, thereafter, for a period corresponding to the limitation period for claims. Unless otherwise provided by specific legislation, the limitation period is six (6) years, and three (3) years for claims relating to periodic performance and claims related to conducting business activity.

3.2. Where the legal basis for processing is consent, until such consent is withdrawn and, after its withdrawal, for a period corresponding to the limitation period for claims that may be asserted by or against the Controller. Unless otherwise provided by specific legislation, the limitation period is six (6) years, and three (3) years for claims relating to periodic performance and claims related to conducting business activity.

4. While using the Store, additional information may be collected, in particular:

  • the IP address assigned to the User's computer,
  • the external IP address of the User's Internet service provider,
  • domain name,
  • browser type,
  • access time,
  • operating system type.

5. Upon granting separate consent, pursuant to Article 6(1)(a) of the GDPR, personal data may also be processed for the purpose of sending commercial information by electronic means or making telephone calls for direct marketing purposes, respectively in connection with Article 398(1) and (2) of the Electronic Communications Law of 12 July 2024, including communications resulting from profiling, provided that the User has given the relevant consent.

6. As part of the User's activity within the Store, profiling may take place for the purpose of selecting advertising content that is most relevant to the User.

7. Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that person's work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements. Profiling does not produce legal effects concerning the User nor does it similarly significantly affect the User's situation. Its sole purpose is to provide better-tailored marketing content and offers.

8. The Controller may also collect navigation data from Users, including information about links and references they choose to click on, as well as other activities undertaken within the Store. The legal basis for such processing is the Controller's legitimate interest (Article 6(1)(f) of the GDPR), consisting of facilitating the use of services provided electronically and improving the functionality of those services.

9. Providing personal data by the User is voluntary.

10. The Controller exercises particular care to protect the interests of data subjects and, in particular, ensures that the data collected are:

10.1. processed lawfully;

10.2. collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes;

10.3. factually accurate, adequate in relation to the purposes for which they are processed, and stored in a form that permits identification of the data subjects for no longer than is necessary to achieve the purposes of processing.

§ 3 DISCLOSURE OF PERSONAL DATA

  1. The personal data of Users are disclosed to service providers engaged by the Controller in connection with the operation of the Store, in particular to:

1.1. entities responsible for the delivery of Products;

1.2. payment system providers;

1.3. providers of customer review and survey systems;

1.4. the accounting office;

1.5. the hosting service provider;

1.6. the provider of software enabling the Controller to conduct its business activities;

1.7. entities providing mailing system services;

1.8. the provider of software necessary for the operation of the online store.

  1. Depending on the contractual arrangements and circumstances, the service providers referred to in Section 1 of this paragraph to whom personal data are disclosed either process such data exclusively on behalf of and under the instructions of the Controller (data processors) or independently determine the purposes and means of processing such data (independent data controllers).
  2. Users' personal data are stored exclusively within the territory of the European Economic Area (EEA), subject to § 5 Section 5 and § 6 of this Privacy Policy.
  3. Personal data may be transferred outside the European Economic Area (EEA), in particular to the United States, in connection with the Controller's use of analytical and marketing tools provided by third-party service providers (e.g. Google LLC and Meta Platforms Inc.).

Such transfers are carried out on the basis of the Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Article 46(2)(c) of the GDPR.

§ 4 RIGHT TO CONTROL, ACCESS, AND RECTIFICATION OF PERSONAL DATA

  1. The data subject has the right to access the content of their personal data, as well as the right to request its rectification, erasure, restriction of processing, data portability, to object to the processing of personal data, and to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
  2. The legal basis for the User's requests is as follows:

2.1. Right of access to personal data – Article 15 of the GDPR.

2.2. Right to rectification of personal data – Article 16 of the GDPR.

2.3. Right to erasure of personal data ("right to be forgotten") – Article 17 of the GDPR.

2.4. Right to restriction of processing – Article 18 of the GDPR.

2.5. Right to data portability – Article 20 of the GDPR.

2.6. Right to object – Article 21 of the GDPR.

2.7. Right to withdraw consent – Article 7(3) of the GDPR.

  1. In order to exercise any of the rights referred to in Section 2 above, the User may send an appropriate request by e-mail to: contact@mepmu.com.
  2. Where the User exercises any of the rights referred to above, the Controller shall comply with the request or refuse to comply without undue delay, and in any event no later than one (1) month from the date of its receipt.
  3. However, if—due to the complexity of the request or the number of requests received—the Controller is unable to comply with the request within one month, the Controller shall comply within a further two (2) months, informing the User within one month of receiving the request of the intended extension and the reasons for the delay.
  4. If the data subject considers that the processing of their personal data infringes the provisions of the GDPR, they have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).

