Privacy Policy

Data controller

ANA GLOBAL EXPORT ANGELIKA WYSOCZAŃSKA

Address: ZYGMUNTA SŁOMIŃSKIEGO 7/U3, 00-195 WARSZAWA, PL

VAT ID: 5253038389

REGON: 541130070

Phone: +48570194036

Introduction and Purpose of the Privacy Policy

At Korea Shop, we respect your privacy and make every effort to protect your personal data. This Privacy Policy details how we collect, use, store, and safeguard the information you provide to us when using our website and services. Our aim is to ensure transparency and security in every aspect of our operations.

Types of Personal Data Collected

We collect personal data that you voluntarily provide to us when registering an account, placing orders, subscribing to our newsletter, or contacting us. This may include, among others: your name, email address, delivery address, telephone number, and payment details. Furthermore, we automatically gather certain technical information, such as IP address, browser type, operating system, and data concerning your activity on our website, in order to enhance functionality and personalise your experience.

How We Use Your Data

We primarily use your personal data to process orders, manage your user account, provide customer service, and send marketing communications if you have consented to receive them. This data also assists us in analysing and improving our services, personalising our offerings, and ensuring the security of transactions. We do not share your data with third parties without your explicit consent, except when necessary for order fulfillment (e.g., to courier companies) or as required by law.

Your Rights

In accordance with applicable data protection regulations, you have the right to access your data, rectify it, erase it, restrict its processing, the right to data portability, the right to object to processing, and the right to lodge a complaint with a supervisory authority. To exercise these rights, please contact us through the available communication channels. We assure you that your requests will be handled with due diligence and within the stipulated timeframes.

Changes to the Privacy Policy

We reserve the right to make amendments to this Privacy Policy. Any changes will be published on this page and will become effective upon their publication. We encourage you to review the Privacy Policy regularly to stay informed about our data protection practices. Continued use of our website after the implementation of changes will signify your acceptance of the new terms.

Data controller and contact for data matters

The controller of your personal data is the Seller operating this Shop. Their full registered name, registered address, tax identification number and contact details are given in the identity block at the top of this page and on the Contact page; those are the controller's details for the purposes of art. 13(1)(a) GDPR. For any matter concerning the processing of personal data, including to exercise the rights described below, write to the Seller's email address given on the Contact page, or by post to their registered address. If the Seller has appointed a data protection officer, that officer's contact details are given on the Contact page. Where no officer is named, the Seller was not required to appoint one (art. 37 GDPR) and correspondence goes directly to the controller.

Purposes of processing, legal bases and retention periods

Your data is processed only for the purposes listed below. Each purpose states its legal basis under art. 6 GDPR and how long the data is kept. • Concluding and performing the contract of sale, including handling the Order, payment and delivery. Basis: art. 6(1)(b) GDPR (necessary for performance of a contract). Retention: until the contract has been performed, and then until claims arising from it become time-barred (as a rule 6 years, and 3 years for periodic performances and for claims connected with running a business; art. 118 of the Polish Civil Code). • Meeting tax and accounting obligations, including issuing and keeping sales documents. Basis: art. 6(1)(c) GDPR (legal obligation). Retention: 5 years counted from the end of the calendar year in which the tax payment deadline fell (art. 86 § 1 of the Polish Tax Ordinance). • Handling complaints and withdrawals from contracts. Basis: art. 6(1)(c) GDPR and art. 6(1)(f) GDPR (the legitimate interest of documenting how a case was handled). Retention: until the case is closed, and then until claims become time-barred. • Establishing, exercising or defending legal claims. Basis: art. 6(1)(f) GDPR. Retention: until claims become time-barred, and in the event of a dispute, until it is finally resolved. • Replying to messages sent through the contact form or by email. Basis: art. 6(1)(f) GDPR (conducting correspondence). Retention: until the correspondence ends and for one year afterwards, unless the message concerns an Order, in which case the period above applies. • Sending the newsletter or other marketing messages, where you have signed up for them. Basis: art. 6(1)(a) GDPR (consent) and art. 6(1)(f) GDPR (direct marketing). Retention: until consent is withdrawn or an objection is raised. • Keeping the Shop secure and preventing abuse, including logging technical events. Basis: art. 6(1)(f) GDPR. Retention: for as long as is needed to detect and investigate the event, and no longer than until related claims become time-barred. Providing data is voluntary, but the fields marked as required in the order form are necessary to conclude and perform the contract; without them an Order cannot be fulfilled. The Seller does not take decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you (art. 22 GDPR).

