Pursuant to the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data, the Administrator declares that he has implemented all measures to protect Users’ data, which is expressed by this Privacy Policy.
1. DEFNITIONS
1.1. Administrator – personal data administrator, which is the Seller specified in the Terms and Conditions of the Platform,
1.2. Personal Data – information on an identified or identifiable natural person; an identifiable natural person is a person, who can be directly or indirectly identified, in particular on the basis of an identifier such as first name and surname, identification number, location data, internet identifier or one or more specific factors, which determine physical, physiological, genetic, psychological, economic, cultural or social identity of a natural person,
1.3. Regulations – Terms of Use of Giftaro Platform, published on the Platform’s Website,
1.4. Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC,
1.5. User – any natural person visiting the Store Website, concluding a sale agreement via the Shop Website or using one or several services or functionalities described in the Privacy Policy or Regulations on the Store Website;
1.6. All other words and terms beginning with a capital letter shall have the meaning adopted in the Regulations.
2. ADMINISTRATOR OF DATA
2.1. The Administrator of Data collected by the Platform is GIFTARO Limited seated on Marshall Islands, correspondence address: GIFTARO Ltd, Trust Company Complex, Ajeltake Road, Ajeltake Island, Majuro, Marshall Islands, MH96960, e-mail address: [email protected], also being the Seller.
2.2. The Administrator executes utmost care in order to protect the interests of any person, whose data it obtains, in particular the Administrator ensures that data are:

  1. processed according to the relevant laws;
  2. collected for prescribed, lawful purposes and not processed for any other purposes;
  3. correct and adequate for the purpose of processing;
  4. stored in a manner allowing for identification of individuals they concern, no longer that it is necessary to fulfil the purpose of processing.
3. PURPOSE OF DATA COLLECTION
3.1. The purpose of this Privacy Policy is to define the rules for the collection, processing and protection of data provided by Users, in accordance with the Regulation, in connection with the use of the Platform.
3.2. In connection with the User’s use of the Platform, the Administrator collects data to the extent necessary to provide services through the Platform, as well as information on the User’s activity on the Platform.
3.3. Users’ personal data are subject to particular protection and are used only to the extent that the User has given their consent.
3.4. Personal data of all Users using the Store Website are processed by the Administrator for the following purposes:

  1. to execute orders placed by the Service,
  2. to contact the User,
  3. to set up and manage of the User’s Account
  4. to handle complaints,
  5. analytical and statistical purposes,
  6. marketing purposes.
3.5. Setting up a User’s Account and placing an order by a User of the Platform involves the processing of his personal data. Providing data marked as mandatory is required in order to accept and process the order, and failure to do so results in the lack of its realisation
3.6. Personal data provided in connection with placing an order is processed by the Administrator in order to:

  1. implement the placed order,
  2. set up and manage the User’s Account,
  3. contact the User,
  4. fulfil statutory duties imposed on the Administrator,
  5. fulfil analytical and statistical purposes.
3.7. The Administrator may process the following personal data of Users:

  1. Name and surname;
  2. E-mail address;
  3. Telephone number;
  4. Delivery address (street, flat numer, postal code, town, country);
  5. Address of residence / business / seat (if different than the delivery address);
  6. Tax Identification Number (non-consumers Users);
  7. Company name and details (non-consumers Users).
3.8. Upon obtaining a separate consent, User’s personal data may also be processed to provide marketing information sent by the Administrator to User’s e-mail address, according to art. 6 sec. 1 ssec. „a” of the Regulation. That pertains in particular to a newsletter sent to the User.
4. RIGHTS OF USERS WITH REGARD TO PROCESSING OF DATA AND AUTOMATED DECISIONS
4.1. Each User has the right to access his data, including receiving a copy thereof, correct his data, demand removal of his data or limitation of processing, submit a complaint against processing or transfer of the data to another administrator. The User shall contact the Seller via e-mail address or electronic contact form provided on the Platform.
4.2. The User may withdraw his consent to process data at any time, using Seller’s e-mail address or electronic contact form provided on the Platform. Withdrawal of consent does not affect the legitimacy of processing of data prior to the withdrawal.
4.3. The User has the right to submit a complaint to an administrative body responsible for personal data protection.
4.4. Providing personal data is voluntary but necessary to use the Platform and conclude the Agreement.
4.5. The Administrator provides the possibility to contact him using electronic contact forms. Using the form requires submitting personal data necessary to contact the User and responding to the User’s query. Submitting data marked as mandatory is required to accept and process a query and not providing of them results in lack of possibility to process the query.
4.6. While contacting by electronic measures the Administrator processes User’s data for identification and processing of queries.
5. RECEPIENTS OF DATA
5.1. In connection with sales on the Platform Personal Data of Users will be made available to third entities, in particular service providers responsible for IT services, banks, payment operators, accounting, legal, audit or consulting firms, couriers (for delivery purposes), marketing agencies and entities connected with the Administrator.
5.2.