§ 5 COOKIES

  1. The Controller's Website uses cookies.
  2. The installation of cookies is necessary for the proper provision of services through the Store's Website. Cookies contain information required for the proper functioning of the Website and also enable the preparation of general statistics regarding Website traffic.
  3. The Website uses two types of cookies: session cookies and persistent cookies.

3.1. Session cookies are temporary files that are stored on the User's device until the User logs out or leaves the Website.

3.2. Persistent cookies are stored on the User's device for the period specified in the cookie parameters or until they are deleted by the User.

  1. The Controller uses its own cookies in order to better understand how Users interact with the Website's content. These cookies collect information regarding the User's use of the Website, the type of website from which the User was redirected, the number of visits, and the duration of the User's visit to the Website. This information does not record any specific personal data of the User and is used solely for the purpose of compiling statistics concerning the use of the Website.
  2. The Controller also uses third-party cookies to collect general and anonymous statistical data through Google Analytics (the third-party cookie provider: Google LLC, with its registered office in the United States).
  3. Cookies may also be used by advertising networks, in particular the Google advertising network, in order to display advertisements tailored to the way in which the User uses the Store. For this purpose, they may retain information about the User's navigation path or the time spent on a particular page.
  4. The User has the right to decide on the access of cookies to their device by:

7.1. selecting the categories of cookies to which they consent immediately after entering the Store's Website and when the cookie notice is displayed;

7.2. changing the settings in their web browser. Detailed information on the available options and methods of managing cookies can also be found in the settings of the web browser software.

§ 6 ADDITIONAL SERVICES RELATED TO USER ACTIVITY IN THE STORE

  1. The Store uses so-called social media plugins ("plugins") provided by social networking services. When displaying the www.mepmu.com Website containing such a plugin, the User's web browser establishes a direct connection with the servers of Facebook, Instagram, Pinterest, YouTube, and Google.
  2. The content of the plugin is transmitted directly by the respective service provider to the User's browser and integrated into the Website. As a result of this integration, the service providers receive information that the User's browser has displayed the www.mepmu.com Website, even if the User does not have an account with the respective service provider or is not currently logged in. Such information (including the User's IP address) is transmitted directly by the User's browser to the server of the respective service provider (some of these servers are located in the United States) and stored there.
  3. If the User is logged into one of the above-mentioned social networking services, the respective service provider will be able to directly associate the User's visit to the www.mepmu.com Website with the User's profile on that social networking service.
  4. If the User uses a particular plugin, for example by clicking the "Like" or "Share" button, the relevant information will also be transmitted directly to the server of the respective service provider and stored there.
  5. The purpose and scope of data collection, as well as the further processing and use of such data by the respective service providers, together with contact details and information regarding the User's rights and the available privacy protection settings, are described in the privacy policies of the respective service providers:

5.1. Facebook: https://www.facebook.com/policy.php

5.2. Instagram: https://help.instagram.com/519522125107875?helpref=page_content

5.3. Pinterest: https://policy.pinterest.com/pl/privacy-policy

5.4. YouTube: https://www.youtube.com/intl/ALL_pl/howyoutubeworks/privacy/

5.5. Google: https://policies.google.com/privacy?hl=pl&gl=ZZ

  1. If the User does not wish social networking services to associate the data collected during their visit to the www.mepmu.com Website directly with their profile on the respective social networking service, the User should log out of that service before visiting the Website. The User may also completely prevent plugins from loading by using appropriate browser extensions, for example script-blocking extensions such as NoScript.
  2. The Controller uses remarketing tools on the Website, including Google Ads, which involves the use of cookies provided by Google LLC in connection with the Google Ads service. Through the cookie preference management mechanism, the User may decide whether the Controller may use Google Ads (third-party cookies provided by Google LLC, with its registered office in the United States) in relation to the User.

§ 7 FINAL PROVISIONS

  1. The Controller implements appropriate technical and organisational measures to ensure a level of protection for the personal data processed that is appropriate to the risks involved and the categories of data protected. In particular, the Controller safeguards personal data against disclosure to unauthorised persons, acquisition by unauthorised persons, processing in violation of applicable laws, as well as alteration, loss, damage, or destruction.
  2. The Controller provides appropriate technical measures to prevent unauthorised persons from obtaining or modifying personal data transmitted electronically.
  3. In matters not governed by this Privacy Policy, the provisions of the GDPR and other applicable provisions of Polish law shall apply.
  4. The Controller updates this Privacy Policy in response to changes in applicable laws or the development of its business activities. Information regarding any amendments to this Privacy Policy will be published on the Store's Website at least seven (7) days before the amendments become effective or sent by e-mail to Users who use the Electronic Services provided on a continuous basis (Account).