Privacy Policy
1. General Information
- This privacy policy applies to the website operating at the following URL: https://defensastore.com
- The operator of the website and the Data Controller is:
Defensa Store Sp. z o.o., with its registered office at ul. Łukowa 34A, 43-502 Czechowice-Dziedzice, Poland.
- The Operator is the Controller of your personal data with respect to the data you voluntarily provide through the Website.
- The Website processes personal data for the following purposes:
- handling inquiries submitted via contact forms;
- presenting offers or informational content;
- managing the comment system;
- processing placed orders and customer service;
- using information voluntarily provided via forms;
- saving cookie data on end-user devices;
- collecting web server logs by the hosting provider;
- sending marketing newsletters to users subscribed to the mailing list.
- The Website collects information about users and their behavior in the following ways:
- through data voluntarily entered in forms, which are stored in the Operator’s systems;
- by saving cookies on end-user devices (so-called "cookies").
- Personal data of Website users are processed in accordance with applicable law, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – ).
- If you have any comments or concerns regarding the processing of personal data in connection with the use of the Website, you may contact the Data Controller via the following email address:
2. Selected Data Protection Methods Used by the Operator
- Login areas and personal data entry points are secured at the transmission layer (SSL certificate). This ensures that any personal data and login information entered on the website are encrypted on the user's computer and can only be read on the destination server.
- The Operator periodically changes its administrative passwords.
- An essential element of data protection is the regular updating of all software used by the Operator for personal data processing, which specifically includes frequent updates of programming components.
3. Hosting
- The Service is hosted (technically maintained) on the servers of a provider with whom Defensa Store Sp. z o.o. has a contract.
- The hosting company, to ensure technical reliability, maintains logs at the server level. The following data may be logged:
- resources identified by URL (addresses of requested resources – pages, files),
- time the request was received,
- time the response was sent,
- client station name – identification performed via the HTTP protocol,
- information about errors occurring during the HTTP transaction,
- URL of the previously visited page by the user (referrer link) – if the visit to the Service was made through a link,
- information about the user's browser,
- information about the IP address,
- diagnostic information related to the process of self-ordering services via recorders on the website,
- information related to handling emails sent to and from the Operator.
4. Your Rights and Additional Information on Data Usage
- In certain situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfill statutory obligations incumbent upon the Administrator. This applies to the following groups of recipients:
- hosting company – based on a data processing agreement,
- external accounting office, including the person responsible for bookkeeping – based on a data processing agreement,
- authorized employees and collaborators who use the data to perform the website’s functions – based on a data processing agreement,
- companies providing marketing services on behalf of the Administrator – based on a data processing agreement,
- postal operators,
- mailing system operators,
- banks,
- payment operators,
- public authorities,
- operators of the commenting system,
- companies providing marketing services on behalf of the Administrator.
- Your personal data processed by the Administrator will not be kept longer than necessary to perform related activities specified by separate regulations (e.g., accounting law). Marketing data will not be processed for longer than 3 years.
- You have the right to request from the Administrator:
- access to your personal data,
- rectification of your data,
- deletion of your data,
- restriction of processing,
- and data portability.
- You have the right to object to the processing referred to in point 3.2 concerning the processing of personal data for the purpose of legally justified interests pursued by the Administrator, including profiling. However, the right to object cannot be exercised if there are important legally justified grounds for processing that override your interests, rights, and freedoms, especially for the establishment, enforcement, or defense of claims.
- You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezesa Urzędu Ochrony Danych Osobowych) at ul. Stawki 2, 00-193 Warsaw.
- Providing personal data is voluntary but necessary to use the Service.
- Automated decision-making processes, including profiling, may be used in relation to you for the purpose of providing services under the concluded contract and for the Administrator’s direct marketing.
- Personal data is not transferred from third countries within the meaning of data protection regulations. This means that we do not send your data outside the European Union.
5. Information in Forms
- The Service collects information voluntarily provided by the user, including personal data, if such data is provided.
- The Service may save information about connection parameters (timestamp, IP address).
- In some cases, the Service may save information that facilitates linking data in the form with the email address of the user filling out the form. In such cases, the user's email address appears inside the URL of the page containing the form.
- Data provided in the form is processed for the purpose resulting from the specific form’s function, e.g., to carry out the process of handling a service request or commercial contact, service registration, etc. The context and description of each form clearly inform what the form is used for.
6. Administrator Logs
- Information about user behavior on the service may be logged. These data are used for the purpose of administering the service.
7. Important Marketing Techniques
- The Operator uses statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The Operator does not provide personal data to this service operator, only anonymized information. The service relies on the use of cookies on the user’s end device. Regarding information about user preferences collected by Google’s advertising network, the user may view and edit cookie-based information using the tool: https://www.google.com/ads/preferences/
- The Operator uses a solution that examines user behavior by creating heat maps and recording behavior on the site. This information is anonymized before being sent to the service operator so that they do not know the identity of the individual. In particular, passwords and other personal data entered by users are not recorded.
8. Information about Cookies
- The Service uses cookies.
- Cookies are IT data, especially text files, which are stored on the end device of the Service User and are intended for use on the Service’s websites. Cookies usually contain the name of the website from which they originate, the time they are stored on the end device, and a unique number.
- The entity placing cookies on the end device of the Service User and accessing them is the Service operator.
- Cookies are used for the following purposes:
- Maintaining the user session on the Service (after login), thanks to which the user does not have to re-enter login and password on each subpage of the Service;
- Realization of the purposes specified above in the section “Important Marketing Techniques”;
- Remembering data entered in forms or surveys;
- Adjusting the content of the Service’s website to the individual preferences of the user (e.g., regarding colors, font size, page layout) and optimizing the use of the Service;
- Conducting anonymous statistics showing how the Service’s pages are used;
- Fulfilling orders (purchases) made by the customer on the Operator’s website.
- Two basic types of cookies are used within the Service: "session cookies" and "persistent cookies." Session cookies are temporary files stored on the User’s end device until logout, leaving the website, or closing the software (web browser). Persistent cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.
- Web browsing software (web browser) usually allows cookies to be stored on the User’s end device by default. Service Users can change the settings regarding this. The web browser allows deleting cookies. It is also possible to block cookies automatically. Detailed information on this topic is included in the help or documentation of the web browser.
- Limiting the use of cookies may affect some functionalities available on the Service’s websites.
- Cookies placed on the User’s end device may also be used by entities cooperating with the Service operator, particularly companies such as Google (Google Inc., USA), Facebook and Instagram (Meta Platforms, Inc., USA), Twitter (X, USA).
9. Managing Cookies – How to Give and Withdraw Consent in Practice?
- If the user does not want to receive cookies, they can change the browser settings. We warn that disabling cookies necessary for authentication, security, and maintaining user preferences may hinder, and in extreme cases, make it impossible to use the websites.
- To manage cookie settings, select your web browser from the list below and follow the instructions:
- Edge
- Internet Explorer
- Chrome
- Safari
- Firefox
- Opera
- Mobile devices:
- Android
- Safari (iOS)
- Windows Phone
10. Final Provisions
- No identification data or personal data are collected on behalf of any third party.
- Data are shared with external entities only within legally permitted limits.
- Data enabling the identification of a natural person are shared exclusively with the consent of that person.
- Changes to this privacy policy will be made by updating its content and posting the updated version on this website.