5.3.

The Administrator reserves the right to disclose information regarding the Users by proper authorities of third parties who will submit a demand to disclose such information, having a binding legal ground and in conformity with any relevant legal regulations.

The Administrator informs that personal data are transferred outside the European Economic Area, i.e. to a third country/international organisation. The Administrator has ensured adequate personal data protection safeguards and effective legal protection measures.

6. DATA STORAGE PERIOD
6.1. Data collected will be stored for the duration in which the User is a registered User of the Platform, and upon resignation – for a period necessary to execute any rights of the Seller stemming from concluding an Agreement, including pursuing claims.
6.2. Data of non-registered Users will be stored for a period necessary to perform the Agreement and execute any rights of the Seller stemming from concluding an Agreement, including pursuing claims.
7. SECURITY OF DATA
7.1. The Administrator stores data on its servers ensuring their full security.
7.2. The Administrator conducts an ongoing risk assessment in order to ensure that personal data are processed safely – ensuring in particular that the access to data is limited only to restricted personnel and only as long as it is necessary for performing their duties. The Administrator ensures that all operations on personal data are registered and conducted only buy authorised employees and co-workers.
8. FINAL PROVISIONS
8.1. If the Service contains links leading to other websites, not administered by the Administrator, the Administrator cannot be liable for content of such websites nor for the level of protection of privacy provided by administrators of those websites.
8.2. The Administrator reserves the right to alter or supplement this Privacy Policy. Changes are in force from their publication.
8.3. The Administrator uses Cookies which is regulated by Cookies Policy published below.
8.4. Using the Platform is conditioned upon acceptance of this Privacy Policy.
9. COOKIES POLICY
9.1. This Platform uses cookies for the purpose of the service, in line with the Cookie Policy. The information registered in cookies is used, for example, for advertising and statistical purposes. It also helps customise the Website to User’s individual preferences.
9.2. The majority of Cookies are session cookies, which are automatically removed from the hard drive upon completion of a session (logging out or closing the browser). Some cookies allow to identify the User’s end-device during next visit to the Platform – they are not deleted automatically and they are saved on the end-device. In case of mobile devices the same mechanism was adopted.
9.3. Apart from data included in cookies, the Website collects no other information automatically.
9.4. Cookies are used for the following purposes:

  1. Adjusting the Website content to User’s individual preferences and optimisation of the use of websites. Cookies enable the identification of Website User’s device and the display of the website appropriately adapted to User’s needs;
  2. Creating statistics which help understand the way Website users use Web pages. This helps improve website structure and content;
  3. Maintaining Website User’s session (after logging on). Thanks to this, the User does not need to enter their login and password on each subsite;
  4. Providing the User with advertising content tailored to their needs.
9.5. On this Platform the following kinds of cookies are used:

  1. Cookies which enable the use of services available within the Platform;
  2. Cookies which ensure security;
  3. Cookies which enable the gathering of information on the way the Website is used;
  4. Functional cookies which make it possible to remember settings selected by the User, e.g. language, font size, etc.;
  5. Ad-related cookies which allow for providing users with advertising content customised to their individual interests.
9.6. If you use the Platform without changing browser settings for cookies, they will be saved on your device. You can change cookies preferences in your browser at any time. These settings can be changed in such a way that either automatic enabling of cookies is blocked in your browser settings or you are each time informed about cookies being saved on your device. Details of the options and ways of using cookies are available in software (browser) settings.
9.7. By not altering the browser settings so that the browser does not allow the acceptance of cookies and at the same time using the Platform, the User agrees for cookies being Used by the Platform in the manner described above.
9.8. If cookies are disabled, this can affect some functionalities available on the Platform.
9.9. Cookies saved on Platform User’s end device can then be used by advertisers and partners cooperating with the Platform.
9.10. For security reasons it is advised that the User uses the latest version of browsers.
9.11. Some of cookies in User’s browsers are used for marketing purposes. Those files help to understand what content is the User interested in and calibrate ads based on those interests. On the Platform ads can be presented to the User based on his behaviour on different websites.