Security of your data

The Seller applies technical and organisational measures appropriate to the risk to the rights and freedoms of data subjects (art. 32 GDPR). In particular: • the connection to the Shop and the submission of form data use an encrypted channel (HTTPS/TLS), • access to Order data is limited to people the controller has authorised, to the extent needed for their tasks, • a data processing agreement (art. 28 GDPR) is concluded with every processor acting on the controller's behalf, • the data collected is limited to what is necessary to fulfil the Order (data minimisation), • data is backed up so that it can be restored after a failure. The Seller neither receives nor stores full payment card numbers or banking credentials; you enter those directly with the payment service provider to whose page you are redirected. In the event of a personal data breach likely to result in a high risk to your rights or freedoms, the controller will notify you without undue delay (art. 34 GDPR) and will report the breach to the supervisory authority (art. 33 GDPR).

Recipients of your data

Your data may be disclosed only to the following categories of recipient, and only to the extent needed for the purpose for which it was collected: • payment service providers: to the extent needed to settle payment for the Order, • carriers, postal operators and pickup-point operators: to the extent needed to deliver the parcel, • IT service providers: hosting, email, data storage and maintenance of the Shop, • providers of tools for sending transactional and marketing messages, where the Seller uses any, • accountants and providers of bookkeeping and audit services, • legal advisers and debt collection service providers: only in the event of a dispute or an unpaid amount, • public authorities, courts and law enforcement: only where disclosure is required by law. The Seller does not sell personal data and does not disclose it to data brokers or advertising networks for the purpose of building advertising profiles. Every processor acting on the controller's behalf does so under a data processing agreement and only on the controller's documented instructions. You can obtain the current list of the specific processors engaged on request, write to the email address given on the Contact page.

Transfers outside the European Economic Area

As a rule your data is processed within the European Economic Area. If any of the providers named above processes data outside the EEA, the transfer takes place only on one of the bases set out in chapter V GDPR, under a European Commission adequacy decision (art. 45 GDPR), or under standard contractual clauses adopted by the European Commission (art. 46(2)(c) GDPR), supplemented by additional safeguards where these are necessary. You can obtain information on whether your data was transferred outside the EEA, to which country and on what basis, together with a copy of the safeguards applied, on request, write to the email address given on the Contact page.

Complaint to the supervisory authority

If you consider that the processing of your personal data breaches data protection law, you have the right to lodge a complaint with a supervisory authority (art. 77 GDPR). In Poland the supervisory authority is the President of the Personal Data Protection Office (UODO): • address: ul. Stawki 2, 00-193 Warsaw, Poland, • website: https://uodo.gov.pl A complaint may be lodged in writing to that address, electronically through the Office's ePUAP inbox, or through the form published on the UODO website. Lodging a complaint is free of charge. If your habitual residence or place of work is in another country of the European Economic Area, you may also lodge a complaint with the supervisory authority of that country. Lodging a complaint does not deprive you of the right to an effective judicial remedy (art. 79 GDPR) or of the right to compensation (art. 82 GDPR).

Cookies

The Shop stores small text files (cookies) in your browser and uses the browser's local storage. The kinds used are described below. By how long they are kept: • session cookies: remain in the browser until the window is closed or the session ends; they keep the contents of the basket and the continuity of the ordering process, • persistent cookies: remain for the period set in their parameters, or until you delete them. By what they are for: • strictly necessary: without them the Shop does not work: keeping the session, the contents of the basket, the ordering process, and protecting forms against abuse. Storing them does not require your consent, because they are necessary to provide the service you asked for (art. 173(3)(2) of the Polish Telecommunications Law), • functional: remember your settings, such as the language chosen or a notice you dismissed, so that you are not asked the same thing on every visit, • performance and analytics: used for aggregate visit statistics and for detecting errors; what they cover is described in the section on analytics tools. How to manage cookies: you can change your browser settings at any time so that it blocks cookies, tells you each time one is about to be stored, or deletes them automatically when the window closes. How to change those settings is described in the help menu of the browser you use, usually under privacy and security. You can delete previously stored cookies from the same place. Blocking strictly necessary cookies makes the basket unusable and prevents an Order from being placed. Blocking the other kinds does not limit your ability to buy.

Analytics and advertising tools

This Shop does not use any third-party analytics or advertising tools. We embed no tracking scripts, build no advertising profiles, and pass no information about your visits to advertising networks or data brokers. If the Seller introduces an analytics tool in future, its name, the data it collects, the legal basis for the processing and how to object will be described here before any data is collected.

Generated with AI assistance